$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/371f04d7-0be3-3e98-ba4d-0d4a6f0fa303.roa File: 371f04d7-0be3-3e98-ba4d-0d4a6f0fa303.roa (raw, json) Hash identifier: C0u/COFZLFSRe9J4OkwQUQxum036ooDK+Hk0MQeGo5M= Subject key identifier: 25:20:C3:75:1A:17:B6:10:6D:18:62:FC:80:5F:8D:1A:08:4A:B4:60 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D492A4EDB089C73E7AA5E02C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/371f04d7-0be3-3e98-ba4d-0d4a6f0fa303.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 396571 IP address blocks: 198.17.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:4e:db:08:9c:73:e7:aa:5e:02:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=d180e8e5-33af-43ac-806a-707e89c96366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e7:1a:7a:3c:fd:a7:ca:92:26:0a:3c:be:a9: c1:e9:38:7d:5b:0a:1f:51:7d:34:50:6f:a2:20:b8: 17:ef:57:9d:61:29:7e:c9:9a:28:ed:33:7a:6b:32: 54:3e:90:47:1b:ac:61:1a:6a:49:69:52:b7:fe:20: 44:e6:ef:bd:ee:f6:43:cc:b2:76:8d:35:2a:3c:70: 20:4a:0f:0f:3a:62:08:24:85:27:0b:6f:d6:e6:89: 83:9d:17:77:d6:64:d9:50:f8:86:ce:96:02:e1:f6: 6a:8a:de:8d:cc:bd:15:6b:9d:64:9d:1f:9b:ae:26: de:4c:6d:d2:ba:f7:c4:ad:88:af:d7:26:ad:11:9a: 64:8a:3e:4c:eb:db:43:13:4d:50:89:61:40:0d:98: ff:72:4e:d5:d1:e6:41:04:31:50:46:3e:cb:05:10: f7:75:82:b2:e3:bb:c1:f2:eb:1e:a7:8e:e0:f2:69: 89:69:48:99:47:63:ed:25:f2:35:a4:19:50:37:54: f8:ba:e7:49:12:52:b8:90:0a:32:07:eb:00:4f:0e: 8c:57:65:e4:16:52:59:d2:69:c0:66:57:ab:f7:0e: 22:fe:7a:29:9f:6b:b8:a5:98:d6:b2:ce:58:d5:56: 44:52:90:1f:a8:1b:c8:c0:b9:d1:01:ff:2d:13:7a: bc:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:20:C3:75:1A:17:B6:10:6D:18:62:FC:80:5F:8D:1A:08:4A:B4:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/371f04d7-0be3-3e98-ba4d-0d4a6f0fa303.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 198.17.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:15:69:0c:29:e7:f6:00:61:c3:23:b3:e9:ae:6e:e7:f1:2b: 93:32:b7:6c:c7:38:ff:ac:e0:43:84:7e:fc:a6:88:d7:c6:36: e7:ac:ad:e0:39:ba:3e:ff:d7:50:86:f3:55:18:03:00:a7:53: 23:a9:59:75:c8:0d:5e:fe:b4:bc:d3:d3:25:98:ed:8e:b1:cc: 8c:1a:34:3e:a4:80:cb:c9:97:12:0b:da:ba:4f:47:5b:78:ea: 3c:bd:95:d1:f9:c4:93:52:c8:8e:6e:76:a2:c1:e7:26:f6:37: 94:7e:98:78:eb:64:ee:04:de:92:9f:f3:ff:b8:5c:45:06:2f: 11:ee:61:86:61:ad:f2:42:ba:6d:e0:26:0d:09:7a:5f:ff:bd: cf:3b:d9:92:f2:97:76:41:fb:c6:81:48:da:1c:52:b6:d5:f6: fb:09:e7:bb:cb:ea:44:69:14:79:a9:f3:2d:8b:9c:4c:5e:b7: b3:bb:11:0d:2c:34:88:01:56:11:02:3e:30:18:80:1e:37:ce: e4:0b:5d:17:ce:aa:49:c7:9a:dc:bf:8f:a3:a7:2a:68:69:15: c8:b0:82:0d:ae:67:1a:80:14:df:b1:38:c5:92:2e:88:1f:13: 34:a6:8f:c1:cc:5d:d3:6d:b0:42:93:ae:72:a3:fe:b1:cb:08: e7:c5:6b:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKk7bCJxz56peAsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk ZDE4MGU4ZTUtMzNhZi00M2FjLTgwNmEtNzA3ZTg5Yzk2MzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+caejz9p8qSJgo8vqnB6Th9WwofUX00UG+i ILgX71edYSl+yZoo7TN6azJUPpBHG6xhGmpJaVK3/iBE5u+97vZDzLJ2jTUqPHAg Sg8POmIIJIUnC2/W5omDnRd31mTZUPiGzpYC4fZqit6NzL0Va51knR+bribeTG3S uvfErYiv1yatEZpkij5M69tDE01QiWFADZj/ck7V0eZBBDFQRj7LBRD3dYKy47vB 8usep47g8mmJaUiZR2PtJfI1pBlQN1T4uudJElK4kAoyB+sATw6MV2XkFlJZ0mnA Zler9w4i/nopn2u4pZjWss5Y1VZEUpAfqBvIwLnRAf8tE3q8AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUgw3UaF7YQbRhi/IBfjRoISrRgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzcxZjA0ZDctMGJlMy0z ZTk4LWJhNGQtMGQ0YTZmMGZhMzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKcVaQwp5/YAYcMjs+mubufxK5Myt2zHOP+s4EOEfvymiNfGNuesreA5 uj7/11CG81UYAwCnUyOpWXXIDV7+tLzT0yWY7Y6xzIwaND6kgMvJlxIL2rpPR1t4 6jy9ldH5xJNSyI5udqLB5yb2N5R+mHjrZO4E3pKf8/+4XEUGLxHuYYZhrfJCum3g Jg0Jel//vc872ZLyl3ZB+8aBSNocUrbV9vsJ57vL6kRpFHmp8y2LnExet7O7EQ0s NIgBVhECPjAYgB43zuQLXRfOqknHmty/j6OnKmhpFciwgg2uZxqAFN+xOMWSLogf EzSmj8HMXdNtsEKTrnKj/rHLCOfFa1Y= -----END CERTIFICATE-----Generated at Thu Mar 26 13:36:44 2026 by rpki-client