$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf0f3317-f832-3f27-9c50-54bdcaf8eb3f.roa File: bf0f3317-f832-3f27-9c50-54bdcaf8eb3f.roa (raw, json) Hash identifier: ZFbMxMvio2P93rjfv9unK/vSdVwAP1RNHbYxRVo6LuA= Subject key identifier: 3E:CE:FA:F9:98:8A:78:67:CB:E5:9A:B3:EC:83:60:C9:04:C1:5E:5C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D492A4A13895DFF662F973500 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf0f3317-f832-3f27-9c50-54bdcaf8eb3f.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 396588 IP address blocks: 198.17.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:4a:13:89:5d:ff:66:2f:97:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=2560f907-1562-4000-957b-3974f8bcd4ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:60:9b:80:c5:02:b0:cf:ff:97:1e:75:c9:92: 00:3e:99:9a:90:f5:6d:64:b1:76:8e:f0:59:65:57: dc:6b:31:76:f4:2a:53:71:21:2a:d4:62:db:36:38: 9d:93:cd:90:80:6f:0c:e9:1e:13:18:fb:93:89:50: 64:f0:e6:87:9c:06:70:89:24:49:f6:01:79:32:63: 20:66:6c:9c:c8:d7:ef:99:e3:d3:7e:aa:71:30:68: 92:ae:5d:f1:b4:78:85:de:ca:6b:80:95:57:9e:63: 55:b6:d9:f8:45:ec:1a:cf:54:0b:4f:f4:df:7b:6b: b5:50:63:34:30:87:e0:61:7d:4d:de:50:98:2c:82: f6:6b:59:b9:fd:e8:1d:f2:83:1c:5f:7e:06:c2:d0: b8:35:a1:86:ed:d9:12:a3:91:d3:06:d6:2d:8f:9b: 49:c5:56:c9:76:20:6c:0c:09:23:03:fa:4f:8a:a6: 07:da:c8:c9:f8:69:91:93:f3:6b:d0:ab:c1:45:ba: c8:d9:b1:37:75:fd:0c:e8:39:45:7d:e7:6b:dd:bb: e3:81:b0:0f:4c:93:23:78:36:9e:8b:86:0e:67:9b: 7c:6e:96:a6:1d:80:b5:3a:76:05:6e:d0:d5:cc:7e: 08:2a:a7:9c:b4:6e:d4:86:2e:d0:89:c2:14:fc:c1: 1b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:CE:FA:F9:98:8A:78:67:CB:E5:9A:B3:EC:83:60:C9:04:C1:5E:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf0f3317-f832-3f27-9c50-54bdcaf8eb3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 198.17.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:2f:cb:0e:65:8a:d7:f7:da:74:a4:f6:80:4a:91:58:8f:4d: 8d:c2:af:b5:c0:0e:b1:d4:d5:ad:c9:85:4a:87:67:58:f7:62: 70:07:20:ba:a4:07:1b:c5:97:8e:7a:56:91:64:d5:83:78:63: 4e:5d:3b:ee:0d:f0:a8:e8:39:e1:97:68:5e:85:27:26:43:38: 80:41:ef:cd:4b:cb:b6:c6:78:ea:7e:33:7a:ac:cb:63:5c:49: b0:9d:79:6b:06:8f:0f:53:90:44:ad:0e:e6:b7:b1:34:5d:ac: f1:79:61:f6:3d:03:c4:fc:fd:3c:7c:23:c8:ec:11:85:60:35: 7d:0b:14:9a:e9:9e:64:07:9f:31:a6:93:c8:ef:4d:85:d1:a1: bd:b0:87:3b:93:54:8d:1e:01:aa:d3:da:3c:31:b1:79:f3:f1: b2:04:f1:f1:70:d6:c3:7f:41:14:3a:62:00:bb:f0:55:6a:bd: 33:63:5d:80:e8:16:51:21:15:c1:fd:96:7c:27:f4:ea:4e:06: d6:2b:76:5e:e6:40:4e:1e:a3:bb:81:95:49:bf:9d:e8:3b:56: b5:d1:d1:da:be:02:4e:21:29:77:13:15:9a:ac:aa:45:5e:c9: 92:70:c3:df:09:f7:30:8c:9f:59:96:88:c6:a6:22:7a:2f:be: 7f:b7:f7:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKkoTiV3/Zi+XNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk MjU2MGY5MDctMTU2Mi00MDAwLTk1N2ItMzk3NGY4YmNkNGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomCbgMUCsM//lx51yZIAPpmakPVtZLF2jvBZ ZVfcazF29CpTcSEq1GLbNjidk82QgG8M6R4TGPuTiVBk8OaHnAZwiSRJ9gF5MmMg ZmycyNfvmePTfqpxMGiSrl3xtHiF3sprgJVXnmNVttn4Rewaz1QLT/Tfe2u1UGM0 MIfgYX1N3lCYLIL2a1m5/egd8oMcX34GwtC4NaGG7dkSo5HTBtYtj5tJxVbJdiBs DAkjA/pPiqYH2sjJ+GmRk/Nr0KvBRbrI2bE3df0M6DlFfedr3bvjgbAPTJMjeDae i4YOZ5t8bpamHYC1OnYFbtDVzH4IKqectG7Uhi7QicIU/MEbIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7O+vmYinhny+Was+yDYMkEwV5cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmYwZjMzMTctZjgzMi0z ZjI3LTljNTAtNTRiZGNhZjhlYjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgvyw5litf32nSk9oBKkViPTY3Cr7XADrHU1a3JhUqHZ1j3YnAHILqk BxvFl456VpFk1YN4Y05dO+4N8KjoOeGXaF6FJyZDOIBB781Ly7bGeOp+M3qsy2Nc SbCdeWsGjw9TkEStDua3sTRdrPF5YfY9A8T8/Tx8I8jsEYVgNX0LFJrpnmQHnzGm k8jvTYXRob2whzuTVI0eAarT2jwxsXnz8bIE8fFw1sN/QRQ6YgC78FVqvTNjXYDo FlEhFcH9lnwn9OpOBtYrdl7mQE4eo7uBlUm/neg7VrXR0dq+Ak4hKXcTFZqsqkVe yZJww98J9zCMn1mWiMamInovvn+399I= -----END CERTIFICATE-----Generated at Thu Mar 26 16:27:05 2026 by rpki-client