$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/b393d2e1-dfc7-3955-ba83-e6c3e0b6b75a.roa File: b393d2e1-dfc7-3955-ba83-e6c3e0b6b75a.roa (raw, json) Hash identifier: sDHnvT/AX4lXRZ2lyrDmNxuLsW5CB8mO0sCBF/SVK88= Subject key identifier: FB:9E:7B:6F:81:3F:60:CA:FE:C3:F1:E7:3D:B0:2E:AF:89:F5:DD:13 Certificate issuer: /CN=afac962a-1647-4571-99e5-a23db5fd79d7 Certificate serial: 010D0C9F4328584D1F4A40EF11FE302F51BE4E40 Authority key identifier: D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/b393d2e1-dfc7-3955-ba83-e6c3e0b6b75a.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 395700 IP address blocks: 198.137.240.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:40:ef:11:fe:30:2f:51:be:4e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afac962a-1647-4571-99e5-a23db5fd79d7 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=e1530aa0-3979-488a-a387-a9395b8647d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:54:db:c3:2d:d2:0f:cd:db:5a:07:d4:52:f5: 5a:ab:c0:1a:5b:69:15:a4:4d:47:e9:4b:7d:e6:d5: 24:ee:0c:ce:95:63:23:8f:5a:8a:94:2b:cc:06:ac: 49:2e:03:c8:f1:f1:ec:45:c2:54:2b:03:7e:7f:00: 21:46:f5:a9:0d:b5:0f:01:04:0e:d1:64:5f:6b:52: ef:70:36:fd:3d:22:cf:e1:f8:a7:d4:8c:fc:90:12: 21:09:81:ba:d9:9d:67:87:34:97:19:72:ca:7a:2a: 6a:f1:f0:d0:d6:29:42:4d:7d:6c:90:e2:38:5f:4a: 58:52:c8:6a:f3:7f:04:d9:4d:1e:ee:d9:21:37:00: 96:99:1b:f5:ea:d8:a5:df:b4:f4:ba:a0:7d:80:fe: ee:80:9d:14:d1:63:d0:95:e5:a0:48:aa:b5:e6:60: c0:6d:ee:ec:cf:be:3f:4d:ff:2e:12:ee:a1:1e:fc: fd:99:c0:cb:a3:5c:72:37:c5:8f:9d:1a:5a:ec:86: c9:06:05:7b:77:bb:e6:2f:94:51:16:b9:c7:c7:a6: eb:a5:59:d9:e4:dc:66:96:79:56:3c:d5:9e:e9:92: 70:54:13:96:54:55:c5:7e:d0:cd:75:df:ec:4e:e5: fc:51:12:9a:d2:1b:4a:7a:3e:4a:84:ce:64:75:a7: d3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:9E:7B:6F:81:3F:60:CA:FE:C3:F1:E7:3D:B0:2E:AF:89:F5:DD:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/b393d2e1-dfc7-3955-ba83-e6c3e0b6b75a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.crl X509v3 Authority Key Identifier: keyid:D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer sbgp-ipAddrBlock: critical IPv4: 198.137.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:06:40:8b:79:b4:ac:b8:10:b8:55:33:27:e1:20:7a:a5:c2: 45:ac:4c:14:60:84:c4:3f:12:db:14:3c:a1:10:8c:73:7a:a3: ad:79:fb:43:9d:71:b6:8e:6c:ce:15:fb:b6:78:0b:ec:fe:e6: 1c:e3:e0:ce:dd:07:c2:e8:eb:87:4d:46:00:0b:e0:6e:c1:ef: 91:46:aa:e8:5a:f1:ab:0d:4d:8c:5a:6c:7c:5e:ba:4c:cf:46: bb:3f:97:4d:5c:52:e8:6f:5e:c1:b7:f9:ba:d8:d8:37:48:ea: ee:46:c1:51:7e:2d:19:a6:2a:0d:f3:30:12:ef:cc:31:28:01: 9d:2e:5a:e2:ba:7c:78:9c:bd:54:cc:4f:cd:e4:d2:76:d7:d0: a0:26:3d:64:b7:76:7d:94:e1:98:6e:45:e7:0e:80:60:dc:9a: e9:73:cd:b5:74:6f:72:63:95:b8:e0:ee:29:84:1a:a5:7e:19: 92:f6:47:85:84:5a:09:fa:b5:4b:2b:f7:1d:74:fb:39:fc:05: ee:45:fa:c2:32:49:7d:73:49:51:94:9a:5d:19:65:88:fe:b6: 85:4c:d4:03:c4:fe:de:35:ec:13:b7:4c:3d:46:64:e9:18:ab: 13:e8:36:56:67:2c:71:b3:fe:98:ee:2a:1a:2d:b5:43:4f:c6: b1:8e:48:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSkDvEf4wL1G+TkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZhYzk2MmEtMTY0Ny00NTcxLTk5ZTUtYTIzZGI1ZmQ3 OWQ3MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk ZTE1MzBhYTAtMzk3OS00ODhhLWEzODctYTkzOTViODY0N2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1Tbwy3SD83bWgfUUvVaq8AaW2kVpE1H6Ut9 5tUk7gzOlWMjj1qKlCvMBqxJLgPI8fHsRcJUKwN+fwAhRvWpDbUPAQQO0WRfa1Lv cDb9PSLP4fin1Iz8kBIhCYG62Z1nhzSXGXLKeipq8fDQ1ilCTX1skOI4X0pYUshq 838E2U0e7tkhNwCWmRv16til37T0uqB9gP7ugJ0U0WPQleWgSKq15mDAbe7sz74/ Tf8uEu6hHvz9mcDLo1xyN8WPnRpa7IbJBgV7d7vmL5RRFrnHx6brpVnZ5NxmlnlW PNWe6ZJwVBOWVFXFftDNdd/sTuX8URKa0htKej5KhM5kdafTyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPuee2+BP2DK/sPx5z2wLq+J9d0TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hZmFj OTYyYS0xNjQ3LTQ1NzEtOTllNS1hMjNkYjVmZDc5ZDcvYjM5M2QyZTEtZGZjNy0z OTU1LWJhODMtZTZjM2UwYjZiNzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWZhYzk2MmEtMTY0Ny00NTcxLTk5 ZTUtYTIzZGI1ZmQ3OWQ3L2FmYWM5NjJhLTE2NDctNDU3MS05OWU1LWEyM2RiNWZk NzlkNy5jcmwwHwYDVR0jBBgwFoAU18c9WZSKdZn1WEgubbPNfLkb8i8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hZmFjOTYyYS0xNjQ3LTQ1NzEtOTllNS1hMjNk YjVmZDc5ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxonwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALkGQIt5tKy4ELhVMyfhIHqlwkWsTBRghMQ/EtsUPKEQjHN6o615+0Od cbaObM4V+7Z4C+z+5hzj4M7dB8Lo64dNRgAL4G7B75FGquha8asNTYxabHxeukzP Rrs/l01cUuhvXsG3+brY2DdI6u5GwVF+LRmmKg3zMBLvzDEoAZ0uWuK6fHicvVTM T83k0nbX0KAmPWS3dn2U4ZhuRecOgGDcmulzzbV0b3Jjlbjg7imEGqV+GZL2R4WE Wgn6tUsr9x10+zn8Be5F+sIySX1zSVGUml0ZZYj+toVM1APE/t417BO3TD1GZOkY qxPoNlZnLHGz/pjuKhottUNPxrGOSDI= -----END CERTIFICATE-----Generated at Thu Mar 26 23:17:17 2026 by rpki-client