$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d822c6d4-e08d-3030-b74c-82e9f544161f.roa File: d822c6d4-e08d-3030-b74c-82e9f544161f.roa (raw, json) Hash identifier: ISqX/aLjVU0Ax8ioD79hmtN8jFJlH5CXNiMX472ZTTA= Subject key identifier: 30:AA:34:89:4F:D4:A5:E6:69:09:FD:6C:80:B8:3F:6D:30:22:41:C2 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E025658178CF23CDF19F00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d822c6d4-e08d-3030-b74c-82e9f544161f.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 198.45.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:25:65:81:78:cf:23:cd:f1:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=154b61ac-6810-4425-977d-e52a3b766048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:1f:b1:49:c7:04:56:d5:f1:0c:8d:d5:09:21: 58:d4:3e:b3:3c:1b:86:40:9b:63:da:a0:29:9e:51: 8a:5d:89:89:f1:83:89:fb:05:6b:f0:e4:13:cf:d4: ce:f5:85:71:02:23:0f:3b:60:e5:5c:74:a5:cc:0f: a3:02:e7:e4:e1:61:fe:45:3a:21:89:23:d4:39:ce: 47:e8:f5:05:ae:4c:77:87:65:98:4a:ab:21:dd:6f: 3c:80:e3:1a:70:88:54:fb:5f:04:f9:d0:5d:29:ef: 58:c7:78:c5:28:67:87:45:8e:1b:a0:22:6b:47:a5: 8d:8d:bb:c0:09:eb:2a:af:28:fd:53:70:f4:f8:19: b7:67:66:89:bf:a5:44:62:34:a5:ff:fe:fb:2e:ef: 86:46:5c:6b:72:09:c2:ed:de:76:2f:b4:0c:2f:e5: be:8a:07:d9:79:fa:f8:6a:29:a5:1c:ca:99:30:4e: fe:9e:0c:37:41:ab:5d:ce:18:7a:7a:15:94:c8:c3: 35:8e:19:a9:c3:cd:a7:fd:dc:94:e8:67:7f:06:2f: e2:51:44:fc:08:2d:cc:e9:b1:97:8a:39:2b:23:0d: cf:44:85:97:f4:af:38:ef:69:3d:b2:d1:b8:cd:8c: bd:b0:99:44:9d:5e:10:eb:e3:93:11:a6:68:1b:8f: 14:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:AA:34:89:4F:D4:A5:E6:69:09:FD:6C:80:B8:3F:6D:30:22:41:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d822c6d4-e08d-3030-b74c-82e9f544161f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:bd:53:5a:f7:f6:bc:75:09:79:d9:d6:fd:1f:9b:6e:ce:e5: b4:a3:5a:93:3e:c0:de:3f:08:a1:ae:2b:96:fb:86:23:0d:99: a9:b9:b9:4d:76:66:a6:05:71:bc:3c:2a:42:69:01:8d:52:9d: e0:7a:d1:0a:02:a2:1c:2e:6f:b1:b2:67:b2:84:c5:2d:a7:9a: 92:bf:77:5f:d9:d7:46:e2:c9:6a:80:4f:33:49:d8:e6:64:4f: 74:b1:ae:aa:11:e1:ba:fb:88:0c:eb:e2:6d:f9:ea:93:d0:2e: d0:5a:fc:05:16:2a:ad:95:1d:f4:38:88:f9:6c:4d:6d:c7:7e: da:cc:01:e2:c6:47:57:30:d0:66:f1:a1:9f:c5:3c:4d:73:ed: 0c:5d:f7:73:90:df:82:89:0a:69:a2:88:22:7a:b0:25:31:2b: e5:d0:ee:bb:e1:5a:4f:ef:28:d3:51:a8:14:d8:fd:dc:12:70: 7c:b8:07:cf:cd:c0:42:41:1b:a9:3d:04:40:46:3a:42:42:8a: e1:f4:eb:22:1a:91:01:28:76:b6:2f:c7:d2:d0:f3:af:d7:1c: 83:8a:57:39:ff:3e:92:c1:c9:2f:57:24:8a:65:70:8b:d3:e5: d6:70:a1:6c:76:0a:2d:52:e4:22:d4:57:47:08:91:45:86:df: 82:ca:2a:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4CVlgXjPI83xnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MTU0YjYxYWMtNjgxMC00NDI1LTk3N2QtZTUyYTNiNzY2MDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgx+xSccEVtXxDI3VCSFY1D6zPBuGQJtj2qAp nlGKXYmJ8YOJ+wVr8OQTz9TO9YVxAiMPO2DlXHSlzA+jAufk4WH+RTohiSPUOc5H 6PUFrkx3h2WYSqsh3W88gOMacIhU+18E+dBdKe9Yx3jFKGeHRY4boCJrR6WNjbvA Cesqryj9U3D0+Bm3Z2aJv6VEYjSl//77Lu+GRlxrcgnC7d52L7QML+W+igfZefr4 aimlHMqZME7+ngw3Qatdzhh6ehWUyMM1jhmpw82n/dyU6Gd/Bi/iUUT8CC3M6bGX ijkrIw3PRIWX9K8472k9stG4zYy9sJlEnV4Q6+OTEaZoG48U4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCqNIlP1KXmaQn9bIC4P20wIkHCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDgyMmM2ZDQtZTA4ZC0z MDMwLWI3NGMtODJlOWY1NDQxNjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi2LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFO9U1r39rx1CXnZ1v0fm27O5bSjWpM+wN4/CKGuK5b7hiMNmam5uU12 ZqYFcbw8KkJpAY1SneB60QoCohwub7GyZ7KExS2nmpK/d1/Z10biyWqATzNJ2OZk T3SxrqoR4br7iAzr4m356pPQLtBa/AUWKq2VHfQ4iPlsTW3HftrMAeLGR1cw0Gbx oZ/FPE1z7Qxd93OQ34KJCmmiiCJ6sCUxK+XQ7rvhWk/vKNNRqBTY/dwScHy4B8/N wEJBG6k9BEBGOkJCiuH06yIakQEodrYvx9LQ86/XHIOKVzn/PpLByS9XJIplcIvT 5dZwoWx2Ci1S5CLUV0cIkUWG34LKKno= -----END CERTIFICATE-----Generated at Thu Mar 26 13:39:07 2026 by rpki-client