$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3ba39ba7-a768-4a44-aad9-880db8565967/ed6283b6-8a7d-3ea2-83e2-d65fe0194a03.roa File: ed6283b6-8a7d-3ea2-83e2-d65fe0194a03.roa (raw, json) Hash identifier: zR33Hldp6y4CHkUCHi8lnZKo7WYwMCxB4CdwHEZteos= Subject key identifier: 01:AE:38:70:0C:74:8F:D8:3E:52:80:0C:4B:CB:A4:32:0C:83:67:D0 Certificate issuer: /CN=3ba39ba7-a768-4a44-aad9-880db8565967 Certificate serial: 010D0C9F4328584D1B19E3A4BE99D32BDF858C80 Authority key identifier: 85:2E:78:51:7B:11:9D:94:14:6E:F3:A1:C4:63:54:E7:99:A8:32:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3ba39ba7-a768-4a44-aad9-880db8565967.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3ba39ba7-a768-4a44-aad9-880db8565967/ed6283b6-8a7d-3ea2-83e2-d65fe0194a03.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 10956 IP address blocks: 198.235.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3ba39ba7-a768-4a44-aad9-880db8565967/3ba39ba7-a768-4a44-aad9-880db8565967.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3ba39ba7-a768-4a44-aad9-880db8565967/3ba39ba7-a768-4a44-aad9-880db8565967.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3ba39ba7-a768-4a44-aad9-880db8565967.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:19:e3:a4:be:99:d3:2b:df:85:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ba39ba7-a768-4a44-aad9-880db8565967 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=cdf56e5d-6ed3-432d-849a-c555db4e6ed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:78:2f:ba:95:dd:6d:52:0f:df:90:f3:0d:9e: cc:5b:5c:b1:13:21:76:f0:4e:d2:5c:47:85:c6:6b: d2:db:b2:7f:85:9b:b6:7d:cc:8b:2d:1f:2b:71:47: 13:ce:7e:33:cf:e7:8b:95:4f:c1:bb:ad:b2:fe:8f: a2:d2:55:7d:7a:93:10:df:0f:31:3c:55:58:8f:6b: dd:b2:dc:8f:37:6d:90:d5:5d:51:9d:ee:5b:e4:90: b2:c7:93:bc:20:2d:8c:69:6d:88:0c:7e:9d:f5:bf: 0c:47:99:fe:86:ed:da:94:42:d9:1a:c1:3c:4d:e2: fc:23:6f:a6:d2:c0:98:4d:0a:11:16:88:c7:5e:ea: a7:87:f7:41:92:f3:74:c5:1c:29:70:29:f9:55:7f: 5b:e7:66:a1:ac:5f:80:ee:e9:3f:18:52:8c:6c:ca: af:d2:d1:cd:65:87:df:47:80:f8:43:95:83:13:e8: 4a:fe:a4:e1:d2:a2:cd:ac:e8:21:eb:36:ef:c2:89: 34:2b:fd:7b:7f:fe:57:6b:d5:24:82:57:dd:9a:d3: f9:00:71:16:bf:68:40:83:48:79:4d:96:4e:33:3a: a0:4b:46:25:8b:02:e5:32:bb:41:51:de:1a:29:c1: 2a:0d:fd:3b:d2:3d:72:1d:61:77:5a:be:db:ef:1d: 74:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:AE:38:70:0C:74:8F:D8:3E:52:80:0C:4B:CB:A4:32:0C:83:67:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3ba39ba7-a768-4a44-aad9-880db8565967/ed6283b6-8a7d-3ea2-83e2-d65fe0194a03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3ba39ba7-a768-4a44-aad9-880db8565967/3ba39ba7-a768-4a44-aad9-880db8565967.crl X509v3 Authority Key Identifier: keyid:85:2E:78:51:7B:11:9D:94:14:6E:F3:A1:C4:63:54:E7:99:A8:32:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3ba39ba7-a768-4a44-aad9-880db8565967.cer sbgp-ipAddrBlock: critical IPv4: 198.235.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:93:5e:9d:46:0a:2e:e0:5f:46:fa:98:3d:63:2b:cc:e9:e9: d4:87:14:10:4a:93:d1:40:ae:b3:13:e4:9f:be:56:1c:12:4d: 92:1a:52:46:21:1d:83:94:8c:3f:03:37:0a:ba:05:9f:d8:35: 3e:fc:ba:8f:4f:3c:7e:76:ea:85:73:12:78:82:cd:6c:4b:ab: 8a:5e:bd:df:3c:7e:5d:12:ca:3d:ed:d5:8f:95:b7:66:a8:05: cc:6b:fd:84:bf:08:cb:fb:04:b2:7f:48:80:28:d6:35:64:45: 29:43:13:d5:05:c5:05:e1:c0:04:fe:c5:c8:2e:66:e3:80:af: fe:e7:ed:fe:f8:a9:41:a9:9d:8c:2b:5e:5d:41:40:5f:e8:a3: b7:64:44:ff:48:72:0a:46:ae:8a:75:18:31:df:cd:23:8f:21: 05:19:5d:8d:e1:ae:4c:2d:5b:85:78:fc:eb:30:5d:bd:36:9e: d1:d7:dd:63:9a:65:ae:65:20:c2:3f:17:05:a5:c5:ae:0f:1f: e0:26:f2:72:12:e0:c6:4c:65:fa:5b:bc:05:41:15:e0:82:0a: fe:b0:f5:f1:0d:0e:fa:53:41:75:1a:b5:78:f5:50:5a:e3:3c: 72:1a:8d:13:6b:fc:cb:7d:b5:1e:d0:36:bf:59:04:3a:2a:41: ea:d1:29:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGeOkvpnTK9+FjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JhMzliYTctYTc2OC00YTQ0LWFhZDktODgwZGI4NTY1 OTY3MB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk Y2RmNTZlNWQtNmVkMy00MzJkLTg0OWEtYzU1NWRiNGU2ZWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwngvupXdbVIP35DzDZ7MW1yxEyF28E7SXEeF xmvS27J/hZu2fcyLLR8rcUcTzn4zz+eLlU/Bu62y/o+i0lV9epMQ3w8xPFVYj2vd styPN22Q1V1Rne5b5JCyx5O8IC2MaW2IDH6d9b8MR5n+hu3alELZGsE8TeL8I2+m 0sCYTQoRFojHXuqnh/dBkvN0xRwpcCn5VX9b52ahrF+A7uk/GFKMbMqv0tHNZYff R4D4Q5WDE+hK/qTh0qLNrOgh6zbvwok0K/17f/5Xa9UkglfdmtP5AHEWv2hAg0h5 TZZOMzqgS0YliwLlMrtBUd4aKcEqDf070j1yHWF3Wr7b7x108QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAGuOHAMdI/YPlKADEvLpDIMg2fQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8zYmEz OWJhNy1hNzY4LTRhNDQtYWFkOS04ODBkYjg1NjU5NjcvZWQ2MjgzYjYtOGE3ZC0z ZWEyLTgzZTItZDY1ZmUwMTk0YTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvM2JhMzliYTctYTc2OC00YTQ0LWFh ZDktODgwZGI4NTY1OTY3LzNiYTM5YmE3LWE3NjgtNGE0NC1hYWQ5LTg4MGRiODU2 NTk2Ny5jcmwwHwYDVR0jBBgwFoAUhS54UXsRnZQUbvOhxGNU55moMmAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8zYmEzOWJhNy1hNzY4LTRhNDQtYWFkOS04ODBk Yjg1NjU5NjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxuuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALCTXp1GCi7gX0b6mD1jK8zp6dSHFBBKk9FArrMT5J++VhwSTZIaUkYh HYOUjD8DNwq6BZ/YNT78uo9PPH526oVzEniCzWxLq4pevd88fl0Syj3t1Y+Vt2ao Bcxr/YS/CMv7BLJ/SIAo1jVkRSlDE9UFxQXhwAT+xcguZuOAr/7n7f74qUGpnYwr Xl1BQF/oo7dkRP9IcgpGrop1GDHfzSOPIQUZXY3hrkwtW4V4/OswXb02ntHX3WOa Za5lIMI/FwWlxa4PH+Am8nIS4MZMZfpbvAVBFeCCCv6w9fENDvpTQXUatXj1UFrj PHIajRNr/Mt9tR7QNr9ZBDoqQerRKSg= -----END CERTIFICATE-----Generated at Thu Mar 26 02:26:49 2026 by rpki-client