$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4ae04e02-eac6-3457-924c-8fb4b09a8856.roa File: 4ae04e02-eac6-3457-924c-8fb4b09a8856.roa (raw, json) Hash identifier: BJKQHheq3YZxaxTxbjznt0cri4NhgQFns7ty/RuVzaI= Subject key identifier: 92:41:D9:84:E7:54:AD:54:39:95:35:D5:3D:1F:A6:EE:6A:A2:20:5C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E027A050287E8B0D3AAD40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4ae04e02-eac6-3457-924c-8fb4b09a8856.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 198.45.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:27:a0:50:28:7e:8b:0d:3a:ad:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=4053d73d-c554-453f-903f-1a9b9a2b9520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:7a:2b:dd:8b:d3:18:b1:59:95:b9:61:64:aa: f9:d5:0d:d8:95:b1:3d:bf:e5:dd:7f:21:3c:7d:8f: ad:10:0a:fc:c5:e1:a1:1c:36:ef:d4:3b:b8:22:d5: 68:ca:99:41:c9:8a:37:23:21:98:8d:4a:e3:28:0e: 86:e1:d3:74:a9:f7:53:84:01:3d:ff:8b:00:dd:96: f0:2d:d8:9c:9d:ed:c0:4b:bf:7d:b2:40:9e:9d:c9: 03:54:51:f9:aa:24:f3:b6:9f:23:b0:a7:a9:90:65: 94:7e:47:18:e2:f8:40:0e:4c:5a:cd:73:4c:9b:ab: ef:cd:a9:10:d5:b3:92:23:6d:8d:d5:00:99:81:a7: e8:f0:f9:a9:fa:fa:7d:d6:65:07:9a:23:7a:68:34: 5c:82:f9:cd:68:10:9d:ab:d3:64:1a:b8:0b:5c:86: 39:c5:4f:94:b6:65:cd:57:90:65:a6:d0:39:80:06: 21:0a:58:5c:d6:ef:76:c1:80:46:74:7e:3e:c9:d6: 17:53:05:4d:f3:f7:9e:0f:db:b6:f9:fa:83:27:f1: 6b:25:89:1f:70:a9:2c:ca:1e:b2:b9:f3:84:fa:0b: b9:bb:2e:51:a5:76:97:84:2f:e2:04:0f:3f:c8:aa: ce:d1:31:bc:56:58:0e:1a:f6:d1:d9:a4:38:2d:0d: e3:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:41:D9:84:E7:54:AD:54:39:95:35:D5:3D:1F:A6:EE:6A:A2:20:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4ae04e02-eac6-3457-924c-8fb4b09a8856.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:f5:b9:02:ff:12:06:0c:20:86:81:79:39:f7:1a:ea:c6:92: 60:12:87:46:57:df:8b:cb:2c:54:11:e0:45:a1:f5:ec:7f:15: 0c:07:42:82:21:98:78:7f:82:1d:6c:6c:d2:9a:79:47:37:70: 0a:a1:31:dc:62:c6:2c:e0:11:fd:07:15:33:34:bd:f4:0a:93: da:c9:96:17:98:63:a4:4c:d7:35:fe:3d:70:53:1e:b4:ae:d9: 3f:35:52:3b:8e:b0:fc:87:7e:8a:c1:aa:db:ec:f3:95:70:b3: 8d:74:67:42:84:e4:50:db:4e:6f:ec:16:81:ff:a4:11:ed:07: 65:64:a2:16:83:eb:ba:cb:91:f2:82:a6:64:54:91:1d:98:0a: 6c:72:eb:90:f5:9f:52:d8:46:19:ac:16:ef:d3:ef:fe:5b:14: e8:eb:96:9d:4f:0f:87:b0:3b:d3:d0:a5:a5:a6:96:71:f6:f9: 07:7c:62:28:ae:bd:6d:61:0c:6b:88:da:84:86:5c:c0:26:c0: 36:7b:9f:d2:c1:c1:48:f7:64:80:a9:e7:43:ef:21:50:65:d9: ce:e4:9a:16:dc:88:14:5d:25:71:a3:b9:28:23:a9:0c:76:13: a1:b4:1b:9a:47:e8:c1:13:34:18:7a:75:31:04:8e:98:f3:61: 26:fe:09:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4CegUCh+iw06rUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NDA1M2Q3M2QtYzU1NC00NTNmLTkwM2YtMWE5YjlhMmI5NTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33or3YvTGLFZlblhZKr51Q3YlbE9v+XdfyE8 fY+tEAr8xeGhHDbv1Du4ItVoyplByYo3IyGYjUrjKA6G4dN0qfdThAE9/4sA3Zbw Ldicne3AS799skCenckDVFH5qiTztp8jsKepkGWUfkcY4vhADkxazXNMm6vvzakQ 1bOSI22N1QCZgafo8Pmp+vp91mUHmiN6aDRcgvnNaBCdq9NkGrgLXIY5xU+UtmXN V5BlptA5gAYhClhc1u92wYBGdH4+ydYXUwVN8/eeD9u2+fqDJ/FrJYkfcKksyh6y ufOE+gu5uy5RpXaXhC/iBA8/yKrO0TG8VlgOGvbR2aQ4LQ3jvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJB2YTnVK1UOZU11T0fpu5qoiBcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNGFlMDRlMDItZWFjNi0z NDU3LTkyNGMtOGZiNGIwOWE4ODU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi3kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAX1uQL/EgYMIIaBeTn3GurGkmASh0ZX34vLLFQR4EWh9ex/FQwHQoIh mHh/gh1sbNKaeUc3cAqhMdxixizgEf0HFTM0vfQKk9rJlheYY6RM1zX+PXBTHrSu 2T81UjuOsPyHforBqtvs85Vws410Z0KE5FDbTm/sFoH/pBHtB2VkohaD67rLkfKC pmRUkR2YCmxy65D1n1LYRhmsFu/T7/5bFOjrlp1PD4ewO9PQpaWmlnH2+Qd8Yiiu vW1hDGuI2oSGXMAmwDZ7n9LBwUj3ZICp50PvIVBl2c7kmhbciBRdJXGjuSgjqQx2 E6G0G5pH6METNBh6dTEEjpjzYSb+CWI= -----END CERTIFICATE-----Generated at Thu Mar 26 07:54:42 2026 by rpki-client