$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/904b080a-8e57-3918-95ab-750f6766dc80.roa File: 904b080a-8e57-3918-95ab-750f6766dc80.roa (raw, json) Hash identifier: JJelamhsKWGXHE0kpea9wtk90rh2uLnxWLanu/IJ5DU= Subject key identifier: A9:F8:29:BE:B5:E1:77:2B:C7:10:BC:52:D1:5F:91:A0:85:C7:97:0E Certificate issuer: /CN=3689b9ce-089d-4137-b14d-7e4cd15e53a5 Certificate serial: 010D0C9F4328584D52434BC8CBDDF6E3DA789CC0 Authority key identifier: 1D:1E:37:FA:79:26:6D:13:76:4D:B9:09:BD:A7:4B:B3:21:FA:8A:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/904b080a-8e57-3918-95ab-750f6766dc80.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 13649 IP address blocks: 199.88.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:4b:c8:cb:dd:f6:e3:da:78:9c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3689b9ce-089d-4137-b14d-7e4cd15e53a5 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=71ec8c91-fb68-4052-b340-3c7088f6b16c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:66:e9:03:d3:17:bc:77:11:6c:72:bd:c8:28: a1:40:b7:fe:86:a6:79:7f:91:b5:a8:ea:c4:ba:1a: be:d1:b5:b3:cc:5d:20:b2:48:38:a4:89:24:f0:6e: 0e:72:5b:52:94:0d:6b:1f:ff:8c:1b:a0:40:55:f6: 5c:00:2f:83:cd:c2:93:1a:6e:47:0d:76:52:c6:77: cf:76:91:12:89:45:d4:1b:0c:ed:1b:ce:9f:3b:e3: 0d:4e:8c:b8:62:e8:8f:d5:88:8d:07:d3:33:c7:60: fd:ba:2f:43:64:1e:bd:3b:90:12:30:d3:cd:fc:8a: 4d:92:d7:ce:12:60:2b:b7:b3:3e:08:8e:73:4c:7b: 26:b6:69:09:58:7d:72:bb:3a:4e:f8:b9:19:17:28: a1:5a:2c:95:55:63:8e:7b:3d:bb:a6:fd:a3:14:91: f8:1a:36:61:18:37:06:50:f5:5c:24:3a:99:ab:42: 4c:1f:56:07:d0:8e:2f:5b:41:91:9d:20:90:66:23: ce:ae:40:de:e1:80:62:77:28:5b:6f:ee:25:83:09: 7c:e2:bf:75:b8:7b:50:33:2b:99:b2:b7:79:d2:dc: ed:20:ff:68:3e:b3:ea:9f:0a:8f:d2:fa:85:38:06: 6f:a3:79:06:cd:a0:d2:bb:a6:29:4c:c4:35:6c:1c: 81:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F8:29:BE:B5:E1:77:2B:C7:10:BC:52:D1:5F:91:A0:85:C7:97:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/904b080a-8e57-3918-95ab-750f6766dc80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl X509v3 Authority Key Identifier: keyid:1D:1E:37:FA:79:26:6D:13:76:4D:B9:09:BD:A7:4B:B3:21:FA:8A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer sbgp-ipAddrBlock: critical IPv4: 199.88.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:80:6e:5b:ba:b3:2b:a0:df:d0:74:5b:d0:da:01:20:a6:54: 2e:e6:a1:93:d1:07:c4:e3:2a:78:58:c1:b2:b0:57:5f:d6:2c: 44:34:18:f9:67:c6:a6:cc:ff:be:ff:54:5c:5e:65:92:6d:8f: 19:87:73:a7:58:ab:44:fe:2e:bc:82:b8:1a:c2:31:f9:0c:d9: a8:b4:78:ab:de:55:a4:e2:af:30:c5:d7:cc:83:e3:e9:49:32: 68:bc:5b:3a:88:3a:2d:d2:0b:8d:26:f8:3d:96:ee:95:41:93: 1c:60:2c:be:e1:f4:b0:c3:10:5e:b7:89:bf:59:ba:13:44:27: e6:0c:2d:2e:a5:a2:4d:4b:df:7d:e0:0f:af:55:2f:ca:b8:3e: ee:69:42:f1:50:fa:1c:4a:cb:77:9c:02:8d:63:7b:66:8a:df: de:0a:da:a7:95:95:03:af:27:4d:f1:cb:b9:85:b1:5c:02:87: cd:cf:e0:81:4d:68:f9:fe:6b:3f:fc:ff:77:25:18:4e:6f:dd: ff:b2:83:43:eb:cb:8b:e5:46:27:c8:3d:8f:b4:d3:7f:aa:6f: 80:e7:73:17:f5:8e:20:7e:01:62:8b:5a:4a:ec:76:63:93:95: 04:5b:61:b6:ef:e0:65:48:3e:c4:81:78:81:d9:48:35:25:66: e8:44:c1:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ0vIy93249p4nMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY4OWI5Y2UtMDg5ZC00MTM3LWIxNGQtN2U0Y2QxNWU1 M2E1MB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk NzFlYzhjOTEtZmI2OC00MDUyLWIzNDAtM2M3MDg4ZjZiMTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGbpA9MXvHcRbHK9yCihQLf+hqZ5f5G1qOrE uhq+0bWzzF0gskg4pIkk8G4OcltSlA1rH/+MG6BAVfZcAC+DzcKTGm5HDXZSxnfP dpESiUXUGwztG86fO+MNToy4YuiP1YiNB9Mzx2D9ui9DZB69O5ASMNPN/IpNktfO EmArt7M+CI5zTHsmtmkJWH1yuzpO+LkZFyihWiyVVWOOez27pv2jFJH4GjZhGDcG UPVcJDqZq0JMH1YH0I4vW0GRnSCQZiPOrkDe4YBidyhbb+4lgwl84r91uHtQMyuZ srd50tztIP9oPrPqnwqP0vqFOAZvo3kGzaDSu6YpTMQ1bByB9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKn4Kb614XcrxxC8UtFfkaCFx5cOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zNjg5 YjljZS0wODlkLTQxMzctYjE0ZC03ZTRjZDE1ZTUzYTUvOTA0YjA4MGEtOGU1Ny0z OTE4LTk1YWItNzUwZjY3NjZkYzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzY4OWI5Y2UtMDg5ZC00MTM3LWIx NGQtN2U0Y2QxNWU1M2E1LzM2ODliOWNlLTA4OWQtNDEzNy1iMTRkLTdlNGNkMTVl NTNhNS5jcmwwHwYDVR0jBBgwFoAUHR43+nkmbRN2TbkJvadLsyH6igMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zNjg5YjljZS0wODlkLTQxMzctYjE0ZC03ZTRj ZDE1ZTUzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1j6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKAblu6syug39B0W9DaASCmVC7moZPRB8TjKnhYwbKwV1/WLEQ0GPln xqbM/77/VFxeZZJtjxmHc6dYq0T+LryCuBrCMfkM2ai0eKveVaTirzDF18yD4+lJ Mmi8WzqIOi3SC40m+D2W7pVBkxxgLL7h9LDDEF63ib9ZuhNEJ+YMLS6lok1L333g D69VL8q4Pu5pQvFQ+hxKy3ecAo1je2aK394K2qeVlQOvJ03xy7mFsVwCh83P4IFN aPn+az/8/3clGE5v3f+yg0Pry4vlRifIPY+003+qb4Dncxf1jiB+AWKLWkrsdmOT lQRbYbbv4GVIPsSBeIHZSDUlZuhEwSY= -----END CERTIFICATE-----Generated at Fri Apr 17 11:19:06 2026 by rpki-client