$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a9d396f3-b384-32f0-a298-d58e2d50d0a4.roa File: a9d396f3-b384-32f0-a298-d58e2d50d0a4.roa (raw, json) Hash identifier: 9nDv+hqMoLMcOwG5nSvz//2gkJxzmFIzYoUNuKvzNSQ= Subject key identifier: 5D:F5:96:97:A8:23:53:F2:0B:72:51:EA:E9:32:6F:E3:49:71:97:A6 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E02780515D0495CE26BA20 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a9d396f3-b384-32f0-a298-d58e2d50d0a4.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 198.45.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:27:80:51:5d:04:95:ce:26:ba:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=699f3166-1f38-41d9-85c9-1af815bbf28e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cb:cf:d8:2d:7c:de:34:50:5e:9c:44:0a:1c: ac:68:49:d3:11:a7:6d:0f:ea:01:0c:6c:43:a5:50: 13:be:8d:eb:71:c9:9a:43:50:18:c9:12:1d:ca:b0: f3:c5:4a:4f:e7:bc:76:66:1d:95:dc:9d:77:cc:ed: 89:81:e6:61:c5:1e:bb:2d:a4:15:4f:ab:36:c7:a3: c2:c5:0f:6b:e8:26:54:f3:64:cb:99:17:a1:0c:63: 69:e2:6f:6a:86:4c:c1:d2:ab:2a:f2:0a:b8:80:c0: c7:22:ce:eb:d2:49:06:1a:44:4f:1d:cb:cc:5d:af: a0:2b:e9:dc:42:54:70:79:40:d4:66:db:8b:8c:6e: b8:fc:e8:c1:86:c8:82:a6:33:aa:cb:8d:2e:4e:ec: e8:43:3c:46:6e:21:70:f3:b1:49:2b:1c:88:4a:fd: 16:cc:e7:46:99:3f:ce:b2:fb:cf:5f:8a:cc:45:13: 4e:c5:4b:39:03:7a:1b:e6:91:97:96:56:75:12:30: dc:62:82:ca:0a:91:20:47:be:a0:70:fa:7a:4a:05: e7:95:17:b7:7b:0f:10:4e:d1:55:95:ac:03:85:43: 24:a8:d7:76:04:36:ba:ad:ac:5f:94:17:96:2f:f4: 20:01:2b:5b:87:90:0b:d0:e9:48:3e:0c:97:d9:8d: a1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:F5:96:97:A8:23:53:F2:0B:72:51:EA:E9:32:6F:E3:49:71:97:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a9d396f3-b384-32f0-a298-d58e2d50d0a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d8:ec:7d:37:80:53:04:c0:71:92:45:0f:e0:6c:47:8d:97:6b: fa:07:b6:a3:93:0b:63:b6:12:31:f8:fd:63:8d:e1:07:8e:e5: 62:be:ab:1f:ae:30:2a:a4:f0:17:34:d3:16:07:75:fe:42:1e: de:b5:27:f4:ec:25:8a:4e:5d:36:51:45:de:51:a9:12:76:18: 2d:80:31:94:19:0f:aa:b1:c3:f9:9a:84:0b:3c:7a:1a:05:e3: fc:78:e4:d3:1a:97:16:09:ca:dd:7b:2e:f6:ae:2a:c0:1c:4f: d5:db:45:ec:2b:ec:59:cb:0e:16:b9:a6:27:1e:29:16:ea:22: 79:a3:98:fa:a5:89:a8:fc:08:39:ee:e2:43:07:1f:b5:ba:c5: 9d:91:61:14:78:cb:78:22:4b:90:8f:92:b5:1d:90:45:47:f3: 18:95:e7:d7:4b:8f:71:f0:44:1c:c7:c3:23:62:09:c7:d2:c3: f9:ec:c9:20:f7:55:3d:08:b8:3f:07:22:4f:1c:a5:b4:28:ad: 98:ae:eb:5c:cb:22:d0:3f:bd:e7:0d:c8:6c:56:3d:5f:ea:07: 51:74:91:3d:88:8b:07:8a:06:86:a6:48:9d:4f:51:ee:ce:7f: 25:1a:b0:9d:44:a7:db:5d:22:87:db:f3:2e:24:b7:a9:2f:07: bb:db:94:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4CeAUV0Elc4muiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk Njk5ZjMxNjYtMWYzOC00MWQ5LTg1YzktMWFmODE1YmJmMjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cvP2C183jRQXpxEChysaEnTEadtD+oBDGxD pVATvo3rccmaQ1AYyRIdyrDzxUpP57x2Zh2V3J13zO2JgeZhxR67LaQVT6s2x6PC xQ9r6CZU82TLmRehDGNp4m9qhkzB0qsq8gq4gMDHIs7r0kkGGkRPHcvMXa+gK+nc QlRweUDUZtuLjG64/OjBhsiCpjOqy40uTuzoQzxGbiFw87FJKxyISv0WzOdGmT/O svvPX4rMRRNOxUs5A3ob5pGXllZ1EjDcYoLKCpEgR76gcPp6SgXnlRe3ew8QTtFV lawDhUMkqNd2BDa6raxflBeWL/QgAStbh5AL0OlIPgyX2Y2hfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF31lpeoI1PyC3JR6ukyb+NJcZemMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTlkMzk2ZjMtYjM4NC0z MmYwLWEyOTgtZDU4ZTJkNTBkMGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi3eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANjsfTeAUwTAcZJFD+BsR42Xa/oHtqOTC2O2EjH4/WON4QeO5WK+qx+u MCqk8Bc00xYHdf5CHt61J/TsJYpOXTZRRd5RqRJ2GC2AMZQZD6qxw/mahAs8ehoF 4/x45NMalxYJyt17LvauKsAcT9XbRewr7FnLDha5piceKRbqInmjmPqliaj8CDnu 4kMHH7W6xZ2RYRR4y3giS5CPkrUdkEVH8xiV59dLj3HwRBzHwyNiCcfSw/nsySD3 VT0IuD8HIk8cpbQorZiu61zLItA/vecNyGxWPV/qB1F0kT2IiweKBoamSJ1PUe7O fyUasJ1Ep9tdIofb8y4kt6kvB7vblLs= -----END CERTIFICATE-----Generated at Thu Mar 26 16:07:43 2026 by rpki-client