$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be34bac0-9fa1-3d66-adc1-b7d6984a4370.roa File: be34bac0-9fa1-3d66-adc1-b7d6984a4370.roa (raw, json) Hash identifier: LTYRd0Tzq8y0uhG9p4UGU+/I4E3kf1dnlIEvqThJ1r8= Subject key identifier: EC:F6:35:FA:82:AB:B9:3F:7B:59:4C:3C:48:EC:5C:00:6D:65:BE:F1 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0DC655558C4DFA0D02480 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be34bac0-9fa1-3d66-adc1-b7d6984a4370.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 198.45.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:dc:65:55:58:c4:df:a0:d0:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=d02ead28-e56f-4ad1-95d5-dc7bbd3fbbd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:3c:e9:7a:5b:59:54:a7:1c:a6:5b:03:3e:41: 95:5d:f1:5a:47:29:34:25:7f:e7:bf:59:f9:d6:00: 90:20:c2:32:f2:3a:d7:64:6a:a6:72:c6:71:29:ce: 64:e4:1b:26:6e:7b:10:7a:cf:63:b0:db:24:a7:09: 1b:3c:4e:65:f3:b7:6b:20:40:16:22:1c:55:bc:db: 37:93:87:c2:91:81:53:78:c3:7e:0b:96:f9:f3:b3: c7:46:b4:91:89:e8:22:19:8d:22:f2:1c:91:48:c9: e0:fe:d7:39:e1:13:a4:95:9a:6a:86:4c:e2:b6:d5: ad:2d:99:47:09:ca:e5:a0:7f:69:5a:20:83:d3:0b: c6:32:c0:59:66:34:a4:0a:78:84:fc:b0:0e:0c:ff: fe:37:c9:22:8e:29:77:9d:46:bb:f5:ac:51:42:f8: 6d:8e:50:6f:7e:a4:3d:ae:af:5e:87:bd:f6:f4:33: a3:23:ea:b3:ec:ed:c7:07:51:b6:b5:1b:b1:18:6c: cb:63:36:47:bf:1b:1e:0a:82:c5:52:8f:37:70:c0: fd:55:12:b8:0b:91:4a:fc:f5:6b:57:bd:15:9d:97: 5e:e2:24:e0:20:af:ba:f0:57:95:77:f5:7d:82:44: 98:d5:7f:a9:fd:b6:fe:26:b9:6d:53:31:84:63:69: cb:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:F6:35:FA:82:AB:B9:3F:7B:59:4C:3C:48:EC:5C:00:6D:65:BE:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be34bac0-9fa1-3d66-adc1-b7d6984a4370.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:a1:eb:e8:de:4a:8f:e5:df:d6:b9:2c:ed:03:8d:ef:cf:5c: 6d:c1:9f:7d:0b:d8:cf:4a:b0:b8:7c:69:89:e0:67:0d:01:d1: 3d:33:2a:f0:1f:4a:0f:ae:51:1c:1c:1c:89:4e:45:42:7d:ed: 0f:27:36:eb:e3:52:95:de:ae:08:43:9a:26:0b:19:83:aa:df: bf:5a:9e:90:8a:ae:64:a0:26:c3:6b:09:1b:8e:43:a6:8e:6a: 32:e4:f2:ed:df:53:3e:29:fe:2e:f8:a8:b3:f1:f1:d3:5e:6b: d2:9d:af:95:d3:c4:a7:2c:5f:8c:0f:64:63:3e:f0:5f:10:0b: e6:b9:13:e2:5d:61:af:45:91:6b:5d:16:a2:85:fb:ef:3c:3e: 0b:bb:b7:54:e1:fa:91:39:23:27:26:2e:d6:04:19:ea:54:79: 41:9a:d8:ee:22:4f:e9:e3:df:4f:9a:01:f9:f6:95:6b:29:31: b4:cd:00:02:bd:b7:83:fc:74:68:47:2d:d3:ac:37:fe:a1:07: 6b:07:97:61:81:14:b6:db:4e:22:88:8c:0e:6e:e8:59:b5:59: db:b9:46:a4:d3:00:d1:f0:dd:82:d1:de:6e:f0:0c:e4:c7:8c: 02:82:f8:53:8a:8f:d0:f5:4d:d7:07:70:2b:65:27:13:a5:a7: 1a:7d:77:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4NxlVVjE36DQJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZDAyZWFkMjgtZTU2Zi00YWQxLTk1ZDUtZGM3YmJkM2ZiYmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzzpeltZVKccplsDPkGVXfFaRyk0JX/nv1n5 1gCQIMIy8jrXZGqmcsZxKc5k5BsmbnsQes9jsNskpwkbPE5l87drIEAWIhxVvNs3 k4fCkYFTeMN+C5b587PHRrSRiegiGY0i8hyRSMng/tc54ROklZpqhkzittWtLZlH CcrloH9pWiCD0wvGMsBZZjSkCniE/LAODP/+N8kijil3nUa79axRQvhtjlBvfqQ9 rq9eh7329DOjI+qz7O3HB1G2tRuxGGzLYzZHvxseCoLFUo83cMD9VRK4C5FK/PVr V70VnZde4iTgIK+68FeVd/V9gkSY1X+p/bb+JrltUzGEY2nL0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOz2NfqCq7k/e1lMPEjsXABtZb7xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmUzNGJhYzAtOWZhMS0z ZDY2LWFkYzEtYjdkNjk4NGE0MzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi2qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKOh6+jeSo/l39a5LO0Dje/PXG3Bn30L2M9KsLh8aYngZw0B0T0zKvAf Sg+uURwcHIlORUJ97Q8nNuvjUpXerghDmiYLGYOq379anpCKrmSgJsNrCRuOQ6aO ajLk8u3fUz4p/i74qLPx8dNea9Kdr5XTxKcsX4wPZGM+8F8QC+a5E+JdYa9FkWtd FqKF++88Pgu7t1Th+pE5IycmLtYEGepUeUGa2O4iT+nj30+aAfn2lWspMbTNAAK9 t4P8dGhHLdOsN/6hB2sHl2GBFLbbTiKIjA5u6Fm1Wdu5RqTTANHw3YLR3m7wDOTH jAKC+FOKj9D1TdcHcCtlJxOlpxp9d34= -----END CERTIFICATE-----Generated at Fri Mar 13 05:52:29 2026 by rpki-client