$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7153842f-a76e-3eda-9036-6ad8951fc9c4.roa File: 7153842f-a76e-3eda-9036-6ad8951fc9c4.roa (raw, json) Hash identifier: E/dpoW60N/NKWS1xth/u3W2PHIp1IkmXxOUnsrBpQXU= Subject key identifier: 89:3A:E2:16:39:7E:F9:05:D7:53:C5:BC:1A:47:70:55:43:D5:11:8C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D492A4459B49CB0C511E7A080 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7153842f-a76e-3eda-9036-6ad8951fc9c4.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 36624 IP address blocks: 198.17.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:44:59:b4:9c:b0:c5:11:e7:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=c7e987f0-3cce-416d-a8ae-883c73252e99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1e:b6:19:10:2a:09:71:dd:a0:8f:05:fd:51: 0b:62:67:c1:ad:8f:53:4b:b4:f1:8c:cb:f9:a7:ae: 61:39:85:e8:99:79:6c:33:28:2c:d7:e0:98:b5:cc: 2c:2e:6e:c2:1f:ac:03:e3:1d:3c:4c:99:00:33:3e: 9a:26:bd:38:44:ae:53:20:c2:f5:56:ef:cd:1e:3c: 58:21:5a:ff:96:82:02:72:d7:bf:da:4b:7c:ba:91: d1:85:57:64:4b:35:f6:7e:03:78:01:d5:59:fd:a9: e3:24:b8:de:6a:b6:f3:67:a3:47:84:e6:d5:ca:03: 3d:0d:9b:4f:27:6e:3c:47:23:d3:22:53:07:67:23: 87:6d:cc:9b:6a:25:63:5b:ff:e4:37:eb:d5:da:23: 06:34:5a:6f:8a:92:2c:38:68:70:83:8d:0a:1c:f9: 26:71:f4:6a:c6:58:8e:19:6a:df:57:3c:cb:47:58: 3e:6b:22:47:e4:dc:73:a7:43:b1:e2:ea:3f:6e:07: 7e:45:09:60:b6:f3:5d:56:e4:7e:21:74:ba:a5:b7: 5b:63:b9:c3:35:66:37:10:cf:55:ea:30:cd:92:41: 75:2c:38:f7:05:0d:2b:82:a5:9b:b5:d4:b4:74:d6: c7:fd:f1:cb:5e:fc:74:f9:62:05:15:bf:51:81:a1: 4d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:3A:E2:16:39:7E:F9:05:D7:53:C5:BC:1A:47:70:55:43:D5:11:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7153842f-a76e-3eda-9036-6ad8951fc9c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 198.17.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:25:b9:76:7b:e0:55:a0:3a:b8:a7:08:0c:5c:78:57:6e:d3: 36:42:2b:be:fa:a1:de:04:c6:58:4c:bd:c1:42:ab:87:f8:55: ad:eb:d6:b0:5f:14:d3:1a:d8:99:19:c8:b0:26:bf:01:ab:ea: d3:df:23:e1:99:ac:b1:51:dd:69:12:e4:a6:02:9c:6b:ca:f0: 71:51:ac:5c:ae:cb:0e:0e:d3:97:8b:9a:4e:30:f3:f3:75:cd: d0:90:4d:2f:b8:9d:d1:1d:ab:fb:c6:6c:80:53:68:85:00:ee: b1:3d:5c:f7:39:6c:91:c3:63:34:65:7d:91:bd:3c:58:7a:d6: 4e:0c:f1:52:c4:c7:36:10:46:ec:b1:8e:02:05:53:14:14:ca: 58:f5:ab:50:d9:21:fc:3f:38:1e:80:67:74:17:e9:e3:51:d1: 68:89:88:69:db:35:1a:f8:10:74:50:b5:d6:24:19:89:9a:71: 0f:43:58:05:09:d0:f2:22:d3:a1:23:b9:e2:1d:43:57:1b:2d: d4:53:05:45:fc:c4:2a:5a:ae:e7:6b:3c:f5:cf:d6:d1:88:d9: b5:16:8f:5f:05:10:f0:55:20:b4:50:2b:a0:29:14:e9:be:b5: 49:18:b8:f2:da:55:44:40:a5:9c:7a:6b:57:b0:7a:5d:f6:94: ab:77:a8:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKkRZtJywxRHnoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk YzdlOTg3ZjAtM2NjZS00MTZkLWE4YWUtODgzYzczMjUyZTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2h62GRAqCXHdoI8F/VELYmfBrY9TS7TxjMv5 p65hOYXomXlsMygs1+CYtcwsLm7CH6wD4x08TJkAMz6aJr04RK5TIML1Vu/NHjxY IVr/loICcte/2kt8upHRhVdkSzX2fgN4AdVZ/anjJLjearbzZ6NHhObVygM9DZtP J248RyPTIlMHZyOHbcybaiVjW//kN+vV2iMGNFpvipIsOGhwg40KHPkmcfRqxliO GWrfVzzLR1g+ayJH5Nxzp0Ox4uo/bgd+RQlgtvNdVuR+IXS6pbdbY7nDNWY3EM9V 6jDNkkF1LDj3BQ0rgqWbtdS0dNbH/fHLXvx0+WIFFb9RgaFNeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIk64hY5fvkF11PFvBpHcFVD1RGMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzE1Mzg0MmYtYTc2ZS0z ZWRhLTkwMzYtNmFkODk1MWZjOWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcluXZ74FWgOrinCAxceFdu0zZCK776od4ExlhMvcFCq4f4Va3r1rBf FNMa2JkZyLAmvwGr6tPfI+GZrLFR3WkS5KYCnGvK8HFRrFyuyw4O05eLmk4w8/N1 zdCQTS+4ndEdq/vGbIBTaIUA7rE9XPc5bJHDYzRlfZG9PFh61k4M8VLExzYQRuyx jgIFUxQUylj1q1DZIfw/OB6AZ3QX6eNR0WiJiGnbNRr4EHRQtdYkGYmacQ9DWAUJ 0PIi06EjueIdQ1cbLdRTBUX8xCparudrPPXP1tGI2bUWj18FEPBVILRQK6ApFOm+ tUkYuPLaVURApZx6a1ewel32lKt3qBo= -----END CERTIFICATE-----Generated at Thu Mar 26 15:47:45 2026 by rpki-client