$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa3d6f72-a298-34f2-9aa7-98d609570cbb.roa File: aa3d6f72-a298-34f2-9aa7-98d609570cbb.roa (raw, json) Hash identifier: DAGoOelD63j2MZhb0PAWdQdgbL/9USvP5yidt6TXPt8= Subject key identifier: 57:4A:2A:68:DA:39:F6:3A:43:B4:A9:EA:BF:C3:92:9A:15:EE:1D:14 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E026DC99FF7C13BD9D72C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa3d6f72-a298-34f2-9aa7-98d609570cbb.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 198.45.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:26:dc:99:ff:7c:13:bd:9d:72:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=ea568fb3-3812-4562-9ea2-82fd6c034af4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1e:2a:8e:13:c1:43:1d:2b:fe:4f:f1:d2:da: d0:14:bb:ae:7e:5b:12:5e:c9:1c:5d:43:06:d6:d8: a8:18:e7:5a:ed:d9:fe:f0:3b:59:44:05:6e:28:94: a4:e1:cd:7c:89:4d:ef:7c:f8:94:74:56:94:77:bb: f4:de:7a:3f:07:ca:00:55:64:6b:72:f2:04:c4:16: c8:cf:21:7e:ba:f9:7c:9f:e9:0b:73:e7:dc:d2:60: e6:f4:e9:82:47:5a:3c:1d:78:67:11:cd:f7:c6:b2: a3:e5:13:08:86:18:75:08:42:33:29:a4:c6:f9:0f: f5:11:af:2c:90:33:ad:13:c4:79:a6:3a:20:7d:28: b5:cd:bf:cd:28:8e:bd:d4:55:2e:e0:16:01:c4:7c: 22:51:80:d9:35:79:cc:89:68:0e:1e:d9:ed:54:f4: 7b:07:1e:1e:b5:87:be:70:e3:76:d7:26:bc:5c:d4: 4b:43:f6:11:40:55:33:93:42:0e:e9:07:60:af:db: 2d:c5:e1:dc:b9:ca:cd:37:48:89:a2:29:90:bc:f2: c3:51:23:bb:5d:da:07:2a:61:15:4b:99:e8:2f:0f: 78:a8:73:b6:b4:c3:b8:50:52:05:4e:f6:ed:73:41: 68:09:b4:f9:ef:c9:ff:86:3a:bf:f1:0c:8d:9a:5c: 70:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:4A:2A:68:DA:39:F6:3A:43:B4:A9:EA:BF:C3:92:9A:15:EE:1D:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa3d6f72-a298-34f2-9aa7-98d609570cbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:57:3f:28:b2:96:86:59:ba:7b:20:97:ab:25:6a:df:3d:90: 91:43:47:cb:a1:0b:19:c1:19:66:e5:88:8a:ac:37:65:75:73: eb:9f:b5:a3:7c:c1:bc:74:2d:46:27:19:c0:ad:29:0d:d7:42: 2e:b9:c9:1c:96:22:c1:e3:cd:e3:b6:6c:0c:dd:b1:1e:35:e8: 82:80:94:d5:45:98:06:4b:7c:49:51:ce:4b:5f:fb:4c:7e:fe: 54:16:8e:e7:1c:a2:e2:31:64:0c:de:19:b0:97:53:18:d2:f9: a9:1a:e8:0a:00:0c:41:8a:1c:05:e4:d9:ff:3e:4d:eb:47:89: 7f:99:b3:03:0b:d5:c4:ca:98:30:8b:aa:e2:19:0a:b7:03:50: a8:54:ae:e6:80:98:dd:f5:37:fe:f4:e8:4a:09:74:a0:4e:07: 5b:da:f0:15:4c:ac:d1:76:14:42:e3:b6:ec:22:13:53:47:40: af:6c:20:11:ff:3f:37:c7:97:db:42:fe:09:7b:d5:b6:cf:ab: 11:f4:00:39:89:1e:f8:a8:36:6d:45:a8:47:ca:76:57:31:5f: b5:75:d6:e2:61:55:c8:3d:ed:5e:1d:e0:77:df:37:d0:59:99: 0b:a8:e5:6a:dc:d4:b7:4c:dd:0e:40:7a:00:5e:3c:10:00:0f: 61:c2:39:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4Cbcmf98E72dcsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZWE1NjhmYjMtMzgxMi00NTYyLTllYTItODJmZDZjMDM0YWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkx4qjhPBQx0r/k/x0trQFLuuflsSXskcXUMG 1tioGOda7dn+8DtZRAVuKJSk4c18iU3vfPiUdFaUd7v03no/B8oAVWRrcvIExBbI zyF+uvl8n+kLc+fc0mDm9OmCR1o8HXhnEc33xrKj5RMIhhh1CEIzKaTG+Q/1Ea8s kDOtE8R5pjogfSi1zb/NKI691FUu4BYBxHwiUYDZNXnMiWgOHtntVPR7Bx4etYe+ cON21ya8XNRLQ/YRQFUzk0IO6Qdgr9stxeHcucrNN0iJoimQvPLDUSO7XdoHKmEV S5noLw94qHO2tMO4UFIFTvbtc0FoCbT578n/hjq/8QyNmlxwZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdKKmjaOfY6Q7Sp6r/DkpoV7h0UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWEzZDZmNzItYTI5OC0z NGYyLTlhYTctOThkNjA5NTcwY2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi3MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALJXPyiyloZZunsgl6slat89kJFDR8uhCxnBGWbliIqsN2V1c+uftaN8 wbx0LUYnGcCtKQ3XQi65yRyWIsHjzeO2bAzdsR416IKAlNVFmAZLfElRzktf+0x+ /lQWjuccouIxZAzeGbCXUxjS+aka6AoADEGKHAXk2f8+TetHiX+ZswML1cTKmDCL quIZCrcDUKhUruaAmN31N/706EoJdKBOB1va8BVMrNF2FELjtuwiE1NHQK9sIBH/ PzfHl9tC/gl71bbPqxH0ADmJHvioNm1FqEfKdlcxX7V11uJhVcg97V4d4HffN9BZ mQuo5Wrc1LdM3Q5AegBePBAAD2HCOYI= -----END CERTIFICATE-----Generated at Thu Mar 26 05:59:54 2026 by rpki-client