$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dffb8d64-fd82-302e-ada2-5e3a69317b50.roa File: dffb8d64-fd82-302e-ada2-5e3a69317b50.roa (raw, json) Hash identifier: jLj3Ai1y/FMqAglLV3gl2ih2rd1CZxL/5OZYahOG95g= Subject key identifier: 32:33:48:23:7D:98:19:66:5C:84:CB:F2:72:2F:85:15:7F:FD:70:6B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E026FDA8B0424A202B1702 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dffb8d64-fd82-302e-ada2-5e3a69317b50.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 198.45.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:26:fd:a8:b0:42:4a:20:2b:17:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=d59afeff-3a8c-4795-ace6-6cd19758ba68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:01:75:80:a1:73:02:44:69:5c:44:bf:bd:46: 48:54:01:29:84:be:f1:c7:d9:45:8b:3c:21:dd:49: 4f:53:eb:cc:18:29:6c:8c:e3:dc:58:90:97:16:ac: cb:58:c2:1c:50:29:16:5c:6d:d0:a0:28:a1:a5:64: 35:9f:7e:0e:81:f7:e8:76:a7:ff:01:79:9f:1d:7a: 4c:b7:95:71:bc:27:23:ef:69:ee:c8:3b:bb:21:4a: 65:13:95:dd:ad:59:d9:88:50:e0:82:ff:28:89:d5: 80:c8:da:81:a3:0d:31:3a:0f:f9:80:ca:c9:4e:bb: ec:d6:76:ca:3f:9f:d9:62:54:00:a3:66:93:73:e1: 74:76:ab:6a:ae:9d:f7:6d:f6:af:d7:6f:01:8c:d7: 57:b5:d8:c9:62:75:31:52:03:55:f5:66:2a:24:20: 58:f9:05:9e:e8:59:f6:b7:ef:7d:14:e1:f3:29:3c: ea:9f:31:c5:ec:cb:25:d5:1a:b9:13:f0:15:ff:39: 0c:c1:99:3c:41:a7:79:40:3e:9a:9b:50:f2:80:c3: 1b:4f:f8:a3:90:a5:bd:f9:97:dd:46:b8:6f:91:2f: ea:68:50:b0:f7:90:fc:4d:35:ab:26:bf:21:e4:f8: bf:a4:ac:96:c3:56:9f:36:01:3d:59:92:2f:c4:ae: 62:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:33:48:23:7D:98:19:66:5C:84:CB:F2:72:2F:85:15:7F:FD:70:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dffb8d64-fd82-302e-ada2-5e3a69317b50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:b8:63:d1:c5:e6:8e:b5:46:e9:9b:c1:c9:41:b5:e7:b9:cc: 92:f0:ed:0e:10:98:35:2c:97:30:00:8b:c2:0a:fc:1a:8a:4e: 49:40:51:34:f2:fe:32:3d:52:2f:cd:de:5e:14:c8:2d:b9:28: bd:38:de:99:8e:37:ea:1b:81:3f:b7:76:28:36:dc:35:29:75: 62:ca:3d:9a:88:14:c4:4b:21:0d:72:f0:ae:2a:e9:35:51:27: 61:79:22:18:d8:a8:d7:32:74:d7:65:4f:e6:0d:c5:3b:c5:ef: e3:25:60:84:b1:05:5c:7a:b0:73:22:f3:95:aa:f7:6e:02:69: a8:bd:f2:64:e2:16:67:ef:51:d0:92:e0:1c:d9:7e:d4:23:79: 35:87:a4:c4:43:82:0a:a7:4f:c0:6d:c6:a6:ae:7e:ac:83:57: a5:c3:91:c8:fb:06:13:45:d2:18:1d:9f:ab:98:30:e9:78:f5: c4:36:fc:98:1d:ac:b7:32:e1:c3:3b:5e:cd:6c:71:ca:15:60: 99:aa:79:72:64:d3:02:63:d9:2a:f6:6b:94:05:75:7f:9c:cb: a0:c6:49:76:f7:ec:38:10:3c:f2:9a:d8:43:dc:e6:5b:df:33: 72:38:da:f2:7d:31:0c:10:c2:78:86:33:ec:5e:37:d0:91:a6: a3:04:2c:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4Cb9qLBCSiArFwIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZDU5YWZlZmYtM2E4Yy00Nzk1LWFjZTYtNmNkMTk3NThiYTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQF1gKFzAkRpXES/vUZIVAEphL7xx9lFizwh 3UlPU+vMGClsjOPcWJCXFqzLWMIcUCkWXG3QoCihpWQ1n34Ogffodqf/AXmfHXpM t5VxvCcj72nuyDu7IUplE5XdrVnZiFDggv8oidWAyNqBow0xOg/5gMrJTrvs1nbK P5/ZYlQAo2aTc+F0dqtqrp33bfav128BjNdXtdjJYnUxUgNV9WYqJCBY+QWe6Fn2 t+99FOHzKTzqnzHF7Msl1Rq5E/AV/zkMwZk8Qad5QD6am1DygMMbT/ijkKW9+Zfd RrhvkS/qaFCw95D8TTWrJr8h5Pi/pKyWw1afNgE9WZIvxK5iFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDIzSCN9mBlmXITL8nIvhRV//XBrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGZmYjhkNjQtZmQ4Mi0z MDJlLWFkYTItNWUzYTY5MzE3YjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi3QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIa4Y9HF5o61RumbwclBtee5zJLw7Q4QmDUslzAAi8IK/BqKTklAUTTy /jI9Ui/N3l4UyC25KL043pmON+obgT+3dig23DUpdWLKPZqIFMRLIQ1y8K4q6TVR J2F5IhjYqNcydNdlT+YNxTvF7+MlYISxBVx6sHMi85Wq924Caai98mTiFmfvUdCS 4BzZftQjeTWHpMRDggqnT8BtxqaufqyDV6XDkcj7BhNF0hgdn6uYMOl49cQ2/Jgd rLcy4cM7Xs1sccoVYJmqeXJk0wJj2Sr2a5QFdX+cy6DGSXb37DgQPPKa2EPc5lvf M3I42vJ9MQwQwniGM+xeN9CRpqMELOk= -----END CERTIFICATE-----Generated at Thu Mar 26 04:40:59 2026 by rpki-client