$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/2c8c6ad3-e963-3175-a096-858ac3ef6191.roa File: 2c8c6ad3-e963-3175-a096-858ac3ef6191.roa (raw, json) Hash identifier: smKGcC6et5L31jhzsCtioG5eSBZYkWRWvv0AN9XHgog= Subject key identifier: B9:A0:A9:1E:DF:3E:D4:7F:7F:F4:AF:8F:3B:72:6D:81:44:22:2A:34 Certificate issuer: /CN=e35c7007-7a33-480f-a32e-40481f8f1792 Certificate serial: 010D0C9F4328584CAA2706A80B1C3EAFD6AB8940 Authority key identifier: 69:C5:93:B3:CB:4A:4F:6B:F2:C7:1E:19:B2:7A:66:85:BA:C2:EA:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/2c8c6ad3-e963-3175-a096-858ac3ef6191.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 53636 IP address blocks: 199.47.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:06:a8:0b:1c:3e:af:d6:ab:89:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e35c7007-7a33-480f-a32e-40481f8f1792 Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=dc979b2d-b6c3-4fe7-9629-52a4dd96b295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:8d:21:37:3c:3f:61:f9:d9:ff:55:e2:f9:65: e3:66:06:a9:09:74:32:e7:bb:74:4c:57:9c:b7:6d: 20:44:53:4e:3c:d9:0b:1e:51:be:4b:48:53:e7:e1: 4b:8c:c3:ae:c8:0a:31:4f:bb:7e:57:ea:f0:49:64: 90:58:40:57:25:e7:34:6c:a2:57:f8:3e:42:3c:63: 11:66:0e:2f:c8:69:89:cf:2f:5f:50:1a:ab:f6:6b: d3:0a:83:66:b7:5b:55:4c:12:e6:7f:5f:83:9e:e8: d8:e9:84:e1:1e:56:45:4f:ba:77:e0:2b:61:1e:20: 0b:91:a2:b0:b9:9e:76:6a:dc:a1:44:f6:eb:2e:e8: af:5f:71:c3:fd:56:27:fe:0f:cf:89:33:cb:43:17: 0e:9d:b7:a7:a1:92:31:0a:81:82:88:c6:d5:3c:a8: 46:ec:09:74:8c:1d:dc:68:3c:0c:bd:db:dc:12:6b: 21:d4:d0:b2:ea:46:55:36:56:40:ca:1f:fd:5e:2b: 0c:b5:93:3f:31:8b:89:f8:90:e2:07:45:1d:82:da: e4:85:15:1c:b8:ea:8e:e7:47:fc:d1:ec:38:54:94: 6d:e3:7f:8c:54:af:4a:75:71:5d:8b:fb:39:5a:6b: af:7f:45:1b:65:f6:6b:8f:d4:4a:ca:79:91:41:a6: 57:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A0:A9:1E:DF:3E:D4:7F:7F:F4:AF:8F:3B:72:6D:81:44:22:2A:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/2c8c6ad3-e963-3175-a096-858ac3ef6191.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792/e35c7007-7a33-480f-a32e-40481f8f1792.crl X509v3 Authority Key Identifier: keyid:69:C5:93:B3:CB:4A:4F:6B:F2:C7:1E:19:B2:7A:66:85:BA:C2:EA:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e35c7007-7a33-480f-a32e-40481f8f1792.cer sbgp-ipAddrBlock: critical IPv4: 199.47.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:d2:a7:11:60:fd:35:df:c6:71:30:aa:8b:6d:d1:e0:ca:ea: b5:02:ea:50:10:17:e9:75:5e:bb:a2:c1:20:c3:27:8a:ca:74: 07:bc:f6:ba:df:d6:86:07:ab:5c:ae:2f:6c:3f:42:74:2d:72: fd:b6:2a:36:58:1f:09:d4:90:f5:ce:dc:61:36:35:80:77:87: d4:f6:00:f5:06:27:ed:01:e6:77:5c:8b:7f:be:00:fd:7b:d4: 5b:d8:75:22:97:4c:0d:60:55:62:e9:28:ff:c9:71:0c:1b:4e: e1:ef:03:af:05:67:68:89:dd:87:45:02:c1:21:47:2a:b7:f6: ff:87:a0:a9:4f:16:0f:ff:48:fa:03:89:c6:d5:83:1f:b7:bf: 60:89:74:7b:8b:a6:9b:50:74:c2:07:79:25:0a:91:8d:a6:71: 3f:d0:98:55:0d:1b:28:7a:45:81:2d:32:d8:ab:1f:f1:a7:99: 2b:52:6f:8b:17:ce:8d:23:29:db:bc:a9:fa:09:0d:07:ce:27: 87:71:17:24:81:7d:34:f6:32:d7:3f:27:f4:c6:56:81:62:be: a5:b1:7e:21:67:71:62:ed:9f:e6:fd:4e:c1:28:68:83:70:a0: e5:d4:11:34:6f:d5:98:91:56:a2:cc:32:6c:67:2d:48:66:26: a9:0a:72:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJwaoCxw+r9ariUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM1YzcwMDctN2EzMy00ODBmLWEzMmUtNDA0ODFmOGYx NzkyMB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk ZGM5NzliMmQtYjZjMy00ZmU3LTk2MjktNTJhNGRkOTZiMjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgY0hNzw/YfnZ/1Xi+WXjZgapCXQy57t0TFec t20gRFNOPNkLHlG+S0hT5+FLjMOuyAoxT7t+V+rwSWSQWEBXJec0bKJX+D5CPGMR Zg4vyGmJzy9fUBqr9mvTCoNmt1tVTBLmf1+DnujY6YThHlZFT7p34CthHiALkaKw uZ52atyhRPbrLuivX3HD/VYn/g/PiTPLQxcOnbenoZIxCoGCiMbVPKhG7Al0jB3c aDwMvdvcEmsh1NCy6kZVNlZAyh/9XisMtZM/MYuJ+JDiB0UdgtrkhRUcuOqO50f8 0ew4VJRt43+MVK9KdXFdi/s5Wmuvf0UbZfZrj9RKynmRQaZXyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmgqR7fPtR/f/SvjztybYFEIio0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMzVj NzAwNy03YTMzLTQ4MGYtYTMyZS00MDQ4MWY4ZjE3OTIvMmM4YzZhZDMtZTk2My0z MTc1LWEwOTYtODU4YWMzZWY2MTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTM1YzcwMDctN2EzMy00ODBmLWEz MmUtNDA0ODFmOGYxNzkyL2UzNWM3MDA3LTdhMzMtNDgwZi1hMzJlLTQwNDgxZjhm MTc5Mi5jcmwwHwYDVR0jBBgwFoAUacWTs8tKT2vyxx4ZsnpmhbrC6uwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lMzVjNzAwNy03YTMzLTQ4MGYtYTMyZS00MDQ4 MWY4ZjE3OTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxy+XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7SpxFg/TXfxnEwqott0eDK6rUC6lAQF+l1XruiwSDDJ4rKdAe89rrf 1oYHq1yuL2w/QnQtcv22KjZYHwnUkPXO3GE2NYB3h9T2APUGJ+0B5ndci3++AP17 1FvYdSKXTA1gVWLpKP/JcQwbTuHvA68FZ2iJ3YdFAsEhRyq39v+HoKlPFg//SPoD icbVgx+3v2CJdHuLpptQdMIHeSUKkY2mcT/QmFUNGyh6RYEtMtirH/GnmStSb4sX zo0jKdu8qfoJDQfOJ4dxFySBfTT2Mtc/J/TGVoFivqWxfiFncWLtn+b9TsEoaINw oOXUETRv1ZiRVqLMMmxnLUhmJqkKcvM= -----END CERTIFICATE-----Generated at Mon Mar 2 08:31:25 2026 by rpki-client