$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ab0a01c4-7bde-3375-8008-717b1b5d8fe7.roa File: ab0a01c4-7bde-3375-8008-717b1b5d8fe7.roa (raw, json) Hash identifier: cmLuMYJ8qG8PVlN0Z6sFdbzZpg1wEkWuuaCh6FkHWLA= Subject key identifier: 4F:81:18:2A:C8:E0:83:C8:20:C1:78:E0:AE:14:75:04:AF:B1:94:08 Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F4328584D40CB352468F19A1B66A3C880 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ab0a01c4-7bde-3375-8008-717b1b5d8fe7.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 20001 IP address blocks: 198.72.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:cb:35:24:68:f1:9a:1b:66:a3:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=b665fcde-3937-4ad1-9421-813e1aa2aa6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f7:c0:2f:3c:0f:3b:90:41:d7:35:08:66:06: 65:1c:d0:e8:bd:26:2d:97:8d:8d:90:5d:79:33:a6: 8a:3f:60:89:81:bd:fd:dd:1d:2b:9e:98:66:68:b9: 7d:ed:79:ff:fd:f5:f2:4e:ac:c7:58:40:a0:78:69: 8d:25:6f:bf:9e:80:33:df:7f:4e:7a:6a:6b:3a:77: 37:ec:f3:7a:b3:db:d1:47:39:4e:b6:a5:f0:3e:4d: b5:87:81:28:e4:4b:c7:0c:6c:25:f0:a8:05:96:41: 1e:6f:fe:e7:46:c4:2c:55:b9:9f:3b:1a:83:5a:b9: 30:32:e2:ed:ab:cb:8c:d2:b4:a7:e0:bf:9a:ce:7f: 5b:f6:1a:1e:35:46:1f:db:5e:5d:38:dc:98:4b:ef: 76:3a:ea:b6:7c:c0:ef:47:cf:4e:1f:a4:f5:fc:61: 57:f6:4f:16:0b:3f:72:c8:d4:60:79:90:65:aa:cc: 92:33:b9:02:84:1b:14:db:0c:bc:0d:25:12:c8:f9: 64:c9:4e:a8:c0:b4:7b:f1:ea:f7:2c:06:51:84:fd: 77:d9:54:81:82:ab:bd:52:6c:e2:09:dc:49:e8:c5: b3:92:ff:a0:d9:59:2e:e4:2f:6a:f0:c4:fb:d8:72: d7:6e:d2:36:21:d0:3a:39:b0:ca:db:a9:cc:95:cf: 0f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:81:18:2A:C8:E0:83:C8:20:C1:78:E0:AE:14:75:04:AF:B1:94:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ab0a01c4-7bde-3375-8008-717b1b5d8fe7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 198.72.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:a0:06:fc:24:52:4a:1a:66:70:fd:d6:1b:ea:84:1f:4b:99: b6:c3:76:d1:be:33:59:19:41:62:88:73:00:a9:11:0c:8b:9e: ca:69:63:fa:ab:b0:cf:c3:57:0b:0d:bf:12:a1:9d:6b:ef:aa: 1d:d6:0b:4f:0e:a7:ec:db:92:da:d1:d1:4a:af:36:a3:89:8d: 5f:be:3b:52:5f:4e:7a:17:c6:40:75:5a:47:dd:37:ad:9f:81: 56:7d:77:ea:56:ed:fd:c8:19:94:7c:b1:76:20:f3:fe:3a:60: 17:6b:c2:73:71:b7:0e:c2:90:28:57:ca:c0:dc:a7:4b:f7:cc: e1:ab:9e:22:6d:fb:13:10:d7:76:b8:9f:3b:c9:f6:4f:a6:bd: d5:35:89:55:ce:9b:01:26:c7:97:6a:f6:ad:ee:07:96:d3:82: a5:7d:95:f5:47:0f:c9:e9:a3:d5:47:f1:36:33:7c:69:44:7d: 5b:c4:59:cb:45:f0:84:99:92:74:64:5e:9f:b8:ad:a8:40:ab: 34:6d:67:9c:48:5d:c3:f3:e6:d7:c9:44:81:6c:73:32:ba:4e: 77:5f:9a:74:09:c1:96:4e:89:25:42:10:b2:c1:7d:de:64:0b: 8f:75:52:3e:04:85:5b:4d:b5:6d:76:3a:8a:09:3a:47:fb:dd: 98:48:8f:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AyzUkaPGaG2ajyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk YjY2NWZjZGUtMzkzNy00YWQxLTk0MjEtODEzZTFhYTJhYTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhffALzwPO5BB1zUIZgZlHNDovSYtl42NkF15 M6aKP2CJgb393R0rnphmaLl97Xn//fXyTqzHWECgeGmNJW+/noAz339OemprOnc3 7PN6s9vRRzlOtqXwPk21h4Eo5EvHDGwl8KgFlkEeb/7nRsQsVbmfOxqDWrkwMuLt q8uM0rSn4L+azn9b9hoeNUYf215dONyYS+92Ouq2fMDvR89OH6T1/GFX9k8WCz9y yNRgeZBlqsySM7kChBsU2wy8DSUSyPlkyU6owLR78er3LAZRhP132VSBgqu9Umzi CdxJ6MWzkv+g2Vku5C9q8MT72HLXbtI2IdA6ObDK26nMlc8PHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+BGCrI4IPIIMF44K4UdQSvsZQIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvYWIwYTAxYzQtN2JkZS0z Mzc1LTgwMDgtNzE3YjFiNWQ4ZmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHxkiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmgBvwkUkoaZnD91hvqhB9LmbbDdtG+M1kZQWKIcwCpEQyLnsppY/qr sM/DVwsNvxKhnWvvqh3WC08Op+zbktrR0UqvNqOJjV++O1JfTnoXxkB1WkfdN62f gVZ9d+pW7f3IGZR8sXYg8/46YBdrwnNxtw7CkChXysDcp0v3zOGrniJt+xMQ13a4 nzvJ9k+mvdU1iVXOmwEmx5dq9q3uB5bTgqV9lfVHD8npo9VH8TYzfGlEfVvEWctF 8ISZknRkXp+4rahAqzRtZ5xIXcPz5tfJRIFsczK6TndfmnQJwZZOiSVCELLBfd5k C491Uj4EhVtNtW12OooJOkf73ZhIj3k= -----END CERTIFICATE-----Generated at Thu Mar 26 15:29:56 2026 by rpki-client