$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/0a495132-7cda-3198-aa84-524b4588371a.roa File: 0a495132-7cda-3198-aa84-524b4588371a.roa (raw, json) Hash identifier: US4E/HxO6St8P2N7E0BHSO4ahqlHWWz4uwBeNMYLcXI= Subject key identifier: 03:0C:BE:04:BF:55:18:6B:7D:7A:12:7C:13:DB:D8:6A:08:A5:0B:90 Certificate issuer: /CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Certificate serial: 010D0C9F4328584C7D7C4614F4023731530BF400 Authority key identifier: 5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/0a495132-7cda-3198-aa84-524b4588371a.roa Signing time: Sun 11 Jan 2026 14:00:39 +0000 ROA not before: Sun 11 Jan 2026 14:00:39 +0000 ROA not after: Sat 11 Apr 2026 13:00:39 +0000 asID: 21766 IP address blocks: 199.217.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:7d:7c:46:14:f4:02:37:31:53:0b:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Validity Not Before: Jan 11 14:00:39 2026 GMT Not After : Apr 11 13:00:39 2026 GMT Subject: CN=f1b3aa3b-156f-4bf0-84d2-2c52c7e9f93e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e7:18:f0:b8:7c:6c:67:af:e2:6d:80:32:85: c3:49:e8:ef:8d:cc:92:7c:bf:6d:00:f2:fc:81:ae: 27:76:eb:fb:81:16:80:57:c7:20:f7:94:3c:ee:a7: 49:2d:b6:04:f4:7c:0f:01:37:6d:3f:ee:81:91:23: 9e:7c:eb:45:14:ce:df:ac:7a:a6:76:8b:74:b6:71: a2:0e:8b:54:a2:68:ec:eb:d6:2f:19:a9:12:fc:4a: 01:a5:87:8f:ec:f0:67:cd:4e:18:e3:bc:e5:76:16: 24:2f:c6:8b:0f:b5:a6:6a:ee:b9:1d:69:17:2c:16: d8:ab:4b:2d:d4:0d:f0:0e:d0:01:cb:85:cd:9d:34: 53:65:1a:b6:eb:e1:b5:20:36:ad:c7:e5:ee:dd:91: 4f:97:2c:fc:a2:3d:06:7e:10:a8:43:cb:8b:c2:57: 20:b9:1f:80:7b:e7:05:fd:2e:e9:b0:ec:69:46:ab: 8b:11:2b:f5:9f:6a:26:da:70:e3:b2:2c:39:98:5c: 1b:36:91:f2:e0:89:8c:2b:f9:e0:1c:ab:48:94:00: 11:dd:d5:1e:87:aa:60:68:19:fe:61:f2:87:88:d0: b8:e0:91:2c:b2:e0:2d:27:5f:f5:f6:5c:a1:8c:f1: af:bd:d4:61:66:90:ef:20:97:04:a2:15:df:3d:e8: fa:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:0C:BE:04:BF:55:18:6B:7D:7A:12:7C:13:DB:D8:6A:08:A5:0B:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/0a495132-7cda-3198-aa84-524b4588371a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl X509v3 Authority Key Identifier: keyid:5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer sbgp-ipAddrBlock: critical IPv4: 199.217.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:97:6e:64:47:23:b2:10:ce:b3:16:02:27:e9:96:ad:2c:87: 21:b8:af:20:46:8d:00:a5:88:41:7b:60:d5:88:41:f2:65:ca: 6b:5a:b6:a0:09:e8:95:99:e5:4f:05:b7:9e:c4:fc:a9:2e:be: fe:3e:4a:f0:4a:ca:8f:f7:0c:4a:4f:9a:55:e1:0f:50:a0:5e: 45:58:5d:7a:b6:4c:7e:2b:1a:61:ea:b2:ef:ea:6a:76:d6:e0: 24:f6:8a:9e:1a:99:39:38:cd:ce:40:f4:22:e5:42:4d:71:fb: 77:e8:2c:29:a1:a1:a0:45:68:33:b5:aa:20:73:fa:cb:b8:8c: 5f:0d:85:79:3b:c2:6b:a5:c3:61:c7:80:6b:b5:bc:84:51:14: d8:e2:28:fa:90:0c:93:c6:41:97:a6:61:a3:ce:47:ba:8c:42: 18:42:3c:98:07:ba:a3:a6:4e:62:3f:1a:3d:6f:7e:21:1b:50: 7f:bd:08:f4:11:db:13:c0:f8:41:75:f6:b9:af:93:84:7a:87: 34:61:82:b6:01:d0:00:0d:75:d5:f5:a8:03:0c:96:62:23:0d: ea:7d:22:72:80:64:f6:62:ad:cb:34:da:e7:de:cd:c6:e6:fc: 73:50:3b:55:22:1d:76:52:45:80:c2:bc:35:9d:b7:1e:09:0a: 55:53:65:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx9fEYU9AI3MVML9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdkN2YxNGUtNzJjNC00N2U0LWFkMDYtYTFiNzJmOTRj N2IxMB4XDTI2MDExMTE0MDAzOVoXDTI2MDQxMTEzMDAzOVowLzEtMCsGA1UEAxMk ZjFiM2FhM2ItMTU2Zi00YmYwLTg0ZDItMmM1MmM3ZTlmOTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOcY8Lh8bGev4m2AMoXDSejvjcySfL9tAPL8 ga4nduv7gRaAV8cg95Q87qdJLbYE9HwPATdtP+6BkSOefOtFFM7frHqmdot0tnGi DotUomjs69YvGakS/EoBpYeP7PBnzU4Y47zldhYkL8aLD7Wmau65HWkXLBbYq0st 1A3wDtABy4XNnTRTZRq26+G1IDatx+Xu3ZFPlyz8oj0GfhCoQ8uLwlcguR+Ae+cF /S7psOxpRquLESv1n2om2nDjsiw5mFwbNpHy4ImMK/ngHKtIlAAR3dUeh6pgaBn+ YfKHiNC44JEssuAtJ1/19lyhjPGvvdRhZpDvIJcEohXfPej6jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMMvgS/VRhrfXoSfBPb2GoIpQuQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3 ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3MmY5NGM3YjEvMGE0OTUxMzItN2NkYS0z MTk4LWFhODQtNTI0YjQ1ODgzNzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTdkN2YxNGUtNzJjNC00N2U0LWFk MDYtYTFiNzJmOTRjN2IxL2E3ZDdmMTRlLTcyYzQtNDdlNC1hZDA2LWExYjcyZjk0 YzdiMS5jcmwwHwYDVR0jBBgwFoAUXtwOAtpu5BW/4iOR5NyjJ1ELeg0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3 MmY5NGM3YjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx9l8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKXbmRHI7IQzrMWAifplq0shyG4ryBGjQCliEF7YNWIQfJlymtatqAJ 6JWZ5U8Ft57E/Kkuvv4+SvBKyo/3DEpPmlXhD1CgXkVYXXq2TH4rGmHqsu/qanbW 4CT2ip4amTk4zc5A9CLlQk1x+3foLCmhoaBFaDO1qiBz+su4jF8NhXk7wmulw2HH gGu1vIRRFNjiKPqQDJPGQZemYaPOR7qMQhhCPJgHuqOmTmI/Gj1vfiEbUH+9CPQR 2xPA+EF19rmvk4R6hzRhgrYB0AANddX1qAMMlmIjDep9InKAZPZircs02ufezcbm /HNQO1UiHXZSRYDCvDWdtx4JClVTZTw= -----END CERTIFICATE-----Generated at Mon Mar 2 14:08:10 2026 by rpki-client