$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8949a05-b098-32fe-99a1-fafcf7a51e72.roa File: c8949a05-b098-32fe-99a1-fafcf7a51e72.roa (raw, json) Hash identifier: p+7mKxigKd6JKosxbIFvuMkFQP06Jw41xnVfZyL/ziE= Subject key identifier: 48:35:39:D5:BB:CD:67:03:8F:96:5E:47:40:63:35:CB:A8:57:F6:16 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0DACEBF393BB30BADDB00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8949a05-b098-32fe-99a1-fafcf7a51e72.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 198.45.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:da:ce:bf:39:3b:b3:0b:ad:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=9c7a91cc-9e0b-4297-88de-588d669be84f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:83:32:de:81:11:ba:02:bd:e9:3a:f0:c2:9e: df:57:81:22:b6:f7:a1:7e:4d:1f:99:29:b2:58:a1: 82:fd:49:8f:10:be:fc:89:a5:ac:5e:68:60:e7:76: 04:67:50:91:a3:7e:fd:83:67:3a:9b:f6:cc:aa:0b: 4c:36:87:d7:b4:73:e8:7f:06:e4:0c:b6:02:69:60: bb:51:40:f7:af:22:34:e3:a9:21:69:20:2a:fc:a9: a0:57:7e:67:26:03:dc:1a:e5:1a:79:c1:87:13:11: 64:b0:e8:7c:9f:9b:d1:a5:ea:7a:81:c4:c8:2e:22: 56:43:17:6d:c1:96:c8:95:0e:e9:74:45:50:8f:1b: e8:9f:ec:f5:68:22:b7:18:5f:21:81:4c:40:ec:b5: c8:0a:f2:b3:43:e9:92:1e:e9:38:f9:9f:be:ae:ae: 1e:8f:1e:7c:ca:cc:dd:c5:1e:e3:25:47:1d:38:6c: 78:a5:be:20:df:1b:63:12:23:d8:98:78:2c:2a:ae: c1:41:8a:9b:3d:3b:af:6f:31:ab:3b:27:96:1b:9e: e8:b7:cd:ca:65:dc:5c:d0:12:c8:52:3f:74:4b:97: 15:b9:a6:23:19:01:33:20:89:8c:25:d2:71:88:f0: 7d:e1:4f:21:c9:ac:cb:94:2d:1f:31:55:42:82:db: 92:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:35:39:D5:BB:CD:67:03:8F:96:5E:47:40:63:35:CB:A8:57:F6:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8949a05-b098-32fe-99a1-fafcf7a51e72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:f1:ef:e8:fb:e1:c7:d9:33:ce:bd:51:a7:a0:4e:36:1a:cc: a0:f1:e0:eb:d9:63:08:6a:f0:1e:bf:b1:fd:09:88:b9:7f:8d: 51:dc:ed:aa:98:58:96:27:1d:e2:71:80:59:5b:89:be:0b:97: 7d:3c:90:38:3a:7e:9a:fc:be:cc:04:ab:91:bb:d4:c0:7f:26: ce:06:a9:7c:98:e0:0f:f9:8e:c1:05:9b:da:73:c2:f4:1b:f3: 50:14:bb:e0:5f:d5:74:4a:d3:ed:5a:28:b9:36:4d:b2:a3:ba: 04:21:2f:36:25:b5:85:35:d0:42:aa:25:f3:aa:3f:94:89:18: 26:6d:dc:23:f0:12:74:48:88:10:4b:49:b7:66:f5:df:e4:ab: 13:fe:a0:9f:d3:6c:a2:fc:5a:0d:2f:99:a2:06:a2:86:b3:8d: 93:30:ac:b7:29:ac:1d:e3:6a:8c:8c:7d:69:dc:c2:ce:5b:77: f4:83:22:7b:56:f8:cb:9e:de:3a:6c:45:b6:b0:a9:f3:08:a0: b6:bd:c0:32:6e:7e:89:c0:1e:c9:60:5f:80:4f:8c:83:ff:02: a6:c7:ad:94:bc:85:3e:22:61:63:57:1f:86:3e:c2:e6:97:b8: 49:30:05:0d:2f:b3:3d:cd:93:ef:55:6e:24:8b:93:f5:06:af: a8:5d:67:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4NrOvzk7swut2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk OWM3YTkxY2MtOWUwYi00Mjk3LTg4ZGUtNTg4ZDY2OWJlODRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4My3oERugK96Trwwp7fV4Eitvehfk0fmSmy WKGC/UmPEL78iaWsXmhg53YEZ1CRo379g2c6m/bMqgtMNofXtHPofwbkDLYCaWC7 UUD3ryI046khaSAq/KmgV35nJgPcGuUaecGHExFksOh8n5vRpep6gcTILiJWQxdt wZbIlQ7pdEVQjxvon+z1aCK3GF8hgUxA7LXICvKzQ+mSHuk4+Z++rq4ejx58yszd xR7jJUcdOGx4pb4g3xtjEiPYmHgsKq7BQYqbPTuvbzGrOyeWG57ot83KZdxc0BLI Uj90S5cVuaYjGQEzIImMJdJxiPB94U8hyazLlC0fMVVCgtuSwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEg1OdW7zWcDj5ZeR0BjNcuoV/YWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzg5NDlhMDUtYjA5OC0z MmZlLTk5YTEtZmFmY2Y3YTUxZTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKXx7+j74cfZM869UaegTjYazKDx4OvZYwhq8B6/sf0JiLl/jVHc7aqY WJYnHeJxgFlbib4Ll308kDg6fpr8vswEq5G71MB/Js4GqXyY4A/5jsEFm9pzwvQb 81AUu+Bf1XRK0+1aKLk2TbKjugQhLzYltYU10EKqJfOqP5SJGCZt3CPwEnRIiBBL Sbdm9d/kqxP+oJ/TbKL8Wg0vmaIGooazjZMwrLcprB3jaoyMfWncws5bd/SDIntW +Mue3jpsRbawqfMIoLa9wDJufonAHslgX4BPjIP/AqbHrZS8hT4iYWNXH4Y+wuaX uEkwBQ0vsz3Nk+9VbiSLk/UGr6hdZyE= -----END CERTIFICATE-----Generated at Fri Mar 13 05:53:41 2026 by rpki-client