$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/12b1777a-3c43-340e-a013-1b954412e57a.roa File: 12b1777a-3c43-340e-a013-1b954412e57a.roa (raw, json) Hash identifier: ROHFdPvrJ1ywirYy8G6zSA2vJq2Q7tJ0SLO3RDu5XZ4= Subject key identifier: 34:48:EC:6F:C5:E3:34:9E:FF:D2:2D:DE:5E:56:39:0D:F0:23:5D:F2 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E02844092D77C1F0CA9B80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/12b1777a-3c43-340e-a013-1b954412e57a.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 198.45.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:28:44:09:2d:77:c1:f0:ca:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=d9dc15a1-a423-4d4d-86b2-6e28c58c1a71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f6:3f:c1:5e:7e:da:7d:55:45:57:8d:fd:52: 00:1c:4c:0c:9a:77:3f:bb:35:4b:bf:6e:d1:19:a2: 8e:d5:a2:3c:26:d9:62:3a:c3:87:67:66:bc:ad:7d: d2:a4:ae:46:80:42:38:ec:ea:c2:57:a6:93:e8:7f: 90:f3:41:84:6b:4e:79:9d:ad:12:cb:52:6a:4c:02: f6:0c:31:8f:1f:14:6c:a9:c4:4e:aa:8e:47:14:58: e6:e7:62:be:df:b5:24:89:1f:be:a9:cd:2e:10:40: b0:39:17:b4:ee:92:74:79:dc:8d:c5:b5:c0:f7:4d: 6b:7e:e8:9b:27:42:bf:6c:38:95:fb:13:f0:1b:4e: d4:2e:27:97:a5:24:4b:73:7b:e8:20:e0:05:aa:9b: 58:b6:62:f5:73:8e:e9:59:7a:08:28:7b:59:fe:6d: b4:f6:fd:8a:e3:f8:09:35:8a:a4:0a:ed:85:e9:b4: 9a:2a:2f:fd:1a:47:e6:4f:ab:aa:66:fd:4f:90:6d: 27:9e:26:a9:a7:ca:b8:c5:86:3d:d8:f6:a6:3f:9e: 92:90:1c:ad:61:47:c8:c6:6c:d5:f3:3c:19:e4:a0: fd:e3:bf:f5:aa:85:cb:c7:6e:db:dd:b4:66:e9:86: 7e:9c:7b:8d:f3:73:39:94:b1:09:83:13:40:ce:42: c5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:48:EC:6F:C5:E3:34:9E:FF:D2:2D:DE:5E:56:39:0D:F0:23:5D:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/12b1777a-3c43-340e-a013-1b954412e57a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:0c:4b:12:ba:d1:a6:54:6b:8e:49:66:d4:c8:40:6f:6b:c9: 00:c5:54:15:88:08:22:e6:ae:8e:98:6c:d6:c4:45:ad:1b:80: 85:f0:ca:de:c7:14:cf:82:43:76:d8:4f:7f:24:f3:dd:b4:9f: bc:4d:74:95:ca:8e:9f:5b:08:34:0f:4e:a1:f0:64:9f:51:40: e6:bf:a6:c2:6a:5c:97:a7:9e:c3:9c:8d:35:df:e8:95:16:d9: 78:1b:1c:06:38:21:f0:1f:82:42:d0:fd:68:fb:70:67:5e:1d: 4e:32:c5:e4:cd:5a:38:60:99:53:b2:ef:dd:03:51:64:99:c0: f8:24:6d:5c:77:98:94:0f:a5:99:36:5a:da:9f:9b:e3:56:67: 8b:ff:9d:4a:60:f8:23:3e:c1:10:9c:ce:39:d6:71:8d:50:2b: 98:aa:29:a0:a3:9c:03:f8:0d:8d:b1:33:94:fe:80:e8:ff:ee: 5c:fb:54:40:45:8a:bd:c3:4c:94:78:5e:75:2b:b8:ac:e4:a3: 1f:8c:04:d6:a5:9a:20:51:91:42:d5:01:31:f7:31:87:5e:64: a8:0f:a2:a7:87:02:9f:6b:72:d1:87:39:6e:c9:33:b0:86:5c: 5f:58:6b:ac:9f:f4:e8:a4:43:9a:e5:c2:cd:72:11:3d:62:f6: 9a:03:d1:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4ChECS13wfDKm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZDlkYzE1YTEtYTQyMy00ZDRkLTg2YjItNmUyOGM1OGMxYTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvY/wV5+2n1VRVeN/VIAHEwMmnc/uzVLv27R GaKO1aI8JtliOsOHZ2a8rX3SpK5GgEI47OrCV6aT6H+Q80GEa055na0Sy1JqTAL2 DDGPHxRsqcROqo5HFFjm52K+37UkiR++qc0uEECwORe07pJ0edyNxbXA901rfuib J0K/bDiV+xPwG07ULieXpSRLc3voIOAFqptYtmL1c47pWXoIKHtZ/m209v2K4/gJ NYqkCu2F6bSaKi/9GkfmT6uqZv1PkG0nniapp8q4xYY92PamP56SkBytYUfIxmzV 8zwZ5KD947/1qoXLx27b3bRm6YZ+nHuN83M5lLEJgxNAzkLFYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDRI7G/F4zSe/9It3l5WOQ3wI13yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTJiMTc3N2EtM2M0My0z NDBlLWEwMTMtMWI5NTQ0MTJlNTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi31MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKgMSxK60aZUa45JZtTIQG9ryQDFVBWICCLmro6YbNbERa0bgIXwyt7H FM+CQ3bYT38k8920n7xNdJXKjp9bCDQPTqHwZJ9RQOa/psJqXJennsOcjTXf6JUW 2XgbHAY4IfAfgkLQ/Wj7cGdeHU4yxeTNWjhgmVOy790DUWSZwPgkbVx3mJQPpZk2 Wtqfm+NWZ4v/nUpg+CM+wRCczjnWcY1QK5iqKaCjnAP4DY2xM5T+gOj/7lz7VEBF ir3DTJR4XnUruKzkox+MBNalmiBRkULVATH3MYdeZKgPoqeHAp9rctGHOW7JM7CG XF9Ya6yf9OikQ5rlws1yET1i9poD0b0= -----END CERTIFICATE-----Generated at Thu Mar 26 17:11:38 2026 by rpki-client