$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4834d5c9-af24-4bed-bc56-9586ca5e835d/9faa38ba-31a2-3885-a989-200adc329d3f.roa File: 9faa38ba-31a2-3885-a989-200adc329d3f.roa (raw, json) Hash identifier: kj2/EzQNiUvBuEIER1+O79gurMMpDl8HuLFyukplQOo= Subject key identifier: 7C:D6:BE:AA:61:7C:AF:6B:DE:1F:80:EF:68:03:3F:A7:11:9E:CD:EF Certificate issuer: /CN=4834d5c9-af24-4bed-bc56-9586ca5e835d Certificate serial: 010D0C9F4328584D1B19F49D24C7FABB80327700 Authority key identifier: 17:69:AC:8B:40:B0:43:97:16:9A:87:4C:6A:5F:BD:F3:DB:35:72:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4834d5c9-af24-4bed-bc56-9586ca5e835d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4834d5c9-af24-4bed-bc56-9586ca5e835d/9faa38ba-31a2-3885-a989-200adc329d3f.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 399145 IP address blocks: 198.13.18.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4834d5c9-af24-4bed-bc56-9586ca5e835d/4834d5c9-af24-4bed-bc56-9586ca5e835d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4834d5c9-af24-4bed-bc56-9586ca5e835d/4834d5c9-af24-4bed-bc56-9586ca5e835d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4834d5c9-af24-4bed-bc56-9586ca5e835d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:19:f4:9d:24:c7:fa:bb:80:32:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4834d5c9-af24-4bed-bc56-9586ca5e835d Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=3de5e547-5076-4e83-9fa3-b19e32001419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4b:21:07:30:88:95:49:ab:df:75:7e:e4:2a: ef:38:82:ab:12:f9:95:9d:26:19:a6:a1:66:58:4f: e3:26:50:9a:e0:8b:0d:1e:fb:41:6c:c2:b6:b2:a7: 7a:51:47:c8:cc:af:52:8c:0b:0e:fd:ec:5d:47:d6: e0:b7:cf:ab:d7:a3:f0:a8:da:04:f2:2c:2f:d5:d2: 61:8f:af:fc:17:7d:e1:a0:31:c6:67:8d:bb:f4:b0: 39:d6:1c:99:c2:68:f2:21:6d:69:45:16:a5:85:2a: b6:59:26:bb:86:f3:8e:8b:70:af:9d:06:f5:44:fe: ad:b3:55:e4:8d:4e:33:25:20:a3:5d:e7:da:d3:b2: c5:bb:2c:28:bc:65:90:99:48:2c:9b:57:f8:e9:05: d4:9e:08:63:b4:57:47:e7:65:db:55:1c:6b:a1:eb: f8:2e:ac:26:9e:36:9a:ea:fa:fc:16:43:db:6a:db: 83:26:19:ea:db:df:9f:4f:23:bb:50:a8:58:1b:f8: 34:d8:8c:11:9b:57:e6:d5:97:eb:f6:32:df:1b:12: 41:a6:a9:b7:66:d0:30:7f:77:68:48:8c:10:b2:9b: b6:f6:24:7e:9c:43:a3:e3:0f:ef:db:ac:fd:12:3b: 6a:3e:56:49:7c:b9:4a:39:ff:a9:75:d7:ed:32:fb: 75:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:D6:BE:AA:61:7C:AF:6B:DE:1F:80:EF:68:03:3F:A7:11:9E:CD:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4834d5c9-af24-4bed-bc56-9586ca5e835d/9faa38ba-31a2-3885-a989-200adc329d3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4834d5c9-af24-4bed-bc56-9586ca5e835d/4834d5c9-af24-4bed-bc56-9586ca5e835d.crl X509v3 Authority Key Identifier: keyid:17:69:AC:8B:40:B0:43:97:16:9A:87:4C:6A:5F:BD:F3:DB:35:72:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4834d5c9-af24-4bed-bc56-9586ca5e835d.cer sbgp-ipAddrBlock: critical IPv4: 198.13.18.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:d7:5a:b5:f7:22:ef:45:cb:af:db:fe:b2:ac:30:84:0d:6a: 82:b8:03:1d:40:30:a0:69:a3:69:d1:58:96:ed:14:01:b9:69: 47:fc:7b:70:73:af:ee:37:b6:79:20:e8:c2:8f:04:22:2c:35: 59:42:d5:61:7f:57:ce:7a:c0:90:30:31:3b:b6:c4:92:a0:73: db:b5:8a:f9:67:40:3c:8c:a9:d4:d0:89:01:a2:ed:3a:4a:61: 58:ba:2f:38:7c:b9:9b:5c:bd:0d:17:d7:77:b2:b2:cd:ef:fc: 60:df:70:86:62:48:1e:16:02:de:13:e2:7f:50:dd:ef:30:27: e5:94:7f:9d:6b:a8:6c:45:ef:9d:0e:53:04:20:97:56:e1:16: 1f:03:a6:ee:70:ae:74:84:70:dd:a9:08:c4:a2:1a:9c:01:9f: d5:d8:26:d6:9c:fa:97:ac:8b:fe:3e:5c:f9:9f:e7:a6:b6:97: 14:b6:25:4e:d3:25:68:cc:47:0b:be:99:4a:74:ce:62:ac:44: 3d:80:ad:b0:bf:20:48:0d:c2:7d:74:13:16:86:c1:c9:c7:cb: 91:fa:0f:23:72:a8:71:9b:41:5e:4c:55:61:60:39:91:65:b6: 08:1d:49:f5:8e:dc:09:c1:f4:d9:0d:7b:61:d8:15:7e:fe:48: 8c:48:f3:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGfSdJMf6u4AydwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDgzNGQ1YzktYWYyNC00YmVkLWJjNTYtOTU4NmNhNWU4 MzVkMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk M2RlNWU1NDctNTA3Ni00ZTgzLTlmYTMtYjE5ZTMyMDAxNDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0shBzCIlUmr33V+5CrvOIKrEvmVnSYZpqFm WE/jJlCa4IsNHvtBbMK2sqd6UUfIzK9SjAsO/exdR9bgt8+r16PwqNoE8iwv1dJh j6/8F33hoDHGZ4279LA51hyZwmjyIW1pRRalhSq2WSa7hvOOi3CvnQb1RP6ts1Xk jU4zJSCjXefa07LFuywovGWQmUgsm1f46QXUnghjtFdH52XbVRxroev4Lqwmnjaa 6vr8FkPbatuDJhnq29+fTyO7UKhYG/g02IwRm1fm1Zfr9jLfGxJBpqm3ZtAwf3do SIwQspu29iR+nEOj4w/v26z9EjtqPlZJfLlKOf+pddftMvt1uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHzWvqphfK9r3h+A72gDP6cRns3vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80ODM0 ZDVjOS1hZjI0LTRiZWQtYmM1Ni05NTg2Y2E1ZTgzNWQvOWZhYTM4YmEtMzFhMi0z ODg1LWE5ODktMjAwYWRjMzI5ZDNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNDgzNGQ1YzktYWYyNC00YmVkLWJj NTYtOTU4NmNhNWU4MzVkLzQ4MzRkNWM5LWFmMjQtNGJlZC1iYzU2LTk1ODZjYTVl ODM1ZC5jcmwwHwYDVR0jBBgwFoAUF2msi0CwQ5cWmodMal+989s1cmowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80ODM0ZDVjOS1hZjI0LTRiZWQtYmM1Ni05NTg2 Y2E1ZTgzNWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxg0SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/XWrX3Iu9Fy6/b/rKsMIQNaoK4Ax1AMKBpo2nRWJbtFAG5aUf8e3Bz r+43tnkg6MKPBCIsNVlC1WF/V856wJAwMTu2xJKgc9u1ivlnQDyMqdTQiQGi7TpK YVi6Lzh8uZtcvQ0X13eyss3v/GDfcIZiSB4WAt4T4n9Q3e8wJ+WUf51rqGxF750O UwQgl1bhFh8Dpu5wrnSEcN2pCMSiGpwBn9XYJtac+pesi/4+XPmf56a2lxS2JU7T JWjMRwu+mUp0zmKsRD2ArbC/IEgNwn10ExaGwcnHy5H6DyNyqHGbQV5MVWFgOZFl tggdSfWO3AnB9NkNe2HYFX7+SIxI80Q= -----END CERTIFICATE-----Generated at Thu Mar 26 07:43:40 2026 by rpki-client