$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/3c08ffdc-9a80-3b8d-be87-968b95478c3e.roa File: 3c08ffdc-9a80-3b8d-be87-968b95478c3e.roa (raw, json) Hash identifier: DeB7BjSXvaCoekmBkGPSnbcbA+OSOSZrA3ZHrQllpOg= Subject key identifier: 8E:57:F7:CD:3E:32:11:CD:00:C0:9E:80:41:C6:23:AF:0B:C3:75:25 Certificate issuer: /CN=9bc88207-e7c7-453e-a4ab-77b72152c33a Certificate serial: 010D0C9F4328584D59EA719E7EDA2B7470A6E280 Authority key identifier: 49:30:1E:1C:4D:A2:59:C8:C5:65:AF:94:7B:C5:60:74:D2:96:22:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/3c08ffdc-9a80-3b8d-be87-968b95478c3e.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 22379 IP address blocks: 199.73.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:71:9e:7e:da:2b:74:70:a6:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bc88207-e7c7-453e-a4ab-77b72152c33a Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=144c122e-b817-429a-8193-97fdaf169953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ea:ef:05:58:3b:a1:de:a2:e5:73:55:02:02: 08:20:7a:34:f9:55:09:b5:4b:87:da:ce:12:e9:96: f5:74:a6:82:ac:ed:68:be:7a:6d:52:2b:6c:4e:64: 98:42:04:74:07:43:91:d0:1c:e7:37:d8:db:f8:a9: 9b:a7:1a:63:c7:0b:89:e7:69:d7:35:d3:a0:a7:05: a0:e7:25:ae:a9:33:63:44:cb:e8:c6:86:c4:5d:33: a9:51:d0:f4:7f:d6:e2:09:1a:42:5d:c8:57:b4:e9: bf:6f:61:87:2d:85:3a:72:19:23:ac:2a:57:3b:fa: 83:ae:08:dd:16:aa:39:7c:0b:af:2b:c1:e4:d9:ce: 1c:d4:cc:d0:43:17:2d:e9:5b:db:23:c7:7e:6a:ef: 3d:68:4a:80:f1:a0:07:cf:86:8e:44:3c:94:8b:ff: 11:ae:ea:d6:c9:75:73:b8:11:10:aa:fd:4e:9a:c3: e0:fc:23:40:cf:9a:5e:2c:be:a6:fc:69:6a:c4:1a: bf:b4:10:4a:53:32:48:0c:9f:69:1f:1c:96:8a:37: ff:29:22:3b:a4:ab:c8:be:95:10:6d:33:27:a5:31: c2:54:b8:7e:a3:c3:a3:08:83:bf:fc:6d:01:70:c5: 88:80:8b:b9:33:eb:05:de:17:47:9c:dc:5c:21:67: 62:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:57:F7:CD:3E:32:11:CD:00:C0:9E:80:41:C6:23:AF:0B:C3:75:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/3c08ffdc-9a80-3b8d-be87-968b95478c3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.crl X509v3 Authority Key Identifier: keyid:49:30:1E:1C:4D:A2:59:C8:C5:65:AF:94:7B:C5:60:74:D2:96:22:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer sbgp-ipAddrBlock: critical IPv4: 199.73.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:9b:4f:d7:98:2d:94:ab:37:57:9b:5a:34:ff:c8:a9:46:44: a2:93:ae:57:e6:b6:6e:10:2b:b5:0c:de:70:65:0b:47:12:8a: 74:42:cd:9c:8d:bf:8c:ae:f3:1a:85:0c:77:3e:a1:10:17:07: a1:26:f8:bc:8c:27:92:cb:92:8a:d6:fb:6d:7f:bb:a9:06:61: 5f:f7:ca:92:8b:bd:cb:55:82:73:11:1a:89:24:94:c0:9a:37: 0b:43:9b:25:1b:79:ef:5e:84:4d:ed:71:71:b2:cb:a5:9a:d9: fa:01:06:0b:a2:d7:b9:83:58:53:bd:09:a5:a2:a2:55:8a:fc: 48:ca:ab:37:35:ea:8b:0a:9c:de:c6:08:07:ab:2b:b9:99:90: 08:29:32:21:d2:72:d4:50:bc:a9:03:70:62:0a:8d:ef:fb:bd: fd:2d:92:37:76:f6:13:d6:de:df:74:2a:73:03:72:56:69:ef: b1:63:91:30:cd:ae:c2:89:6c:79:71:88:bb:85:22:a0:6d:a9: 6e:a4:a1:2e:2e:62:10:90:c0:09:0a:8f:c6:a2:0a:87:1c:f4: 80:38:ed:df:ba:10:d0:90:bd:70:a6:d3:6a:ac:8a:76:9b:c1: 6f:be:8e:e8:47:7d:97:22:b4:84:72:f5:76:00:7c:bf:cf:5c: dd:0e:a1:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6nGeftordHCm4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWJjODgyMDctZTdjNy00NTNlLWE0YWItNzdiNzIxNTJj MzNhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk MTQ0YzEyMmUtYjgxNy00MjlhLTgxOTMtOTdmZGFmMTY5OTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OrvBVg7od6i5XNVAgIIIHo0+VUJtUuH2s4S 6Zb1dKaCrO1ovnptUitsTmSYQgR0B0OR0BznN9jb+KmbpxpjxwuJ52nXNdOgpwWg 5yWuqTNjRMvoxobEXTOpUdD0f9biCRpCXchXtOm/b2GHLYU6chkjrCpXO/qDrgjd Fqo5fAuvK8Hk2c4c1MzQQxct6VvbI8d+au89aEqA8aAHz4aORDyUi/8RrurWyXVz uBEQqv1OmsPg/CNAz5peLL6m/GlqxBq/tBBKUzJIDJ9pHxyWijf/KSI7pKvIvpUQ bTMnpTHCVLh+o8OjCIO//G0BcMWIgIu5M+sF3hdHnNxcIWdiAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI5X980+MhHNAMCegEHGI68Lw3UlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85YmM4 ODIwNy1lN2M3LTQ1M2UtYTRhYi03N2I3MjE1MmMzM2EvM2MwOGZmZGMtOWE4MC0z YjhkLWJlODctOTY4Yjk1NDc4YzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWJjODgyMDctZTdjNy00NTNlLWE0 YWItNzdiNzIxNTJjMzNhLzliYzg4MjA3LWU3YzctNDUzZS1hNGFiLTc3YjcyMTUy YzMzYS5jcmwwHwYDVR0jBBgwFoAUSTAeHE2iWcjFZa+Ue8VgdNKWIv8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85YmM4ODIwNy1lN2M3LTQ1M2UtYTRhYi03N2I3 MjE1MmMzM2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx0kMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMqbT9eYLZSrN1ebWjT/yKlGRKKTrlfmtm4QK7UM3nBlC0cSinRCzZyN v4yu8xqFDHc+oRAXB6Em+LyMJ5LLkorW+21/u6kGYV/3ypKLvctVgnMRGokklMCa NwtDmyUbee9ehE3tcXGyy6Wa2foBBgui17mDWFO9CaWiolWK/EjKqzc16osKnN7G CAerK7mZkAgpMiHSctRQvKkDcGIKje/7vf0tkjd29hPW3t90KnMDclZp77FjkTDN rsKJbHlxiLuFIqBtqW6koS4uYhCQwAkKj8aiCocc9IA47d+6ENCQvXCm02qsinab wW++juhHfZcitIRy9XYAfL/PXN0OoRQ= -----END CERTIFICATE-----Generated at Fri Apr 17 15:14:19 2026 by rpki-client