$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2f7cbf5-2e73-4320-80b9-696eb7d503fb/4343828f-8ebf-3c8e-83c0-44e2c404eacc.roa File: 4343828f-8ebf-3c8e-83c0-44e2c404eacc.roa (raw, json) Hash identifier: x9HZ/rjIdaVmITyaJjiGgn5E63MdV3yhaFMi3pA/iMw= Subject key identifier: 18:0F:2E:4C:6B:A1:9B:B2:F5:D8:96:EC:F8:90:20:77:14:10:D7:B9 Certificate issuer: /CN=b2f7cbf5-2e73-4320-80b9-696eb7d503fb Certificate serial: 010D0C9F4328584D47C5070649EF6C764ABE9680 Authority key identifier: CC:96:57:FD:15:57:42:F5:03:3B:58:B1:FD:9A:9D:E6:92:01:FE:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2f7cbf5-2e73-4320-80b9-696eb7d503fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2f7cbf5-2e73-4320-80b9-696eb7d503fb/4343828f-8ebf-3c8e-83c0-44e2c404eacc.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 8075 IP address blocks: 198.99.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2f7cbf5-2e73-4320-80b9-696eb7d503fb/b2f7cbf5-2e73-4320-80b9-696eb7d503fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2f7cbf5-2e73-4320-80b9-696eb7d503fb/b2f7cbf5-2e73-4320-80b9-696eb7d503fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2f7cbf5-2e73-4320-80b9-696eb7d503fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c5:07:06:49:ef:6c:76:4a:be:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f7cbf5-2e73-4320-80b9-696eb7d503fb Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=ccecec90-a1c3-418d-bc6d-47828a48482b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6f:26:65:bd:9a:48:9b:8c:e4:f0:ac:a3:ba: 61:48:dd:12:2a:c9:02:1e:3d:7e:4c:6e:df:e3:a4: 9f:5f:9a:ab:88:8e:46:c4:0d:af:76:ab:a5:a0:a2: 91:dc:ab:dd:c1:af:57:2a:0f:60:73:c1:6b:60:4d: fe:3b:e3:c4:dc:db:b0:fa:9b:72:65:47:33:60:2e: 1b:36:35:18:97:2a:87:26:13:31:15:01:c0:a6:15: fb:bd:e3:93:5a:97:9d:32:be:5d:d6:65:42:cb:ef: ef:60:81:0b:6d:f1:d3:4b:fa:18:4a:35:b0:5a:f3: 8e:b0:c6:6c:38:dc:e5:9c:09:39:92:7e:aa:75:c5: ff:8d:ad:65:b0:68:12:86:6f:93:41:cd:94:61:0d: ad:b8:82:c8:85:fa:15:87:70:20:3b:f2:2a:ab:f2: 48:50:fd:46:03:11:f8:3b:e3:12:bb:fb:85:af:99: f8:05:37:b8:96:e8:e3:5a:2b:96:81:07:41:12:38: c6:78:dd:ed:eb:3b:2e:af:d6:d9:49:4f:7b:5e:e2: d6:c4:b9:f2:ce:c0:a4:bc:65:3d:df:66:32:11:ea: 83:ee:41:93:e9:fb:59:09:9d:e7:1a:c2:81:ed:97: cb:e1:5d:5c:c5:92:88:c0:78:ea:d5:fc:bb:7a:bd: 55:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:0F:2E:4C:6B:A1:9B:B2:F5:D8:96:EC:F8:90:20:77:14:10:D7:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2f7cbf5-2e73-4320-80b9-696eb7d503fb/4343828f-8ebf-3c8e-83c0-44e2c404eacc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2f7cbf5-2e73-4320-80b9-696eb7d503fb/b2f7cbf5-2e73-4320-80b9-696eb7d503fb.crl X509v3 Authority Key Identifier: keyid:CC:96:57:FD:15:57:42:F5:03:3B:58:B1:FD:9A:9D:E6:92:01:FE:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2f7cbf5-2e73-4320-80b9-696eb7d503fb.cer sbgp-ipAddrBlock: critical IPv4: 198.99.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:4a:5c:3c:7b:c7:34:d4:b2:58:e4:bb:61:96:f6:51:55:bb: 48:e7:a1:6f:14:f7:a5:b4:97:4d:7b:43:e7:5e:d2:6b:e9:37: 1d:77:77:e8:d6:40:40:c1:f4:f6:1f:fb:94:71:08:92:e9:2b: dc:6b:b9:50:b7:6a:99:19:5c:cc:62:1d:7f:17:87:d6:ba:5e: a9:3a:a1:ef:8c:05:1d:17:12:24:e4:68:ad:38:88:e6:2e:12: 3d:03:1e:a5:d6:fc:ba:5d:f3:9f:48:c3:3d:68:58:11:af:31: 5f:01:68:c1:df:7e:bb:92:d3:a2:41:f8:45:41:fa:1f:ac:27: 3d:ca:a5:83:38:6b:1c:69:f9:40:34:1a:2c:68:26:b3:b4:1c: 54:2c:66:35:df:c2:21:ea:eb:f2:72:57:58:90:98:3b:7d:70: 95:de:95:4c:b3:18:93:48:22:93:cc:6f:89:d6:62:be:28:43: be:ac:f7:6e:f2:78:ff:0b:a1:50:d4:d9:e5:b0:e9:d4:67:be: c8:22:dd:d2:c4:52:8d:da:e0:09:c9:a8:27:ca:69:a3:9d:37: 5c:a7:13:de:2b:51:bc:20:58:a2:a2:38:82:79:51:f9:fe:18: 6e:5c:6d:cc:d0:fb:56:88:d6:cd:fa:5d:3b:e8:b0:48:6a:29: 47:47:0b:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxQcGSe9sdkq+loAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmN2NiZjUtMmU3My00MzIwLTgwYjktNjk2ZWI3ZDUw M2ZiMB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk Y2NlY2VjOTAtYTFjMy00MThkLWJjNmQtNDc4MjhhNDg0ODJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG8mZb2aSJuM5PCso7phSN0SKskCHj1+TG7f 46SfX5qriI5GxA2vdquloKKR3Kvdwa9XKg9gc8FrYE3+O+PE3Nuw+ptyZUczYC4b NjUYlyqHJhMxFQHAphX7veOTWpedMr5d1mVCy+/vYIELbfHTS/oYSjWwWvOOsMZs ONzlnAk5kn6qdcX/ja1lsGgShm+TQc2UYQ2tuILIhfoVh3AgO/Iqq/JIUP1GAxH4 O+MSu/uFr5n4BTe4lujjWiuWgQdBEjjGeN3t6zsur9bZSU97XuLWxLnyzsCkvGU9 32YyEeqD7kGT6ftZCZ3nGsKB7ZfL4V1cxZKIwHjq1fy7er1VwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBgPLkxroZuy9diW7PiQIHcUENe5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iMmY3 Y2JmNS0yZTczLTQzMjAtODBiOS02OTZlYjdkNTAzZmIvNDM0MzgyOGYtOGViZi0z YzhlLTgzYzAtNDRlMmM0MDRlYWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYjJmN2NiZjUtMmU3My00MzIwLTgw YjktNjk2ZWI3ZDUwM2ZiL2IyZjdjYmY1LTJlNzMtNDMyMC04MGI5LTY5NmViN2Q1 MDNmYi5jcmwwHwYDVR0jBBgwFoAUzJZX/RVXQvUDO1ix/Zqd5pIB/pkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9iMmY3Y2JmNS0yZTczLTQzMjAtODBiOS02OTZl YjdkNTAzZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmOSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNKXDx7xzTUsljku2GW9lFVu0jnoW8U96W0l017Q+de0mvpNx13d+jW QEDB9PYf+5RxCJLpK9xruVC3apkZXMxiHX8Xh9a6Xqk6oe+MBR0XEiTkaK04iOYu Ej0DHqXW/Lpd859Iwz1oWBGvMV8BaMHffruS06JB+EVB+h+sJz3KpYM4axxp+UA0 GixoJrO0HFQsZjXfwiHq6/JyV1iQmDt9cJXelUyzGJNIIpPMb4nWYr4oQ76s927y eP8LoVDU2eWw6dRnvsgi3dLEUo3a4AnJqCfKaaOdN1ynE94rUbwgWKKiOIJ5Ufn+ GG5cbczQ+1aI1s36XTvosEhqKUdHC1c= -----END CERTIFICATE-----Generated at Thu Mar 26 03:35:25 2026 by rpki-client