$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/b4a8cff8-925b-39cf-b21b-358ad86de7b2.roa File: b4a8cff8-925b-39cf-b21b-358ad86de7b2.roa (raw, json) Hash identifier: 5xT4Oca75HEUXExd054LBgkzhDNQIccKMxyafzkoLSM= Subject key identifier: 85:3B:1A:47:4C:65:8F:06:9D:EF:4A:20:E0:B2:BC:AF:95:D6:F0:BE Certificate issuer: /CN=603ec9c3-6a7f-4455-baee-5999e253e735 Certificate serial: 010D0C9F4328584D3F64E0B4D16B820433E88F38 Authority key identifier: 8E:2C:C0:E0:03:39:DF:F9:32:13:AA:61:21:F8:AB:2D:67:F8:BA:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/b4a8cff8-925b-39cf-b21b-358ad86de7b2.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 3676 IP address blocks: 198.49.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:e0:b4:d1:6b:82:04:33:e8:8f:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=603ec9c3-6a7f-4455-baee-5999e253e735 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=13ee4c51-945f-488c-bf81-80d44640ca7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:94:15:8b:5a:b1:12:bb:8b:22:30:40:bc:5a: f0:73:90:8b:c6:c0:13:88:2b:e9:8d:6d:52:b3:77: da:cf:39:2b:a1:ed:c5:45:e3:84:33:6b:50:d8:ed: e3:f9:a9:e1:95:2c:f0:eb:ac:65:bc:47:f3:a4:24: 2a:cf:f6:d5:dd:8d:85:45:b7:fc:8a:9a:2f:36:d4: 3b:e2:e1:cf:c4:0c:56:5b:c5:a0:b5:d9:a0:d1:3e: e8:16:c0:6c:14:0c:96:7a:cb:15:47:cc:57:6d:75: a9:4e:3e:af:78:b7:72:94:7f:c5:31:b6:48:39:3d: ad:26:e1:17:8b:fb:32:1e:02:ad:25:d8:41:97:94: 6d:42:dd:e7:a1:89:9a:94:4e:e7:a1:53:9c:35:d6: 25:fd:e9:df:71:0c:4d:c1:18:e2:fc:32:08:6b:f6: 05:47:23:41:79:f9:41:c6:67:6a:b5:42:5b:4d:f3: 73:74:86:ed:f7:81:8b:5e:ad:52:24:98:af:66:0d: 5d:a1:99:f2:0d:06:d7:7a:66:f6:55:f2:6c:93:62: bc:70:27:40:cb:c8:b6:df:cc:5c:8f:a7:55:52:fd: 43:f9:ad:24:0b:d0:57:5b:84:85:83:ae:31:9c:ae: 77:f7:50:96:a0:ad:62:ce:a6:2c:e4:31:8d:6a:9a: 79:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:3B:1A:47:4C:65:8F:06:9D:EF:4A:20:E0:B2:BC:AF:95:D6:F0:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/b4a8cff8-925b-39cf-b21b-358ad86de7b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.crl X509v3 Authority Key Identifier: keyid:8E:2C:C0:E0:03:39:DF:F9:32:13:AA:61:21:F8:AB:2D:67:F8:BA:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer sbgp-ipAddrBlock: critical IPv4: 198.49.182.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:57:0c:df:f8:f0:73:71:20:a0:3b:91:78:90:3c:1c:cb:da: 6b:57:9b:c7:a4:d1:1a:3b:5f:8f:be:c4:c5:a1:14:f9:13:da: e3:42:5a:25:13:32:ae:49:4a:aa:5f:8e:2e:6b:2d:9f:4f:41: 00:b7:aa:78:62:98:ee:ee:cc:0b:6e:e4:f9:01:dc:a1:cb:54: 48:76:9e:cd:2d:60:93:46:19:2f:b8:2c:d9:55:12:a1:c3:13: e2:c1:ec:fb:f7:54:e4:4d:21:be:f3:d6:e9:f6:73:19:04:23: 65:9c:b7:af:f9:3d:24:f9:6c:1d:2b:52:7b:b7:6d:18:30:3e: 55:c1:06:3b:28:48:f0:71:e2:e3:da:f6:22:93:78:f3:88:1b: 5a:37:52:a0:87:77:c9:47:9e:52:96:a0:c0:16:e3:ec:6f:ff: 70:3c:7c:b3:4e:66:f2:89:17:68:d7:1a:4c:49:02:eb:ab:e6: a6:d7:9d:b7:17:88:59:ed:c1:23:e3:05:36:33:48:27:3f:e9: 3f:21:c7:56:30:94:b5:b3:d6:d6:4c:c7:2e:1c:4f:39:cd:33: a9:4e:92:ba:3d:7d:f0:80:f4:51:c5:f5:a7:dc:1e:8e:18:57: 31:0a:69:49:7e:96:96:0d:7a:b7:de:44:ca:b8:d3:be:a3:27: c2:9c:82:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZOC00WuCBDPojzgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAzZWM5YzMtNmE3Zi00NDU1LWJhZWUtNTk5OWUyNTNl NzM1MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk MTNlZTRjNTEtOTQ1Zi00ODhjLWJmODEtODBkNDQ2NDBjYTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJQVi1qxEruLIjBAvFrwc5CLxsATiCvpjW1S s3fazzkroe3FReOEM2tQ2O3j+anhlSzw66xlvEfzpCQqz/bV3Y2FRbf8ipovNtQ7 4uHPxAxWW8Wgtdmg0T7oFsBsFAyWessVR8xXbXWpTj6veLdylH/FMbZIOT2tJuEX i/syHgKtJdhBl5RtQt3noYmalE7noVOcNdYl/enfcQxNwRji/DIIa/YFRyNBeflB xmdqtUJbTfNzdIbt94GLXq1SJJivZg1doZnyDQbXemb2VfJsk2K8cCdAy8i238xc j6dVUv1D+a0kC9BXW4SFg64xnK5391CWoK1izqYs5DGNapp5jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIU7GkdMZY8Gne9KIOCyvK+V1vC+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82MDNl YzljMy02YTdmLTQ0NTUtYmFlZS01OTk5ZTI1M2U3MzUvYjRhOGNmZjgtOTI1Yi0z OWNmLWIyMWItMzU4YWQ4NmRlN2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjAzZWM5YzMtNmE3Zi00NDU1LWJh ZWUtNTk5OWUyNTNlNzM1LzYwM2VjOWMzLTZhN2YtNDQ1NS1iYWVlLTU5OTllMjUz ZTczNS5jcmwwHwYDVR0jBBgwFoAUjizA4AM53/kyE6phIfirLWf4uvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82MDNlYzljMy02YTdmLTQ0NTUtYmFlZS01OTk5 ZTI1M2U3MzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxjG2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdXDN/48HNxIKA7kXiQPBzL2mtXm8ek0Ro7X4++xMWhFPkT2uNCWiUT Mq5JSqpfji5rLZ9PQQC3qnhimO7uzAtu5PkB3KHLVEh2ns0tYJNGGS+4LNlVEqHD E+LB7Pv3VORNIb7z1un2cxkEI2Wct6/5PST5bB0rUnu3bRgwPlXBBjsoSPBx4uPa 9iKTePOIG1o3UqCHd8lHnlKWoMAW4+xv/3A8fLNOZvKJF2jXGkxJAuur5qbXnbcX iFntwSPjBTYzSCc/6T8hx1YwlLWz1tZMxy4cTznNM6lOkro9ffCA9FHF9afcHo4Y VzEKaUl+lpYNerfeRMq4076jJ8KcgtA= -----END CERTIFICATE-----Generated at Thu Mar 26 13:40:13 2026 by rpki-client