$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5050e10f-3603-3531-ae6a-2649953d3026.roa File: 5050e10f-3603-3531-ae6a-2649953d3026.roa (raw, json) Hash identifier: n0r46CBmAkBZqHXX0Cjk0BOdTZJXYLQmbkw0355Pr9A= Subject key identifier: B3:AD:7D:70:52:1B:70:85:8D:B3:20:6C:C7:54:6F:61:E0:54:DC:F2 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0DE7F99F87439B1D809C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5050e10f-3603-3531-ae6a-2649953d3026.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 198.45.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:de:7f:99:f8:74:39:b1:d8:09:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=b11acc07-aeb3-4b02-94e4-9e269aed1640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:af:9d:25:21:58:9f:bc:cf:49:68:39:04:96: df:62:73:6d:5d:44:8a:dc:53:58:92:78:9b:3c:8f: 13:18:35:b1:9d:73:2e:14:f4:25:e1:4f:80:72:70: b2:04:42:43:5a:4f:32:2d:4d:f1:a8:ee:3e:d0:5f: 25:61:6e:23:1c:9c:fa:be:e3:7c:ff:75:ba:25:c3: 70:8d:5f:41:79:fa:7c:ea:38:2a:19:cf:24:aa:db: ca:8b:66:d5:65:f2:1d:c0:84:19:ce:a7:32:89:07: 38:0d:dd:55:21:08:70:46:fc:2e:db:98:59:aa:e9: 8d:46:0c:11:73:cb:78:c3:24:a1:a2:05:03:59:ad: ab:c8:c3:b5:6f:a7:e6:cf:41:a4:21:79:a4:ec:aa: ca:a4:5c:08:e3:2c:d1:29:43:10:e6:ef:74:b5:23: aa:02:ec:e4:a5:ea:83:3f:1a:ac:98:38:b0:7e:e3: fe:d8:a7:10:f9:66:1b:df:97:21:17:08:20:e4:d7: 09:6e:92:79:33:4f:7b:13:48:70:8e:01:b0:d6:94: 35:16:35:02:72:ac:32:5f:c2:49:b3:0a:e3:ee:c3: e0:c4:33:2d:a9:9e:bf:45:38:5f:a6:d6:1d:fa:f3: d4:f8:39:63:a7:e5:23:07:61:57:a0:a4:b7:88:a6: 7b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:AD:7D:70:52:1B:70:85:8D:B3:20:6C:C7:54:6F:61:E0:54:DC:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5050e10f-3603-3531-ae6a-2649953d3026.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:55:a2:b2:21:45:ae:25:c6:eb:85:ab:5c:44:dc:20:49:af: d1:a8:1b:f0:ae:c8:8a:26:8a:7c:01:a5:da:a0:24:9b:47:c0: 26:66:a3:94:e6:7b:b0:7c:05:29:83:ce:ba:3b:cf:4a:f4:ef: 5b:66:11:8f:74:7c:38:d3:92:dd:d6:29:7c:46:20:2d:63:a6: 86:df:c2:ab:b6:f7:ff:91:8a:7c:27:32:89:79:f2:2d:e1:37: f3:f5:2e:44:20:6c:f0:ae:e4:8e:50:79:ba:79:59:3a:58:c8: 85:51:41:87:42:45:bb:26:dd:b6:06:cf:5c:aa:00:24:f5:28: d9:d8:9b:e6:a7:22:d1:9c:a2:58:ab:68:ed:93:bb:25:ec:b5: 4a:92:ac:1f:06:84:c3:37:eb:26:8a:68:ce:4a:eb:75:2f:9f: cc:ce:85:a6:6c:65:4a:77:a2:bd:cb:34:90:68:c3:0e:90:77: 52:2f:4a:54:16:40:64:50:4c:6c:6d:80:53:4e:5b:85:a8:67: a5:cc:01:ff:57:d3:ec:a1:6f:7b:15:8d:20:ad:32:3a:86:3f: c5:a9:64:c7:10:0e:21:1e:40:b1:fc:98:b1:96:93:33:c6:22: 8c:1d:14:3e:e8:0a:73:db:ed:17:43:e3:8e:88:07:33:33:6b: 4f:a4:b6:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4N5/mfh0ObHYCcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YjExYWNjMDctYWViMy00YjAyLTk0ZTQtOWUyNjlhZWQxNjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjK+dJSFYn7zPSWg5BJbfYnNtXUSK3FNYknib PI8TGDWxnXMuFPQl4U+AcnCyBEJDWk8yLU3xqO4+0F8lYW4jHJz6vuN8/3W6JcNw jV9Befp86jgqGc8kqtvKi2bVZfIdwIQZzqcyiQc4Dd1VIQhwRvwu25hZqumNRgwR c8t4wyShogUDWa2ryMO1b6fmz0GkIXmk7KrKpFwI4yzRKUMQ5u90tSOqAuzkpeqD PxqsmDiwfuP+2KcQ+WYb35chFwgg5NcJbpJ5M097E0hwjgGw1pQ1FjUCcqwyX8JJ swrj7sPgxDMtqZ6/RThfptYd+vPU+Dljp+UjB2FXoKS3iKZ7kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOtfXBSG3CFjbMgbMdUb2HgVNzyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTA1MGUxMGYtMzYwMy0z NTMxLWFlNmEtMjY0OTk1M2QzMDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi3vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJVorIhRa4lxuuFq1xE3CBJr9GoG/CuyIominwBpdqgJJtHwCZmo5Tm e7B8BSmDzro7z0r071tmEY90fDjTkt3WKXxGIC1jpobfwqu29/+RinwnMol58i3h N/P1LkQgbPCu5I5Qebp5WTpYyIVRQYdCRbsm3bYGz1yqACT1KNnYm+anItGcolir aO2TuyXstUqSrB8GhMM36yaKaM5K63Uvn8zOhaZsZUp3or3LNJBoww6Qd1IvSlQW QGRQTGxtgFNOW4WoZ6XMAf9X0+yhb3sVjSCtMjqGP8WpZMcQDiEeQLH8mLGWkzPG IowdFD7oCnPb7RdD446IBzMza0+ktkA= -----END CERTIFICATE-----Generated at Fri Mar 13 05:53:36 2026 by rpki-client