$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5a0ae7fa-e747-3e80-bbce-2e0f5ad57f24.roa File: 5a0ae7fa-e747-3e80-bbce-2e0f5ad57f24.roa (raw, json) Hash identifier: tiAtjAZAct6sFMIHD904nWG9zYT3b2YX2310zYae6jI= Subject key identifier: 03:F9:7C:50:83:5F:46:E7:48:6A:57:20:84:06:12:FF:9A:EF:72:52 Certificate issuer: /CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Certificate serial: 010D0C9F4328584C8046CAC7F7350B37DDAE2C80 Authority key identifier: 5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5a0ae7fa-e747-3e80-bbce-2e0f5ad57f24.roa Signing time: Mon 12 Jan 2026 14:00:40 +0000 ROA not before: Mon 12 Jan 2026 14:00:40 +0000 ROA not after: Sun 12 Apr 2026 13:00:40 +0000 asID: 21766 IP address blocks: 199.189.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:80:46:ca:c7:f7:35:0b:37:dd:ae:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Validity Not Before: Jan 12 14:00:40 2026 GMT Not After : Apr 12 13:00:40 2026 GMT Subject: CN=e00808a6-ef20-4eb7-81bc-c7d85b9cc347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c0:7f:c1:14:d0:14:57:ab:c2:d2:53:92:be: 89:e2:f4:88:38:89:47:43:05:10:dc:34:cc:ab:d3: be:6e:6b:46:9b:11:01:68:1b:9a:fe:44:c1:b7:99: 25:67:6e:08:61:2b:bf:ab:4a:8c:2b:5d:d1:80:35: 72:30:f0:d8:40:9e:43:99:4b:85:f3:5b:b2:50:85: a7:8b:50:3b:99:55:cd:63:15:cb:44:2e:68:ef:84: 76:87:b5:66:ec:0a:c3:b3:15:7b:cd:36:66:8f:cd: 2d:d9:7f:bb:d7:08:e0:ea:be:b9:41:a6:a9:63:5f: 48:03:30:68:f7:ff:88:a3:7d:26:99:ea:50:bb:21: cc:f8:2f:96:e4:df:81:57:bc:2f:d2:8a:ed:22:a7: 98:a8:73:5c:c8:ca:9b:26:c2:df:dd:6e:fa:79:42: 1f:70:e3:10:e6:0e:56:99:84:cc:61:95:09:e4:4c: b0:05:18:24:69:46:6c:fd:e3:dd:02:14:cc:d2:15: f8:ca:e7:ad:4a:74:27:cb:70:6c:a2:78:01:05:18: 77:21:f5:7e:a2:5a:73:9d:10:74:aa:cc:fc:12:3e: f3:54:81:5a:0c:61:b8:65:e3:a9:af:47:10:03:02: 77:7e:11:2f:ce:9b:00:78:53:3c:70:09:be:10:d5: bc:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:F9:7C:50:83:5F:46:E7:48:6A:57:20:84:06:12:FF:9A:EF:72:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5a0ae7fa-e747-3e80-bbce-2e0f5ad57f24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl X509v3 Authority Key Identifier: keyid:5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer sbgp-ipAddrBlock: critical IPv4: 199.189.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:3b:7b:10:17:e3:1a:4a:cb:7c:b5:94:75:1c:6a:40:2c:78: 69:c6:52:e6:fc:a9:8e:88:00:4d:17:6a:f6:ce:df:e2:79:0f: 86:22:1e:96:dc:ac:b4:b2:fd:a3:94:cb:96:b1:90:3f:d5:e3: 49:c9:1b:fe:4e:c5:55:6c:e7:88:08:5f:e2:48:93:df:e7:75: 38:17:cf:c9:d0:5f:25:30:a6:1b:af:8c:e0:f2:d4:7d:4d:ac: fc:22:c0:ec:72:2b:a1:69:29:29:51:95:e3:c5:4e:a9:6a:fc: f5:52:79:b4:52:0c:e5:d9:cb:3d:14:a6:2d:6f:89:72:0b:a1: 07:fe:8a:5a:39:ff:da:b6:44:37:2b:c4:b4:78:a7:0e:89:6d: 89:c3:17:3f:d4:e6:ab:23:4f:0f:0d:8b:b4:70:f7:fe:6b:a1: f8:a3:c9:01:2c:e9:41:06:3a:a5:4f:bd:20:17:37:7a:64:f4: 57:a6:f8:7c:44:39:c7:9f:e7:ac:ab:e6:05:f4:63:b8:a9:9a: 0b:3c:a7:59:e2:9a:31:ca:90:7f:4d:4b:b6:4b:90:e8:bc:be: 3c:92:1c:e6:73:7e:27:82:82:22:46:81:c9:54:aa:3a:19:27: 0c:06:71:0d:0a:26:a4:e6:92:ab:bf:eb:e9:5d:41:da:27:2c: 5f:ed:37:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyARsrH9zULN92uLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdkN2YxNGUtNzJjNC00N2U0LWFkMDYtYTFiNzJmOTRj N2IxMB4XDTI2MDExMjE0MDA0MFoXDTI2MDQxMjEzMDA0MFowLzEtMCsGA1UEAxMk ZTAwODA4YTYtZWYyMC00ZWI3LTgxYmMtYzdkODViOWNjMzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMB/wRTQFFerwtJTkr6J4vSIOIlHQwUQ3DTM q9O+bmtGmxEBaBua/kTBt5klZ24IYSu/q0qMK13RgDVyMPDYQJ5DmUuF81uyUIWn i1A7mVXNYxXLRC5o74R2h7Vm7ArDsxV7zTZmj80t2X+71wjg6r65QaapY19IAzBo 9/+Io30mmepQuyHM+C+W5N+BV7wv0ortIqeYqHNcyMqbJsLf3W76eUIfcOMQ5g5W mYTMYZUJ5EywBRgkaUZs/ePdAhTM0hX4yuetSnQny3BsongBBRh3IfV+olpznRB0 qsz8Ej7zVIFaDGG4ZeOpr0cQAwJ3fhEvzpsAeFM8cAm+ENW8BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAP5fFCDX0bnSGpXIIQGEv+a73JSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3 ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3MmY5NGM3YjEvNWEwYWU3ZmEtZTc0Ny0z ZTgwLWJiY2UtMmUwZjVhZDU3ZjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTdkN2YxNGUtNzJjNC00N2U0LWFk MDYtYTFiNzJmOTRjN2IxL2E3ZDdmMTRlLTcyYzQtNDdlNC1hZDA2LWExYjcyZjk0 YzdiMS5jcmwwHwYDVR0jBBgwFoAUXtwOAtpu5BW/4iOR5NyjJ1ELeg0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3 MmY5NGM3YjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx73wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAc7exAX4xpKy3y1lHUcakAseGnGUub8qY6IAE0XavbO3+J5D4YiHpbc rLSy/aOUy5axkD/V40nJG/5OxVVs54gIX+JIk9/ndTgXz8nQXyUwphuvjODy1H1N rPwiwOxyK6FpKSlRlePFTqlq/PVSebRSDOXZyz0Upi1viXILoQf+ilo5/9q2RDcr xLR4pw6JbYnDFz/U5qsjTw8Ni7Rw9/5rofijyQEs6UEGOqVPvSAXN3pk9Fem+HxE Ocef56yr5gX0Y7ipmgs8p1nimjHKkH9NS7ZLkOi8vjySHOZzfieCgiJGgclUqjoZ JwwGcQ0KJqTmkqu/6+ldQdonLF/tN44= -----END CERTIFICATE-----Generated at Mon Mar 2 04:34:09 2026 by rpki-client