$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3a3de3d0-c89d-355a-bd25-8c7b773cd169.roa File: 3a3de3d0-c89d-355a-bd25-8c7b773cd169.roa (raw, json) Hash identifier: yfidIrq5L3BrkfQK506+/4dOY/TUFgpk7+iBMpxWhhc= Subject key identifier: D1:0E:6A:26:F5:FF:CA:BD:91:46:CD:C0:5F:BA:E7:48:E5:03:32:0E Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D3368AE09271559A1D21C4CC0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3a3de3d0-c89d-355a-bd25-8c7b773cd169.roa Signing time: Tue 17 Mar 2026 17:58:43 +0000 ROA not before: Tue 17 Mar 2026 17:58:43 +0000 ROA not after: Mon 15 Jun 2026 17:58:43 +0000 asID: 22616 IP address blocks: 198.14.102.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:33:68:ae:09:27:15:59:a1:d2:1c:4c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Mar 17 17:58:43 2026 GMT Not After : Jun 15 17:58:43 2026 GMT Subject: CN=3a1a36dd-f4cb-44c5-8cf6-cb09fd58006e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:47:9c:07:56:d8:7a:4e:8b:3f:4e:8a:17:44: b6:6c:8b:f3:39:69:3c:35:8f:43:43:0f:cd:17:6e: 6a:ff:eb:56:95:42:76:cb:ab:ef:10:89:7d:ac:3e: bf:76:d9:83:87:90:81:a4:01:99:1f:2f:c8:2a:7e: 30:ab:ff:3f:7b:3e:33:d5:6b:d7:e5:a6:fa:be:fb: 33:75:f9:f1:e1:be:ec:dd:e3:f9:9a:73:78:6c:8c: 0c:4d:20:49:b8:ec:33:9c:75:37:ca:a3:c5:d6:f9: 6d:e9:28:c6:30:5f:66:f2:ed:47:91:26:aa:13:10: b1:87:30:6c:00:0f:c9:74:56:c8:58:15:68:71:ca: cc:4c:a7:4a:a2:f5:b9:71:ad:c3:54:8a:a8:f0:26: 2f:19:a2:2b:8f:f4:7e:9f:66:fd:17:96:9b:a8:98: 9b:8d:71:47:8b:b8:9a:19:70:04:41:db:4a:f7:e3: 5a:44:c2:81:58:45:76:45:08:36:70:bf:da:07:91: d4:85:31:4f:fc:bf:b4:72:99:a3:4f:c0:a7:9e:42: ad:09:1b:e5:32:38:74:81:6d:fd:12:66:14:89:ac: 51:85:b8:f2:7f:2f:10:88:3a:36:fb:97:d4:38:cd: a7:4b:3e:b6:05:18:6a:4f:42:4a:51:61:d1:67:02: b4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:0E:6A:26:F5:FF:CA:BD:91:46:CD:C0:5F:BA:E7:48:E5:03:32:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3a3de3d0-c89d-355a-bd25-8c7b773cd169.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 198.14.102.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:85:9b:9c:d3:be:72:aa:e4:03:e2:ab:83:e9:54:71:de:e5: c7:3b:e0:9a:12:59:da:35:e3:7d:ff:68:ef:0a:ff:79:03:d2: e2:15:a2:32:8c:34:27:79:5f:69:20:98:03:47:87:1c:64:49: ae:58:09:9c:9c:b9:e6:54:71:75:66:f8:cb:a4:48:fa:2e:6a: 68:c8:ad:aa:11:ca:50:ef:69:85:66:c0:4e:a6:0c:c5:43:61: f8:1f:f2:eb:ce:b6:0f:c9:3d:5d:8f:19:81:f5:07:19:b8:d2: 9f:10:e1:70:0c:a7:e7:39:fc:b4:75:34:ab:b4:82:d5:ef:2f: 05:f4:08:54:41:a4:ef:a8:19:af:62:a8:df:11:f1:ef:fd:80: cd:2c:87:9c:ff:91:46:3e:c3:c1:f3:7b:28:d3:4f:44:e1:a8: 79:be:dd:fb:eb:f7:89:c7:b8:0e:28:b4:1e:e7:43:58:36:36: cb:c6:eb:01:33:77:3b:a0:f2:66:97:13:9c:81:2e:8c:c3:74: 8e:de:eb:d8:de:d3:4f:e9:fe:36:65:7a:c0:89:33:6a:c3:c7: 2b:2e:72:c6:9d:ec:da:db:1b:85:f6:f3:1e:18:84:61:fa:98: cc:3f:50:42:4b:90:a3:cd:b7:18:9d:07:88:60:c9:1d:8c:44: b9:4b:70:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0zaK4JJxVZodIcTMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDMxNzE3NTg0M1oXDTI2MDYxNTE3NTg0M1owLzEtMCsGA1UEAxMk M2ExYTM2ZGQtZjRjYi00NGM1LThjZjYtY2IwOWZkNTgwMDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EecB1bYek6LP06KF0S2bIvzOWk8NY9DQw/N F25q/+tWlUJ2y6vvEIl9rD6/dtmDh5CBpAGZHy/IKn4wq/8/ez4z1WvX5ab6vvsz dfnx4b7s3eP5mnN4bIwMTSBJuOwznHU3yqPF1vlt6SjGMF9m8u1HkSaqExCxhzBs AA/JdFbIWBVoccrMTKdKovW5ca3DVIqo8CYvGaIrj/R+n2b9F5abqJibjXFHi7ia GXAEQdtK9+NaRMKBWEV2RQg2cL/aB5HUhTFP/L+0cpmjT8CnnkKtCRvlMjh0gW39 EmYUiaxRhbjyfy8QiDo2+5fUOM2nSz62BRhqT0JKUWHRZwK0/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNEOaib1/8q9kUbNwF+650jlAzIOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvM2EzZGUzZDAtYzg5ZC0z NTVhLWJkMjUtOGM3Yjc3M2NkMTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxg5mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK+Fm5zTvnKq5APiq4PpVHHe5cc74JoSWdo1433/aO8K/3kD0uIVojKM NCd5X2kgmANHhxxkSa5YCZycueZUcXVm+MukSPouamjIraoRylDvaYVmwE6mDMVD Yfgf8uvOtg/JPV2PGYH1Bxm40p8Q4XAMp+c5/LR1NKu0gtXvLwX0CFRBpO+oGa9i qN8R8e/9gM0sh5z/kUY+w8HzeyjTT0ThqHm+3fvr94nHuA4otB7nQ1g2NsvG6wEz dzug8maXE5yBLozDdI7e69je00/p/jZlesCJM2rDxysucsad7NrbG4X28x4YhGH6 mMw/UEJLkKPNtxidB4hgyR2MRLlLcDE= -----END CERTIFICATE-----Generated at Thu Mar 26 14:01:35 2026 by rpki-client