$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/20fe7082-f25b-3512-9d95-8f82ca8290e4.roa File: 20fe7082-f25b-3512-9d95-8f82ca8290e4.roa (raw, json) Hash identifier: J9UJYNiExX/R/Rp0cf0yr4gSfM1i/bxO4aJiYEQYty0= Subject key identifier: 1D:F1:D2:1B:7C:17:09:EC:92:98:A4:08:A1:D2:D8:0D:20:64:34:EA Certificate issuer: /CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f Certificate serial: 010D0C9F4328584D571FAB568F9C1BAF18EAFC50 Authority key identifier: 58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/20fe7082-f25b-3512-9d95-8f82ca8290e4.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 1299 IP address blocks: 199.119.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:ab:56:8f:9c:1b:af:18:ea:fc:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=5a31b79e-736e-4987-b277-dea02bd67eb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:de:a4:da:38:6c:a7:77:aa:17:9a:3e:87:14: 50:a4:98:32:ae:44:1e:5d:48:da:db:a1:8e:96:8c: 54:f6:ea:af:88:02:c5:25:56:32:63:1f:a8:39:b0: 40:5c:ea:b2:f2:53:7a:00:14:b9:eb:be:3c:3e:07: 8b:0c:2e:8c:6a:79:e8:51:d1:9d:74:12:e8:a2:8c: bd:7b:f6:f2:a1:b1:f0:e4:cc:d9:b9:34:e4:84:e0: ee:3a:9a:8a:58:7f:ef:0f:e2:d0:e8:75:c4:04:93: 91:dd:e1:c2:9e:e7:e8:13:e7:75:46:4c:32:98:93: 21:3c:fc:f6:81:7d:40:ce:23:0a:c7:d1:0b:ef:0d: ad:ee:93:0b:b7:b6:81:45:1b:a0:dc:c6:f6:3f:6b: 9a:aa:81:1d:ab:e6:82:f7:15:1e:b5:c7:99:bb:2c: 63:7e:14:0d:3b:26:71:67:6d:05:b0:24:8c:3e:bb: db:c8:bb:32:0d:d7:57:8d:89:05:c5:ab:79:fb:2d: a1:b3:39:ae:ca:9f:fa:07:e4:95:a7:59:a3:aa:12: fb:d6:59:9f:d6:f8:4e:d9:34:ee:56:ed:30:ec:25: 2c:8c:26:6d:a8:b7:7b:e4:24:89:16:46:a3:ce:8f: 5e:06:4b:44:56:d7:15:c7:a1:4a:23:67:f9:28:ea: 80:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:F1:D2:1B:7C:17:09:EC:92:98:A4:08:A1:D2:D8:0D:20:64:34:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/20fe7082-f25b-3512-9d95-8f82ca8290e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl X509v3 Authority Key Identifier: keyid:58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer sbgp-ipAddrBlock: critical IPv4: 199.119.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:2c:03:4e:06:b6:4c:7c:16:69:a6:3b:3f:65:33:73:ab:13: 24:90:a5:3f:61:dc:dd:65:af:98:64:7c:22:de:9d:0a:54:8d: 9d:cc:99:06:6f:bf:52:19:1a:0f:65:26:bf:05:67:1b:96:8f: eb:0e:be:14:51:22:00:8f:2e:06:d0:f7:37:44:1e:33:64:ba: da:cb:14:fd:ec:7b:61:1b:b0:09:c7:3a:51:3f:50:8c:74:11: 32:ce:07:59:dc:99:6d:d4:c6:98:b8:9a:27:e9:79:83:69:aa: 06:af:ca:a9:5b:43:07:13:da:4b:e9:f5:52:17:e5:8a:9b:8f: 56:07:16:21:19:2c:07:74:fd:39:11:dc:98:df:d8:29:ce:60: 37:01:e4:39:d8:6c:76:d2:cd:6a:04:03:5b:62:4c:3e:26:66: fe:da:4c:ec:b4:45:57:99:b8:85:1b:f9:10:96:6c:ff:8a:b0: 78:1c:c5:e8:85:68:77:69:09:df:e5:66:44:e3:60:f3:6d:2b: 35:e6:ec:37:6b:de:2f:06:9f:7b:86:3a:b3:1d:a1:19:79:66: e7:d9:62:a9:9c:2b:65:fa:ee:33:0e:96:69:88:82:5e:fe:e0: b7:0b:5e:c9:60:69:9b:46:85:43:d9:53:42:50:b4:82:4d:6a: 21:cb:50:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH6tWj5wbrxjq/FAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U5YzRjYTMtMWRjNy00MmViLTg1NmUtZmQ5OWJiZTRm NTZmMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk NWEzMWI3OWUtNzM2ZS00OTg3LWIyNzctZGVhMDJiZDY3ZWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3d6k2jhsp3eqF5o+hxRQpJgyrkQeXUja26GO loxU9uqviALFJVYyYx+oObBAXOqy8lN6ABS56748PgeLDC6MannoUdGddBLoooy9 e/byobHw5MzZuTTkhODuOpqKWH/vD+LQ6HXEBJOR3eHCnufoE+d1RkwymJMhPPz2 gX1AziMKx9EL7w2t7pMLt7aBRRug3Mb2P2uaqoEdq+aC9xUetceZuyxjfhQNOyZx Z20FsCSMPrvbyLsyDddXjYkFxat5+y2hszmuyp/6B+SVp1mjqhL71lmf1vhO2TTu Vu0w7CUsjCZtqLd75CSJFkajzo9eBktEVtcVx6FKI2f5KOqAnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB3x0ht8FwnskpikCKHS2A0gZDTqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ZTlj NGNhMy0xZGM3LTQyZWItODU2ZS1mZDk5YmJlNGY1NmYvMjBmZTcwODItZjI1Yi0z NTEyLTlkOTUtOGY4MmNhODI5MGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2U5YzRjYTMtMWRjNy00MmViLTg1 NmUtZmQ5OWJiZTRmNTZmLzdlOWM0Y2EzLTFkYzctNDJlYi04NTZlLWZkOTliYmU0 ZjU2Zi5jcmwwHwYDVR0jBBgwFoAUWD7pxA2Q0bK1HzDfDQ7zvT1hzaIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ZTljNGNhMy0xZGM3LTQyZWItODU2ZS1mZDk5 YmJlNGY1NmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx3dEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEosA04Gtkx8FmmmOz9lM3OrEySQpT9h3N1lr5hkfCLenQpUjZ3MmQZv v1IZGg9lJr8FZxuWj+sOvhRRIgCPLgbQ9zdEHjNkutrLFP3se2EbsAnHOlE/UIx0 ETLOB1ncmW3Uxpi4mifpeYNpqgavyqlbQwcT2kvp9VIX5Yqbj1YHFiEZLAd0/TkR 3Jjf2CnOYDcB5DnYbHbSzWoEA1tiTD4mZv7aTOy0RVeZuIUb+RCWbP+KsHgcxeiF aHdpCd/lZkTjYPNtKzXm7Ddr3i8Gn3uGOrMdoRl5ZufZYqmcK2X67jMOlmmIgl7+ 4LcLXslgaZtGhUPZU0JQtIJNaiHLULU= -----END CERTIFICATE-----Generated at Fri Apr 17 13:19:40 2026 by rpki-client