$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/3c020dec-3b81-3384-8f84-fc8fb8ef0865.roa File: 3c020dec-3b81-3384-8f84-fc8fb8ef0865.roa (raw, json) Hash identifier: RFTXWdhFnN3XThjG6qYMOVvY8ENjfRwH8wu6EIIHHjc= Subject key identifier: 42:53:EE:94:8E:4F:DC:49:E2:6E:BD:53:88:30:75:5A:4F:3D:57:45 Certificate issuer: /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Certificate serial: 010D0C9F4328584CF4222D574EFF9AA3B1DBED80 Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/3c020dec-3b81-3384-8f84-fc8fb8ef0865.roa Signing time: Mon 23 Feb 2026 02:00:31 +0000 ROA not before: Mon 23 Feb 2026 02:00:31 +0000 ROA not after: Sun 24 May 2026 01:00:31 +0000 asID: 40342 IP address blocks: 199.47.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f4:22:2d:57:4e:ff:9a:a3:b1:db:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Validity Not Before: Feb 23 02:00:31 2026 GMT Not After : May 24 01:00:31 2026 GMT Subject: CN=11f62af2-1518-4c40-8f6d-b520e5386414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a0:64:7b:43:09:13:82:5d:e5:d3:ef:51:8b: 66:14:11:db:3e:fd:67:65:e5:6c:65:b3:61:35:c3: 9a:d2:fb:de:09:24:6f:51:57:0e:d9:69:34:70:ae: 17:4d:11:79:a1:38:14:25:5e:46:fa:4f:75:ba:1e: d3:13:0c:cc:3d:6b:31:0b:79:0b:1a:24:58:d1:73: 3f:23:3d:78:ee:90:81:b3:26:a8:ed:eb:5c:ee:82: 19:2e:6d:cf:5e:0b:84:28:f6:01:dc:96:d1:70:f9: 41:8f:27:af:fd:e8:e6:a1:d5:a2:a7:31:54:12:2d: 43:df:5e:ea:69:d5:56:5d:65:49:1c:a0:5a:7e:b4: df:62:c0:cb:48:55:98:81:5a:ec:45:87:7a:71:98: 0e:b5:64:aa:30:94:d0:6f:b2:ca:32:09:7c:ff:67: 9f:0c:58:17:89:dc:d3:69:71:fe:fa:24:8a:83:f8: b0:4e:19:43:6e:92:a4:7d:e8:ec:6a:f1:44:ed:30: 9a:3f:4f:11:75:1c:55:23:db:7a:72:21:10:b0:6c: c5:c3:b2:e7:f7:2e:95:47:6e:d5:32:d2:87:bd:58: 58:4f:24:f2:7e:45:45:af:7a:27:56:86:0d:5c:70: c9:49:38:e1:be:2d:02:eb:86:3c:45:0c:b9:81:58: e8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:53:EE:94:8E:4F:DC:49:E2:6E:BD:53:88:30:75:5A:4F:3D:57:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/3c020dec-3b81-3384-8f84-fc8fb8ef0865.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl X509v3 Authority Key Identifier: keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer sbgp-ipAddrBlock: critical IPv4: 199.47.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:42:0a:ba:ee:89:77:bd:77:84:5e:aa:5b:08:3c:6f:a6:4d: 90:0c:bf:6c:10:7c:d5:e4:1f:71:ff:5b:bb:a4:da:2f:87:97: 96:25:86:96:d9:bd:2d:24:49:83:53:bb:13:9f:7b:47:11:ea: 58:66:85:88:0b:e4:cd:a1:c3:72:9b:bf:8d:87:01:2c:55:a3: 90:12:8c:e7:e3:65:0f:96:38:8d:b0:ba:c1:e2:8d:20:96:57: 99:d2:47:ac:46:9d:16:80:71:5a:4f:a1:ef:65:02:9e:3d:fa: c3:18:75:e3:f0:c2:db:92:b8:3b:db:e8:ed:52:df:49:d9:03: d9:af:06:a2:51:aa:3d:3b:f7:a6:6b:ec:65:d1:bb:d7:8f:85: 8e:fe:9e:fe:36:f4:cf:66:bb:eb:89:35:41:cd:3f:9b:63:cf: d2:cc:b1:31:43:a2:a0:49:a5:73:64:f5:26:f9:e5:bc:4b:fa: 3d:e6:ed:42:c2:29:b1:19:d7:08:d2:54:56:45:22:f0:08:1e: 0c:17:fe:46:b8:dc:63:6e:4a:e7:62:a2:e8:1a:03:87:6d:fe: da:57:20:b9:fa:71:12:b9:0a:1d:14:24:50:44:4f:37:23:1b: ef:0d:93:12:8d:15:78:01:f2:33:ac:2e:25:44:1e:42:50:71: 9d:36:4f:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz0Ii1XTv+ao7Hb7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYwYmZjZGUtZDk1OC00ZTkxLWFmNWQtOWZkMWQzM2E1 ODJhMB4XDTI2MDIyMzAyMDAzMVoXDTI2MDUyNDAxMDAzMVowLzEtMCsGA1UEAxMk MTFmNjJhZjItMTUxOC00YzQwLThmNmQtYjUyMGU1Mzg2NDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqBke0MJE4Jd5dPvUYtmFBHbPv1nZeVsZbNh NcOa0vveCSRvUVcO2Wk0cK4XTRF5oTgUJV5G+k91uh7TEwzMPWsxC3kLGiRY0XM/ Iz147pCBsyao7etc7oIZLm3PXguEKPYB3JbRcPlBjyev/ejmodWipzFUEi1D317q adVWXWVJHKBafrTfYsDLSFWYgVrsRYd6cZgOtWSqMJTQb7LKMgl8/2efDFgXidzT aXH++iSKg/iwThlDbpKkfejsavFE7TCaP08RdRxVI9t6ciEQsGzFw7Ln9y6VR27V MtKHvVhYTyTyfkVFr3onVoYNXHDJSTjhvi0C64Y8RQy5gVjo4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJT7pSOT9xJ4m69U4gwdVpPPVdFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84ZjBi ZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQxZDMzYTU4MmEvM2MwMjBkZWMtM2I4MS0z Mzg0LThmODQtZmM4ZmI4ZWYwODY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGYwYmZjZGUtZDk1OC00ZTkxLWFm NWQtOWZkMWQzM2E1ODJhLzhmMGJmY2RlLWQ5NTgtNGU5MS1hZjVkLTlmZDFkMzNh NTgyYS5jcmwwHwYDVR0jBBgwFoAUqiyJxCp6uKSVUYPDDM/jsPzjzgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84ZjBiZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQx ZDMzYTU4MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxy+JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxCCrruiXe9d4ReqlsIPG+mTZAMv2wQfNXkH3H/W7uk2i+Hl5YlhpbZ vS0kSYNTuxOfe0cR6lhmhYgL5M2hw3Kbv42HASxVo5ASjOfjZQ+WOI2wusHijSCW V5nSR6xGnRaAcVpPoe9lAp49+sMYdePwwtuSuDvb6O1S30nZA9mvBqJRqj0796Zr 7GXRu9ePhY7+nv429M9mu+uJNUHNP5tjz9LMsTFDoqBJpXNk9Sb55bxL+j3m7ULC KbEZ1wjSVFZFIvAIHgwX/ka43GNuSudiougaA4dt/tpXILn6cRK5Ch0UJFBETzcj G+8NkxKNFXgB8jOsLiVEHkJQcZ02T4o= -----END CERTIFICATE-----Generated at Sun Mar 1 23:16:22 2026 by rpki-client