$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/7cfe87a7-39a6-3b1d-86bc-7ce644a92427.roa File: 7cfe87a7-39a6-3b1d-86bc-7ce644a92427.roa (raw, json) Hash identifier: 0mLngI3S55IGkxE5BjUyQh76OUc4z4uUwbEgF4te+EM= Subject key identifier: 8A:33:CC:40:53:B6:41:83:C8:7E:A1:30:6B:CB:14:14:EF:2C:54:42 Certificate issuer: /CN=1a4a4def-a575-48e1-87d5-56942434422a Certificate serial: 010D0C9F4328584D386A51E16714D187368CDC00 Authority key identifier: 05:6E:18:DE:54:9A:DE:FE:A9:3F:7C:8A:E8:72:D2:89:2F:26:2F:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/7cfe87a7-39a6-3b1d-86bc-7ce644a92427.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 8987 IP address blocks: 198.22.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/1a4a4def-a575-48e1-87d5-56942434422a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/1a4a4def-a575-48e1-87d5-56942434422a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:51:e1:67:14:d1:87:36:8c:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a4a4def-a575-48e1-87d5-56942434422a Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=491df2cb-4e6d-49eb-824a-5c5d7efe79f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:6b:88:2a:c7:66:c4:ee:5e:6e:a0:ba:6d:b6: e6:80:ab:48:b2:66:7b:12:22:8d:cf:20:c1:cb:91: 2e:ea:38:06:40:7f:6d:65:21:61:89:ea:19:4a:ec: b3:d3:ff:09:04:cf:c3:8d:00:34:91:9a:ef:18:2d: aa:01:28:2e:7d:a4:f4:63:bb:be:ac:42:87:62:bf: c3:20:12:7e:80:19:9d:09:a6:4d:24:29:b1:19:8b: 9a:9d:b6:9c:7a:1a:4a:45:9e:d4:0e:0a:10:02:69: 65:84:25:51:dd:a0:d2:13:3d:9d:52:a0:61:3c:b1: 30:e6:a5:1c:a2:c7:e3:6a:6c:80:d4:7b:2d:13:1e: ba:08:df:7a:dc:d0:55:b1:f2:c5:16:73:7e:16:c2: 25:e0:9d:a9:4b:28:3e:53:87:01:b8:84:1f:a0:2d: bd:f3:f6:bb:2b:97:52:67:9c:92:72:97:3d:d1:88: 13:69:af:e5:bd:26:2f:88:70:f6:48:1a:94:fd:db: 20:a7:10:4e:de:00:5f:eb:d7:c8:0c:a9:bf:63:70: 1e:05:26:52:64:c7:52:77:ae:0a:cd:ab:70:bf:a6: 0f:a5:a3:db:3d:d6:a0:e9:2e:46:44:9e:c3:3e:80: 3c:71:c7:6d:bf:fc:a4:dc:30:8e:0e:40:82:94:53: 06:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:33:CC:40:53:B6:41:83:C8:7E:A1:30:6B:CB:14:14:EF:2C:54:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/7cfe87a7-39a6-3b1d-86bc-7ce644a92427.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/1a4a4def-a575-48e1-87d5-56942434422a.crl X509v3 Authority Key Identifier: keyid:05:6E:18:DE:54:9A:DE:FE:A9:3F:7C:8A:E8:72:D2:89:2F:26:2F:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a.cer sbgp-ipAddrBlock: critical IPv4: 198.22.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:e4:d0:6a:2b:5e:1c:ea:67:8f:1a:fe:01:bb:34:3d:af:28: a0:0e:b6:a2:43:48:03:ce:2d:35:33:96:25:0c:71:65:8c:66: f2:9a:c1:3d:83:f6:3a:98:b5:db:8a:69:99:58:58:df:b2:ea: cc:34:b6:f6:28:f2:40:01:71:36:54:c8:46:12:e0:ef:3d:2e: 93:b8:06:e1:8e:22:52:3b:e1:27:54:a2:56:d2:eb:64:d8:7a: bc:9c:9b:a8:fa:87:1a:5b:1e:a2:d4:d0:9b:85:2f:a8:5d:c2: 2b:7d:86:f1:dd:a9:6c:a4:3b:13:51:82:1e:3f:7f:46:5e:af: 4a:37:35:7e:5d:00:b6:67:c0:26:d2:3b:55:62:f4:9c:7e:18: 33:0f:57:33:ac:ce:66:2c:ed:f5:d9:72:72:b8:3a:e3:e7:2b: ad:97:bf:84:98:80:d0:f8:55:80:f4:a5:80:49:e7:d4:c3:b5: c9:fe:b6:5a:49:08:8e:c3:9b:cf:c6:b9:54:8c:fc:ad:84:ad: 26:37:1b:48:ca:4d:b8:7a:76:34:74:a0:1d:43:6b:2a:c1:15: 78:a7:32:65:80:bb:f6:61:fd:e4:c0:06:81:b0:f5:f5:99:76: 44:47:9b:2b:af:10:a2:88:a5:f2:2e:67:b8:6b:f9:80:25:03: 44:a0:c6:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04alHhZxTRhzaM3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE0YTRkZWYtYTU3NS00OGUxLTg3ZDUtNTY5NDI0MzQ0 MjJhMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk NDkxZGYyY2ItNGU2ZC00OWViLTgyNGEtNWM1ZDdlZmU3OWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmuIKsdmxO5ebqC6bbbmgKtIsmZ7EiKNzyDB y5Eu6jgGQH9tZSFhieoZSuyz0/8JBM/DjQA0kZrvGC2qASgufaT0Y7u+rEKHYr/D IBJ+gBmdCaZNJCmxGYuanbacehpKRZ7UDgoQAmllhCVR3aDSEz2dUqBhPLEw5qUc osfjamyA1HstEx66CN963NBVsfLFFnN+FsIl4J2pSyg+U4cBuIQfoC298/a7K5dS Z5yScpc90YgTaa/lvSYviHD2SBqU/dsgpxBO3gBf69fIDKm/Y3AeBSZSZMdSd64K zatwv6YPpaPbPdag6S5GRJ7DPoA8ccdtv/yk3DCODkCClFMG8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIozzEBTtkGDyH6hMGvLFBTvLFRCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xYTRh NGRlZi1hNTc1LTQ4ZTEtODdkNS01Njk0MjQzNDQyMmEvN2NmZTg3YTctMzlhNi0z YjFkLTg2YmMtN2NlNjQ0YTkyNDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWE0YTRkZWYtYTU3NS00OGUxLTg3 ZDUtNTY5NDI0MzQ0MjJhLzFhNGE0ZGVmLWE1NzUtNDhlMS04N2Q1LTU2OTQyNDM0 NDIyYS5jcmwwHwYDVR0jBBgwFoAUBW4Y3lSa3v6pP3yK6HLSiS8mL0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xYTRhNGRlZi1hNTc1LTQ4ZTEtODdkNS01Njk0 MjQzNDQyMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhajMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDk0GorXhzqZ48a/gG7ND2vKKAOtqJDSAPOLTUzliUMcWWMZvKawT2D 9jqYtduKaZlYWN+y6sw0tvYo8kABcTZUyEYS4O89LpO4BuGOIlI74SdUolbS62TY erycm6j6hxpbHqLU0JuFL6hdwit9hvHdqWykOxNRgh4/f0Zer0o3NX5dALZnwCbS O1Vi9Jx+GDMPVzOszmYs7fXZcnK4OuPnK62Xv4SYgND4VYD0pYBJ59TDtcn+tlpJ CI7Dm8/GuVSM/K2ErSY3G0jKTbh6djR0oB1DayrBFXinMmWAu/Zh/eTABoGw9fWZ dkRHmyuvEKKIpfIuZ7hr+YAlA0SgxjI= -----END CERTIFICATE-----Generated at Thu Mar 26 18:31:07 2026 by rpki-client