$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/386d9cc8-c8d7-3fa5-8cdb-460a56227d06.roa File: 386d9cc8-c8d7-3fa5-8cdb-460a56227d06.roa (raw, json) Hash identifier: e/QHsEkGSmp0akyjQtm7o9V2AWVmB1ejkzdsKd31SCU= Subject key identifier: 13:D4:0E:94:CB:FF:41:A2:6A:6F:78:B4:E9:C5:D4:71:AE:72:6E:02 Certificate issuer: /CN=b1c4f92f-6633-448e-bb44-903f429ea22f Certificate serial: 010D0C9F4328584D237A5C9E07FCEBD2B7A77C80 Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/386d9cc8-c8d7-3fa5-8cdb-460a56227d06.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 834 IP address blocks: 198.1.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:5c:9e:07:fc:eb:d2:b7:a7:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=9ba043c4-d8c4-4d3c-8e68-9308e9f1b6ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:66:90:bb:c0:dd:f2:c2:39:12:e8:78:06:96: 1d:cc:33:ee:b3:eb:81:03:76:d3:c0:c1:97:e6:43: fb:ea:c5:ff:e3:35:7f:a7:84:e5:fb:ec:f2:c3:4e: 17:09:f2:36:08:e9:f9:eb:a5:dc:03:96:4c:d0:65: 4b:55:76:c1:50:b5:24:ac:c3:52:7d:92:2b:70:3f: 8a:11:1b:e6:d6:f0:d0:20:b1:0a:b7:6e:2f:39:66: 67:72:b6:cc:b3:75:b3:f9:0a:53:ad:b8:30:f2:10: a6:5f:d9:1a:fb:ae:b2:e9:ae:25:4b:b5:f3:92:55: d4:10:db:53:f6:59:5f:63:ad:9b:20:f8:68:d6:c9: 31:f1:5c:26:65:2e:34:b4:9f:69:a3:d7:15:56:b1: cc:4e:a6:7e:db:09:ed:48:d5:3a:75:8c:76:0b:78: bc:6c:13:21:e6:70:21:e7:af:96:eb:a3:3c:38:89: 4e:21:b2:bb:a3:61:e1:83:12:54:22:93:9e:30:dd: 1d:4c:3d:99:43:29:71:14:69:bf:3f:f2:bb:3a:5b: 0b:a6:7b:98:c0:86:23:36:5f:bd:1b:fc:fb:df:49: 10:10:5c:f5:47:44:f4:4b:1b:9d:03:d9:d2:4f:3e: 70:4d:d2:e5:3f:3f:9d:54:40:31:bc:a7:0d:36:15: bb:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D4:0E:94:CB:FF:41:A2:6A:6F:78:B4:E9:C5:D4:71:AE:72:6E:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/386d9cc8-c8d7-3fa5-8cdb-460a56227d06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl X509v3 Authority Key Identifier: keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer sbgp-ipAddrBlock: critical IPv4: 198.1.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:d5:70:e2:5c:ef:c3:22:18:fc:0b:59:ed:d5:37:e1:47:cc: 73:a4:2a:a8:05:f4:cd:8b:84:d5:4f:76:c1:ae:a2:b4:f9:6f: ca:1b:7e:0d:ff:4e:e2:c1:1f:0f:30:8a:06:d0:53:7a:74:8d: 80:60:d3:35:42:50:70:80:cb:a4:9d:5f:7b:b0:1e:25:ce:00: ca:e9:15:05:d0:b3:b0:78:ad:50:02:ea:a8:bc:37:77:38:c8: 12:03:48:05:d7:7b:f3:36:78:9a:85:dd:f2:ff:e0:a9:6c:c5: b2:32:88:41:41:40:20:a2:49:86:cf:e9:05:0a:82:aa:31:b1: 20:32:36:69:c5:f6:96:59:59:7a:8c:9c:60:e0:82:ab:ba:3f: 9c:3a:0c:20:cf:e8:22:bf:ba:90:a2:1b:25:49:81:8e:4f:bf: d5:d5:51:42:d6:74:0a:bf:2c:6e:6a:d6:aa:5e:28:f4:e5:f4: 1a:77:a9:77:ad:b9:b4:95:96:aa:a6:44:7d:52:f2:9c:3e:50: 8e:c1:c7:b5:28:80:81:40:97:65:71:58:2b:cb:b6:6e:ea:f5: b2:3f:da:f7:f0:ed:15:19:f2:28:da:5e:e8:37:fb:d9:b4:b6: 83:79:d5:5f:36:69:5c:6e:72:dd:04:40:e0:d5:9e:51:8f:d3: 91:62:26:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jelyeB/zr0renfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFjNGY5MmYtNjYzMy00NDhlLWJiNDQtOTAzZjQyOWVh MjJmMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk OWJhMDQzYzQtZDhjNC00ZDNjLThlNjgtOTMwOGU5ZjFiNmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmaQu8Dd8sI5Euh4BpYdzDPus+uBA3bTwMGX 5kP76sX/4zV/p4Tl++zyw04XCfI2COn566XcA5ZM0GVLVXbBULUkrMNSfZIrcD+K ERvm1vDQILEKt24vOWZncrbMs3Wz+QpTrbgw8hCmX9ka+66y6a4lS7XzklXUENtT 9llfY62bIPho1skx8VwmZS40tJ9po9cVVrHMTqZ+2wntSNU6dYx2C3i8bBMh5nAh 56+W66M8OIlOIbK7o2HhgxJUIpOeMN0dTD2ZQylxFGm/P/K7OlsLpnuYwIYjNl+9 G/z730kQEFz1R0T0SxudA9nSTz5wTdLlPz+dVEAxvKcNNhW74QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBPUDpTL/0Giam94tOnF1HGucm4CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0 ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNmNDI5ZWEyMmYvMzg2ZDljYzgtYzhkNy0z ZmE1LThjZGItNDYwYTU2MjI3ZDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjFjNGY5MmYtNjYzMy00NDhlLWJi NDQtOTAzZjQyOWVhMjJmL2IxYzRmOTJmLTY2MzMtNDQ4ZS1iYjQ0LTkwM2Y0Mjll YTIyZi5jcmwwHwYDVR0jBBgwFoAU6FtIa6B9ca9ej+ioyzHZOyjmSUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMWM0ZjkyZi02NjMzLTQ0OGUtYmI0NC05MDNm NDI5ZWEyMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxgHzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7VcOJc78MiGPwLWe3VN+FHzHOkKqgF9M2LhNVPdsGuorT5b8obfg3/ TuLBHw8wigbQU3p0jYBg0zVCUHCAy6SdX3uwHiXOAMrpFQXQs7B4rVAC6qi8N3c4 yBIDSAXXe/M2eJqF3fL/4KlsxbIyiEFBQCCiSYbP6QUKgqoxsSAyNmnF9pZZWXqM nGDggqu6P5w6DCDP6CK/upCiGyVJgY5Pv9XVUULWdAq/LG5q1qpeKPTl9Bp3qXet ubSVlqqmRH1S8pw+UI7Bx7UogIFAl2VxWCvLtm7q9bI/2vfw7RUZ8ijaXug3+9m0 toN51V82aVxuct0EQODVnlGP05FiJhI= -----END CERTIFICATE-----Generated at Sat Mar 28 10:41:04 2026 by rpki-client