$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/6ede325a-ba24-308c-a1a3-54012fa276ef.roa File: 6ede325a-ba24-308c-a1a3-54012fa276ef.roa (raw, json) Hash identifier: XkXPfYPqY2zsJ4fBwQ3f1Kiv6XL17u2UCPIPS8hZLZU= Subject key identifier: 19:F9:CA:60:C5:14:92:13:60:F7:65:2A:D3:3D:DE:43:60:3E:70:9A Certificate issuer: /CN=e5333a6e-37dc-4213-b928-ae0341454759 Certificate serial: 010D0C9F4328584D4D5A5CA999AC1B7B159AFB60 Authority key identifier: 39:3C:9B:6B:84:4D:12:F0:64:F5:53:BB:8F:7F:31:00:A1:27:A0:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/6ede325a-ba24-308c-a1a3-54012fa276ef.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 46650 IP address blocks: 199.85.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/e5333a6e-37dc-4213-b928-ae0341454759.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/e5333a6e-37dc-4213-b928-ae0341454759.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:5c:a9:99:ac:1b:7b:15:9a:fb:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5333a6e-37dc-4213-b928-ae0341454759 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=3a717704-1cc9-47f4-9dbc-8896a01ceb46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:ce:15:c5:3e:fa:11:3d:ba:39:33:7a:28:fd: ce:7d:1c:24:79:a8:d1:67:a2:3e:34:99:43:62:2c: fa:09:5a:8a:c6:67:03:01:91:1b:06:eb:f1:63:b3: a7:11:94:56:c8:c6:ae:2b:ce:96:e9:7b:6e:53:3f: 60:42:99:f3:07:f7:6a:21:fb:65:92:d5:42:ab:46: 10:f5:a2:52:8e:fc:85:6d:f8:0c:bb:2c:48:54:9c: 5f:af:56:38:ee:e0:19:f8:0b:cd:06:68:d4:67:f5: 19:42:ee:83:07:85:82:44:e7:30:6c:19:0f:81:a8: 1a:25:2d:fd:2e:9c:04:77:61:86:27:ed:91:92:6e: 98:9a:cf:64:d0:9d:1d:3d:b6:90:6e:e9:46:1e:a8: b8:30:c6:ee:fc:82:6b:63:43:3b:85:c6:78:7d:5e: 3c:77:44:5c:37:65:a0:e6:17:88:b7:70:31:eb:12: ef:63:f8:7e:a4:16:a0:4b:85:bb:11:0d:ea:0f:33: 99:29:3a:92:24:ee:7f:72:c6:2d:3c:07:28:b8:bb: fc:83:0b:e5:07:e7:bb:16:49:92:3b:dd:32:04:7d: d3:c4:f8:c8:76:b0:0e:b6:40:3a:fc:06:22:5d:2d: bc:85:6f:87:bd:3f:30:06:1e:c7:83:1d:1a:a7:91: 79:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:F9:CA:60:C5:14:92:13:60:F7:65:2A:D3:3D:DE:43:60:3E:70:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/6ede325a-ba24-308c-a1a3-54012fa276ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/e5333a6e-37dc-4213-b928-ae0341454759.crl X509v3 Authority Key Identifier: keyid:39:3C:9B:6B:84:4D:12:F0:64:F5:53:BB:8F:7F:31:00:A1:27:A0:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759.cer sbgp-ipAddrBlock: critical IPv4: 199.85.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:ab:72:bf:0d:41:0b:21:26:ca:fd:79:0d:43:03:13:29:9e: fd:70:c7:d4:2e:51:f6:4e:1e:da:cf:49:ef:05:56:9a:d8:21: 89:30:89:d8:e7:4e:2f:58:69:0d:18:7e:4a:ac:5c:b5:6b:47: 65:b5:84:77:ae:d6:d8:07:4c:dd:f2:55:8d:46:b5:ac:3a:19: 18:95:b8:13:fa:63:73:54:46:f3:55:ad:27:7a:b7:4c:e5:77: 0c:da:c5:ec:7d:93:1b:25:5b:a9:4f:8e:75:e8:6e:7d:7c:db: 44:16:e1:7b:f6:f8:74:6a:20:11:3b:0c:04:ce:20:fe:d8:8f: df:fa:b8:88:9e:5f:33:94:72:f2:ae:35:60:50:ed:0c:18:78: 2d:35:c1:d6:89:fc:8a:01:d7:27:80:4a:ac:bb:ad:7a:3b:44: 1d:b9:2e:00:0b:6e:35:2c:93:04:bd:ba:41:65:06:4f:cf:25: 40:c2:7e:e2:c8:78:26:cf:ed:6b:75:1e:5f:da:d6:8a:02:24: db:8d:07:26:52:70:c4:9a:61:6e:11:23:e9:08:fd:e1:99:11: 1b:7a:73:70:76:54:a9:8e:ef:e7:d2:e3:1b:8e:bd:6b:15:5c: 3c:a8:87:0a:e5:57:f2:82:43:af:f2:c9:e6:e2:a0:43:e8:c6: 4e:b8:e6:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWlypmawbexWa+2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTUzMzNhNmUtMzdkYy00MjEzLWI5MjgtYWUwMzQxNDU0 NzU5MB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk M2E3MTc3MDQtMWNjOS00N2Y0LTlkYmMtODg5NmEwMWNlYjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7M4VxT76ET26OTN6KP3OfRwkeajRZ6I+NJlD Yiz6CVqKxmcDAZEbBuvxY7OnEZRWyMauK86W6XtuUz9gQpnzB/dqIftlktVCq0YQ 9aJSjvyFbfgMuyxIVJxfr1Y47uAZ+AvNBmjUZ/UZQu6DB4WCROcwbBkPgagaJS39 LpwEd2GGJ+2Rkm6Yms9k0J0dPbaQbulGHqi4MMbu/IJrY0M7hcZ4fV48d0RcN2Wg 5heIt3Ax6xLvY/h+pBagS4W7EQ3qDzOZKTqSJO5/csYtPAcouLv8gwvlB+e7FkmS O90yBH3TxPjIdrAOtkA6/AYiXS28hW+HvT8wBh7Hgx0ap5F5/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBn5ymDFFJITYPdlKtM93kNgPnCaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lNTMz M2E2ZS0zN2RjLTQyMTMtYjkyOC1hZTAzNDE0NTQ3NTkvNmVkZTMyNWEtYmEyNC0z MDhjLWExYTMtNTQwMTJmYTI3NmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTUzMzNhNmUtMzdkYy00MjEzLWI5 MjgtYWUwMzQxNDU0NzU5L2U1MzMzYTZlLTM3ZGMtNDIxMy1iOTI4LWFlMDM0MTQ1 NDc1OS5jcmwwHwYDVR0jBBgwFoAUOTyba4RNEvBk9VO7j38xAKEnoHMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lNTMzM2E2ZS0zN2RjLTQyMTMtYjkyOC1hZTAz NDE0NTQ3NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx1XsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSrcr8NQQshJsr9eQ1DAxMpnv1wx9QuUfZOHtrPSe8FVprYIYkwidjn Ti9YaQ0YfkqsXLVrR2W1hHeu1tgHTN3yVY1Gtaw6GRiVuBP6Y3NURvNVrSd6t0zl dwzaxex9kxslW6lPjnXobn1820QW4Xv2+HRqIBE7DATOIP7Yj9/6uIieXzOUcvKu NWBQ7QwYeC01wdaJ/IoB1yeASqy7rXo7RB25LgALbjUskwS9ukFlBk/PJUDCfuLI eCbP7Wt1Hl/a1ooCJNuNByZScMSaYW4RI+kI/eGZERt6c3B2VKmO7+fS4xuOvWsV XDyohwrlV/KCQ6/yyebioEPoxk645mA= -----END CERTIFICATE-----Generated at Fri Apr 17 23:47:47 2026 by rpki-client