$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727/820bec39-d367-30a6-b5d9-625ccbf5cd27.roa File: 820bec39-d367-30a6-b5d9-625ccbf5cd27.roa (raw, json) Hash identifier: j5flO8hX1yPuzFo0pT9L5P8hYDXle7+R1C91JZqvpGA= Subject key identifier: 29:1B:06:6C:BA:43:07:51:92:80:C6:A3:A4:E2:1D:B5:03:FE:1F:26 Certificate issuer: /CN=de8e60af-8577-4bb7-8e3e-28e4ec88b727 Certificate serial: 010D0C9F4328584D300A5038CA9880DB82162600 Authority key identifier: C3:4B:BA:01:0A:97:59:E4:84:E5:DD:9B:FD:D1:05:37:27:A1:3F:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727/820bec39-d367-30a6-b5d9-625ccbf5cd27.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 6531 IP address blocks: 198.186.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727/de8e60af-8577-4bb7-8e3e-28e4ec88b727.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727/de8e60af-8577-4bb7-8e3e-28e4ec88b727.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:50:38:ca:98:80:db:82:16:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de8e60af-8577-4bb7-8e3e-28e4ec88b727 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=7bf00afa-18bb-430c-8366-57e65ff6b01d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b9:15:70:5b:06:3a:f7:e5:e7:f3:e7:d5:a1: 7f:32:72:5b:ed:b0:81:b2:49:e4:b6:f7:45:70:28: d9:43:37:96:5e:6b:f3:96:87:27:cf:f3:2e:90:19: 76:dc:17:b5:3a:e2:80:db:27:03:00:51:25:1d:e3: db:de:44:c6:f4:08:41:0b:1b:bc:02:76:0d:fe:6f: 18:f5:77:3e:37:11:78:a9:37:1f:2a:1b:2c:d4:b0: 29:eb:41:ec:eb:73:fd:84:c3:5d:f9:65:c6:6e:27: b0:c9:a1:e8:a7:ba:98:1f:7a:2f:fe:dd:aa:8d:d9: a8:2a:3d:45:2b:26:20:cd:1f:2f:0b:3d:49:8d:56: 9c:b2:5a:e6:ce:ef:bc:d7:a7:8c:7b:c4:4b:05:18: b8:e9:95:ed:1f:38:c2:77:48:40:9f:a3:80:cd:de: 15:d6:86:0f:10:b6:b0:b9:4b:57:4c:12:fd:a2:0f: b3:5d:70:20:bc:af:5a:5e:e3:59:e5:64:07:ee:fc: 40:7e:65:a4:61:bb:f3:0c:59:73:cb:13:b4:e6:65: a3:6a:77:4a:40:ab:66:9d:c1:67:11:7c:ae:73:5f: d4:e6:c1:94:d3:30:12:76:4d:59:1e:c5:42:59:aa: 24:ed:29:5e:bc:54:8f:cb:81:56:9a:cb:df:97:78: 94:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:1B:06:6C:BA:43:07:51:92:80:C6:A3:A4:E2:1D:B5:03:FE:1F:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727/820bec39-d367-30a6-b5d9-625ccbf5cd27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727/de8e60af-8577-4bb7-8e3e-28e4ec88b727.crl X509v3 Authority Key Identifier: keyid:C3:4B:BA:01:0A:97:59:E4:84:E5:DD:9B:FD:D1:05:37:27:A1:3F:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de8e60af-8577-4bb7-8e3e-28e4ec88b727.cer sbgp-ipAddrBlock: critical IPv4: 198.186.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:de:e1:57:95:8d:eb:0b:82:67:88:89:2f:a7:44:56:7a:b4: 48:be:7f:19:cd:0f:76:52:aa:54:d8:64:a8:2e:98:d4:bd:91: e2:f7:92:46:bd:4a:e4:73:b0:36:77:7e:e7:ad:c3:81:1e:67: 4c:bd:85:69:96:c5:8e:a5:46:e3:9d:7b:bf:f1:80:96:a3:dd: 5a:f4:db:ae:5f:d3:27:75:df:19:c2:de:6c:cd:d4:11:fb:d4: 8a:39:3e:9f:3f:a2:1c:4d:38:64:97:e1:00:79:bd:fe:b6:a7: 60:ee:db:b9:d0:85:e1:34:73:53:9d:51:0f:66:d7:17:14:55: f5:77:ac:4f:80:b9:2b:20:15:5c:0a:d9:59:e9:74:9f:53:1d: 4b:1e:4f:55:8c:68:07:b4:b3:1a:80:29:d4:91:e3:ef:09:76: a3:b8:a7:ea:26:f2:54:4d:42:c2:d5:f3:be:ec:79:52:77:5d: fe:cf:07:e2:cd:37:8e:d2:d7:5a:9f:2b:07:ac:b6:18:ff:56: bf:a1:19:b9:31:97:74:aa:07:c5:69:7b:ca:b4:93:a1:7c:c3: b1:af:b8:61:0b:10:40:86:99:d1:60:6c:98:fd:71:4e:f9:50: 7d:96:b8:16:f7:6e:9c:d4:b8:fa:ae:72:97:38:b9:9b:ed:79: c9:ca:78:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wClA4ypiA24IWJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU4ZTYwYWYtODU3Ny00YmI3LThlM2UtMjhlNGVjODhi NzI3MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk N2JmMDBhZmEtMThiYi00MzBjLTgzNjYtNTdlNjVmZjZiMDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLkVcFsGOvfl5/Pn1aF/MnJb7bCBsknktvdF cCjZQzeWXmvzlocnz/MukBl23Be1OuKA2ycDAFElHePb3kTG9AhBCxu8AnYN/m8Y 9Xc+NxF4qTcfKhss1LAp60Hs63P9hMNd+WXGbiewyaHop7qYH3ov/t2qjdmoKj1F KyYgzR8vCz1JjVacslrmzu+816eMe8RLBRi46ZXtHzjCd0hAn6OAzd4V1oYPELaw uUtXTBL9og+zXXAgvK9aXuNZ5WQH7vxAfmWkYbvzDFlzyxO05mWjandKQKtmncFn EXyuc1/U5sGU0zASdk1ZHsVCWaok7SlevFSPy4FWmsvfl3iUnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkbBmy6QwdRkoDGo6TiHbUD/h8mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZThl NjBhZi04NTc3LTRiYjctOGUzZS0yOGU0ZWM4OGI3MjcvODIwYmVjMzktZDM2Ny0z MGE2LWI1ZDktNjI1Y2NiZjVjZDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGU4ZTYwYWYtODU3Ny00YmI3LThl M2UtMjhlNGVjODhiNzI3L2RlOGU2MGFmLTg1NzctNGJiNy04ZTNlLTI4ZTRlYzg4 YjcyNy5jcmwwHwYDVR0jBBgwFoAUw0u6AQqXWeSE5d2b/dEFNyehP7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZThlNjBhZi04NTc3LTRiYjctOGUzZS0yOGU0 ZWM4OGI3MjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/e4VeVjesLgmeIiS+nRFZ6tEi+fxnND3ZSqlTYZKgumNS9keL3kka9 SuRzsDZ3fuetw4EeZ0y9hWmWxY6lRuOde7/xgJaj3Vr0265f0yd13xnC3mzN1BH7 1Io5Pp8/ohxNOGSX4QB5vf62p2Du27nQheE0c1OdUQ9m1xcUVfV3rE+AuSsgFVwK 2VnpdJ9THUseT1WMaAe0sxqAKdSR4+8JdqO4p+om8lRNQsLV877seVJ3Xf7PB+LN N47S11qfKwesthj/Vr+hGbkxl3SqB8Vpe8q0k6F8w7GvuGELEECGmdFgbJj9cU75 UH2WuBb3bpzUuPqucpc4uZvtecnKeI4= -----END CERTIFICATE-----Generated at Sun Mar 22 09:34:16 2026 by rpki-client