$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9aa8b520-a41b-38d8-90fc-b7e1b0932c20.roa File: 9aa8b520-a41b-38d8-90fc-b7e1b0932c20.roa (raw, json) Hash identifier: D8jyDycSde2dUz1Qmvwtte50H4Z461G7wa2GrF9POLA= Subject key identifier: A3:D0:E7:62:B8:EF:B2:8D:54:48:47:87:B2:CD:E6:DA:E8:D1:0B:6C Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584D146D904F675C466B3895AA4C Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9aa8b520-a41b-38d8-90fc-b7e1b0932c20.roa Signing time: Fri 06 Mar 2026 15:38:30 +0000 ROA not before: Fri 06 Mar 2026 15:38:30 +0000 ROA not after: Thu 04 Jun 2026 14:38:30 +0000 asID: 394165 IP address blocks: 198.85.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:6d:90:4f:67:5c:46:6b:38:95:aa:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Mar 6 15:38:30 2026 GMT Not After : Jun 4 14:38:30 2026 GMT Subject: CN=c4314ba7-b98c-4b82-892f-f7da32f40c9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a5:58:94:25:de:f5:32:91:1f:52:4a:70:e2: 68:08:32:b1:58:0c:c4:32:80:52:87:c5:72:a2:f3: 1c:8d:0d:a8:13:48:0a:94:29:1f:54:90:93:ac:13: 65:ca:b1:59:8f:a1:43:33:ec:6e:6e:88:48:f4:56: 73:f3:1e:ab:15:b3:cf:d6:3b:68:e0:f5:c6:23:86: e2:7a:65:cc:9f:a6:00:6a:78:47:c2:11:0d:92:e1: a6:51:02:f7:49:2e:c8:7c:90:23:93:f9:9a:62:8c: e3:82:e1:a8:3e:de:49:42:a1:21:cf:1a:bb:8f:f9: 88:a3:f7:6d:45:89:15:b9:4a:72:70:17:7d:11:91: 6b:e6:19:0e:65:9a:4e:7b:96:30:45:8c:74:5b:ab: d8:51:c4:9e:fb:39:af:35:89:54:52:61:c0:61:9a: fb:5c:55:0e:1a:28:b7:c2:54:07:ce:99:0f:75:45: 79:3f:f6:ac:a2:11:34:18:14:c4:c5:9f:d6:f3:3e: da:bb:28:cd:85:18:ab:11:49:90:d8:84:1a:f9:ba: 64:8e:c1:8f:1c:6e:d0:dc:3c:24:d4:97:eb:62:93: 0e:c1:a8:91:47:93:a1:4a:9a:92:20:ee:4f:db:bf: 9a:bb:67:07:ac:c0:6f:58:d6:47:72:86:6a:a6:21: fd:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:D0:E7:62:B8:EF:B2:8D:54:48:47:87:B2:CD:E6:DA:E8:D1:0B:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9aa8b520-a41b-38d8-90fc-b7e1b0932c20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 198.85.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:9e:f5:a7:33:22:0b:77:6e:18:bb:1b:a9:7b:df:de:54:41: 52:80:f4:0e:4a:8e:78:e3:3d:12:20:34:e3:20:71:9e:52:24: 7b:95:95:71:e3:29:eb:c6:12:15:61:eb:05:31:cc:06:d2:62: cb:8f:65:67:4d:41:d2:9b:e0:a0:fb:97:15:a3:16:3d:1f:46: 11:b1:42:29:b1:a9:8a:56:ce:a8:f0:69:f9:f7:47:c5:af:83: d1:f4:d3:f1:5a:8d:8b:cf:45:bf:61:32:fb:29:f3:a4:18:d6: f0:e9:5a:5f:f9:d3:45:b0:99:2e:fc:0d:a7:fb:43:bd:99:1b: fc:4c:30:12:4a:f2:6e:46:77:e6:1d:a7:7f:1e:4f:96:d4:5e: 41:95:0f:ba:28:f0:0c:d5:e8:aa:e6:62:a4:f8:7a:71:74:4a: 72:ac:e5:36:da:96:73:b6:bb:41:0d:fb:51:a8:96:00:06:19: a9:66:ef:62:dd:9a:88:f3:6e:14:83:52:c6:b8:ea:24:eb:aa: f4:b9:18:25:13:66:e0:79:36:84:70:85:21:a3:41:a1:d5:9f: e5:4d:e0:e1:49:37:9f:01:47:88:33:d3:13:2e:d7:02:0c:67: 57:87:56:38:af:e0:50:6e:c4:8c:34:a5:bd:2e:c4:24:4a:60: 7f:e1:2b:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UbZBPZ1xGaziVqkwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI2MDMwNjE1MzgzMFoXDTI2MDYwNDE0MzgzMFowLzEtMCsGA1UEAxMk YzQzMTRiYTctYjk4Yy00YjgyLTg5MmYtZjdkYTMyZjQwYzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKVYlCXe9TKRH1JKcOJoCDKxWAzEMoBSh8Vy ovMcjQ2oE0gKlCkfVJCTrBNlyrFZj6FDM+xubohI9FZz8x6rFbPP1jto4PXGI4bi emXMn6YAanhHwhENkuGmUQL3SS7IfJAjk/maYozjguGoPt5JQqEhzxq7j/mIo/dt RYkVuUpycBd9EZFr5hkOZZpOe5YwRYx0W6vYUcSe+zmvNYlUUmHAYZr7XFUOGii3 wlQHzpkPdUV5P/asohE0GBTExZ/W8z7auyjNhRirEUmQ2IQa+bpkjsGPHG7Q3Dwk 1JfrYpMOwaiRR5OhSpqSIO5P27+au2cHrMBvWNZHcoZqpiH9CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKPQ52K477KNVEhHh7LN5tro0QtsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvOWFhOGI1MjAtYTQxYi0z OGQ4LTkwZmMtYjdlMWIwOTMyYzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxlXcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADue9aczIgt3bhi7G6l7395UQVKA9A5KjnjjPRIgNOMgcZ5SJHuVlXHj KevGEhVh6wUxzAbSYsuPZWdNQdKb4KD7lxWjFj0fRhGxQimxqYpWzqjwafn3R8Wv g9H00/FajYvPRb9hMvsp86QY1vDpWl/500WwmS78Daf7Q72ZG/xMMBJK8m5Gd+Yd p38eT5bUXkGVD7oo8AzV6KrmYqT4enF0SnKs5TbalnO2u0EN+1GolgAGGalm72Ld mojzbhSDUsa46iTrqvS5GCUTZuB5NoRwhSGjQaHVn+VN4OFJN58BR4gz0xMu1wIM Z1eHVjiv4FBuxIw0pb0uxCRKYH/hKyk= -----END CERTIFICATE-----Generated at Thu Mar 26 16:16:18 2026 by rpki-client