$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b4251da6-e12c-464e-918b-9c9e6f10c032/733f4b75-21a2-3402-a1ba-b2033671249c.roa File: 733f4b75-21a2-3402-a1ba-b2033671249c.roa (raw, json) Hash identifier: uPRO8INk0IWvcdiYRhM/7TYhNVK8BehVl3hzZjObXD8= Subject key identifier: B4:F0:9D:45:BF:AB:73:43:2C:95:DB:B8:E5:A8:FA:07:2B:32:1A:B8 Certificate issuer: /CN=b4251da6-e12c-464e-918b-9c9e6f10c032 Certificate serial: 010D0C9F4328584D24DFA114517DE6F6C6A1F400 Authority key identifier: 28:53:14:50:AD:3E:41:C8:83:44:ED:44:E6:0B:D0:70:CF:69:9D:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b4251da6-e12c-464e-918b-9c9e6f10c032.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b4251da6-e12c-464e-918b-9c9e6f10c032/733f4b75-21a2-3402-a1ba-b2033671249c.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 62965 IP address blocks: 198.97.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b4251da6-e12c-464e-918b-9c9e6f10c032/b4251da6-e12c-464e-918b-9c9e6f10c032.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b4251da6-e12c-464e-918b-9c9e6f10c032/b4251da6-e12c-464e-918b-9c9e6f10c032.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b4251da6-e12c-464e-918b-9c9e6f10c032.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:a1:14:51:7d:e6:f6:c6:a1:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4251da6-e12c-464e-918b-9c9e6f10c032 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=8f4cc8d8-c44f-4d9e-8128-809eb930e36f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:74:a3:f8:13:b1:ca:be:9f:0f:78:c5:62:88: cc:6c:27:ba:97:8a:ae:8b:05:eb:b3:13:0d:b6:32: e4:47:f9:c1:21:c6:ff:5c:77:19:2b:7f:f4:72:97: bf:4a:00:58:51:61:6b:9a:16:f6:b8:11:46:92:12: ab:b1:05:79:ac:b9:99:c2:b5:fe:e3:7b:ec:5f:29: 31:2b:12:55:41:a8:68:72:ed:09:a1:1d:db:d0:ca: f9:aa:0a:a8:45:bb:d5:f7:83:24:3c:1e:8c:ab:fb: f3:bf:ff:fe:8d:46:74:ff:2e:ef:f1:80:57:2f:cd: f2:11:97:4c:01:41:3f:2a:d7:e1:f7:b5:ac:34:1f: 0f:dc:99:3b:d5:db:0c:1c:a9:2c:9c:b9:7c:10:e8: bf:39:a8:b6:ac:62:6d:bb:3e:7e:4c:37:45:84:59: 2b:38:7a:6f:9f:9f:47:74:d5:74:d9:bc:ef:4d:69: 1f:bb:ac:92:f9:09:b1:fa:5b:f0:b0:0b:88:b2:1a: a0:5b:56:c5:3b:e5:76:55:22:0f:6b:f0:73:89:4e: ed:b8:90:1f:2d:6b:23:42:0d:22:1b:2e:dd:3c:51: dc:7d:55:1c:7f:67:4a:86:47:d0:9a:b3:59:1f:db: 2c:fa:58:3f:79:94:56:e9:e3:80:b0:21:d9:45:05: 78:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:F0:9D:45:BF:AB:73:43:2C:95:DB:B8:E5:A8:FA:07:2B:32:1A:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b4251da6-e12c-464e-918b-9c9e6f10c032/733f4b75-21a2-3402-a1ba-b2033671249c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b4251da6-e12c-464e-918b-9c9e6f10c032/b4251da6-e12c-464e-918b-9c9e6f10c032.crl X509v3 Authority Key Identifier: keyid:28:53:14:50:AD:3E:41:C8:83:44:ED:44:E6:0B:D0:70:CF:69:9D:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b4251da6-e12c-464e-918b-9c9e6f10c032.cer sbgp-ipAddrBlock: critical IPv4: 198.97.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:80:32:f7:64:52:19:c2:15:f6:36:12:2b:74:ee:2d:81:61: 3f:fe:44:57:16:6c:31:f3:7b:be:ee:91:7f:03:3c:14:63:9f: 39:a9:89:54:2a:91:24:d7:5d:a8:49:75:ce:31:29:ea:5c:d7: b8:e9:f8:94:c9:0a:98:8d:e0:42:5d:c5:92:3a:2c:65:4b:27: 63:30:01:0e:7d:6c:ad:b0:a7:04:70:d3:a0:5d:3e:a5:d8:3b: aa:1a:18:31:87:1f:69:05:fc:3e:ae:8c:5a:12:08:69:19:4e: 4d:ea:9f:cc:d2:ca:6c:f2:03:1f:2d:f4:e4:25:92:b7:98:06: 78:0a:ab:98:ea:6e:0d:3e:db:f2:76:be:b4:d9:72:70:91:96: ac:9a:26:63:ef:0d:02:00:93:c4:88:ec:31:04:11:04:81:ab: 05:5b:27:40:58:20:38:71:12:7f:9a:ea:b4:22:3e:18:19:ec: 7f:43:80:b4:4f:22:f2:75:26:34:1c:72:8c:d7:94:fd:04:95: da:13:3a:6a:3c:56:22:0c:7e:0a:eb:42:5a:f6:72:f0:4b:a3: 5c:f1:f8:42:00:e7:4a:af:8f:dc:08:19:51:94:39:53:95:5a: 67:d5:a0:95:59:93:3d:c7:07:73:df:62:05:e0:41:e5:04:ea: d2:ef:1d:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k36EUUX3m9sah9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQyNTFkYTYtZTEyYy00NjRlLTkxOGItOWM5ZTZmMTBj MDMyMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk OGY0Y2M4ZDgtYzQ0Zi00ZDllLTgxMjgtODA5ZWI5MzBlMzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnSj+BOxyr6fD3jFYojMbCe6l4quiwXrsxMN tjLkR/nBIcb/XHcZK3/0cpe/SgBYUWFrmhb2uBFGkhKrsQV5rLmZwrX+43vsXykx KxJVQahocu0JoR3b0Mr5qgqoRbvV94MkPB6Mq/vzv//+jUZ0/y7v8YBXL83yEZdM AUE/Ktfh97WsNB8P3Jk71dsMHKksnLl8EOi/Oai2rGJtuz5+TDdFhFkrOHpvn59H dNV02bzvTWkfu6yS+Qmx+lvwsAuIshqgW1bFO+V2VSIPa/BziU7tuJAfLWsjQg0i Gy7dPFHcfVUcf2dKhkfQmrNZH9ss+lg/eZRW6eOAsCHZRQV4CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLTwnUW/q3NDLJXbuOWo+gcrMhq4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iNDI1 MWRhNi1lMTJjLTQ2NGUtOTE4Yi05YzllNmYxMGMwMzIvNzMzZjRiNzUtMjFhMi0z NDAyLWExYmEtYjIwMzM2NzEyNDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjQyNTFkYTYtZTEyYy00NjRlLTkx OGItOWM5ZTZmMTBjMDMyL2I0MjUxZGE2LWUxMmMtNDY0ZS05MThiLTljOWU2ZjEw YzAzMi5jcmwwHwYDVR0jBBgwFoAUKFMUUK0+QciDRO1E5gvQcM9pnSswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iNDI1MWRhNi1lMTJjLTQ2NGUtOTE4Yi05Yzll NmYxMGMwMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmHJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKAMvdkUhnCFfY2Eit07i2BYT/+RFcWbDHze77ukX8DPBRjnzmpiVQq kSTXXahJdc4xKepc17jp+JTJCpiN4EJdxZI6LGVLJ2MwAQ59bK2wpwRw06BdPqXY O6oaGDGHH2kF/D6ujFoSCGkZTk3qn8zSymzyAx8t9OQlkreYBngKq5jqbg0+2/J2 vrTZcnCRlqyaJmPvDQIAk8SI7DEEEQSBqwVbJ0BYIDhxEn+a6rQiPhgZ7H9DgLRP IvJ1JjQccozXlP0EldoTOmo8ViIMfgrrQlr2cvBLo1zx+EIA50qvj9wIGVGUOVOV WmfVoJVZkz3HB3PfYgXgQeUE6tLvHUc= -----END CERTIFICATE-----Generated at Sun Mar 22 09:30:10 2026 by rpki-client