$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa947067-332a-302c-90e6-a9f60107ae87.roa File: fa947067-332a-302c-90e6-a9f60107ae87.roa (raw, json) Hash identifier: Jx7YXYFzf8behQABFugS/93Yed3+RXF5Ztu1ebocckY= Subject key identifier: 59:AC:E2:54:B9:45:CF:E9:9C:10:8F:8C:BB:29:03:F5:22:6A:F1:B1 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0DBE9B8434CDF9A357400 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa947067-332a-302c-90e6-a9f60107ae87.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 198.45.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:db:e9:b8:43:4c:df:9a:35:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=f448764b-2153-463e-8938-ee2c6b8a25ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1e:06:44:9d:3c:b1:bc:85:50:ce:53:b8:4a: 12:8f:64:65:f1:aa:08:12:f3:05:cb:de:95:ed:79: ae:d3:75:da:f9:1a:0d:83:c1:43:b5:9c:6c:ea:5d: 58:7a:56:73:db:c5:07:a9:3e:09:49:90:59:ef:34: bd:58:c7:63:75:bf:c0:76:3c:11:15:61:84:b3:57: 6c:f0:ee:a1:8b:64:71:66:61:1b:73:1d:3b:bd:17: 60:5d:85:a3:20:29:2d:ef:f9:a3:bd:d7:a2:32:b4: 76:91:55:60:16:0a:d6:75:09:78:8f:54:68:fa:74: 16:f4:2b:77:8e:83:6a:ba:3a:9d:83:40:65:f7:4f: 60:8d:07:7a:2e:03:d0:95:a7:7f:c1:23:bb:53:84: 42:92:bc:3b:c2:27:a3:c1:b4:86:f4:98:21:b8:de: 66:86:4a:48:46:18:1c:1c:2c:2f:cc:e1:86:2f:55: 20:f9:b2:85:37:7c:6f:33:c6:79:84:49:5b:39:a9: 34:21:92:8d:f2:e9:50:30:91:f5:68:e0:a7:7e:d0: 7e:d2:52:a9:ee:4b:dd:e8:b2:a5:26:ea:cc:80:77: 88:70:55:fb:d6:ac:df:85:23:36:55:82:57:54:08: 19:8c:8f:9b:ec:ff:eb:78:22:cc:8c:7c:d5:a2:d9: 41:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:AC:E2:54:B9:45:CF:E9:9C:10:8F:8C:BB:29:03:F5:22:6A:F1:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa947067-332a-302c-90e6-a9f60107ae87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:05:75:7d:66:41:e3:4e:62:93:ac:3c:3a:80:b3:d5:57:08: e9:b8:72:41:e6:1e:69:99:3c:3b:c8:31:4f:56:9d:29:8b:9c: e5:4a:25:ea:61:e4:ff:ac:f8:b5:57:60:75:ec:1a:be:f2:6b: a7:7e:67:4b:c7:31:b4:51:60:2d:8c:2c:33:14:06:4c:62:c0: 1c:37:ba:9a:c4:10:e0:f8:ff:72:5e:f9:fe:f5:0f:28:64:70: 36:87:67:33:5a:d5:4b:5f:f3:f4:81:48:dc:e1:f9:dd:02:03: fa:26:f0:ba:df:eb:7f:51:60:59:88:12:fa:8c:86:ed:32:84: 17:e2:a9:ef:37:87:47:04:17:a9:1b:48:f9:f2:40:ed:3c:ad: 71:61:ce:d6:77:5b:2b:ca:e8:88:47:c3:96:b3:88:1c:88:10: 40:18:7e:70:6a:87:d1:28:bd:71:39:d4:7a:0d:78:e9:df:07: 8f:7f:72:e3:6e:52:2b:bf:a2:0f:42:1a:c1:37:99:b4:6a:53: 1c:63:47:ab:5d:cf:8f:8f:0d:df:db:10:d2:cc:89:b5:f3:fd: 50:f0:05:24:2e:24:75:0c:54:68:34:16:86:07:52:5e:6b:ba: d9:f6:34:99:ce:e4:5c:f1:16:16:a3:63:e3:ea:48:d2:d3:7a: 3e:82:2d:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4NvpuENM35o1dAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZjQ0ODc2NGItMjE1My00NjNlLTg5MzgtZWUyYzZiOGEyNWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmR4GRJ08sbyFUM5TuEoSj2Rl8aoIEvMFy96V 7Xmu03Xa+RoNg8FDtZxs6l1YelZz28UHqT4JSZBZ7zS9WMdjdb/AdjwRFWGEs1ds 8O6hi2RxZmEbcx07vRdgXYWjICkt7/mjvdeiMrR2kVVgFgrWdQl4j1Ro+nQW9Ct3 joNqujqdg0Bl909gjQd6LgPQlad/wSO7U4RCkrw7wiejwbSG9JghuN5mhkpIRhgc HCwvzOGGL1Ug+bKFN3xvM8Z5hElbOak0IZKN8ulQMJH1aOCnftB+0lKp7kvd6LKl JurMgHeIcFX71qzfhSM2VYJXVAgZjI+b7P/reCLMjHzVotlBUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFms4lS5Rc/pnBCPjLspA/UiavGxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZmE5NDcwNjctMzMyYS0z MDJjLTkwZTYtYTlmNjAxMDdhZTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi2eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKoFdX1mQeNOYpOsPDqAs9VXCOm4ckHmHmmZPDvIMU9WnSmLnOVKJeph 5P+s+LVXYHXsGr7ya6d+Z0vHMbRRYC2MLDMUBkxiwBw3uprEEOD4/3Je+f71Dyhk cDaHZzNa1Utf8/SBSNzh+d0CA/om8Lrf639RYFmIEvqMhu0yhBfiqe83h0cEF6kb SPnyQO08rXFhztZ3WyvK6IhHw5aziByIEEAYfnBqh9EovXE51HoNeOnfB49/cuNu Uiu/og9CGsE3mbRqUxxjR6tdz4+PDd/bENLMibXz/VDwBSQuJHUMVGg0FoYHUl5r utn2NJnO5FzxFhajY+PqSNLTej6CLTg= -----END CERTIFICATE-----Generated at Thu Mar 26 18:31:36 2026 by rpki-client