$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/3f5b4c33-2164-3b93-ac9c-8db15b1654a6.roa File: 3f5b4c33-2164-3b93-ac9c-8db15b1654a6.roa (raw, json) Hash identifier: fempSTNh/hTZtJYdojnz8qtgW9umBveSrUtUoOa141s= Subject key identifier: 42:0B:55:E5:0E:09:D6:3B:CE:1B:29:77:2E:86:76:20:D5:82:7E:3F Certificate issuer: /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a Certificate serial: 010D0C9F4328584CA491B678AA764738BD70B980 Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/3f5b4c33-2164-3b93-ac9c-8db15b1654a6.roa Signing time: Sun 25 Jan 2026 14:00:40 +0000 ROA not before: Sun 25 Jan 2026 14:00:40 +0000 ROA not after: Sat 25 Apr 2026 13:00:40 +0000 asID: 6079 IP address blocks: 199.58.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a4:91:b6:78:aa:76:47:38:bd:70:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a Validity Not Before: Jan 25 14:00:40 2026 GMT Not After : Apr 25 13:00:40 2026 GMT Subject: CN=cd66b3ee-1839-4a0d-8bd5-86e94d1bc0ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ed:d3:b6:2a:4a:5b:7d:d3:f7:dd:02:ce:91: 32:b5:e9:00:b6:e1:22:91:dc:37:0c:52:4d:a4:77: fd:5d:5b:d9:a5:fc:d4:ba:02:73:3f:eb:ae:ef:5c: 08:98:01:0a:59:b8:50:1c:67:9f:47:60:96:4e:2c: dc:4a:16:58:15:ee:b3:31:f0:cb:74:fe:12:91:f1: 5b:7a:6f:65:61:02:06:4b:c5:6f:de:96:76:85:03: a1:9a:bc:df:c4:bf:07:ff:3c:d3:40:4a:7c:7e:59: 87:c8:74:78:23:d6:16:7c:f0:ed:73:6a:b2:08:f1: 03:01:2b:c3:4c:1d:7d:28:26:ef:55:c0:39:dc:23: 73:75:86:9b:17:75:75:a3:af:67:e0:54:c0:56:f3: 5b:61:67:d4:37:d8:51:2d:1f:01:5c:88:26:3a:12: 76:40:24:94:f2:bd:fb:56:b3:0e:4d:b5:13:47:09: 22:42:86:3f:0f:4c:b4:a4:5e:55:b0:db:76:9e:9b: 33:18:a8:2f:75:01:04:62:64:60:c0:b7:01:2e:27: e2:40:2a:fb:e5:5f:3e:da:f8:9b:e1:f9:62:2d:ca: 1b:ef:aa:bd:a3:9d:97:a2:b9:f0:df:da:3e:96:a8: 6b:85:d8:dd:c0:46:19:c7:3e:c9:ec:e1:5c:88:6e: cf:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:0B:55:E5:0E:09:D6:3B:CE:1B:29:77:2E:86:76:20:D5:82:7E:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/3f5b4c33-2164-3b93-ac9c-8db15b1654a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl X509v3 Authority Key Identifier: keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer sbgp-ipAddrBlock: critical IPv4: 199.58.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:ca:a4:a0:5f:0b:04:3c:bf:39:bb:9c:5b:13:01:2a:e8:24: 88:e4:04:7b:f9:c9:76:70:a6:b7:0c:a3:75:be:a2:da:d5:b8: 15:90:2e:5f:2b:19:59:45:6d:6d:ba:e5:51:94:94:68:17:a4: 03:ff:0c:76:03:a5:29:8c:f6:ae:16:7f:57:ab:c3:fa:09:23: 68:9f:99:73:b4:87:21:18:19:c1:db:8a:d3:2b:28:a1:13:fd: 3e:4f:66:2e:76:31:bc:48:42:fc:79:74:ee:3f:05:f6:f5:61: 37:ea:9d:77:ed:fc:7b:4e:80:4f:26:95:d1:f9:2e:8e:0b:17: f5:34:6c:03:d0:62:17:26:2a:29:0c:97:1a:f8:d7:de:63:1b: 0b:3c:15:f8:cf:68:08:5d:38:cd:4f:03:00:10:9a:99:ff:e5: 46:62:3e:bc:c6:ce:4c:78:8c:80:a6:61:8b:ad:1c:a0:02:08: 58:f7:ac:61:d2:5e:ce:a1:ba:c2:a0:f4:e2:3e:92:03:a6:cb: 5c:a6:33:5c:39:b0:53:4f:a1:07:54:44:8e:c6:7d:34:fa:26: 02:c3:7d:d6:f6:94:3c:42:a0:26:a9:09:61:c6:1d:45:5c:4f: 30:4e:72:d7:56:f4:ff:db:56:e7:75:a7:91:0b:fc:9a:32:17: dd:cf:48:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEykkbZ4qnZHOL1wuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVkYWUyYTAtMGNiNy00NmU4LWFlMTctYWJlYjA2MDA3 ZTFhMB4XDTI2MDEyNTE0MDA0MFoXDTI2MDQyNTEzMDA0MFowLzEtMCsGA1UEAxMk Y2Q2NmIzZWUtMTgzOS00YTBkLThiZDUtODZlOTRkMWJjMGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+3TtipKW33T990CzpEytekAtuEikdw3DFJN pHf9XVvZpfzUugJzP+uu71wImAEKWbhQHGefR2CWTizcShZYFe6zMfDLdP4SkfFb em9lYQIGS8Vv3pZ2hQOhmrzfxL8H/zzTQEp8flmHyHR4I9YWfPDtc2qyCPEDASvD TB19KCbvVcA53CNzdYabF3V1o69n4FTAVvNbYWfUN9hRLR8BXIgmOhJ2QCSU8r37 VrMOTbUTRwkiQoY/D0y0pF5VsNt2npszGKgvdQEEYmRgwLcBLifiQCr75V8+2vib 4fliLcob76q9o52Xornw39o+lqhrhdjdwEYZxz7J7OFciG7PEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEILVeUOCdY7zhspdy6GdiDVgn4/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82NWRh ZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmViMDYwMDdlMWEvM2Y1YjRjMzMtMjE2NC0z YjkzLWFjOWMtOGRiMTViMTY1NGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjVkYWUyYTAtMGNiNy00NmU4LWFl MTctYWJlYjA2MDA3ZTFhLzY1ZGFlMmEwLTBjYjctNDZlOC1hZTE3LWFiZWIwNjAw N2UxYS5jcmwwHwYDVR0jBBgwFoAUGkmdi3ejOt8fzU66Ucwao/qj9iUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82NWRhZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmVi MDYwMDdlMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzr8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfKpKBfCwQ8vzm7nFsTASroJIjkBHv5yXZwprcMo3W+otrVuBWQLl8r GVlFbW265VGUlGgXpAP/DHYDpSmM9q4Wf1erw/oJI2ifmXO0hyEYGcHbitMrKKET /T5PZi52MbxIQvx5dO4/Bfb1YTfqnXft/HtOgE8mldH5Lo4LF/U0bAPQYhcmKikM lxr4195jGws8FfjPaAhdOM1PAwAQmpn/5UZiPrzGzkx4jICmYYutHKACCFj3rGHS Xs6husKg9OI+kgOmy1ymM1w5sFNPoQdURI7GfTT6JgLDfdb2lDxCoCapCWHGHUVc TzBOctdW9P/bVud1p5EL/JoyF93PSE4= -----END CERTIFICATE-----Generated at Mon Mar 2 01:17:02 2026 by rpki-client