$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/cf38211e-a9ed-37ec-9041-432fd370bc59.roa File: cf38211e-a9ed-37ec-9041-432fd370bc59.roa (raw, json) Hash identifier: ik6bHE47LnEeg273h2duviREZ+ZkPl/YcbS17HQXMmg= Subject key identifier: 66:48:4B:9C:52:48:39:F4:CC:EF:98:40:53:7F:0E:D6:45:BA:7F:D3 Certificate issuer: /CN=84bfb9e8-1bae-4540-9cae-b6811ecadff5 Certificate serial: 010D0C9F4328584D1F4A40DB0924F49C14437200 Authority key identifier: 33:87:39:DF:1C:AC:F8:79:BB:E8:E9:5D:84:6F:84:56:83:2C:A5:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/cf38211e-a9ed-37ec-9041-432fd370bc59.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 398653 IP address blocks: 198.62.160.0/24 maxlen: 24 2602:fbd3::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/84bfb9e8-1bae-4540-9cae-b6811ecadff5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/84bfb9e8-1bae-4540-9cae-b6811ecadff5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Mar 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:40:db:09:24:f4:9c:14:43:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84bfb9e8-1bae-4540-9cae-b6811ecadff5 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=36bee2b2-f229-4673-9f31-05911a752e0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:77:8a:a9:75:5d:b8:73:86:2a:3b:19:81:d6: 39:bd:87:85:5d:fe:70:2e:55:8c:84:41:84:75:d4: 9d:4f:57:ea:84:fd:a0:2d:23:0c:0d:07:0e:7e:00: e3:57:2f:03:d6:15:b4:20:45:84:68:be:dc:67:49: b9:03:ce:5f:2d:d3:59:cf:74:82:6e:d2:1f:2e:0b: 53:68:80:4c:87:bb:2a:1c:44:bb:6c:43:49:57:07: d4:4d:18:86:17:59:7a:9d:b3:8c:dc:5b:89:ce:6c: 08:6a:b1:93:74:c6:83:8d:d6:cc:8c:a5:2b:9d:3f: 5b:7e:6f:53:b7:3c:98:ce:c0:cf:61:a2:8c:e1:7e: 15:cc:ce:e3:e6:db:c7:10:47:01:87:c1:14:ce:34: 85:54:47:a5:86:3b:e1:71:e8:44:d8:f3:0e:89:f5: e2:02:b6:6f:95:ee:69:42:2e:1f:c0:d5:45:d6:0d: bc:88:73:84:9a:1c:c2:6d:b1:ba:8b:e8:d2:d8:a7: 28:d9:96:8e:fa:6b:22:43:aa:71:a2:f3:d4:0f:be: 7b:88:93:5a:e2:c8:66:f9:ed:0b:d9:eb:03:74:88: c4:40:87:31:3e:cb:a4:eb:19:8e:48:94:9b:76:c0: d7:12:dc:8a:74:01:62:24:ae:fe:fb:de:23:bc:46: 76:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:48:4B:9C:52:48:39:F4:CC:EF:98:40:53:7F:0E:D6:45:BA:7F:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/cf38211e-a9ed-37ec-9041-432fd370bc59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/84bfb9e8-1bae-4540-9cae-b6811ecadff5.crl X509v3 Authority Key Identifier: keyid:33:87:39:DF:1C:AC:F8:79:BB:E8:E9:5D:84:6F:84:56:83:2C:A5:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5.cer sbgp-ipAddrBlock: critical IPv4: 198.62.160.0/24 IPv6: 2602:fbd3::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:97:95:70:49:3d:a5:7b:6e:ba:4d:72:16:6e:17:46:f5:df: 88:f5:35:72:cc:56:c2:f6:5b:e5:af:6c:db:35:8b:1b:93:50: d0:45:ba:03:02:7f:d9:91:ca:b8:2a:51:53:9e:96:f9:d2:be: aa:b8:ed:63:16:aa:16:ca:a8:19:e9:f2:a7:98:7e:4b:ae:40: d8:8b:9f:5d:9f:e9:6c:fb:99:7b:8b:34:96:d6:63:67:4c:a1: d3:8e:c5:5a:ae:1a:ec:45:8e:cf:c8:39:3c:f6:ec:84:7e:b6: 7a:25:d3:4b:8a:4e:bc:c8:82:29:5c:bd:f8:ea:f4:c2:09:e7: a0:8b:16:4d:7d:df:d0:77:0c:2e:4e:1a:a7:8e:69:39:04:3d: 78:38:6d:0b:12:f4:7c:9b:2e:82:c3:1b:34:af:28:2d:69:5e: db:69:73:df:16:43:bd:09:3a:8c:04:d1:05:70:e6:60:cf:ad: 71:66:7a:ef:82:1c:73:f1:c2:e1:08:3b:22:ac:fe:42:2b:67: 9b:93:95:7c:c2:a8:e2:3e:9f:25:59:93:e5:59:d6:ab:a8:ff: 15:38:d6:a1:f9:cb:d0:42:e0:a4:45:84:2b:0f:96:a8:5f:e4: fe:dc:db:e5:5d:15:6a:6f:38:92:ed:c2:98:f7:4b:20:88:b0: 5d:2a:94:15 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE0fSkDbCST0nBRDcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRiZmI5ZTgtMWJhZS00NTQwLTljYWUtYjY4MTFlY2Fk ZmY1MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk MzZiZWUyYjItZjIyOS00NjczLTlmMzEtMDU5MTFhNzUyZTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8HeKqXVduHOGKjsZgdY5vYeFXf5wLlWMhEGE ddSdT1fqhP2gLSMMDQcOfgDjVy8D1hW0IEWEaL7cZ0m5A85fLdNZz3SCbtIfLgtT aIBMh7sqHES7bENJVwfUTRiGF1l6nbOM3FuJzmwIarGTdMaDjdbMjKUrnT9bfm9T tzyYzsDPYaKM4X4VzM7j5tvHEEcBh8EUzjSFVEelhjvhcehE2PMOifXiArZvle5p Qi4fwNVF1g28iHOEmhzCbbG6i+jS2Kco2ZaO+msiQ6pxovPUD757iJNa4shm+e0L 2esDdIjEQIcxPsuk6xmOSJSbdsDXEtyKdAFiJK7++94jvEZ2kwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFGZIS5xSSDn0zO+YQFN/DtZFun/TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84NGJm YjllOC0xYmFlLTQ1NDAtOWNhZS1iNjgxMWVjYWRmZjUvY2YzODIxMWUtYTllZC0z N2VjLTkwNDEtNDMyZmQzNzBiYzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODRiZmI5ZTgtMWJhZS00NTQwLTlj YWUtYjY4MTFlY2FkZmY1Lzg0YmZiOWU4LTFiYWUtNDU0MC05Y2FlLWI2ODExZWNh ZGZmNS5jcmwwHwYDVR0jBBgwFoAUM4c53xys+Hm76OldhG+EVoMspWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84NGJmYjllOC0xYmFlLTQ1NDAtOWNhZS1iNjgx MWVjYWRmZjUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAxj6gMA4E AgACMAgDBgAmAvvTADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQASl5VwST2le266TXIWbhdG9d+I9TVyzFbC 9lvlr2zbNYsbk1DQRboDAn/Zkcq4KlFTnpb50r6quO1jFqoWyqgZ6fKnmH5LrkDY i59dn+ls+5l7izSW1mNnTKHTjsVarhrsRY7PyDk89uyEfrZ6JdNLik68yIIpXL34 6vTCCeegixZNfd/QdwwuThqnjmk5BD14OG0LEvR8my6Cwxs0rygtaV7baXPfFkO9 CTqMBNEFcOZgz61xZnrvghxz8cLhCDsirP5CK2ebk5V8wqjiPp8lWZPlWdarqP8V ONah+cvQQuCkRYQrD5aoX+T+3NvlXRVqbziS7cKY90sgiLBdKpQV -----END CERTIFICATE-----Generated at Tue Mar 24 16:59:56 2026 by rpki-client