$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d167629-63e9-440b-9a9f-22a4570f0d78/b8e7d526-da32-385b-ab5e-2aa5e57b55a7.roa File: b8e7d526-da32-385b-ab5e-2aa5e57b55a7.roa (raw, json) Hash identifier: SVQzW2Hw1Bglf5eYsBf3tYdY0U+yF9wEZLPtqy21My4= Subject key identifier: 0F:D9:B2:68:6C:63:9C:F6:3E:6A:93:9F:E5:89:24:F6:71:F6:D6:D1 Certificate issuer: /CN=9d167629-63e9-440b-9a9f-22a4570f0d78 Certificate serial: 010D0C9F4328584D40CA4AEF76703C1494D76980 Authority key identifier: 21:0F:F1:11:A9:9B:01:49:A9:3E:6C:C9:D3:0D:28:93:1C:8E:9E:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d167629-63e9-440b-9a9f-22a4570f0d78.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d167629-63e9-440b-9a9f-22a4570f0d78/b8e7d526-da32-385b-ab5e-2aa5e57b55a7.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 14618 IP address blocks: 198.17.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d167629-63e9-440b-9a9f-22a4570f0d78/9d167629-63e9-440b-9a9f-22a4570f0d78.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d167629-63e9-440b-9a9f-22a4570f0d78/9d167629-63e9-440b-9a9f-22a4570f0d78.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d167629-63e9-440b-9a9f-22a4570f0d78.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:4a:ef:76:70:3c:14:94:d7:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d167629-63e9-440b-9a9f-22a4570f0d78 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=579d41e1-9a0e-470f-b99c-a7943b895281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:dd:1c:ec:bf:fa:26:93:1a:57:12:53:21:ab: ca:db:dc:dc:b0:49:20:49:2e:16:0f:32:f8:a7:02: 20:72:96:ed:74:f4:d1:ca:02:4e:ad:9e:d5:4b:ec: bf:5e:97:d3:6b:b1:f2:1e:f5:33:47:88:c9:a8:da: a9:6b:bc:54:02:62:06:5c:09:40:5e:f9:0a:b4:33: e9:65:78:bd:e3:60:a9:bd:8c:03:28:50:0b:41:d3: 34:e6:7c:52:13:3d:a0:fe:ce:ed:d5:e7:94:e6:1c: 1b:11:7a:7d:cf:c5:6c:f8:1a:74:21:06:f1:1d:07: 88:f7:40:c5:21:9a:2e:b9:8a:b3:51:33:0f:92:aa: 9e:69:99:05:39:7b:c3:09:3a:9d:8d:9e:02:23:b4: cf:5c:c6:41:fb:fa:72:7d:04:5d:eb:5b:c7:8c:fa: a1:64:b4:e2:1f:ec:7f:5b:47:43:64:1b:2f:71:a9: 09:6e:88:dc:2b:9b:67:75:09:4e:7f:e4:b8:8e:6b: e8:c5:b0:f8:9c:9a:dc:0f:43:2c:07:5c:38:d6:c8: 6d:bc:6c:fe:d8:b2:e4:38:e8:9b:58:52:1e:39:41: a0:ed:6a:17:16:87:49:c9:98:7d:31:78:ad:93:b1: f8:54:25:25:73:aa:2f:27:9c:41:8b:c3:8a:b3:6e: 1f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:D9:B2:68:6C:63:9C:F6:3E:6A:93:9F:E5:89:24:F6:71:F6:D6:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d167629-63e9-440b-9a9f-22a4570f0d78/b8e7d526-da32-385b-ab5e-2aa5e57b55a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d167629-63e9-440b-9a9f-22a4570f0d78/9d167629-63e9-440b-9a9f-22a4570f0d78.crl X509v3 Authority Key Identifier: keyid:21:0F:F1:11:A9:9B:01:49:A9:3E:6C:C9:D3:0D:28:93:1C:8E:9E:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d167629-63e9-440b-9a9f-22a4570f0d78.cer sbgp-ipAddrBlock: critical IPv4: 198.17.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:b5:93:48:d7:fe:9f:64:a6:9e:3d:ef:3c:77:bd:6e:79:b3: b1:e7:85:d8:7d:73:1f:a0:a4:e3:3d:0c:b7:17:69:8b:f1:77: 65:8b:82:71:1d:4f:d2:47:19:e9:3e:d3:e9:e8:96:2f:a7:d0: 16:a6:8f:31:26:d7:87:a1:d9:5a:88:bb:81:5a:82:bd:cd:7f: 17:7c:0d:f7:6c:ab:d3:08:ee:cd:f2:cd:e6:90:d1:9d:88:b8: ff:74:9c:ae:b2:f4:7c:44:d0:ff:85:9d:b1:47:42:60:4d:1a: 84:a5:cc:b5:f7:ad:87:2a:c3:c6:b2:91:42:f9:5e:18:26:c8: 7b:83:c5:df:0c:f5:24:c6:59:29:70:0f:d6:4c:e7:e5:b3:e1: 7d:32:67:4e:87:5b:30:66:18:fd:4b:a8:11:ac:7f:55:3a:d4: 58:4f:41:03:be:30:d5:26:53:e7:fe:8f:9a:2e:fa:f3:25:fe: c2:6b:20:4a:8f:40:41:04:ac:c5:61:52:3d:5f:f6:5c:e1:4d: a0:5d:3c:c2:06:b2:35:3e:d8:1c:5f:c5:4e:ec:1d:f0:3f:9e: 6c:17:3b:15:8a:a6:10:51:9c:95:ce:b5:36:9e:89:70:5b:3f: 3a:11:14:08:a3:28:30:ff:05:27:7f:46:30:d0:48:44:a4:a5: ac:dd:b1:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AykrvdnA8FJTXaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWQxNjc2MjktNjNlOS00NDBiLTlhOWYtMjJhNDU3MGYw ZDc4MB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk NTc5ZDQxZTEtOWEwZS00NzBmLWI5OWMtYTc5NDNiODk1MjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoN0c7L/6JpMaVxJTIavK29zcsEkgSS4WDzL4 pwIgcpbtdPTRygJOrZ7VS+y/XpfTa7HyHvUzR4jJqNqpa7xUAmIGXAlAXvkKtDPp ZXi942CpvYwDKFALQdM05nxSEz2g/s7t1eeU5hwbEXp9z8Vs+Bp0IQbxHQeI90DF IZouuYqzUTMPkqqeaZkFOXvDCTqdjZ4CI7TPXMZB+/pyfQRd61vHjPqhZLTiH+x/ W0dDZBsvcakJbojcK5tndQlOf+S4jmvoxbD4nJrcD0MsB1w41shtvGz+2LLkOOib WFIeOUGg7WoXFodJyZh9MXitk7H4VCUlc6ovJ5xBi8OKs24fLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA/ZsmhsY5z2PmqTn+WJJPZx9tbRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZDE2 NzYyOS02M2U5LTQ0MGItOWE5Zi0yMmE0NTcwZjBkNzgvYjhlN2Q1MjYtZGEzMi0z ODViLWFiNWUtMmFhNWU1N2I1NWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWQxNjc2MjktNjNlOS00NDBiLTlh OWYtMjJhNDU3MGYwZDc4LzlkMTY3NjI5LTYzZTktNDQwYi05YTlmLTIyYTQ1NzBm MGQ3OC5jcmwwHwYDVR0jBBgwFoAUIQ/xEambAUmpPmzJ0w0okxyOnqowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZDE2NzYyOS02M2U5LTQ0MGItOWE5Zi0yMmE0 NTcwZjBkNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhF/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAe1k0jX/p9kpp497zx3vW55s7Hnhdh9cx+gpOM9DLcXaYvxd2WLgnEd T9JHGek+0+noli+n0BamjzEm14eh2VqIu4Fagr3Nfxd8Dfdsq9MI7s3yzeaQ0Z2I uP90nK6y9HxE0P+FnbFHQmBNGoSlzLX3rYcqw8aykUL5XhgmyHuDxd8M9STGWSlw D9ZM5+Wz4X0yZ06HWzBmGP1LqBGsf1U61FhPQQO+MNUmU+f+j5ou+vMl/sJrIEqP QEEErMVhUj1f9lzhTaBdPMIGsjU+2BxfxU7sHfA/nmwXOxWKphBRnJXOtTaeiXBb PzoRFAijKDD/BSd/RjDQSESkpazdsVQ= -----END CERTIFICATE-----Generated at Thu Mar 26 03:49:52 2026 by rpki-client