$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b13d137-bc85-4935-b740-e59f0078def5/2b4dc5a9-d239-3f44-83bc-9066a51948b0.roa File: 2b4dc5a9-d239-3f44-83bc-9066a51948b0.roa (raw, json) Hash identifier: D6/YeuvizJU8p+CD+rqBOjWzS17YyutqTHE/W23Sw04= Subject key identifier: 81:FF:D8:71:17:05:E9:26:B3:13:0F:19:51:5B:68:F3:53:1A:8C:97 Certificate issuer: /CN=9b13d137-bc85-4935-b740-e59f0078def5 Certificate serial: 010D0C9F4328584D492A759F46D0B0A52DACF8E0 Authority key identifier: E0:D4:11:D6:BB:3A:5F:7A:B7:88:06:8A:62:47:02:33:E2:16:4E:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b13d137-bc85-4935-b740-e59f0078def5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b13d137-bc85-4935-b740-e59f0078def5/2b4dc5a9-d239-3f44-83bc-9066a51948b0.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 40443 IP address blocks: 198.133.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b13d137-bc85-4935-b740-e59f0078def5/9b13d137-bc85-4935-b740-e59f0078def5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b13d137-bc85-4935-b740-e59f0078def5/9b13d137-bc85-4935-b740-e59f0078def5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b13d137-bc85-4935-b740-e59f0078def5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:75:9f:46:d0:b0:a5:2d:ac:f8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b13d137-bc85-4935-b740-e59f0078def5 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=c4d2f370-b7f1-465d-81c9-01e35e64fb92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:18:69:b3:84:cd:fe:55:ff:53:45:a2:a2:7b: 11:c1:28:69:ce:a7:21:4d:03:b3:4b:3a:3f:5e:ea: 87:ae:9d:c8:2e:d5:49:b0:79:2f:e1:8d:64:ed:ca: 15:7b:3b:dc:28:d3:e1:63:fa:57:b0:1a:4a:d0:5d: a4:90:43:4f:2c:25:ef:6c:0e:3b:2b:80:49:1e:a5: 58:fc:f3:83:c1:32:42:eb:6b:de:fe:f4:b2:94:0c: 12:78:0a:45:94:a5:04:9d:e0:0b:92:46:92:da:62: de:00:e8:a9:32:75:82:1a:42:be:5e:73:f1:19:92: 80:18:49:1e:6c:28:a4:5e:0b:b0:69:8c:97:06:ed: 98:d3:a6:a7:19:e9:db:9a:67:75:16:85:7a:d9:aa: f3:b4:08:e8:db:62:43:57:a1:27:6e:19:ca:1d:7c: c2:1d:95:d8:9d:2a:56:e8:7a:46:9e:8c:75:f3:42: a4:2a:98:ef:5c:ab:54:8a:31:d0:f0:b6:bb:c1:c9: fe:83:5f:d7:dc:24:13:57:4c:76:da:43:70:96:0b: 26:59:48:e9:8c:01:9e:43:20:29:f1:03:2a:09:95: ca:d7:92:95:3b:1a:59:94:3c:0e:6e:5b:17:91:81: 60:68:8e:8c:c5:ae:c8:eb:c4:3b:1b:e4:ba:34:a3: 25:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:FF:D8:71:17:05:E9:26:B3:13:0F:19:51:5B:68:F3:53:1A:8C:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b13d137-bc85-4935-b740-e59f0078def5/2b4dc5a9-d239-3f44-83bc-9066a51948b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b13d137-bc85-4935-b740-e59f0078def5/9b13d137-bc85-4935-b740-e59f0078def5.crl X509v3 Authority Key Identifier: keyid:E0:D4:11:D6:BB:3A:5F:7A:B7:88:06:8A:62:47:02:33:E2:16:4E:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9b13d137-bc85-4935-b740-e59f0078def5.cer sbgp-ipAddrBlock: critical IPv4: 198.133.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:2c:c4:0a:58:55:8e:0b:ae:ec:d4:d9:8a:80:a8:cb:7b:9d: 37:a0:b7:0c:f7:ad:21:5f:47:7a:33:7a:df:a4:1e:27:58:42: e9:9f:a0:69:6c:d0:64:8b:60:cf:ba:aa:fc:68:6f:e7:68:0b: 10:65:17:17:b5:b5:52:09:70:0d:46:76:34:95:db:e9:a0:14: 1e:6e:38:5c:e0:c7:77:94:0e:8e:ca:9b:ec:70:a0:e3:1c:d7: eb:6f:47:b8:23:f1:5e:f5:37:93:c0:7f:0a:68:50:70:c9:d0: a3:00:33:fb:d1:36:77:00:dd:9c:1e:3d:b3:be:34:b6:5a:e5: 78:eb:ea:13:6b:61:23:aa:61:8a:49:ed:6d:01:5e:c0:41:b1: 2c:2d:3a:17:01:5e:51:f5:6e:05:6f:a2:a9:42:8c:13:dd:26: 44:dc:4d:aa:d2:65:c9:49:98:a6:e0:ac:a6:a5:50:65:8b:0a: 18:1c:30:14:8d:2b:a6:32:24:0b:02:e1:06:9e:bb:90:bb:f9: bd:8e:9d:4c:da:85:55:68:4f:5d:78:21:ac:df:2b:62:38:9b: 1f:c4:09:3a:bb:91:d8:38:5d:20:ad:62:25:4c:74:5d:f9:4b: a1:36:ab:77:d4:d4:46:96:1e:be:92:f6:36:21:e1:c4:51:2a: 46:a3:0f:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKnWfRtCwpS2s+OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWIxM2QxMzctYmM4NS00OTM1LWI3NDAtZTU5ZjAwNzhk ZWY1MB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk YzRkMmYzNzAtYjdmMS00NjVkLTgxYzktMDFlMzVlNjRmYjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRhps4TN/lX/U0WionsRwShpzqchTQOzSzo/ XuqHrp3ILtVJsHkv4Y1k7coVezvcKNPhY/pXsBpK0F2kkENPLCXvbA47K4BJHqVY /PODwTJC62ve/vSylAwSeApFlKUEneALkkaS2mLeAOipMnWCGkK+XnPxGZKAGEke bCikXguwaYyXBu2Y06anGenbmmd1FoV62arztAjo22JDV6EnbhnKHXzCHZXYnSpW 6HpGnox180KkKpjvXKtUijHQ8La7wcn+g1/X3CQTV0x22kNwlgsmWUjpjAGeQyAp 8QMqCZXK15KVOxpZlDwOblsXkYFgaI6Mxa7I68Q7G+S6NKMlawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIH/2HEXBekmsxMPGVFbaPNTGoyXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85YjEz ZDEzNy1iYzg1LTQ5MzUtYjc0MC1lNTlmMDA3OGRlZjUvMmI0ZGM1YTktZDIzOS0z ZjQ0LTgzYmMtOTA2NmE1MTk0OGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOWIxM2QxMzctYmM4NS00OTM1LWI3 NDAtZTU5ZjAwNzhkZWY1LzliMTNkMTM3LWJjODUtNDkzNS1iNzQwLWU1OWYwMDc4 ZGVmNS5jcmwwHwYDVR0jBBgwFoAU4NQR1rs6X3q3iAaKYkcCM+IWTlUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85YjEzZDEzNy1iYzg1LTQ5MzUtYjc0MC1lNTlm MDA3OGRlZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxoXWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcsxApYVY4LruzU2YqAqMt7nTegtwz3rSFfR3ozet+kHidYQumfoGls 0GSLYM+6qvxob+doCxBlFxe1tVIJcA1GdjSV2+mgFB5uOFzgx3eUDo7Km+xwoOMc 1+tvR7gj8V71N5PAfwpoUHDJ0KMAM/vRNncA3ZwePbO+NLZa5Xjr6hNrYSOqYYpJ 7W0BXsBBsSwtOhcBXlH1bgVvoqlCjBPdJkTcTarSZclJmKbgrKalUGWLChgcMBSN K6YyJAsC4Qaeu5C7+b2OnUzahVVoT114IazfK2I4mx/ECTq7kdg4XSCtYiVMdF35 S6E2q3fU1EaWHr6S9jYh4cRRKkajD+g= -----END CERTIFICATE-----Generated at Thu Mar 26 19:12:02 2026 by rpki-client