$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0eb2cd2d-6fc3-46e1-9c8b-a2dab2d8c1d2/896d6a0f-071e-3b18-a74d-6184eb8f3df4.roa File: 896d6a0f-071e-3b18-a74d-6184eb8f3df4.roa (raw, json) Hash identifier: 5yGI9YdkYQ0WwtTZ/3xBG/OqHc/one9QF7foPe49PU4= Subject key identifier: E6:FF:E5:EB:C8:D1:CC:58:D0:62:20:4C:12:C1:76:2F:20:8B:C1:E9 Certificate issuer: /CN=0eb2cd2d-6fc3-46e1-9c8b-a2dab2d8c1d2 Certificate serial: 010D0C9F4328584D39CF9A1C117698CCD173D480 Authority key identifier: 5D:6E:D2:47:FA:F2:D0:17:9D:28:73:A0:B2:C8:52:9E:83:05:E3:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0eb2cd2d-6fc3-46e1-9c8b-a2dab2d8c1d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0eb2cd2d-6fc3-46e1-9c8b-a2dab2d8c1d2/896d6a0f-071e-3b18-a74d-6184eb8f3df4.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 8075 IP address blocks: 198.202.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0eb2cd2d-6fc3-46e1-9c8b-a2dab2d8c1d2/0eb2cd2d-6fc3-46e1-9c8b-a2dab2d8c1d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0eb2cd2d-6fc3-46e1-9c8b-a2dab2d8c1d2/0eb2cd2d-6fc3-46e1-9c8b-a2dab2d8c1d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0eb2cd2d-6fc3-46e1-9c8b-a2dab2d8c1d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:9a:1c:11:76:98:cc:d1:73:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0eb2cd2d-6fc3-46e1-9c8b-a2dab2d8c1d2 Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=cfb62e93-56f8-48b4-85c8-e5c143fa4cb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ae:1e:38:bd:01:17:79:5a:f6:05:e4:6d:f7: c1:e5:b4:60:51:ba:16:3f:92:d3:10:8e:be:2e:4d: d9:0b:5c:bf:36:d9:5e:5c:91:80:28:ed:c0:f6:38: e1:7d:24:45:ef:df:2a:f5:7c:35:02:51:02:5d:6f: c2:85:fa:83:1f:51:d7:81:6e:b5:ab:90:ee:ff:a6: 34:7a:4e:24:90:75:fc:db:80:02:0d:4b:4d:de:dd: 01:4b:8c:c7:72:dd:65:f9:a4:d8:68:3d:f0:a6:0b: 61:53:95:09:be:2b:f2:46:28:5b:7e:5e:7b:aa:46: 3d:99:f1:7c:fa:6b:b1:1c:15:bb:99:e5:4a:77:6c: 9a:e4:41:aa:2d:28:a0:db:95:17:f1:6a:75:ee:0c: 45:87:2e:11:09:72:e7:64:08:6f:11:80:5c:1e:b4: 1f:a0:6e:c0:dd:e5:1f:a2:cb:19:d7:c9:ff:64:83: 59:b4:a7:7b:cc:3b:fb:17:f0:a9:a7:be:dd:6c:c7: f3:3b:81:aa:6d:74:f3:39:c0:c3:bf:9b:e8:1c:a5: a4:de:6b:09:71:9a:88:b6:64:4c:ad:6f:e0:b8:d5: 6d:2f:51:9d:c0:db:43:dd:61:05:17:1d:46:50:36: 03:c9:2c:6f:eb:72:97:88:3b:da:60:37:b4:54:db: 6e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:FF:E5:EB:C8:D1:CC:58:D0:62:20:4C:12:C1:76:2F:20:8B:C1:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0eb2cd2d-6fc3-46e1-9c8b-a2dab2d8c1d2/896d6a0f-071e-3b18-a74d-6184eb8f3df4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0eb2cd2d-6fc3-46e1-9c8b-a2dab2d8c1d2/0eb2cd2d-6fc3-46e1-9c8b-a2dab2d8c1d2.crl X509v3 Authority Key Identifier: keyid:5D:6E:D2:47:FA:F2:D0:17:9D:28:73:A0:B2:C8:52:9E:83:05:E3:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0eb2cd2d-6fc3-46e1-9c8b-a2dab2d8c1d2.cer sbgp-ipAddrBlock: critical IPv4: 198.202.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:67:25:7c:4d:ca:51:71:a9:50:23:09:23:09:49:c0:19:cf: 27:e5:54:e7:3d:46:9f:ce:5c:94:e6:d5:8b:23:83:0b:7a:f3: 72:c3:a5:8c:44:57:9c:d4:57:88:9b:02:38:63:53:a2:42:db: 0c:8a:80:90:ca:93:84:5c:e8:43:a0:eb:19:04:1d:2f:93:53: 56:d4:71:8d:5f:bb:e8:00:f2:49:eb:b8:67:59:9d:39:3b:0c: d1:56:de:3a:29:5c:22:ad:27:5f:6f:72:df:f1:91:5f:a1:ca: 7b:33:5e:b9:4c:44:0e:46:57:67:08:f0:bc:4d:11:9f:c6:a1: ad:78:ed:2a:7a:10:3c:da:91:5f:b2:b4:4c:ae:4c:2d:b4:5e: ec:f4:77:c3:ee:da:76:a0:f2:f4:f6:d1:d3:f4:24:af:96:da: eb:e8:28:55:e1:f9:d8:a2:5f:c3:4f:84:d3:57:2f:19:f9:12: ac:3b:c1:27:d1:69:d4:7c:c8:8a:fb:ca:8a:3d:b8:97:44:1d: a0:76:63:43:7f:22:bd:89:67:e8:33:f3:39:7e:85:e4:b6:20: bc:d7:08:06:28:e6:03:ec:48:11:56:c8:cc:63:06:6d:f2:85: 91:63:5a:20:f1:35:be:f9:5c:db:63:fd:80:f5:02:0d:78:55: 65:ad:e0:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05z5ocEXaYzNFz1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGViMmNkMmQtNmZjMy00NmUxLTljOGItYTJkYWIyZDhj MWQyMB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk Y2ZiNjJlOTMtNTZmOC00OGI0LTg1YzgtZTVjMTQzZmE0Y2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiq4eOL0BF3la9gXkbffB5bRgUboWP5LTEI6+ Lk3ZC1y/NtleXJGAKO3A9jjhfSRF798q9Xw1AlECXW/ChfqDH1HXgW61q5Du/6Y0 ek4kkHX824ACDUtN3t0BS4zHct1l+aTYaD3wpgthU5UJvivyRihbfl57qkY9mfF8 +muxHBW7meVKd2ya5EGqLSig25UX8Wp17gxFhy4RCXLnZAhvEYBcHrQfoG7A3eUf ossZ18n/ZINZtKd7zDv7F/Cpp77dbMfzO4GqbXTzOcDDv5voHKWk3msJcZqItmRM rW/guNVtL1GdwNtD3WEFFx1GUDYDySxv63KXiDvaYDe0VNtuaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOb/5evI0cxY0GIgTBLBdi8gi8HpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wZWIy Y2QyZC02ZmMzLTQ2ZTEtOWM4Yi1hMmRhYjJkOGMxZDIvODk2ZDZhMGYtMDcxZS0z YjE4LWE3NGQtNjE4NGViOGYzZGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGViMmNkMmQtNmZjMy00NmUxLTlj OGItYTJkYWIyZDhjMWQyLzBlYjJjZDJkLTZmYzMtNDZlMS05YzhiLWEyZGFiMmQ4 YzFkMi5jcmwwHwYDVR0jBBgwFoAUXW7SR/ry0BedKHOgsshSnoMF4zowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wZWIyY2QyZC02ZmMzLTQ2ZTEtOWM4Yi1hMmRh YjJkOGMxZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxsoXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZnJXxNylFxqVAjCSMJScAZzyflVOc9Rp/OXJTm1Ysjgwt683LDpYxE V5zUV4ibAjhjU6JC2wyKgJDKk4Rc6EOg6xkEHS+TU1bUcY1fu+gA8knruGdZnTk7 DNFW3jopXCKtJ19vct/xkV+hynszXrlMRA5GV2cI8LxNEZ/Goa147Sp6EDzakV+y tEyuTC20Xuz0d8Pu2nag8vT20dP0JK+W2uvoKFXh+diiX8NPhNNXLxn5Eqw7wSfR adR8yIr7yoo9uJdEHaB2Y0N/Ir2JZ+gz8zl+heS2ILzXCAYo5gPsSBFWyMxjBm3y hZFjWiDxNb75XNtj/YD1Ag14VWWt4Bg= -----END CERTIFICATE-----Generated at Thu Mar 26 06:57:07 2026 by rpki-client