$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f0331bfe-1713-3aaf-a3b9-09abff53dd86.roa File: f0331bfe-1713-3aaf-a3b9-09abff53dd86.roa (raw, json) Hash identifier: W8jHDbXK8TVAX5XOrKIKmD3AV4XYv39iTC+Wr0cm9ys= Subject key identifier: DA:38:56:E2:59:9D:81:1B:82:C3:05:8C:84:AA:84:CB:61:14:99:91 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D492A7ABBF337A5269EEED000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f0331bfe-1713-3aaf-a3b9-09abff53dd86.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 396572 IP address blocks: 198.17.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:7a:bb:f3:37:a5:26:9e:ee:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=b992dff3-2027-48e9-8f64-6bfdecbc9580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:49:eb:d5:40:58:20:e9:20:cc:cf:1f:c2:87: 60:04:23:84:3f:48:64:95:6b:52:c4:27:71:d7:00: b0:1c:a1:90:c2:7e:1d:d2:8d:9f:70:e6:4d:17:73: f0:41:67:6f:b7:e1:6c:09:bb:4d:ee:5a:1c:a1:8e: c2:a8:6b:54:27:29:e2:26:4a:fc:9d:4a:5a:a0:e0: 06:ad:99:c8:42:59:ba:b2:66:34:a8:7b:19:9c:8c: 77:1c:6b:48:94:68:7f:3b:d8:a5:02:e7:55:75:d9: f8:95:18:cd:0e:8e:95:30:24:1e:f9:be:cd:bf:ce: 59:f8:bf:f2:de:8e:86:77:7b:4e:9f:41:31:ed:3d: e7:ec:e8:b5:20:a1:78:22:37:c0:f2:c5:b6:07:a9: c8:5b:e5:e4:f1:1d:ea:c3:80:c7:b9:ff:91:bd:cd: b9:26:a6:02:27:97:d4:44:f5:d3:77:93:3c:e5:ea: de:25:c3:19:b4:1c:8f:23:82:32:3a:74:b5:a2:76: cc:d7:25:e7:27:8c:2b:f4:fd:0d:8d:14:1c:c5:2c: 64:2a:ff:2b:f5:a5:da:75:ad:6d:56:67:01:77:3c: 7c:cd:c4:d5:09:c4:90:40:bd:04:25:3e:ae:9f:14: d5:80:da:11:c3:04:38:e0:67:07:6b:6f:4e:1d:93: dd:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:38:56:E2:59:9D:81:1B:82:C3:05:8C:84:AA:84:CB:61:14:99:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f0331bfe-1713-3aaf-a3b9-09abff53dd86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 198.17.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:6c:38:b8:81:07:2e:94:fd:91:a9:c8:68:a3:12:6c:18:e6: 0d:c0:07:3a:a3:63:21:47:7d:10:24:02:ac:f8:09:55:7a:cf: 2f:fa:2c:29:34:36:fd:91:b0:81:82:96:36:69:c7:bb:de:12: a1:4f:32:a7:68:79:84:5a:99:08:17:bc:35:67:5f:52:c2:0c: fd:ce:d6:ba:65:c3:2c:82:73:f1:a8:08:29:cf:69:1a:10:f3: 86:02:1f:90:57:09:e1:8e:6a:a9:2f:a2:e7:41:b3:51:84:d5: 27:08:a8:db:bf:1b:31:d6:2d:b6:bb:b1:58:26:67:98:ff:5a: c2:07:5d:06:5f:18:eb:72:13:a1:c3:cc:3c:ef:81:66:be:fa: 0c:98:0c:b4:4d:83:d8:11:e4:d7:47:e6:c6:51:74:11:60:d1: 1c:e8:b1:d6:50:77:c4:66:ec:d8:bc:c6:09:5c:b4:ff:18:cb: 6d:ee:be:3a:77:a0:6f:0e:83:82:b0:b5:b2:7c:db:47:c3:9f: f7:f6:79:69:bf:bb:4b:09:d5:b2:57:91:a6:e0:87:44:05:35: 2c:21:df:df:27:c9:d3:4a:9d:0f:87:47:4c:65:db:9c:17:56: 64:95:2d:31:24:77:be:7f:26:95:e9:d6:42:09:64:1b:97:fa: 9c:ef:3d:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKnq78zelJp7u0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk Yjk5MmRmZjMtMjAyNy00OGU5LThmNjQtNmJmZGVjYmM5NTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0nr1UBYIOkgzM8fwodgBCOEP0hklWtSxCdx 1wCwHKGQwn4d0o2fcOZNF3PwQWdvt+FsCbtN7locoY7CqGtUJyniJkr8nUpaoOAG rZnIQlm6smY0qHsZnIx3HGtIlGh/O9ilAudVddn4lRjNDo6VMCQe+b7Nv85Z+L/y 3o6Gd3tOn0Ex7T3n7Oi1IKF4IjfA8sW2B6nIW+Xk8R3qw4DHuf+Rvc25JqYCJ5fU RPXTd5M85ereJcMZtByPI4IyOnS1onbM1yXnJ4wr9P0NjRQcxSxkKv8r9aXada1t VmcBdzx8zcTVCcSQQL0EJT6unxTVgNoRwwQ44GcHa29OHZPd5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNo4VuJZnYEbgsMFjISqhMthFJmRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjAzMzFiZmUtMTcxMy0z YWFmLWEzYjktMDlhYmZmNTNkZDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlsOLiBBy6U/ZGpyGijEmwY5g3ABzqjYyFHfRAkAqz4CVV6zy/6LCk0 Nv2RsIGCljZpx7veEqFPMqdoeYRamQgXvDVnX1LCDP3O1rplwyyCc/GoCCnPaRoQ 84YCH5BXCeGOaqkvoudBs1GE1ScIqNu/GzHWLba7sVgmZ5j/WsIHXQZfGOtyE6HD zDzvgWa++gyYDLRNg9gR5NdH5sZRdBFg0RzosdZQd8Rm7Ni8xglctP8Yy23uvjp3 oG8Og4KwtbJ820fDn/f2eWm/u0sJ1bJXkabgh0QFNSwh398nydNKnQ+HR0xl25wX VmSVLTEkd75/JpXp1kIJZBuX+pzvPRQ= -----END CERTIFICATE-----Generated at Thu Mar 26 11:16:35 2026 by rpki-client