$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/18187cff-159b-3f88-aa27-6e6e06aa0b90.roa File: 18187cff-159b-3f88-aa27-6e6e06aa0b90.roa (raw, json) Hash identifier: 3vkSOcmtr/p6CJkUyqxlYf8ZWdP683z7RBoVZxVDR88= Subject key identifier: 35:00:77:78:42:4D:86:54:7E:21:8C:FC:EC:B4:7F:1E:A4:0A:E7:83 Certificate issuer: /CN=11150dfe-c654-4719-b6c3-642628555522 Certificate serial: 010D0C9F4328584D386A51983AF805CB7049E0C0 Authority key identifier: 51:71:BD:1F:48:FA:8B:C2:3A:56:A7:14:30:0E:99:0B:B9:E8:5E:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/18187cff-159b-3f88-aa27-6e6e06aa0b90.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 15191 IP address blocks: 198.29.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/11150dfe-c654-4719-b6c3-642628555522.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/11150dfe-c654-4719-b6c3-642628555522.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:51:98:3a:f8:05:cb:70:49:e0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11150dfe-c654-4719-b6c3-642628555522 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=1f598c01-ca73-4782-ae46-f0c55e2cafac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e2:ed:cb:8b:1d:d9:09:c6:16:2c:da:ea:34: a8:50:0b:50:05:c6:d2:c0:6c:85:06:ea:38:55:99: 3c:8f:f8:00:42:14:68:7e:c7:c0:2d:03:10:24:cd: 41:2d:a4:aa:b1:06:69:e8:30:fc:b7:99:16:17:d5: 35:d2:99:80:70:89:e2:72:aa:60:f0:47:6a:a1:df: 6d:8e:8b:82:95:57:7d:64:c2:94:eb:b5:35:36:26: 67:b5:eb:7a:82:d6:6f:0f:aa:77:40:ca:2d:a6:ef: 9c:9e:07:04:df:8a:a3:19:c9:7f:85:e1:ea:97:30: ce:af:3c:72:12:15:6b:d3:5d:37:82:7c:3b:b0:e8: d8:5f:b0:3d:a5:86:26:50:c3:fe:f0:4e:e4:81:68: f9:78:d2:0e:d3:de:6b:a7:25:f2:4b:4c:75:e9:e6: 98:ca:31:b6:44:53:04:fe:d6:ee:db:f3:18:32:b4: c7:cb:aa:92:a1:70:71:5e:02:52:a1:4e:e8:8e:7f: 9a:ba:e0:eb:df:1d:09:39:a4:d1:82:f9:ec:7c:90: a5:0d:0f:24:f0:de:03:5f:5a:8e:3a:af:b0:b4:28: e7:eb:46:d0:b0:43:3a:1f:eb:2a:4e:ca:b6:25:0d: d5:cb:90:87:b1:dc:3b:f0:93:28:2d:5e:cf:79:b8: 3e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:00:77:78:42:4D:86:54:7E:21:8C:FC:EC:B4:7F:1E:A4:0A:E7:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/18187cff-159b-3f88-aa27-6e6e06aa0b90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522/11150dfe-c654-4719-b6c3-642628555522.crl X509v3 Authority Key Identifier: keyid:51:71:BD:1F:48:FA:8B:C2:3A:56:A7:14:30:0E:99:0B:B9:E8:5E:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11150dfe-c654-4719-b6c3-642628555522.cer sbgp-ipAddrBlock: critical IPv4: 198.29.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:ed:dd:55:37:29:1e:b4:76:c1:0b:81:c1:5a:ba:b7:d3:d0: ce:76:51:f2:ec:5f:d1:b2:3d:b1:34:e1:8b:7c:9d:49:27:00: 64:95:65:23:91:f1:bb:da:e9:f3:3c:8f:c0:33:a5:ed:04:b5: 53:ca:0e:f9:76:2d:e4:76:4f:73:af:1d:c5:0a:be:01:27:7d: 2f:74:31:44:b7:ca:4d:97:dc:aa:f4:ed:8f:57:02:c5:37:7c: 46:52:8e:b5:d0:6c:42:df:11:52:1d:cc:d6:4b:c7:29:3a:57: 5d:e7:c2:f4:f5:49:29:2e:c2:3d:e7:94:d5:d7:b6:9b:58:c8: df:2e:d7:b3:d9:cb:3d:1f:a6:2b:87:95:93:50:00:c3:74:ad: b0:cd:d3:3a:0e:1f:0b:42:36:24:2f:c9:7c:66:84:ca:da:1c: 73:f9:0b:e1:58:40:36:78:fa:af:73:f2:48:2a:55:11:fc:75: 38:0d:32:5b:68:d4:fb:4e:75:db:75:49:cb:34:ec:4a:a1:17: 3f:d2:be:1c:5b:52:a4:06:c6:06:f5:05:ea:69:cb:14:21:03: d5:73:6e:f2:94:d1:a4:33:0b:33:4a:77:a1:3a:82:64:4d:99: c1:21:16:97:32:9a:af:75:b3:a2:30:8d:c9:00:22:b7:fd:c1: 5a:91:b4:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04alGYOvgFy3BJ4MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTExNTBkZmUtYzY1NC00NzE5LWI2YzMtNjQyNjI4NTU1 NTIyMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk MWY1OThjMDEtY2E3My00NzgyLWFlNDYtZjBjNTVlMmNhZmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOLty4sd2QnGFiza6jSoUAtQBcbSwGyFBuo4 VZk8j/gAQhRofsfALQMQJM1BLaSqsQZp6DD8t5kWF9U10pmAcInicqpg8Edqod9t jouClVd9ZMKU67U1NiZntet6gtZvD6p3QMotpu+cngcE34qjGcl/heHqlzDOrzxy EhVr0103gnw7sOjYX7A9pYYmUMP+8E7kgWj5eNIO095rpyXyS0x16eaYyjG2RFME /tbu2/MYMrTHy6qSoXBxXgJSoU7ojn+auuDr3x0JOaTRgvnsfJClDQ8k8N4DX1qO Oq+wtCjn60bQsEM6H+sqTsq2JQ3Vy5CHsdw78JMoLV7Pebg+ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUAd3hCTYZUfiGM/Oy0fx6kCueDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xMTE1 MGRmZS1jNjU0LTQ3MTktYjZjMy02NDI2Mjg1NTU1MjIvMTgxODdjZmYtMTU5Yi0z Zjg4LWFhMjctNmU2ZTA2YWEwYjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTExNTBkZmUtYzY1NC00NzE5LWI2 YzMtNjQyNjI4NTU1NTIyLzExMTUwZGZlLWM2NTQtNDcxOS1iNmMzLTY0MjYyODU1 NTUyMi5jcmwwHwYDVR0jBBgwFoAUUXG9H0j6i8I6VqcUMA6ZC7noXlkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xMTE1MGRmZS1jNjU0LTQ3MTktYjZjMy02NDI2 Mjg1NTU1MjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExh0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXt3VU3KR60dsELgcFaurfT0M52UfLsX9GyPbE04Yt8nUknAGSVZSOR 8bva6fM8j8Azpe0EtVPKDvl2LeR2T3OvHcUKvgEnfS90MUS3yk2X3Kr07Y9XAsU3 fEZSjrXQbELfEVIdzNZLxyk6V13nwvT1SSkuwj3nlNXXtptYyN8u17PZyz0fpiuH lZNQAMN0rbDN0zoOHwtCNiQvyXxmhMraHHP5C+FYQDZ4+q9z8kgqVRH8dTgNMlto 1PtOddt1Scs07EqhFz/SvhxbUqQGxgb1BeppyxQhA9VzbvKU0aQzCzNKd6E6gmRN mcEhFpcymq91s6IwjckAIrf9wVqRtFw= -----END CERTIFICATE-----Generated at Fri Mar 27 02:45:43 2026 by rpki-client