$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8498f23-a82c-3ccc-b4f1-9fa37a79a9fa.roa File: c8498f23-a82c-3ccc-b4f1-9fa37a79a9fa.roa (raw, json) Hash identifier: ygx3e4gmV2hoLPD3wNX/7+O2njkBsVlb/YP6zMcRL8I= Subject key identifier: 1F:0E:85:7E:38:9B:BE:73:C0:3C:56:A7:6E:80:34:46:EC:AB:83:FD Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0251F8938F601DADB13C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8498f23-a82c-3ccc-b4f1-9fa37a79a9fa.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 198.45.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:25:1f:89:38:f6:01:da:db:13:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=1d806631-5090-440a-b8a5-0cc51dde7a6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:82:13:27:02:61:ec:c0:32:2c:08:50:78:bf: 3b:6f:dd:0b:9f:23:c2:5a:f6:af:50:c3:8c:4e:df: 3a:6c:dd:a5:a7:3e:bf:72:94:55:7d:29:07:47:5a: da:46:5f:48:9f:5d:e3:16:c2:a0:aa:4b:5d:13:9c: 8a:c8:d3:5b:52:6c:ba:a3:a9:45:d0:d8:c8:13:a5: 83:6a:f2:b7:78:f2:8b:b2:e2:08:4e:8f:2b:59:ee: 96:b0:7c:48:f6:75:48:f9:8a:c3:35:9f:2b:69:56: 76:c9:1b:31:89:54:bd:9b:5d:8e:c6:d4:19:11:21: b4:fa:a3:ab:78:35:b4:ca:0b:72:e6:1f:27:c0:07: bb:2f:84:20:a2:63:91:17:8b:d2:e3:11:5b:c4:45: 7c:4e:f8:e0:06:90:d8:dd:6d:7c:a8:93:33:17:c4: d3:70:c5:c9:8c:6b:7e:e6:79:1e:b0:0c:df:8f:d1: b7:48:9f:21:e1:d3:11:e7:3b:b2:dc:61:69:74:ae: d7:45:65:43:c0:c2:26:93:9f:6b:92:75:69:3c:54: 46:e0:fd:8f:34:a1:0f:6d:2b:89:11:4a:e4:26:99: 53:fd:ba:e1:8c:92:c6:9e:d5:ff:e2:b4:7a:12:58: 70:44:e9:2b:b3:bd:c4:8f:b7:c3:86:6d:65:67:79: 56:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:0E:85:7E:38:9B:BE:73:C0:3C:56:A7:6E:80:34:46:EC:AB:83:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8498f23-a82c-3ccc-b4f1-9fa37a79a9fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:e0:6a:95:4e:6f:cd:64:5d:f0:94:02:c1:ea:b6:05:74:d1: 64:82:30:04:cd:43:fd:bb:a5:c7:f9:2a:e5:8a:56:73:53:ce: 7e:5f:ce:88:5d:01:97:fe:f0:22:4e:dc:67:23:8c:ca:0a:9c: 0d:b1:f9:66:df:6c:ef:a4:11:4d:1d:5f:45:c6:a4:ce:29:ae: d9:ba:a3:b7:08:eb:f4:a3:c4:ba:30:77:35:27:a5:d6:b0:c9: 3e:df:ee:6a:cb:80:e2:a2:fc:c8:46:1c:57:8a:7b:84:60:64: 04:d1:4d:f0:79:dc:5b:f0:a6:b9:47:ed:ed:d9:ad:4b:dc:d0: ad:9a:9f:e8:50:10:a7:89:b9:ae:29:69:4d:2a:dd:1f:d3:bd: 2f:1a:01:c1:3c:8a:1f:6a:d6:35:c9:0f:a2:2a:ae:55:ab:eb: 70:14:8a:1a:59:5e:38:ac:0e:ab:db:f6:77:f9:b2:a9:61:19: 98:6a:75:6c:c9:83:5d:d5:83:3a:e0:87:0d:62:fd:20:f7:3f: e0:63:ba:a0:96:9e:24:84:4a:a7:59:ff:94:9c:9a:3a:05:23: 27:db:cd:27:41:ee:96:11:e1:25:f6:80:40:c8:92:0b:2a:90: af:6e:57:4b:3d:83:5f:7f:00:0b:d6:87:e1:85:47:43:57:a5: 35:3d:45:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4CUfiTj2AdrbE8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MWQ4MDY2MzEtNTA5MC00NDBhLWI4YTUtMGNjNTFkZGU3YTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14ITJwJh7MAyLAhQeL87b90LnyPCWvavUMOM Tt86bN2lpz6/cpRVfSkHR1raRl9In13jFsKgqktdE5yKyNNbUmy6o6lF0NjIE6WD avK3ePKLsuIITo8rWe6WsHxI9nVI+YrDNZ8raVZ2yRsxiVS9m12OxtQZESG0+qOr eDW0ygty5h8nwAe7L4QgomORF4vS4xFbxEV8TvjgBpDY3W18qJMzF8TTcMXJjGt+ 5nkesAzfj9G3SJ8h4dMR5zuy3GFpdK7XRWVDwMImk59rknVpPFRG4P2PNKEPbSuJ EUrkJplT/brhjJLGntX/4rR6ElhwROkrs73Ej7fDhm1lZ3lWpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8OhX44m75zwDxWp26ANEbsq4P9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzg0OThmMjMtYTgyYy0z Y2NjLWI0ZjEtOWZhMzdhNzlhOWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi2BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALgapVOb81kXfCUAsHqtgV00WSCMATNQ/27pcf5KuWKVnNTzn5fzohd AZf+8CJO3GcjjMoKnA2x+WbfbO+kEU0dX0XGpM4prtm6o7cI6/SjxLowdzUnpdaw yT7f7mrLgOKi/MhGHFeKe4RgZATRTfB53FvwprlH7e3ZrUvc0K2an+hQEKeJua4p aU0q3R/TvS8aAcE8ih9q1jXJD6IqrlWr63AUihpZXjisDqvb9nf5sqlhGZhqdWzJ g13Vgzrghw1i/SD3P+BjuqCWniSESqdZ/5ScmjoFIyfbzSdB7pYR4SX2gEDIkgsq kK9uV0s9g19/AAvWh+GFR0NXpTU9Rdo= -----END CERTIFICATE-----Generated at Thu Mar 26 04:28:11 2026 by rpki-client