$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/eb4f3dda-fc1e-3e2b-8eae-576ef396c7a2.roa File: eb4f3dda-fc1e-3e2b-8eae-576ef396c7a2.roa (raw, json) Hash identifier: cAqC2kEgJXSick8Tm9qekNRKbj5uF9gqgEJ3OaAFmFQ= Subject key identifier: 1E:94:E7:DD:BA:41:DF:7A:C9:A9:AD:58:BF:A4:E8:CB:34:63:D4:1E Certificate issuer: /CN=1f4a5fa9-723d-410e-a75f-ffc7662c530a Certificate serial: 010D0C9F4328584D44FA3FAA81B2BFE4654DB200 Authority key identifier: 81:34:75:FE:DC:F5:F0:A4:06:EA:39:8E:4F:60:97:68:60:C5:3D:4F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/eb4f3dda-fc1e-3e2b-8eae-576ef396c7a2.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 14618 IP address blocks: 198.99.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/1f4a5fa9-723d-410e-a75f-ffc7662c530a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/1f4a5fa9-723d-410e-a75f-ffc7662c530a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:3f:aa:81:b2:bf:e4:65:4d:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f4a5fa9-723d-410e-a75f-ffc7662c530a Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=74200f05-8907-423f-b6ae-d61542584056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:27:8f:87:35:58:8d:05:82:a1:60:27:76:fd: c3:2d:d6:ad:61:14:f1:15:cf:bf:49:ad:9d:20:9b: 31:9c:84:4d:d4:fb:63:38:b2:12:4a:a3:49:70:9a: 64:48:c9:09:80:f5:20:ea:42:63:39:ce:ff:71:9b: e0:ba:b2:9d:94:06:b8:cc:6e:50:0c:18:44:34:20: e6:08:a8:ea:b2:b5:b4:f3:37:ad:f2:4e:04:3d:2a: 78:65:f1:43:47:58:90:97:7f:85:be:dd:59:59:ca: 7c:5c:8f:57:97:4a:31:c0:45:e2:a3:70:25:05:a3: e6:4f:80:fe:1e:96:2c:07:14:3a:fa:d3:e2:4f:d2: ef:ea:bf:57:60:6a:40:42:6b:a6:64:b9:c2:b0:cb: a9:f7:a2:4c:10:b9:d3:c3:33:e8:44:58:ae:f1:3f: ac:74:eb:0b:94:be:0f:90:41:18:03:a0:21:b4:ca: 9c:85:bb:b8:07:fc:8b:dd:08:59:07:a0:db:26:2b: 73:26:a8:33:79:6b:eb:1f:ce:8c:5b:17:ae:88:97: 39:47:8c:bd:91:ea:1f:db:07:22:91:0f:68:38:ba: bf:d7:db:c2:1f:e8:59:2f:bb:13:cb:3f:35:5c:0d: 5c:8d:85:a5:23:f0:77:50:09:70:2c:18:bd:65:79: 59:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:94:E7:DD:BA:41:DF:7A:C9:A9:AD:58:BF:A4:E8:CB:34:63:D4:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/eb4f3dda-fc1e-3e2b-8eae-576ef396c7a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/1f4a5fa9-723d-410e-a75f-ffc7662c530a.crl X509v3 Authority Key Identifier: keyid:81:34:75:FE:DC:F5:F0:A4:06:EA:39:8E:4F:60:97:68:60:C5:3D:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a.cer sbgp-ipAddrBlock: critical IPv4: 198.99.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:f8:78:d0:78:c5:bb:0f:64:ca:0a:0d:49:42:b0:fe:84:9e: 38:da:be:d1:4b:9a:52:12:21:d4:64:f4:01:51:5b:9d:30:f8: 8c:b6:82:ad:e5:f3:dd:76:df:4f:30:a5:c4:f2:fb:00:44:24: 6c:80:4b:45:a7:4f:a5:1c:4a:97:11:8d:80:b3:17:48:d8:5e: 7e:d7:12:c9:1c:0f:c2:69:a2:a5:92:0a:2a:76:ff:57:eb:5c: 2f:0a:ca:9f:e8:48:50:ca:eb:32:a7:82:63:fd:d0:8b:c9:7c: 39:da:fd:64:53:b3:0f:66:9e:a5:16:57:b5:b6:ab:67:6d:06: b3:44:cd:92:ab:81:b3:99:90:29:12:4e:5c:1a:b1:ae:5f:ba: f6:13:ee:ec:dd:96:7d:08:74:55:30:44:a3:4c:f9:30:4e:0a: 8e:94:09:87:0c:7b:59:cf:26:2b:fd:37:d8:58:39:c3:9f:ec: 10:86:64:a5:9c:89:71:7a:e2:11:91:20:5f:75:ec:25:8d:bb: f3:15:d7:da:56:98:cb:c1:60:69:b0:9d:f7:c8:50:78:0a:c0: 2e:34:d0:a0:cb:88:85:eb:3f:44:5e:c0:db:86:d0:b0:a3:11: ef:c5:d1:e3:55:f6:39:82:f4:8a:49:ec:ee:40:e6:53:ad:17: 0b:5a:66:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+j+qgbK/5GVNsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY0YTVmYTktNzIzZC00MTBlLWE3NWYtZmZjNzY2MmM1 MzBhMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk NzQyMDBmMDUtODkwNy00MjNmLWI2YWUtZDYxNTQyNTg0MDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyePhzVYjQWCoWAndv3DLdatYRTxFc+/Sa2d IJsxnIRN1PtjOLISSqNJcJpkSMkJgPUg6kJjOc7/cZvgurKdlAa4zG5QDBhENCDm CKjqsrW08zet8k4EPSp4ZfFDR1iQl3+Fvt1ZWcp8XI9Xl0oxwEXio3AlBaPmT4D+ HpYsBxQ6+tPiT9Lv6r9XYGpAQmumZLnCsMup96JMELnTwzPoRFiu8T+sdOsLlL4P kEEYA6AhtMqchbu4B/yL3QhZB6DbJitzJqgzeWvrH86MWxeuiJc5R4y9keof2wci kQ9oOLq/19vCH+hZL7sTyz81XA1cjYWlI/B3UAlwLBi9ZXlZcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6U5926Qd96yamtWL+k6Ms0Y9QeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZjRh NWZhOS03MjNkLTQxMGUtYTc1Zi1mZmM3NjYyYzUzMGEvZWI0ZjNkZGEtZmMxZS0z ZTJiLThlYWUtNTc2ZWYzOTZjN2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWY0YTVmYTktNzIzZC00MTBlLWE3 NWYtZmZjNzY2MmM1MzBhLzFmNGE1ZmE5LTcyM2QtNDEwZS1hNzVmLWZmYzc2NjJj NTMwYS5jcmwwHwYDVR0jBBgwFoAUgTR1/tz18KQG6jmOT2CXaGDFPU8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZjRhNWZhOS03MjNkLTQxMGUtYTc1Zi1mZmM3 NjYyYzUzMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmOKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJr4eNB4xbsPZMoKDUlCsP6EnjjavtFLmlISIdRk9AFRW50w+Iy2gq3l 8912308wpcTy+wBEJGyAS0WnT6UcSpcRjYCzF0jYXn7XEskcD8JpoqWSCip2/1fr XC8Kyp/oSFDK6zKngmP90IvJfDna/WRTsw9mnqUWV7W2q2dtBrNEzZKrgbOZkCkS Tlwasa5fuvYT7uzdln0IdFUwRKNM+TBOCo6UCYcMe1nPJiv9N9hYOcOf7BCGZKWc iXF64hGRIF917CWNu/MV19pWmMvBYGmwnffIUHgKwC400KDLiIXrP0RewNuG0LCj Ee/F0eNV9jmC9IpJ7O5A5lOtFwtaZq4= -----END CERTIFICATE-----Generated at Thu Mar 26 03:46:31 2026 by rpki-client