$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/7d914a29-07b2-3546-9c70-6be805db3231.roa File: 7d914a29-07b2-3546-9c70-6be805db3231.roa (raw, json) Hash identifier: f4bCmqmHv7LhqNE3rkjOTbyiMnTxXww0CF6zRHT4SOQ= Subject key identifier: 59:70:95:E1:46:BA:A7:C4:48:0D:FD:69:8F:72:94:3C:75:10:FC:D5 Certificate issuer: /CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Certificate serial: 010D0C9F4328584D44FA40E22C95BEBB3E717110 Authority key identifier: 7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/7d914a29-07b2-3546-9c70-6be805db3231.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 23428 IP address blocks: 198.160.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:40:e2:2c:95:be:bb:3e:71:71:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=606609dd-05bf-4ae5-9281-31e01a670d9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8a:11:55:9b:b8:ea:89:57:54:ba:9a:95:b3: e4:b6:fc:c6:ed:a7:c7:66:2b:a4:67:5b:87:cf:07: 9a:30:5b:fc:f0:44:2f:7c:b1:d8:53:df:7f:13:34: 3f:ba:19:a4:8a:ca:73:77:4b:9a:a5:ff:84:bd:c7: a0:2a:46:92:27:de:05:03:2f:c9:ae:31:cb:36:46: 19:fd:24:18:08:98:36:2f:37:be:0e:0d:ad:9a:fe: 08:dd:bf:64:70:a1:61:6a:9c:79:48:2a:fa:b0:ef: c4:27:7d:f4:66:7d:02:1b:51:7e:ad:6f:cb:71:63: 23:6e:2d:16:9c:01:2e:d4:0b:89:2e:a0:c6:28:c4: b6:60:fb:de:f2:b9:f5:f5:f7:df:ea:13:bf:cf:93: 35:61:e2:76:a2:5b:be:0e:49:45:62:ee:76:64:38: 35:cc:13:33:10:c6:87:c9:79:10:f5:f1:54:4f:16: a7:f8:fe:7c:28:af:37:5e:b5:5d:ca:16:38:53:e6: 53:13:f4:33:f5:69:1c:2f:52:52:41:cc:5b:a0:94: 45:6c:ee:7d:e8:05:e3:3c:b3:31:35:bf:d3:31:91: 6d:59:df:20:e3:22:fe:a3:35:76:87:2d:42:d0:f5: f8:77:42:f9:c4:cb:40:83:a8:fe:9d:60:40:94:64: 4c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:70:95:E1:46:BA:A7:C4:48:0D:FD:69:8F:72:94:3C:75:10:FC:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/7d914a29-07b2-3546-9c70-6be805db3231.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl X509v3 Authority Key Identifier: keyid:7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer sbgp-ipAddrBlock: critical IPv4: 198.160.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:c4:90:53:f8:d7:25:de:0d:31:5b:73:1a:e2:52:63:e0:f9: 96:e7:3a:8c:d3:b0:bb:91:c6:63:c2:44:d7:5d:fd:3f:01:5e: 68:50:6e:5a:da:39:7a:e5:72:c5:1d:20:b7:d3:85:16:21:9e: ff:bb:52:a7:2a:97:04:f6:ca:e5:7d:36:ac:bb:7c:e2:ae:bf: de:20:af:16:a0:fd:20:71:c1:0e:67:f8:62:8e:cf:9b:a0:c1: 6b:ea:0b:97:f2:d4:da:a6:17:a5:79:f6:74:eb:a5:70:6d:35: ff:ce:c0:9c:e7:45:7e:03:bf:2b:a5:a0:af:e4:31:03:be:90: 54:6a:04:34:fc:61:8c:42:78:33:ce:5d:8e:9d:02:3d:d9:3a: c2:23:7f:92:98:7b:37:63:3b:d5:6b:37:65:10:ce:f8:54:87: 23:e4:22:ab:39:ae:dc:70:22:28:07:2f:60:c4:0a:13:4d:b7: 03:75:0c:b2:e0:4a:a8:9e:c5:b7:38:74:75:9a:6d:5d:6b:6c: 9f:e4:ea:47:28:ec:48:95:67:63:3b:cb:ae:c4:62:74:1b:5c: a6:40:11:e6:64:ca:98:ee:99:93:9b:76:6a:2c:cf:0a:e6:03: 21:cf:27:92:c8:6a:41:4f:1e:40:65:e5:34:42:f6:d5:c5:57: 94:07:a1:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+kDiLJW+uz5xcRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjJmMDU4NWUtYTI4ZS00ZWFkLTliMWMtZGVmZDI5MWNl NTRkMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk NjA2NjA5ZGQtMDViZi00YWU1LTkyODEtMzFlMDFhNjcwZDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYoRVZu46olXVLqalbPktvzG7afHZiukZ1uH zweaMFv88EQvfLHYU99/EzQ/uhmkispzd0uapf+EvcegKkaSJ94FAy/JrjHLNkYZ /SQYCJg2Lze+Dg2tmv4I3b9kcKFhapx5SCr6sO/EJ330Zn0CG1F+rW/LcWMjbi0W nAEu1AuJLqDGKMS2YPve8rn19fff6hO/z5M1YeJ2olu+DklFYu52ZDg1zBMzEMaH yXkQ9fFUTxan+P58KK83XrVdyhY4U+ZTE/Qz9WkcL1JSQcxboJRFbO596AXjPLMx Nb/TMZFtWd8g4yL+ozV2hy1C0PX4d0L5xMtAg6j+nWBAlGRMQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFlwleFGuqfESA39aY9ylDx1EPzVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYw NTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZkMjkxY2U1NGQvN2Q5MTRhMjktMDdiMi0z NTQ2LTljNzAtNmJlODA1ZGIzMjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjJmMDU4NWUtYTI4ZS00ZWFkLTli MWMtZGVmZDI5MWNlNTRkL2YyZjA1ODVlLWEyOGUtNGVhZC05YjFjLWRlZmQyOTFj ZTU0ZC5jcmwwHwYDVR0jBBgwFoAUe8Z4d4iTGVPnEQI5lG2LPRN6wo8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYwNTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZk MjkxY2U1NGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqDZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/EkFP41yXeDTFbcxriUmPg+ZbnOozTsLuRxmPCRNdd/T8BXmhQblra OXrlcsUdILfThRYhnv+7UqcqlwT2yuV9Nqy7fOKuv94grxag/SBxwQ5n+GKOz5ug wWvqC5fy1NqmF6V59nTrpXBtNf/OwJznRX4DvyuloK/kMQO+kFRqBDT8YYxCeDPO XY6dAj3ZOsIjf5KYezdjO9VrN2UQzvhUhyPkIqs5rtxwIigHL2DEChNNtwN1DLLg Sqiexbc4dHWabV1rbJ/k6kco7EiVZ2M7y67EYnQbXKZAEeZkypjumZObdmoszwrm AyHPJ5LIakFPHkBl5TRC9tXFV5QHoe8= -----END CERTIFICATE-----Generated at Wed Mar 25 23:26:13 2026 by rpki-client