$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/9cd48ad9-eda7-32f4-aa1d-16a7d05c2a0c.roa File: 9cd48ad9-eda7-32f4-aa1d-16a7d05c2a0c.roa (raw, json) Hash identifier: XmaMVKUxWc+GNaTQRHxscKrrLdvF8k+/OE72fJ4n8B4= Subject key identifier: 20:41:93:05:4E:92:DC:52:85:97:06:C7:6C:57:A5:00:D7:8B:A6:87 Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584D40CA4B3F30112ED6E60E0600 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/9cd48ad9-eda7-32f4-aa1d-16a7d05c2a0c.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 11537 IP address blocks: 198.71.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:4b:3f:30:11:2e:d6:e6:0e:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=567da958-1281-49a9-877b-cbb6c2d007ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:86:7c:e8:70:e5:24:b6:0f:8e:92:ae:e0:3c: 86:fb:a3:d1:5e:d6:85:2f:bc:e9:04:0b:17:4f:67: 3b:85:33:02:25:d6:2d:71:42:2c:df:aa:e5:24:40: ff:ee:10:b4:ef:a7:9a:64:fe:d4:a9:fa:c3:42:08: 33:56:50:e6:05:f6:8d:6e:fb:83:67:36:e1:47:bb: 36:ec:45:6b:a7:f1:37:71:bc:22:c8:a5:99:1f:45: ae:26:f2:74:02:fc:54:d8:21:02:3b:43:8e:70:5c: b8:2a:41:36:5a:c3:61:95:36:b3:f4:7a:6c:d8:83: ce:09:be:32:d9:c3:85:94:87:41:d5:3c:a3:32:84: c8:9c:4f:fd:fb:52:a2:a3:68:25:9f:7e:0e:7f:1e: af:3f:1b:0b:c6:66:97:33:f9:bd:da:5f:ce:5c:f1: 67:55:e5:26:55:0b:3b:9a:03:4c:e7:05:e1:76:33: ee:a9:02:e1:e8:b2:64:0f:97:81:92:b8:cc:5f:ef: eb:06:c4:eb:db:b2:e2:42:34:a7:1c:5d:7d:e4:aa: 70:a8:de:b6:b4:98:74:29:9e:1b:4e:68:42:cc:15: af:b3:16:42:b1:1b:1a:3d:8b:70:ed:fb:01:61:48: e9:09:6e:b0:89:b6:94:f5:04:ea:42:70:6b:9e:f3: 8b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:41:93:05:4E:92:DC:52:85:97:06:C7:6C:57:A5:00:D7:8B:A6:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/9cd48ad9-eda7-32f4-aa1d-16a7d05c2a0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 198.71.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:c5:71:25:d0:89:57:ee:8d:d6:a2:a4:1a:fa:92:e2:c1:9f: 7f:21:4d:97:70:13:2d:a6:c8:04:02:54:7e:fb:9d:01:01:b5: b7:ca:6f:e3:4d:86:08:8f:d6:8d:04:7e:d6:48:d0:85:fb:17: 82:81:78:0a:c9:e0:99:8c:8e:64:03:ec:e6:bf:36:8d:f1:bd: f6:e6:a0:d7:f6:85:a2:41:80:13:98:95:fc:fc:19:3d:ab:b1: 1a:41:1a:7d:53:6c:10:03:d0:04:b9:c1:48:f4:df:e2:1e:8f: 0a:e1:13:50:91:82:4a:fe:fc:11:70:1a:d5:8e:91:b0:a4:11: 1e:fa:ad:a5:f9:3b:01:13:b1:65:25:bd:8d:c8:81:ea:5a:6d: 24:a2:36:e2:82:9f:a9:f8:76:54:6f:91:9a:e1:c7:54:cd:21: 87:88:8c:5a:47:2c:7d:ef:55:2b:88:c4:be:57:52:ed:fa:7b: c8:e2:3c:68:2d:ea:87:f2:69:43:a3:fc:cf:ae:24:b9:24:1e: 3e:90:38:82:42:8f:31:28:7e:46:00:de:7c:55:ac:40:5b:be: 6f:f2:9d:3b:0d:30:8b:ad:92:73:57:d2:6c:9b:52:da:fe:76: 4e:41:03:85:63:63:ab:1c:07:77:e3:3c:e7:e9:6a:88:dd:89: 8a:e8:8a:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ayks/MBEu1uYOBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk NTY3ZGE5NTgtMTI4MS00OWE5LTg3N2ItY2JiNmMyZDAwN2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YZ86HDlJLYPjpKu4DyG+6PRXtaFL7zpBAsX T2c7hTMCJdYtcUIs36rlJED/7hC076eaZP7UqfrDQggzVlDmBfaNbvuDZzbhR7s2 7EVrp/E3cbwiyKWZH0WuJvJ0AvxU2CECO0OOcFy4KkE2WsNhlTaz9Hps2IPOCb4y 2cOFlIdB1TyjMoTInE/9+1Kio2gln34Ofx6vPxsLxmaXM/m92l/OXPFnVeUmVQs7 mgNM5wXhdjPuqQLh6LJkD5eBkrjMX+/rBsTr27LiQjSnHF195KpwqN62tJh0KZ4b TmhCzBWvsxZCsRsaPYtw7fsBYUjpCW6wibaU9QTqQnBrnvOLXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBBkwVOktxShZcGx2xXpQDXi6aHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvOWNkNDhhZDktZWRhNy0z MmY0LWFhMWQtMTZhN2QwNWMyYTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxkctMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDFcSXQiVfujdaipBr6kuLBn38hTZdwEy2myAQCVH77nQEBtbfKb+NN hgiP1o0EftZI0IX7F4KBeArJ4JmMjmQD7Oa/No3xvfbmoNf2haJBgBOYlfz8GT2r sRpBGn1TbBAD0AS5wUj03+IejwrhE1CRgkr+/BFwGtWOkbCkER76raX5OwETsWUl vY3IgepabSSiNuKCn6n4dlRvkZrhx1TNIYeIjFpHLH3vVSuIxL5XUu36e8jiPGgt 6ofyaUOj/M+uJLkkHj6QOIJCjzEofkYA3nxVrEBbvm/ynTsNMIutknNX0mybUtr+ dk5BA4VjY6scB3fjPOfpaojdiYroirQ= -----END CERTIFICATE-----Generated at Tue Mar 24 22:15:30 2026 by rpki-client