$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/1c8e55e4-a977-35e7-a98f-eb28b6fa911b.roa File: 1c8e55e4-a977-35e7-a98f-eb28b6fa911b.roa (raw, json) Hash identifier: AL3p1mWEWsq+yT6fim6wxEBfL1zagOpgBrwtmYP4+kw= Subject key identifier: 2D:CD:F7:05:01:DC:F2:41:F4:BE:9C:CD:C2:D2:C2:6C:F2:C4:A5:D3 Certificate issuer: /CN=afd1fe3b-7e24-4d27-bb10-beb9ce2d6922 Certificate serial: 010D0C9F4328584D359FDDDD979D799F6905E300 Authority key identifier: EF:A3:2C:1E:56:34:10:F2:9F:36:33:5B:E1:73:DD:E6:59:C4:89:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/1c8e55e4-a977-35e7-a98f-eb28b6fa911b.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 36667 IP address blocks: 198.35.120.0/21 maxlen: 24 2620:c:8000::/48 maxlen: 48 2620:109:6000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:dd:dd:97:9d:79:9f:69:05:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afd1fe3b-7e24-4d27-bb10-beb9ce2d6922 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=d92fb624-9bdd-4c1c-a49f-624335f40b16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0f:1d:58:ca:92:59:03:56:09:48:54:39:0e: 80:36:9a:ce:2f:eb:16:5a:6c:45:28:48:2f:8a:0d: c0:b2:de:dd:bd:90:6a:5f:27:33:cc:de:ed:55:cb: c6:27:57:48:93:17:ae:c1:bf:51:b5:f8:2e:64:9d: 23:f5:fb:f2:97:6e:7a:70:e2:5a:8d:5b:79:55:93: 6c:90:40:5c:27:e6:e3:58:64:66:68:e1:70:70:50: a5:e6:43:46:85:fd:64:22:d5:f6:96:8a:a8:cf:c2: 40:94:91:0e:96:15:f0:f2:83:ed:c4:36:ce:b0:3d: d0:08:84:91:e8:dc:4e:d9:7d:72:66:16:dc:a7:c4: ef:f9:2e:3a:ec:21:5c:ea:44:4a:c4:ab:21:3a:17: 3e:a2:55:c5:d5:93:39:1c:64:e2:df:4b:3c:4c:e0: a8:d3:ca:3d:50:16:a3:1c:7d:58:c7:bc:8f:1d:36: 2b:f0:15:76:e9:55:c8:e9:3a:e3:af:66:f5:ba:2b: d0:e2:bb:25:9e:a7:cf:ca:75:86:a3:44:b9:5f:50: bc:14:07:bb:59:c6:f8:0f:91:1f:09:26:20:c3:37: 8e:8e:a0:07:73:e8:b3:e0:39:7d:b7:d3:1d:ff:5c: e1:b3:ef:57:c6:95:c9:67:bd:67:9f:1d:f8:72:af: d5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:CD:F7:05:01:DC:F2:41:F4:BE:9C:CD:C2:D2:C2:6C:F2:C4:A5:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/1c8e55e4-a977-35e7-a98f-eb28b6fa911b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.crl X509v3 Authority Key Identifier: keyid:EF:A3:2C:1E:56:34:10:F2:9F:36:33:5B:E1:73:DD:E6:59:C4:89:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.cer sbgp-ipAddrBlock: critical IPv4: 198.35.120.0/21 IPv6: 2620:c:8000::/48 2620:109:6000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:43:d7:ea:75:fe:2f:22:c9:47:72:73:d6:30:80:9f:7b:55: d2:c0:fe:25:a8:02:89:59:df:fc:ae:33:40:7f:ad:ff:aa:c0: 70:7c:2c:fc:1b:2a:af:b4:de:87:db:24:90:9d:62:a0:8d:9f: 96:e6:23:28:87:11:d1:8b:66:85:63:e8:7e:91:cf:75:90:f5: d8:65:38:3f:b6:b3:20:0d:0d:a9:0a:2e:8b:d0:a6:c0:7e:5d: e6:1f:ba:e1:b6:56:ae:55:04:a4:cc:49:a4:10:15:dc:78:29: 4f:ac:01:4a:a1:6d:99:80:a0:b1:65:b4:ba:27:c5:60:ff:11: e0:50:ea:78:6b:9b:d3:41:3c:c6:75:31:b1:7a:e1:1b:3d:b4: d3:86:b0:b5:56:0b:b0:e0:6c:9e:31:6c:8a:60:51:65:e7:25: fe:82:33:a5:af:49:e1:63:6c:e3:10:13:40:50:c0:da:7e:d6: 7d:2c:1a:02:91:e0:5a:2e:25:e5:ea:be:80:55:a4:58:f5:1d: 91:5f:92:5f:88:cb:9a:40:8c:88:6d:d8:d6:df:09:02:56:20: 89:d3:a3:5a:86:41:04:ea:7e:b1:7c:9a:d6:09:17:7c:5f:03: fb:8d:a8:22:fd:62:c7:ae:5e:71:3c:9f:ff:5b:a4:f5:11:f9: ad:04:66:df -----BEGIN CERTIFICATE----- MIIGXTCCBUWgAwIBAgIUAQ0Mn0MoWE01n93dl515n2kF4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZkMWZlM2ItN2UyNC00ZDI3LWJiMTAtYmViOWNlMmQ2 OTIyMB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk ZDkyZmI2MjQtOWJkZC00YzFjLWE0OWYtNjI0MzM1ZjQwYjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyg8dWMqSWQNWCUhUOQ6ANprOL+sWWmxFKEgv ig3Ast7dvZBqXyczzN7tVcvGJ1dIkxeuwb9RtfguZJ0j9fvyl256cOJajVt5VZNs kEBcJ+bjWGRmaOFwcFCl5kNGhf1kItX2loqoz8JAlJEOlhXw8oPtxDbOsD3QCISR 6NxO2X1yZhbcp8Tv+S467CFc6kRKxKshOhc+olXF1ZM5HGTi30s8TOCo08o9UBaj HH1Yx7yPHTYr8BV26VXI6Trjr2b1uivQ4rslnqfPynWGo0S5X1C8FAe7Wcb4D5Ef CSYgwzeOjqAHc+iz4Dl9t9Md/1zhs+9XxpXJZ71nnx34cq/VAwIDAQABo4IDbzCC A2swHQYDVR0OBBYEFC3N9wUB3PJB9L6czcLSwmzyxKXTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZmQx ZmUzYi03ZTI0LTRkMjctYmIxMC1iZWI5Y2UyZDY5MjIvMWM4ZTU1ZTQtYTk3Ny0z NWU3LWE5OGYtZWIyOGI2ZmE5MTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWZkMWZlM2ItN2UyNC00ZDI3LWJi MTAtYmViOWNlMmQ2OTIyL2FmZDFmZTNiLTdlMjQtNGQyNy1iYjEwLWJlYjljZTJk NjkyMi5jcmwwHwYDVR0jBBgwFoAU76MsHlY0EPKfNjNb4XPd5lnEiQkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZmQxZmUzYi03ZTI0LTRkMjctYmIxMC1iZWI5 Y2UyZDY5MjIuY2VyMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQDxiN4MBgE AgACMBIDBwAmIAAMgAADBwQmIAEJYAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAYUPX6nX+LyLJR3Jz1jCA n3tV0sD+JagCiVnf/K4zQH+t/6rAcHws/Bsqr7Teh9skkJ1ioI2fluYjKIcR0Ytm hWPofpHPdZD12GU4P7azIA0NqQoui9CmwH5d5h+64bZWrlUEpMxJpBAV3HgpT6wB SqFtmYCgsWW0uifFYP8R4FDqeGub00E8xnUxsXrhGz2004awtVYLsOBsnjFsimBR Zecl/oIzpa9J4WNs4xATQFDA2n7WfSwaApHgWi4l5eq+gFWkWPUdkV+SX4jLmkCM iG3Y1t8JAlYgidOjWoZBBOp+sXya1gkXfF8D+42oIv1ix65ecTyf/1uk9RH5rQRm 3w== -----END CERTIFICATE-----Generated at Thu Mar 26 09:03:47 2026 by rpki-client