$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4786912c-91d1-4981-a8a8-ab21be09e84b/b94e8d11-2ccc-31c9-9db7-9062817e6d42.roa File: b94e8d11-2ccc-31c9-9db7-9062817e6d42.roa (raw, json) Hash identifier: QeFs5qyzw7BbLJdiYgQUPra5Ki1Sq3U1iyH85iNlzj4= Subject key identifier: CB:5E:B1:33:A3:45:55:AF:65:EE:3D:3E:32:9E:D8:E0:0A:6A:B3:FB Certificate issuer: /CN=4786912c-91d1-4981-a8a8-ab21be09e84b Certificate serial: 010D0C9F4328584D09126C2BC994EFF8C97E6860 Authority key identifier: 01:89:77:61:B0:5F:45:2F:29:32:6D:9D:9F:03:58:CA:CC:ED:66:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4786912c-91d1-4981-a8a8-ab21be09e84b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4786912c-91d1-4981-a8a8-ab21be09e84b/b94e8d11-2ccc-31c9-9db7-9062817e6d42.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 400530 IP address blocks: 198.190.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4786912c-91d1-4981-a8a8-ab21be09e84b/4786912c-91d1-4981-a8a8-ab21be09e84b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4786912c-91d1-4981-a8a8-ab21be09e84b/4786912c-91d1-4981-a8a8-ab21be09e84b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4786912c-91d1-4981-a8a8-ab21be09e84b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:6c:2b:c9:94:ef:f8:c9:7e:68:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4786912c-91d1-4981-a8a8-ab21be09e84b Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=5ae573b7-fdb4-4bf8-920b-78dd63cfd31e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4b:bf:43:4b:f6:77:0f:2b:2f:10:4d:ae:7f: ba:7d:ba:e8:86:0a:fa:36:24:fd:e3:55:37:94:24: c9:5b:90:f0:19:5b:1a:8a:b2:45:a5:80:9f:7e:e7: f5:4d:da:55:29:14:09:9f:54:fc:e3:cf:08:ef:d2: a5:a1:e1:44:5a:6e:65:7b:e4:ee:2a:c3:27:25:1e: 71:7f:89:29:04:c4:a8:20:10:a4:a5:28:c8:59:5f: fe:52:ae:7f:8a:fc:22:eb:21:68:23:66:14:a8:cb: 64:87:01:9f:f5:33:0c:bb:aa:52:93:5e:97:d1:35: 14:06:15:af:d9:b0:82:8f:06:3f:b9:cf:2b:12:7a: d6:5e:7f:03:6c:53:f0:51:25:a1:75:ca:2a:fc:d7: 4f:de:a5:62:29:81:ed:41:63:f3:95:b1:33:16:c9: 0a:80:dd:00:49:8d:98:ae:5a:5c:8e:2e:9f:ab:22: 36:9a:28:84:03:57:9e:65:4d:44:ee:df:09:48:84: b3:53:de:5d:55:0c:5f:78:52:34:ac:fd:d8:67:eb: b4:24:1a:d8:1f:a4:ba:4c:0a:2e:37:af:77:4a:0d: 9c:3f:ea:40:29:aa:b8:86:bb:a6:10:3c:76:12:cb: 81:ee:2b:ba:bd:ea:d5:94:60:21:42:09:70:e2:14: 9e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:5E:B1:33:A3:45:55:AF:65:EE:3D:3E:32:9E:D8:E0:0A:6A:B3:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4786912c-91d1-4981-a8a8-ab21be09e84b/b94e8d11-2ccc-31c9-9db7-9062817e6d42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4786912c-91d1-4981-a8a8-ab21be09e84b/4786912c-91d1-4981-a8a8-ab21be09e84b.crl X509v3 Authority Key Identifier: keyid:01:89:77:61:B0:5F:45:2F:29:32:6D:9D:9F:03:58:CA:CC:ED:66:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4786912c-91d1-4981-a8a8-ab21be09e84b.cer sbgp-ipAddrBlock: critical IPv4: 198.190.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:db:66:61:9a:9f:3c:42:5f:09:4a:8b:36:65:e2:72:66:14: a3:25:7f:2b:a4:64:c6:7f:bb:87:59:7f:62:89:99:e9:f2:e0: 78:8b:d1:06:04:89:6d:f7:13:de:cd:5a:fb:19:9e:91:4d:33: b1:4d:5e:1b:e1:6f:47:df:e4:56:38:16:c2:a5:c3:1c:97:9d: 4e:51:ab:12:7c:dc:3e:ef:af:fa:08:29:38:05:21:a1:ce:b2: 5f:b8:46:dc:0b:d7:8f:1e:6d:90:fd:23:1e:ec:0f:b9:d4:69: 4d:cb:0e:d4:6b:44:11:7d:4c:1e:7e:1b:eb:f5:f5:74:ef:91: 5d:f7:eb:85:97:9b:6a:39:72:a3:a8:fb:19:73:25:15:25:4e: 6a:d5:3f:1a:3d:0a:a6:44:56:a7:a5:1a:3f:cd:20:be:fa:73: b8:64:de:8a:1b:b8:b2:e9:58:ef:8a:f0:64:ed:ae:7f:23:a2: 20:47:4e:94:4a:67:8c:98:e0:59:63:e0:8a:ac:d2:0e:51:f5: 93:16:45:60:15:08:9c:3c:5e:f6:d1:59:62:93:00:19:8d:db: 4e:bb:34:56:8c:10:2f:f3:6a:99:86:a7:af:40:71:c5:78:c3: 36:09:95:31:86:c2:6d:f3:17:46:5d:08:7c:c5:27:ca:72:1f: 0b:27:2a:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEmwryZTv+Ml+aGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDc4NjkxMmMtOTFkMS00OTgxLWE4YTgtYWIyMWJlMDll ODRiMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk NWFlNTczYjctZmRiNC00YmY4LTkyMGItNzhkZDYzY2ZkMzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0u/Q0v2dw8rLxBNrn+6fbrohgr6NiT941U3 lCTJW5DwGVsairJFpYCffuf1TdpVKRQJn1T8488I79KloeFEWm5le+TuKsMnJR5x f4kpBMSoIBCkpSjIWV/+Uq5/ivwi6yFoI2YUqMtkhwGf9TMMu6pSk16X0TUUBhWv 2bCCjwY/uc8rEnrWXn8DbFPwUSWhdcoq/NdP3qViKYHtQWPzlbEzFskKgN0ASY2Y rlpcji6fqyI2miiEA1eeZU1E7t8JSISzU95dVQxfeFI0rP3YZ+u0JBrYH6S6TAou N693Sg2cP+pAKaq4hrumEDx2EsuB7iu6verVlGAhQglw4hSePwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtesTOjRVWvZe49PjKe2OAKarP7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80Nzg2 OTEyYy05MWQxLTQ5ODEtYThhOC1hYjIxYmUwOWU4NGIvYjk0ZThkMTEtMmNjYy0z MWM5LTlkYjctOTA2MjgxN2U2ZDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDc4NjkxMmMtOTFkMS00OTgxLWE4 YTgtYWIyMWJlMDllODRiLzQ3ODY5MTJjLTkxZDEtNDk4MS1hOGE4LWFiMjFiZTA5 ZTg0Yi5jcmwwHwYDVR0jBBgwFoAUAYl3YbBfRS8pMm2dnwNYysztZrkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80Nzg2OTEyYy05MWQxLTQ5ODEtYThhOC1hYjIx YmUwOWU4NGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxr7FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7bZmGanzxCXwlKizZl4nJmFKMlfyukZMZ/u4dZf2KJmeny4HiL0QYE iW33E97NWvsZnpFNM7FNXhvhb0ff5FY4FsKlwxyXnU5RqxJ83D7vr/oIKTgFIaHO sl+4RtwL148ebZD9Ix7sD7nUaU3LDtRrRBF9TB5+G+v19XTvkV3364WXm2o5cqOo +xlzJRUlTmrVPxo9CqZEVqelGj/NIL76c7hk3oobuLLpWO+K8GTtrn8joiBHTpRK Z4yY4Flj4Iqs0g5R9ZMWRWAVCJw8XvbRWWKTABmN2067NFaMEC/zapmGp69AccV4 wzYJlTGGwm3zF0ZdCHzFJ8pyHwsnKi4= -----END CERTIFICATE-----Generated at Thu Mar 26 16:27:08 2026 by rpki-client