$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bc10da1-0b13-46f5-80e3-b3f9165c5507/f3cb9022-330e-342b-b144-37ac3a7fc90d.roa File: f3cb9022-330e-342b-b144-37ac3a7fc90d.roa (raw, json) Hash identifier: XQSVHjedFtNjbz2A05KOASZcHTowUZah2D8zsct1N10= Subject key identifier: 47:5F:93:A7:38:45:5C:44:D0:72:B6:8F:E7:0D:08:B2:58:34:CA:B9 Certificate issuer: /CN=7bc10da1-0b13-46f5-80e3-b3f9165c5507 Certificate serial: 010D0C9F4328584D0BDD094D06744B865030B1A0 Authority key identifier: 8D:61:B1:45:94:3C:FF:FE:45:A6:E3:F9:3A:23:B1:1C:1E:03:EF:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bc10da1-0b13-46f5-80e3-b3f9165c5507.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bc10da1-0b13-46f5-80e3-b3f9165c5507/f3cb9022-330e-342b-b144-37ac3a7fc90d.roa Signing time: Tue 03 Mar 2026 14:00:40 +0000 ROA not before: Tue 03 Mar 2026 14:00:40 +0000 ROA not after: Mon 01 Jun 2026 13:00:40 +0000 asID: 271 IP address blocks: 198.162.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bc10da1-0b13-46f5-80e3-b3f9165c5507/7bc10da1-0b13-46f5-80e3-b3f9165c5507.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bc10da1-0b13-46f5-80e3-b3f9165c5507/7bc10da1-0b13-46f5-80e3-b3f9165c5507.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bc10da1-0b13-46f5-80e3-b3f9165c5507.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0b:dd:09:4d:06:74:4b:86:50:30:b1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bc10da1-0b13-46f5-80e3-b3f9165c5507 Validity Not Before: Mar 3 14:00:40 2026 GMT Not After : Jun 1 13:00:40 2026 GMT Subject: CN=edeccc9b-1c12-45c5-b981-1b04960cd7c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:08:3f:f9:f6:6f:1a:70:f6:da:31:21:5a:52: 5b:36:f8:4f:20:0b:07:3a:66:26:51:93:75:b1:19: b6:87:a1:a3:9f:0f:76:0e:27:95:46:d2:5d:73:e9: 4c:8b:58:1f:6a:95:78:24:d6:c8:c3:17:4c:56:1e: af:fe:68:4b:b2:1d:eb:5f:91:96:6f:bf:6a:e4:e1: 85:f9:eb:c7:53:15:63:07:2e:7a:c7:d0:13:e3:4e: a2:99:2c:b1:80:bb:0e:50:ed:39:73:46:43:7a:a3: a5:d4:85:3e:86:bb:a1:38:df:90:04:a5:7c:4d:3a: b1:5a:1c:73:36:bc:26:42:06:02:35:eb:ac:45:e5: ff:ea:b5:1c:57:69:f4:59:20:70:fc:4e:05:93:4d: c6:5d:74:59:dc:cc:f2:3c:d5:9a:1d:9b:4b:8f:5e: c6:5d:b1:b2:a6:d4:bb:27:e6:c1:f2:13:f8:da:d0: 10:34:cb:d0:84:0f:ac:a7:5b:98:a6:b1:36:37:23: 10:5d:6f:76:ad:81:61:79:9d:35:df:26:11:c4:94: 25:ec:67:43:70:17:20:dd:22:e3:bd:a5:fb:97:f6: ec:2f:ae:c4:6e:e7:f0:21:b3:02:1b:70:ee:df:7c: 24:17:1d:bc:e3:06:00:d3:8b:00:94:8d:ab:99:bf: 16:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:5F:93:A7:38:45:5C:44:D0:72:B6:8F:E7:0D:08:B2:58:34:CA:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bc10da1-0b13-46f5-80e3-b3f9165c5507/f3cb9022-330e-342b-b144-37ac3a7fc90d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bc10da1-0b13-46f5-80e3-b3f9165c5507/7bc10da1-0b13-46f5-80e3-b3f9165c5507.crl X509v3 Authority Key Identifier: keyid:8D:61:B1:45:94:3C:FF:FE:45:A6:E3:F9:3A:23:B1:1C:1E:03:EF:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bc10da1-0b13-46f5-80e3-b3f9165c5507.cer sbgp-ipAddrBlock: critical IPv4: 198.162.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:16:79:09:bf:44:86:a8:33:df:ac:99:51:72:55:2d:7a:58: 68:2a:2c:5c:ae:1f:54:e8:9b:6f:12:d2:cd:80:8d:1c:d8:a6: 76:db:12:72:ce:61:99:aa:19:a6:51:6a:3c:26:6e:5d:92:3a: ae:0c:9c:b6:d3:82:61:15:79:de:39:0f:43:dc:c1:43:fa:21: 0b:27:67:85:bc:0d:5e:11:a7:6d:91:15:aa:7c:8d:ed:37:9e: 58:18:7b:7d:7c:fd:9c:e1:04:9f:54:70:23:e8:2b:e7:a9:d6: a4:8c:28:17:4b:b7:54:85:ba:df:6c:b8:71:1c:c8:c1:b9:35: c8:7b:5c:65:38:d1:26:fa:76:dc:64:3e:0d:f8:86:4b:0f:0c: ba:ce:4c:38:b8:4f:d0:9c:4d:6b:7d:ef:bd:18:0b:0d:dd:d4: fc:a6:75:a5:0e:30:23:0e:01:7d:3c:5d:c1:b8:c6:57:97:22: e2:0e:e7:e6:03:75:25:84:f7:53:aa:9f:24:42:d5:90:86:16: 28:a6:8c:c6:38:9d:74:47:72:0f:ab:4d:e9:04:96:46:38:a5: 41:9c:3e:a7:77:82:78:27:3e:22:3b:09:cc:c1:07:80:b4:8c: 18:20:36:b5:2e:3d:a9:75:0d:ed:77:34:b7:f0:3d:a1:77:7d: 2b:ba:98:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0L3QlNBnRLhlAwsaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JjMTBkYTEtMGIxMy00NmY1LTgwZTMtYjNmOTE2NWM1 NTA3MB4XDTI2MDMwMzE0MDA0MFoXDTI2MDYwMTEzMDA0MFowLzEtMCsGA1UEAxMk ZWRlY2NjOWItMWMxMi00NWM1LWI5ODEtMWIwNDk2MGNkN2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgg/+fZvGnD22jEhWlJbNvhPIAsHOmYmUZN1 sRm2h6Gjnw92DieVRtJdc+lMi1gfapV4JNbIwxdMVh6v/mhLsh3rX5GWb79q5OGF +evHUxVjBy56x9AT406imSyxgLsOUO05c0ZDeqOl1IU+hruhON+QBKV8TTqxWhxz NrwmQgYCNeusReX/6rUcV2n0WSBw/E4Fk03GXXRZ3MzyPNWaHZtLj17GXbGyptS7 J+bB8hP42tAQNMvQhA+sp1uYprE2NyMQXW92rYFheZ013yYRxJQl7GdDcBcg3SLj vaX7l/bsL67EbufwIbMCG3Du33wkFx284wYA04sAlI2rmb8WZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEdfk6c4RVxE0HK2j+cNCLJYNMq5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83YmMx MGRhMS0wYjEzLTQ2ZjUtODBlMy1iM2Y5MTY1YzU1MDcvZjNjYjkwMjItMzMwZS0z NDJiLWIxNDQtMzdhYzNhN2ZjOTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvN2JjMTBkYTEtMGIxMy00NmY1LTgw ZTMtYjNmOTE2NWM1NTA3LzdiYzEwZGExLTBiMTMtNDZmNS04MGUzLWIzZjkxNjVj NTUwNy5jcmwwHwYDVR0jBBgwFoAUjWGxRZQ8//5FpuP5OiOxHB4D7xcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83YmMxMGRhMS0wYjEzLTQ2ZjUtODBlMy1iM2Y5 MTY1YzU1MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxqJwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMWeQm/RIaoM9+smVFyVS16WGgqLFyuH1Tom28S0s2AjRzYpnbbEnLO YZmqGaZRajwmbl2SOq4MnLbTgmEVed45D0PcwUP6IQsnZ4W8DV4Rp22RFap8je03 nlgYe318/ZzhBJ9UcCPoK+ep1qSMKBdLt1SFut9suHEcyMG5Nch7XGU40Sb6dtxk Pg34hksPDLrOTDi4T9CcTWt9770YCw3d1PymdaUOMCMOAX08XcG4xleXIuIO5+YD dSWE91OqnyRC1ZCGFiimjMY4nXRHcg+rTekElkY4pUGcPqd3gngnPiI7CczBB4C0 jBggNrUuPal1De13NLfwPaF3fSu6mFs= -----END CERTIFICATE-----Generated at Mon Mar 16 15:10:49 2026 by rpki-client