$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3312867b-6413-3ea7-b26e-2ce4da754624.roa File: 3312867b-6413-3ea7-b26e-2ce4da754624.roa (raw, json) Hash identifier: WPOkS+pYJuUruCHd98wX40K6oTvpXckGmoTAkmzK+SQ= Subject key identifier: 14:38:7F:CD:43:DE:95:E3:CE:01:1B:E2:5C:58:AD:D1:AC:89:8C:9A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0DADD65F3066B80CAB580 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3312867b-6413-3ea7-b26e-2ce4da754624.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 198.45.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:da:dd:65:f3:06:6b:80:ca:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=e3d1d620-1090-40a3-815c-5262f260e0b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:65:9f:a8:70:45:56:eb:f0:a8:2a:d0:57:15: cc:14:9d:36:d5:0e:07:64:3c:6d:8d:9c:d6:c7:d4: 00:28:8d:75:7e:13:1e:1e:c3:36:98:1f:f4:28:a7: b6:27:c8:e3:49:7c:85:45:e2:99:ce:1b:19:7b:ca: 06:95:60:0b:ed:f2:f1:63:c5:42:fe:2f:7f:1e:4e: 19:c3:13:02:e1:ce:1b:1f:75:c3:3a:8a:0d:bd:3b: 50:e4:af:57:af:54:1b:fa:ea:e2:a9:2b:15:78:f3: 96:38:85:fa:ea:ba:bb:9b:06:8e:32:ca:5d:4f:5b: 15:13:4e:77:74:81:16:64:d0:41:9f:65:9b:36:79: 58:d2:f0:be:14:71:83:46:ea:0f:b4:b7:ec:ef:b2: 12:f2:a7:67:f9:ef:df:c5:6f:3b:30:ef:15:c2:02: 28:96:c9:84:a1:07:18:b7:b7:ac:71:d5:9f:2a:e0: 73:b1:c7:d7:56:21:98:51:25:74:ca:ad:d0:64:93: 75:48:61:a0:08:fe:a8:d6:b9:34:9f:36:a1:df:56: c4:f4:ba:cd:f1:82:1b:a4:c3:36:f6:5e:f1:01:fc: 93:f0:80:88:73:23:9a:82:18:4b:ca:1c:38:cf:48: 97:b1:b6:b9:af:42:fe:a9:c9:2d:cb:a4:d8:b7:09: a3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:38:7F:CD:43:DE:95:E3:CE:01:1B:E2:5C:58:AD:D1:AC:89:8C:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3312867b-6413-3ea7-b26e-2ce4da754624.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:3e:9f:cd:b7:5b:d3:66:58:52:e6:da:23:c3:6f:dc:e4:66: 7a:e9:4e:76:2b:3c:3b:ab:7a:07:59:54:18:4a:44:82:8c:8e: 3a:98:3a:6b:17:1a:61:64:0d:8d:28:fe:98:fa:34:27:c0:5c: 18:9e:1d:7e:70:e8:13:6f:ad:cc:b4:db:65:81:b7:85:46:01: 6d:e0:81:6b:68:ea:07:a1:d7:64:b2:1d:f3:34:18:89:ac:ea: 3d:44:b6:f8:0f:cd:dc:17:18:1a:91:78:2b:a6:cd:43:4a:61: b4:a6:eb:47:5a:5c:2d:45:34:82:d6:70:14:c5:0e:3d:ff:5d: e8:ec:31:2d:db:f4:96:84:14:1f:7a:8a:66:16:56:42:b8:eb: 8b:6c:ee:be:23:52:4e:92:ca:62:c8:64:99:51:d9:0a:83:40: 6b:18:e9:0d:5d:ff:16:b2:e1:f6:e8:f0:6d:f4:3c:8a:e1:9a: d8:70:e1:e8:d1:42:da:6f:b5:6c:c3:8f:5e:18:99:bd:4f:bb: 1c:80:57:69:c1:f7:93:74:56:51:92:ca:ce:37:f9:1f:63:ac: af:3e:96:5d:4c:f3:20:3b:78:f6:f7:2d:89:5c:a6:00:16:4b: c5:7a:5d:51:79:fc:ca:dd:84:30:5f:03:b3:33:10:96:0f:73: 49:eb:d2:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4NrdZfMGa4DKtYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZTNkMWQ2MjAtMTA5MC00MGEzLTgxNWMtNTI2MmYyNjBlMGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGWfqHBFVuvwqCrQVxXMFJ021Q4HZDxtjZzW x9QAKI11fhMeHsM2mB/0KKe2J8jjSXyFReKZzhsZe8oGlWAL7fLxY8VC/i9/Hk4Z wxMC4c4bH3XDOooNvTtQ5K9Xr1Qb+uriqSsVePOWOIX66rq7mwaOMspdT1sVE053 dIEWZNBBn2WbNnlY0vC+FHGDRuoPtLfs77IS8qdn+e/fxW87MO8VwgIolsmEoQcY t7escdWfKuBzscfXViGYUSV0yq3QZJN1SGGgCP6o1rk0nzah31bE9LrN8YIbpMM2 9l7xAfyT8ICIcyOaghhLyhw4z0iXsba5r0L+qckty6TYtwmjiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQ4f81D3pXjzgEb4lxYrdGsiYyaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzMxMjg2N2ItNjQxMy0z ZWE3LWIyNmUtMmNlNGRhNzU0NjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi2CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACs+n823W9NmWFLm2iPDb9zkZnrpTnYrPDuregdZVBhKRIKMjjqYOmsX GmFkDY0o/pj6NCfAXBieHX5w6BNvrcy022WBt4VGAW3ggWto6geh12SyHfM0GIms 6j1EtvgPzdwXGBqReCumzUNKYbSm60daXC1FNILWcBTFDj3/XejsMS3b9JaEFB96 imYWVkK464ts7r4jUk6SymLIZJlR2QqDQGsY6Q1d/xay4fbo8G30PIrhmthw4ejR QtpvtWzDj14Ymb1PuxyAV2nB95N0VlGSys43+R9jrK8+ll1M8yA7ePb3LYlcpgAW S8V6XVF5/MrdhDBfA7MzEJYPc0nr0hI= -----END CERTIFICATE-----Generated at Thu Mar 26 18:29:20 2026 by rpki-client