$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8c3b1d6-b748-34a3-bb24-dbe02ac76217.roa File: b8c3b1d6-b748-34a3-bb24-dbe02ac76217.roa (raw, json) Hash identifier: hHs0eHj6OG1dnnm4fGP4T8nYvnGzwbx1uUonuiU15vE= Subject key identifier: 65:2B:AE:BE:D9:63:F0:D6:EC:7D:AE:C2:7A:49:74:86:71:D8:FB:7B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E026010EEAA64063FC1B00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8c3b1d6-b748-34a3-bb24-dbe02ac76217.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 198.45.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:26:01:0e:ea:a6:40:63:fc:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=d11be164-67e5-41ae-b3ce-4e17384c6fdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:50:7f:39:4c:d1:ba:8f:ac:8f:31:9d:2d:fc: 8a:5b:be:f7:ea:0c:42:97:4d:20:df:fc:47:71:1c: ed:53:9a:eb:80:49:c8:7c:55:fb:39:5c:e2:93:81: e8:2a:81:3a:0f:8a:75:84:df:e1:5a:0d:a8:e1:34: 4a:ca:d2:cc:63:49:70:11:69:f8:ee:62:b8:08:fc: b3:c0:ea:fb:35:14:0a:c7:57:05:85:0b:bf:c4:41: c6:94:97:62:b3:46:88:1e:37:18:8a:50:0a:2a:44: df:21:82:78:8b:ba:31:b4:75:91:93:25:50:76:c3: eb:97:e6:ee:8f:bc:d1:2d:1f:ff:82:9e:4a:bd:80: 27:f2:30:4f:6d:1a:5b:bb:7d:bd:71:51:fb:4d:44: fb:55:70:5a:00:3d:15:bd:fc:43:24:04:9d:a2:19: 5d:9e:5c:f6:26:b9:32:bf:80:a3:95:5b:e2:77:b7: 67:47:48:44:7c:55:b2:ad:2e:6d:8d:96:d4:93:1c: 4f:2b:bb:36:96:de:10:da:99:27:e3:72:fe:15:32: d9:13:37:3b:0d:40:46:fd:67:db:e9:4c:dc:a7:65: 39:a3:a3:a2:fd:87:c9:97:4d:b0:c0:d3:27:79:13: fa:5f:d8:e7:c4:80:e1:3c:5d:b9:d4:05:c6:0e:ad: 1e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:2B:AE:BE:D9:63:F0:D6:EC:7D:AE:C2:7A:49:74:86:71:D8:FB:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8c3b1d6-b748-34a3-bb24-dbe02ac76217.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:ff:0d:0b:c9:b3:61:5f:a6:d1:ac:67:9f:10:ba:73:64:0e: 33:16:57:a1:1d:49:61:2c:18:03:17:ab:d1:0e:dd:26:07:47: 27:58:7e:4e:d7:12:7f:42:7f:ff:fd:0d:72:95:1f:30:48:00: 7f:f6:90:70:24:f7:ab:8a:d3:90:62:6c:80:d1:78:11:16:1f: 05:69:0f:66:81:2f:6c:32:7d:22:7d:eb:ca:85:56:cb:4f:e1: 79:b6:68:f3:09:e0:a7:1b:82:ba:de:0c:6e:25:9d:f5:00:be: b0:1e:ec:89:ef:03:f9:ca:64:9b:69:1d:b2:e9:f6:9e:ef:b6: 30:ae:ad:be:19:db:fb:56:fb:bf:4e:19:6d:01:83:2e:79:b9: 0f:b2:f9:6c:a7:9c:eb:26:9c:09:c5:09:51:44:48:28:ef:ac: 02:cd:b8:a2:e7:1f:b8:f7:c9:cb:02:f3:80:be:26:5b:5e:83: 30:e2:0d:90:93:06:09:5f:53:ad:47:bb:2a:ef:4d:c2:93:79: 93:3f:86:99:88:1b:3d:67:37:26:cd:a0:a8:2c:15:e6:5a:f7: e5:27:a0:83:8a:38:bb:66:c7:30:9a:10:0b:b6:1c:96:83:47: bb:c8:d0:03:ed:40:7c:63:d0:df:9e:84:a8:f5:bf:3a:68:91: c5:6c:bd:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4CYBDuqmQGP8GwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZDExYmUxNjQtNjdlNS00MWFlLWIzY2UtNGUxNzM4NGM2ZmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1B/OUzRuo+sjzGdLfyKW7736gxCl00g3/xH cRztU5rrgEnIfFX7OVzik4HoKoE6D4p1hN/hWg2o4TRKytLMY0lwEWn47mK4CPyz wOr7NRQKx1cFhQu/xEHGlJdis0aIHjcYilAKKkTfIYJ4i7oxtHWRkyVQdsPrl+bu j7zRLR//gp5KvYAn8jBPbRpbu329cVH7TUT7VXBaAD0VvfxDJASdohldnlz2Jrky v4CjlVvid7dnR0hEfFWyrS5tjZbUkxxPK7s2lt4Q2pkn43L+FTLZEzc7DUBG/Wfb 6Uzcp2U5o6Oi/YfJl02wwNMneRP6X9jnxIDhPF251AXGDq0eRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUrrr7ZY/DW7H2uwnpJdIZx2Pt7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjhjM2IxZDYtYjc0OC0z NGEzLWJiMjQtZGJlMDJhYzc2MjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi2rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMP/DQvJs2FfptGsZ58QunNkDjMWV6EdSWEsGAMXq9EO3SYHRydYfk7X En9Cf//9DXKVHzBIAH/2kHAk96uK05BibIDReBEWHwVpD2aBL2wyfSJ968qFVstP 4Xm2aPMJ4KcbgrreDG4lnfUAvrAe7InvA/nKZJtpHbLp9p7vtjCurb4Z2/tW+79O GW0Bgy55uQ+y+WynnOsmnAnFCVFESCjvrALNuKLnH7j3ycsC84C+JltegzDiDZCT BglfU61HuyrvTcKTeZM/hpmIGz1nNybNoKgsFeZa9+UnoIOKOLtmxzCaEAu2HJaD R7vI0APtQHxj0N+ehKj1vzpokcVsvdA= -----END CERTIFICATE-----Generated at Thu Mar 26 21:02:17 2026 by rpki-client