$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f3d0607-06c5-3fa0-aeb4-4aa6c8cac7de.roa File: 0f3d0607-06c5-3fa0-aeb4-4aa6c8cac7de.roa (raw, json) Hash identifier: 8FyiPVC84UDIrwCWa9PkIqjJSgKtGmNuKUwrjDiK6I4= Subject key identifier: AD:93:3A:48:0D:E1:49:1B:BF:55:B6:39:FA:19:7F:F1:E6:C5:35:61 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D492A456AE175D38B8252C49A Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f3d0607-06c5-3fa0-aeb4-4aa6c8cac7de.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 20431 IP address blocks: 198.17.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:45:6a:e1:75:d3:8b:82:52:c4:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=87ab2535-8160-4356-a831-11132111e413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:75:98:92:e5:4f:95:f8:f2:a4:05:ea:72:c0: 29:f0:34:db:c7:3f:e4:91:d0:b4:1e:2e:e9:20:bb: 91:1d:bb:c2:b8:c6:4d:c1:5f:90:b2:4e:f2:44:d5: ff:49:70:c8:79:1b:e1:53:62:71:75:a4:33:5e:47: 82:a4:b5:a8:88:72:07:79:f0:8a:1c:49:61:67:1b: 18:32:e8:f3:d5:1c:06:77:a2:15:75:8b:5c:ea:63: 76:76:fb:d8:76:dd:d7:92:e7:77:a3:41:92:c4:08: 67:ed:34:db:53:a3:68:06:67:6a:46:be:26:5b:96: a8:cf:f8:73:41:3c:24:3e:61:38:30:67:90:10:8e: cc:71:b0:14:bd:fa:86:94:37:27:3d:7e:38:e1:b8: 61:b0:f8:45:57:bc:88:96:ab:a0:f4:a3:15:0f:1c: 4d:bf:04:05:3f:b9:b2:ea:44:17:b2:95:e1:82:5c: 7c:96:a0:c1:45:67:7a:8d:04:a6:77:eb:a7:79:95: 35:fc:b5:3b:94:33:a1:0a:bc:cb:02:aa:56:95:50: e8:bc:a5:8b:1f:97:1c:84:02:49:f1:7a:83:25:96: a8:0c:45:01:1e:4e:9d:5f:d5:82:d8:c0:63:9e:e5: 93:57:bb:58:2d:02:5e:bf:9e:d8:11:28:1f:33:3f: 18:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:93:3A:48:0D:E1:49:1B:BF:55:B6:39:FA:19:7F:F1:E6:C5:35:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f3d0607-06c5-3fa0-aeb4-4aa6c8cac7de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 198.17.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:f0:ed:9f:1c:3d:ed:9c:e1:62:fc:1e:0b:3e:f6:1b:2b:84: bd:e9:25:06:31:ea:6a:2a:7d:8b:12:f2:89:92:fa:dd:c4:ad: e8:ee:1c:33:a4:95:e7:0d:79:58:4a:2a:7f:6f:bb:21:c8:45: 27:5d:86:e6:8a:ac:a2:53:a0:c6:f9:c0:83:8d:4d:40:a6:a9: 4c:30:1b:70:f2:df:fc:06:98:8f:8e:a4:5c:fa:be:a3:87:52: 16:02:96:26:a1:a1:5d:0b:81:b8:32:93:91:8c:c4:de:76:dc: b8:c4:60:23:26:be:4c:b3:2d:1d:3e:be:e1:d9:3b:cb:df:e3: e3:83:8e:ae:ae:64:25:e3:6e:28:a5:f0:40:9e:8c:e0:2d:12: b4:1b:f2:ac:fa:de:35:98:96:8f:04:37:c6:f1:22:48:dc:f6: 0a:00:5e:06:b8:29:5e:70:74:16:a7:c9:4b:f9:43:d1:a6:cf: 29:c8:83:81:0a:6f:ad:83:d5:34:1b:74:21:67:f6:77:9e:96: f7:b8:23:67:e8:68:dc:18:39:70:ea:57:87:20:4c:c0:2b:a9: fe:f2:e8:52:e0:af:bd:b2:f5:97:0a:83:c9:d2:28:52:57:81: d7:a5:bb:b2:54:c1:8f:b1:a6:49:dc:83:ae:29:7d:eb:e1:f0: 3d:d2:cc:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKkVq4XXTi4JSxJowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk ODdhYjI1MzUtODE2MC00MzU2LWE4MzEtMTExMzIxMTFlNDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnWYkuVPlfjypAXqcsAp8DTbxz/kkdC0Hi7p ILuRHbvCuMZNwV+Qsk7yRNX/SXDIeRvhU2JxdaQzXkeCpLWoiHIHefCKHElhZxsY Mujz1RwGd6IVdYtc6mN2dvvYdt3Xkud3o0GSxAhn7TTbU6NoBmdqRr4mW5aoz/hz QTwkPmE4MGeQEI7McbAUvfqGlDcnPX444bhhsPhFV7yIlqug9KMVDxxNvwQFP7my 6kQXspXhglx8lqDBRWd6jQSmd+uneZU1/LU7lDOhCrzLAqpWlVDovKWLH5cchAJJ 8XqDJZaoDEUBHk6dX9WC2MBjnuWTV7tYLQJev57YESgfMz8YCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK2TOkgN4Ukbv1W2OfoZf/HmxTVhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGYzZDA2MDctMDZjNS0z ZmEwLWFlYjQtNGFhNmM4Y2FjN2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKLw7Z8cPe2c4WL8Hgs+9hsrhL3pJQYx6moqfYsS8omS+t3ErejuHDOk lecNeVhKKn9vuyHIRSddhuaKrKJToMb5wIONTUCmqUwwG3Dy3/wGmI+OpFz6vqOH UhYCliahoV0Lgbgyk5GMxN523LjEYCMmvkyzLR0+vuHZO8vf4+ODjq6uZCXjbiil 8ECejOAtErQb8qz63jWYlo8EN8bxIkjc9goAXga4KV5wdBanyUv5Q9GmzynIg4EK b62D1TQbdCFn9neelve4I2foaNwYOXDqV4cgTMArqf7y6FLgr72y9ZcKg8nSKFJX gdelu7JUwY+xpkncg64pfevh8D3SzPI= -----END CERTIFICATE-----Generated at Thu Mar 26 15:02:04 2026 by rpki-client