$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/974078e3-6a3f-388b-922f-ef1b1f23cef4.roa File: 974078e3-6a3f-388b-922f-ef1b1f23cef4.roa (raw, json) Hash identifier: 8Q3NKeFmcMiOzubLh4qrbtxfvGYkeqR0J1YiVEXP6B0= Subject key identifier: 75:9E:C6:B5:BF:2F:84:94:58:EC:82:AB:B5:9A:93:03:DF:FA:01:E1 Certificate issuer: /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Certificate serial: 010D0C9F4328584D2A74C70C600E7E3D8AFCA700 Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/974078e3-6a3f-388b-922f-ef1b1f23cef4.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 2559 IP address blocks: 198.241.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:c7:0c:60:0e:7e:3d:8a:fc:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=f7643aab-68a7-4c56-afae-ca43d1dceeb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:80:fc:c5:f7:22:4b:dc:10:44:4b:66:6f:31: 3a:f7:48:f2:7e:52:28:95:8c:2d:96:34:ed:2a:e8: 3c:59:3e:30:1f:22:b3:2b:02:7d:6e:f9:8a:c3:00: 43:d6:56:e7:36:ed:f7:a5:13:73:1a:a8:e5:25:9f: 3d:06:8f:f5:ff:2d:7e:7d:76:f6:67:61:dc:d7:4c: 68:d1:00:a8:ce:1a:9d:81:29:5b:24:67:e8:29:bb: f7:85:86:2a:bc:23:91:05:50:34:2f:2d:05:ab:a7: 84:5f:86:e7:8c:dd:11:79:c2:34:ae:b3:3d:67:12: 03:51:7e:ab:95:62:50:f8:76:73:0f:04:16:7a:1b: 77:ed:d3:b2:97:f8:19:f5:85:96:a0:7f:8d:f9:94: 04:b5:e5:f1:41:b6:55:00:c7:d2:99:e1:cb:2d:3d: d5:08:05:4f:76:ce:5c:eb:fc:60:95:77:a6:fa:0f: 65:1b:b3:5c:11:b7:af:e2:3b:01:e4:30:2c:fe:93: bf:d4:a5:f4:cf:c9:4b:f7:5e:d2:eb:84:c3:96:60: 52:cc:0a:1f:7d:a5:a6:e4:82:ce:ae:b5:49:47:44: b2:c1:b9:2d:f9:16:16:53:89:ae:5a:e9:e4:67:03: 3c:c5:c9:9a:2e:80:18:f3:94:1e:c9:10:1a:e9:1c: c0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:9E:C6:B5:BF:2F:84:94:58:EC:82:AB:B5:9A:93:03:DF:FA:01:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/974078e3-6a3f-388b-922f-ef1b1f23cef4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl X509v3 Authority Key Identifier: keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer sbgp-ipAddrBlock: critical IPv4: 198.241.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:ae:c8:ba:1e:7c:9d:b8:3a:a8:31:26:19:d9:54:cd:0b:75: c4:92:28:ae:6b:9a:76:09:79:6c:78:bd:d4:33:ca:fe:cc:41: b7:19:e3:03:55:82:26:a1:aa:03:0f:63:44:d0:65:ce:e0:6e: 17:d4:1a:82:9c:76:ab:d4:6e:48:4e:31:d5:82:26:7b:26:22: 20:63:9e:4b:56:32:6a:22:47:f0:a7:69:ee:7f:e0:76:11:c0: fb:d3:f4:24:a8:0d:09:c0:77:39:c7:da:b3:a3:ff:e0:49:a5: 09:3c:39:8e:d7:b2:c4:fe:05:fd:58:38:32:ec:69:57:04:f9: 47:9b:f4:d5:eb:dd:e6:17:4d:13:e0:74:62:22:a1:7f:c5:58: a0:bc:27:51:64:01:d9:d3:38:37:84:c6:52:9e:9b:cb:75:bd: 2e:cf:3f:d8:83:96:a0:20:cd:5d:28:99:8b:8d:7b:5f:13:52: 1f:5d:5c:36:f5:c2:2b:e9:ef:d8:bf:83:88:ff:5a:c5:10:9a: 02:11:4d:80:64:50:b6:1d:36:ee:9c:df:32:8a:dd:99:21:7d: 91:c7:8e:5a:17:67:a4:b2:7c:3c:fd:68:28:c3:02:57:6b:aa: 96:c1:a4:13:e6:ba:29:16:be:51:73:41:d2:15:ec:f8:bf:a5: ca:71:44:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdMcMYA5+PYr8pwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUwNjQ5N2UtZTljYy00NWNiLTg1ZDYtY2YyZTU4ZTUx ODQyMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk Zjc2NDNhYWItNjhhNy00YzU2LWFmYWUtY2E0M2QxZGNlZWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuID8xfciS9wQREtmbzE690jyflIolYwtljTt Kug8WT4wHyKzKwJ9bvmKwwBD1lbnNu33pRNzGqjlJZ89Bo/1/y1+fXb2Z2Hc10xo 0QCozhqdgSlbJGfoKbv3hYYqvCORBVA0Ly0Fq6eEX4bnjN0RecI0rrM9ZxIDUX6r lWJQ+HZzDwQWeht37dOyl/gZ9YWWoH+N+ZQEteXxQbZVAMfSmeHLLT3VCAVPds5c 6/xglXem+g9lG7NcEbev4jsB5DAs/pO/1KX0z8lL917S64TDlmBSzAoffaWm5ILO rrVJR0Sywbkt+RYWU4muWunkZwM8xcmaLoAY85QeyRAa6RzAxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHWexrW/L4SUWOyCq7WakwPf+gHhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2 NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJlNThlNTE4NDIvOTc0MDc4ZTMtNmEzZi0z ODhiLTkyMmYtZWYxYjFmMjNjZWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGUwNjQ5N2UtZTljYy00NWNiLTg1 ZDYtY2YyZTU4ZTUxODQyLzRlMDY0OTdlLWU5Y2MtNDVjYi04NWQ2LWNmMmU1OGU1 MTg0Mi5jcmwwHwYDVR0jBBgwFoAUV2+fxmb20SnMf8gO5fhHtMv00YEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJl NThlNTE4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvHXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyuyLoefJ24OqgxJhnZVM0LdcSSKK5rmnYJeWx4vdQzyv7MQbcZ4wNV giahqgMPY0TQZc7gbhfUGoKcdqvUbkhOMdWCJnsmIiBjnktWMmoiR/Cnae5/4HYR wPvT9CSoDQnAdznH2rOj/+BJpQk8OY7XssT+Bf1YODLsaVcE+Ueb9NXr3eYXTRPg dGIioX/FWKC8J1FkAdnTODeExlKem8t1vS7PP9iDlqAgzV0omYuNe18TUh9dXDb1 wivp79i/g4j/WsUQmgIRTYBkULYdNu6c3zKK3ZkhfZHHjloXZ6SyfDz9aCjDAldr qpbBpBPmuikWvlFzQdIV7Pi/pcpxRGc= -----END CERTIFICATE-----Generated at Tue Mar 17 00:34:40 2026 by rpki-client