$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/1f5fab24-6ae3-369a-845b-2b5879489f6a.roa File: 1f5fab24-6ae3-369a-845b-2b5879489f6a.roa (raw, json) Hash identifier: EvIYrDGoKmBFkWBEdz2M9RlMa0JLchjJo3ueU6y1ffs= Subject key identifier: BD:AB:BF:6F:29:D8:3C:08:B8:03:2F:70:4B:E4:C2:4A:80:A9:B4:B2 Certificate issuer: /CN=3689b9ce-089d-4137-b14d-7e4cd15e53a5 Certificate serial: 010D0C9F4328584CAE571C64C8CE7F1F58A3FE50 Authority key identifier: 1D:1E:37:FA:79:26:6D:13:76:4D:B9:09:BD:A7:4B:B3:21:FA:8A:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/1f5fab24-6ae3-369a-845b-2b5879489f6a.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 395644 IP address blocks: 199.88.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:1c:64:c8:ce:7f:1f:58:a3:fe:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3689b9ce-089d-4137-b14d-7e4cd15e53a5 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=098b1ded-1715-4f92-a983-836ee17d2d49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:48:87:62:35:c1:b3:1d:2b:62:89:ea:1b:ff: d9:2f:ce:ca:a6:a0:34:c1:6c:34:04:a0:26:1e:56: 15:3c:cb:5d:66:65:55:1f:c6:b2:39:52:41:d8:0b: ca:f3:08:70:ff:5a:56:a1:bf:93:b9:a6:41:e1:d7: d1:4f:53:1e:a2:45:e2:88:8d:56:8d:bd:56:bf:41: 23:00:e2:34:79:f1:5b:f6:1b:1b:5a:14:87:4b:1d: f9:85:a8:ce:5b:14:50:99:08:3a:1e:be:16:d3:0c: 26:42:db:b0:4c:ce:4f:b5:f4:a1:62:23:ef:24:df: d5:f5:fd:ba:45:e8:3c:5a:d9:1f:b9:88:dc:aa:10: c4:54:c7:9e:6c:83:7d:8b:3f:38:12:24:b3:8b:2e: ee:70:23:f1:9f:c5:0f:a5:cf:bb:62:b7:9f:5e:c7: 14:a8:46:7a:3c:5b:de:c3:71:56:75:f8:70:cd:f5: bb:ab:5a:5e:16:f4:b2:1a:88:00:31:95:17:6e:82: 42:fb:25:73:fa:f7:25:a5:0d:06:be:4b:8c:47:29: 8e:c8:69:f0:42:e4:08:8a:2e:ef:fd:23:b9:8a:c2: a8:f6:d0:99:a0:51:7b:9c:07:8a:26:d4:04:a3:e5: c8:cf:2d:78:d1:96:04:86:fd:f6:85:1e:48:17:8e: a8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:AB:BF:6F:29:D8:3C:08:B8:03:2F:70:4B:E4:C2:4A:80:A9:B4:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/1f5fab24-6ae3-369a-845b-2b5879489f6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl X509v3 Authority Key Identifier: keyid:1D:1E:37:FA:79:26:6D:13:76:4D:B9:09:BD:A7:4B:B3:21:FA:8A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer sbgp-ipAddrBlock: critical IPv4: 199.88.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:43:5d:17:59:f2:23:54:78:95:e6:41:c6:d1:25:d6:e2:15: 56:19:d1:01:9e:ff:fa:ce:35:0d:53:6c:29:7c:49:6e:40:d0: 8a:80:2b:2f:e8:a5:48:f8:26:ea:e4:13:aa:72:5d:d7:74:28: 0a:ff:33:57:14:3d:f4:59:0f:e8:1d:9c:1c:1c:8f:3c:3a:05: 42:e9:14:ef:b2:e4:70:ba:39:77:9d:82:c5:cc:7f:5c:32:37: 90:cf:4f:45:34:cd:4f:c6:24:37:91:f8:d8:07:d6:73:7f:8f: d1:5e:99:66:1d:43:55:3d:90:dd:cc:80:fe:43:4a:32:0e:a8: 31:09:fc:81:c7:4b:5b:0d:e8:84:4b:3b:57:18:49:1a:aa:a4: 0b:49:20:cb:f7:7d:11:32:27:76:13:48:72:49:39:2a:98:16: 7f:ef:a8:17:a3:87:ef:a9:30:b2:d3:89:6d:11:87:2e:f1:50: ae:ee:93:70:90:1a:c0:37:3b:54:b6:cf:db:5e:0f:68:84:e6: d7:e6:0c:db:ed:a5:5a:c7:75:53:f9:90:b8:de:0f:8c:3c:e9: 75:73:6d:a6:68:c1:12:ed:5b:8d:8c:b9:7f:8c:47:c6:17:0c: 40:cd:dc:b1:ea:c1:5b:90:3f:b1:ce:24:e6:e8:f3:b7:01:74: 80:03:4d:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVxxkyM5/H1ij/lAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY4OWI5Y2UtMDg5ZC00MTM3LWIxNGQtN2U0Y2QxNWU1 M2E1MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MDk4YjFkZWQtMTcxNS00ZjkyLWE5ODMtODM2ZWUxN2QyZDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEiHYjXBsx0rYonqG//ZL87KpqA0wWw0BKAm HlYVPMtdZmVVH8ayOVJB2AvK8whw/1pWob+TuaZB4dfRT1MeokXiiI1Wjb1Wv0Ej AOI0efFb9hsbWhSHSx35hajOWxRQmQg6Hr4W0wwmQtuwTM5PtfShYiPvJN/V9f26 Reg8WtkfuYjcqhDEVMeebIN9iz84EiSziy7ucCPxn8UPpc+7YrefXscUqEZ6PFve w3FWdfhwzfW7q1peFvSyGogAMZUXboJC+yVz+vclpQ0GvkuMRymOyGnwQuQIii7v /SO5isKo9tCZoFF7nAeKJtQEo+XIzy140ZYEhv32hR5IF46oqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL2rv28p2DwIuAMvcEvkwkqAqbSyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zNjg5 YjljZS0wODlkLTQxMzctYjE0ZC03ZTRjZDE1ZTUzYTUvMWY1ZmFiMjQtNmFlMy0z NjlhLTg0NWItMmI1ODc5NDg5ZjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzY4OWI5Y2UtMDg5ZC00MTM3LWIx NGQtN2U0Y2QxNWU1M2E1LzM2ODliOWNlLTA4OWQtNDEzNy1iMTRkLTdlNGNkMTVl NTNhNS5jcmwwHwYDVR0jBBgwFoAUHR43+nkmbRN2TbkJvadLsyH6igMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zNjg5YjljZS0wODlkLTQxMzctYjE0ZC03ZTRj ZDE1ZTUzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1j6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtDXRdZ8iNUeJXmQcbRJdbiFVYZ0QGe//rONQ1TbCl8SW5A0IqAKy/o pUj4JurkE6pyXdd0KAr/M1cUPfRZD+gdnBwcjzw6BULpFO+y5HC6OXedgsXMf1wy N5DPT0U0zU/GJDeR+NgH1nN/j9FemWYdQ1U9kN3MgP5DSjIOqDEJ/IHHS1sN6IRL O1cYSRqqpAtJIMv3fREyJ3YTSHJJOSqYFn/vqBejh++pMLLTiW0Rhy7xUK7uk3CQ GsA3O1S2z9teD2iE5tfmDNvtpVrHdVP5kLjeD4w86XVzbaZowRLtW42MuX+MR8YX DEDN3LHqwVuQP7HOJObo87cBdIADTas= -----END CERTIFICATE-----Generated at Mon Mar 2 10:56:06 2026 by rpki-client