$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/01cd1793-f8fc-3093-850b-0b0ebdbf290c.roa File: 01cd1793-f8fc-3093-850b-0b0ebdbf290c.roa (raw, json) Hash identifier: jcMFe/3NX3r6chHhuTrYX4wT+AOo2l4PVkj4ntxIlFk= Subject key identifier: 2A:E2:56:5C:AE:E5:70:5A:FA:22:24:73:58:1D:A8:92:01:7B:BC:B1 Certificate issuer: /CN=afac962a-1647-4571-99e5-a23db5fd79d7 Certificate serial: 010D0C9F4328584D1F4A40FECED6D47359AF2280 Authority key identifier: D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/01cd1793-f8fc-3093-850b-0b0ebdbf290c.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 4185 IP address blocks: 198.137.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:40:fe:ce:d6:d4:73:59:af:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afac962a-1647-4571-99e5-a23db5fd79d7 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=f4502178-53e5-42b3-957e-77abf88069de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:76:ae:b8:a2:2e:97:79:40:a2:62:5e:ff:a3: 82:fe:34:2c:a9:b7:da:cd:e4:31:ec:59:41:d1:df: fe:0b:6c:e8:2c:ed:e7:6c:b0:52:f2:d8:9b:25:f5: f3:23:07:87:ed:06:95:d4:81:6c:9f:28:4f:e1:76: ba:a7:69:00:cf:20:73:1b:83:93:e8:5e:cd:cf:98: ad:b9:11:ed:21:9c:93:25:e1:ae:1a:8b:15:86:2a: 0d:5a:e2:f6:91:a0:5d:01:e8:42:47:6d:ff:5e:88: 81:ad:60:c2:75:ca:b3:3a:ad:36:2c:6c:ce:e6:84: 70:48:3b:40:a5:4f:ee:ca:23:b5:05:8c:85:93:7b: b1:52:71:4a:a8:7a:66:6c:ac:d5:ed:60:b1:3c:17: 64:b5:97:84:7f:f1:2f:f7:ad:1a:c2:6f:52:3e:74: ff:d4:af:5a:1c:ab:88:40:ef:b9:e7:5b:b5:a0:86: 9f:eb:fe:28:e1:91:dc:20:4b:f1:93:37:e2:1b:d6: 7c:64:f1:c5:f0:24:59:2d:e1:d4:d9:05:c2:ad:b5: 86:35:87:f0:1a:ca:f9:81:1d:65:9c:88:22:3b:f1: 48:98:39:94:19:b3:44:bf:d2:49:82:bb:4b:0a:1d: 05:d9:b7:be:19:9d:16:02:05:ab:a4:f3:7e:f5:07: 03:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:E2:56:5C:AE:E5:70:5A:FA:22:24:73:58:1D:A8:92:01:7B:BC:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/01cd1793-f8fc-3093-850b-0b0ebdbf290c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.crl X509v3 Authority Key Identifier: keyid:D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer sbgp-ipAddrBlock: critical IPv4: 198.137.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:d4:56:36:c7:8b:8d:85:d2:ea:1a:61:f8:2e:bd:47:0c:b7: 89:0c:d9:eb:2c:5b:fa:1b:01:3a:1f:c4:89:e0:82:9b:3d:e1: 4b:5d:1e:88:a2:94:7d:4e:80:e4:61:aa:03:53:02:16:4d:8f: 0f:42:31:c3:06:dd:64:24:45:fc:24:43:a7:67:4f:f1:7d:b1: 56:07:af:c2:54:58:60:30:27:bc:d8:23:c7:f6:3c:11:e8:55: 5e:f8:09:9c:64:02:dd:c8:76:bf:f4:dc:da:74:5c:9c:3e:18: 6e:6a:3d:e0:44:bc:f8:93:44:a3:92:68:44:bb:a0:da:85:5e: 70:78:c6:aa:02:1a:8a:0f:6c:d7:ee:07:77:54:41:03:7c:10: 7a:76:93:f0:19:99:95:5a:cc:41:1d:75:fe:04:86:53:66:2b: b9:74:e9:c3:6e:58:b3:9e:9f:f3:c9:e8:22:22:47:02:4c:08: 36:f1:5f:52:e9:40:96:fe:3e:cf:6d:cd:02:ed:b3:b5:0e:66: 59:24:96:03:cb:66:2f:e7:a8:05:11:56:54:f2:ca:50:1f:a3: bd:bd:4b:60:68:60:d2:3e:ce:cc:c1:32:e6:6e:03:04:67:c7: de:43:e6:42:7c:d6:e2:84:36:42:23:ee:96:71:8f:cc:89:c0: 32:88:2e:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSkD+ztbUc1mvIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZhYzk2MmEtMTY0Ny00NTcxLTk5ZTUtYTIzZGI1ZmQ3 OWQ3MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk ZjQ1MDIxNzgtNTNlNS00MmIzLTk1N2UtNzdhYmY4ODA2OWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXauuKIul3lAomJe/6OC/jQsqbfazeQx7FlB 0d/+C2zoLO3nbLBS8tibJfXzIweH7QaV1IFsnyhP4Xa6p2kAzyBzG4OT6F7Nz5it uRHtIZyTJeGuGosVhioNWuL2kaBdAehCR23/XoiBrWDCdcqzOq02LGzO5oRwSDtA pU/uyiO1BYyFk3uxUnFKqHpmbKzV7WCxPBdktZeEf/Ev960awm9SPnT/1K9aHKuI QO+551u1oIaf6/4o4ZHcIEvxkzfiG9Z8ZPHF8CRZLeHU2QXCrbWGNYfwGsr5gR1l nIgiO/FImDmUGbNEv9JJgrtLCh0F2be+GZ0WAgWrpPN+9QcDNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCriVlyu5XBa+iIkc1gdqJIBe7yxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hZmFj OTYyYS0xNjQ3LTQ1NzEtOTllNS1hMjNkYjVmZDc5ZDcvMDFjZDE3OTMtZjhmYy0z MDkzLTg1MGItMGIwZWJkYmYyOTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWZhYzk2MmEtMTY0Ny00NTcxLTk5 ZTUtYTIzZGI1ZmQ3OWQ3L2FmYWM5NjJhLTE2NDctNDU3MS05OWU1LWEyM2RiNWZk NzlkNy5jcmwwHwYDVR0jBBgwFoAU18c9WZSKdZn1WEgubbPNfLkb8i8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hZmFjOTYyYS0xNjQ3LTQ1NzEtOTllNS1hMjNk YjVmZDc5ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxonwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJvUVjbHi42F0uoaYfguvUcMt4kM2essW/obATofxInggps94UtdHoii lH1OgORhqgNTAhZNjw9CMcMG3WQkRfwkQ6dnT/F9sVYHr8JUWGAwJ7zYI8f2PBHo VV74CZxkAt3Idr/03Np0XJw+GG5qPeBEvPiTRKOSaES7oNqFXnB4xqoCGooPbNfu B3dUQQN8EHp2k/AZmZVazEEddf4EhlNmK7l06cNuWLOen/PJ6CIiRwJMCDbxX1Lp QJb+Ps9tzQLts7UOZlkklgPLZi/nqAURVlTyylAfo729S2BoYNI+zszBMuZuAwRn x95D5kJ81uKENkIj7pZxj8yJwDKILmQ= -----END CERTIFICATE-----Generated at Thu Mar 26 23:48:20 2026 by rpki-client