$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/cd939959-f7a9-375a-86a0-c699a51f7975.roa File: cd939959-f7a9-375a-86a0-c699a51f7975.roa (raw, json) Hash identifier: PFgUducb4IYew5Ig2CtyhZ0fEWFGIqS4sK0K/9HQrYc= Subject key identifier: 0E:D2:68:83:74:35:B9:EB:8F:DE:4D:06:9A:C9:B9:B3:E8:00:0E:68 Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Certificate serial: 010D0C9F4328584CD2A1ED63CA537D48EA55ED80 Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/cd939959-f7a9-375a-86a0-c699a51f7975.roa Signing time: Wed 11 Feb 2026 02:00:32 +0000 ROA not before: Wed 11 Feb 2026 02:00:32 +0000 ROA not after: Tue 12 May 2026 01:00:32 +0000 asID: 21947 IP address blocks: 199.195.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d2:a1:ed:63:ca:53:7d:48:ea:55:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Validity Not Before: Feb 11 02:00:32 2026 GMT Not After : May 12 01:00:32 2026 GMT Subject: CN=7dbf23df-ab86-4010-a597-85d819a15666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e7:f0:81:bd:b5:72:bf:e7:ba:2f:dd:26:45: e2:35:82:f9:f0:9b:59:2d:9d:51:d9:c5:c0:5f:d5: d1:14:fb:69:c5:0d:59:b1:41:2b:16:11:fd:85:94: e4:4a:8f:03:e1:bb:31:fd:f2:e8:72:f1:74:7f:3e: fb:44:59:b0:5d:82:78:1c:e4:96:aa:80:4b:f5:fe: 15:6a:cd:cf:bd:52:21:a0:66:1f:c4:7e:d1:9b:fa: 03:03:d4:51:f2:25:ea:82:ad:32:f7:a8:d9:74:bf: 96:a5:c1:43:c1:73:2f:e8:80:95:97:bf:82:3d:c5: 59:06:6a:cc:c4:cd:d6:b7:b7:ba:06:17:78:f7:ea: 01:75:eb:f5:c3:cd:6b:e2:cd:15:b5:ff:54:68:cf: 2b:a9:7d:99:68:1a:8b:cc:38:03:21:3a:8a:93:73: 5c:6c:fb:74:76:a1:08:d6:a8:c2:b4:30:7c:86:b8: 91:6a:cb:43:e5:aa:25:1c:ff:66:88:ef:e4:64:49: 41:99:7b:4f:95:50:4c:4c:0d:8b:be:b3:cc:51:db: 06:ac:1d:e3:27:03:8a:33:63:89:82:ed:18:ff:f9: e0:96:00:61:21:29:32:c2:85:e6:39:1a:57:16:74: 23:8d:2a:67:96:e1:9e:ca:d8:3d:af:73:a5:33:03: 86:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:D2:68:83:74:35:B9:EB:8F:DE:4D:06:9A:C9:B9:B3:E8:00:0E:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/cd939959-f7a9-375a-86a0-c699a51f7975.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl X509v3 Authority Key Identifier: keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer sbgp-ipAddrBlock: critical IPv4: 199.195.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:c6:17:fb:2b:4a:d8:d8:b3:a6:dd:bb:ac:7d:20:e1:fe:92: 6d:6c:26:af:f9:45:50:bd:5d:db:34:21:13:c0:0a:21:db:f0: 8f:7c:56:a3:ed:ba:4d:29:8c:21:b0:5a:88:07:26:54:12:f9: 51:31:e4:36:2a:5e:85:e2:20:e3:80:66:71:fe:7a:da:98:10: 52:bb:e1:37:f2:1e:c0:f2:93:c4:e7:29:03:f4:10:12:3f:4b: 3e:06:ff:36:13:60:2e:36:5a:47:c4:5d:4d:fc:f7:20:b0:53: 64:6d:85:fc:a7:f3:74:bd:ce:bb:48:95:f2:b8:1c:e0:6b:c4: e1:84:35:91:1e:c1:1b:ef:72:4e:37:72:3f:77:b5:cd:8b:60: 3b:4e:bc:2e:b5:f3:06:f7:f4:e5:61:eb:0b:48:6b:93:b3:c1: 54:a6:de:e0:c1:6c:f4:2a:18:6a:21:ff:5e:f4:a7:a9:a4:b6: 2e:20:69:90:91:a2:e3:ae:5f:66:39:d0:a1:2f:9a:5a:4c:9b: 95:15:26:96:1f:c8:19:aa:2e:23:d3:1c:01:80:0e:b2:94:49: f1:56:52:3c:98:6b:94:f6:6d:4a:a5:8e:7e:72:63:d6:a1:33: 24:7a:d8:d5:98:a0:51:84:79:22:ff:75:9c:0b:70:a6:58:7c: 6a:e0:92:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzSoe1jylN9SOpV7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz OGEzMB4XDTI2MDIxMTAyMDAzMloXDTI2MDUxMjAxMDAzMlowLzEtMCsGA1UEAxMk N2RiZjIzZGYtYWI4Ni00MDEwLWE1OTctODVkODE5YTE1NjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOfwgb21cr/nui/dJkXiNYL58JtZLZ1R2cXA X9XRFPtpxQ1ZsUErFhH9hZTkSo8D4bsx/fLocvF0fz77RFmwXYJ4HOSWqoBL9f4V as3PvVIhoGYfxH7Rm/oDA9RR8iXqgq0y96jZdL+WpcFDwXMv6ICVl7+CPcVZBmrM xM3Wt7e6Bhd49+oBdev1w81r4s0Vtf9UaM8rqX2ZaBqLzDgDITqKk3NcbPt0dqEI 1qjCtDB8hriRastD5aolHP9miO/kZElBmXtPlVBMTA2LvrPMUdsGrB3jJwOKM2OJ gu0Y//nglgBhISkywoXmORpXFnQjjSpnluGeytg9r3OlMwOGSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA7SaIN0Nbnrj95NBprJubPoAA5oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3 MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvY2Q5Mzk5NTktZjdhOS0z NzVhLTg2YTAtYzY5OWE1MWY3OTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1 NDVlYzM4YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx8N4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPGF/srStjYs6bdu6x9IOH+km1sJq/5RVC9Xds0IRPACiHb8I98VqPt uk0pjCGwWogHJlQS+VEx5DYqXoXiIOOAZnH+etqYEFK74TfyHsDyk8TnKQP0EBI/ Sz4G/zYTYC42WkfEXU389yCwU2Rthfyn83S9zrtIlfK4HOBrxOGENZEewRvvck43 cj93tc2LYDtOvC618wb39OVh6wtIa5OzwVSm3uDBbPQqGGoh/170p6mkti4gaZCR ouOuX2Y50KEvmlpMm5UVJpYfyBmqLiPTHAGADrKUSfFWUjyYa5T2bUqljn5yY9ah MyR62NWYoFGEeSL/dZwLcKZYfGrgku8= -----END CERTIFICATE-----Generated at Tue Mar 3 05:30:13 2026 by rpki-client