$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0/81d14041-cb0e-36df-be9e-80b114230d9a.roa File: 81d14041-cb0e-36df-be9e-80b114230d9a.roa (raw, json) Hash identifier: kQJMzPzAUopiPisnxDmm8zK9plQyX3e06Zvfrc37SJ8= Subject key identifier: 17:11:CC:BB:68:43:4F:6C:DC:3A:28:BB:DD:50:6C:00:B8:3C:0E:42 Certificate issuer: /CN=459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0 Certificate serial: 010D0C9F4328584D4A8FA1CE5E2FC26AEA60ED80 Authority key identifier: F1:43:57:E8:CB:1A:9E:50:88:3B:72:85:4B:DB:8C:D6:25:A6:1E:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0/81d14041-cb0e-36df-be9e-80b114230d9a.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 14618 IP address blocks: 198.137.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:a1:ce:5e:2f:c2:6a:ea:60:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=172da42d-926d-42f3-a25f-dedd0a65f948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3b:72:f3:72:4e:59:7f:62:b4:86:ea:49:a1: 4c:ba:85:18:f3:bd:2f:0b:dc:ef:1e:e5:9b:16:98: dc:c5:d6:da:a6:3b:c7:1c:a1:a0:f5:6a:8a:ac:17: f4:06:0d:c4:19:04:8b:d5:d4:09:6a:b0:d3:b0:d1: e2:f4:24:44:60:37:64:38:e3:8a:56:f6:92:c4:b0: 6b:d7:00:e1:c0:d4:bd:a0:bd:1e:19:cf:c1:a2:54: b0:01:d2:13:c1:7c:08:97:68:70:6f:9a:d4:84:7a: 1d:a8:e2:87:b8:62:38:fb:07:d8:88:d6:ca:36:88: d5:67:74:af:cd:71:4f:a9:5a:34:fc:6b:ed:08:c0: ee:41:6b:40:e8:89:2c:cd:e8:4b:77:39:43:58:66: d4:88:d3:dd:3a:bb:c2:1c:52:dd:29:d3:4b:af:a2: 65:53:f2:a5:43:d5:04:b9:39:d5:23:1f:f3:fe:7c: cd:9d:72:8b:33:24:35:72:74:d2:53:d9:48:36:38: ee:51:8c:07:b9:2d:39:4e:5e:1b:88:53:3c:31:f2: 71:d8:99:09:0f:2f:e5:3c:d9:b1:c9:2d:67:0b:45: f6:ce:cd:ef:ca:41:18:80:24:2f:6c:c4:54:a3:41: 22:f7:bc:a8:d4:c6:7e:79:54:ea:c9:36:4b:ba:fe: f3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:11:CC:BB:68:43:4F:6C:DC:3A:28:BB:DD:50:6C:00:B8:3C:0E:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0/81d14041-cb0e-36df-be9e-80b114230d9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0.crl X509v3 Authority Key Identifier: keyid:F1:43:57:E8:CB:1A:9E:50:88:3B:72:85:4B:DB:8C:D6:25:A6:1E:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/459d424e-f56a-4a9d-bbcc-dbb8ed96cdf0.cer sbgp-ipAddrBlock: critical IPv4: 198.137.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:9e:41:0b:cd:10:c6:76:ee:eb:b0:5f:80:11:f5:81:f7:66: 86:08:d6:ba:ef:53:d1:15:0c:68:15:03:6e:0c:96:36:3c:b0: ee:91:d7:1c:62:c6:10:e4:c6:bb:96:8f:56:d5:40:8c:84:42: ee:bb:9f:93:83:1b:28:3c:60:2e:e4:c3:dd:e2:98:86:96:8f: 49:12:64:0f:39:62:a5:0b:d0:6d:a5:5b:f7:4a:97:1e:49:54: 8a:e2:d2:8f:aa:08:f0:40:a9:a6:ab:c6:22:2c:ab:d4:01:68: 48:79:bd:a9:c9:bb:5a:0f:c2:bc:6b:9b:38:92:57:ec:60:d6: d3:fb:88:c8:7d:ba:3a:b1:0b:4b:75:ee:aa:6f:71:23:00:ff: d8:24:40:87:6d:2d:63:2f:e9:84:6c:e7:68:fe:6c:6b:65:7a: 6a:6e:5e:1b:6c:19:c7:f0:21:1d:6c:fb:67:1f:17:c8:fe:c7: ef:3f:55:9a:e6:92:a4:8a:87:30:5f:b9:c3:9e:23:df:48:84: 1a:28:0a:40:af:3b:34:59:87:a2:13:f8:c9:67:70:b6:7a:cf: 77:aa:52:6d:13:be:f0:4e:cf:58:28:27:c6:88:8d:86:7f:0a: 7d:54:49:e6:6e:af:ed:77:a1:72:0a:b4:27:15:81:b2:1d:de: f7:6b:ed:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj6HOXi/Caupg7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU5ZDQyNGUtZjU2YS00YTlkLWJiY2MtZGJiOGVkOTZj ZGYwMB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk MTcyZGE0MmQtOTI2ZC00MmYzLWEyNWYtZGVkZDBhNjVmOTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjty83JOWX9itIbqSaFMuoUY870vC9zvHuWb FpjcxdbapjvHHKGg9WqKrBf0Bg3EGQSL1dQJarDTsNHi9CREYDdkOOOKVvaSxLBr 1wDhwNS9oL0eGc/BolSwAdITwXwIl2hwb5rUhHodqOKHuGI4+wfYiNbKNojVZ3Sv zXFPqVo0/GvtCMDuQWtA6IkszehLdzlDWGbUiNPdOrvCHFLdKdNLr6JlU/KlQ9UE uTnVIx/z/nzNnXKLMyQ1cnTSU9lINjjuUYwHuS05Tl4biFM8MfJx2JkJDy/lPNmx yS1nC0X2zs3vykEYgCQvbMRUo0Ei97yo1MZ+eVTqyTZLuv7zYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBcRzLtoQ09s3Doou91QbAC4PA5CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NTlk NDI0ZS1mNTZhLTRhOWQtYmJjYy1kYmI4ZWQ5NmNkZjAvODFkMTQwNDEtY2IwZS0z NmRmLWJlOWUtODBiMTE0MjMwZDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDU5ZDQyNGUtZjU2YS00YTlkLWJi Y2MtZGJiOGVkOTZjZGYwLzQ1OWQ0MjRlLWY1NmEtNGE5ZC1iYmNjLWRiYjhlZDk2 Y2RmMC5jcmwwHwYDVR0jBBgwFoAU8UNX6MsanlCIO3KFS9uM1iWmHpwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NTlkNDI0ZS1mNTZhLTRhOWQtYmJjYy1kYmI4 ZWQ5NmNkZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxonvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOeQQvNEMZ27uuwX4AR9YH3ZoYI1rrvU9EVDGgVA24MljY8sO6R1xxi xhDkxruWj1bVQIyEQu67n5ODGyg8YC7kw93imIaWj0kSZA85YqUL0G2lW/dKlx5J VIri0o+qCPBAqaarxiIsq9QBaEh5vanJu1oPwrxrmziSV+xg1tP7iMh9ujqxC0t1 7qpvcSMA/9gkQIdtLWMv6YRs52j+bGtlempuXhtsGcfwIR1s+2cfF8j+x+8/VZrm kqSKhzBfucOeI99IhBooCkCvOzRZh6IT+MlncLZ6z3eqUm0TvvBOz1goJ8aIjYZ/ Cn1USeZur+13oXIKtCcVgbId3vdr7YM= -----END CERTIFICATE-----Generated at Thu Mar 26 03:47:08 2026 by rpki-client