$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/40ca3da7-d905-3def-9f19-2e32b7805f82.roa File: 40ca3da7-d905-3def-9f19-2e32b7805f82.roa (raw, json) Hash identifier: ELMH6Pl/Ozg3gF4CmaI/cn6rWKRjpfs29+aTYCsx9xc= Subject key identifier: 82:C5:0C:61:06:E8:66:96:80:8C:7C:4F:D3:68:67:81:38:21:44:05 Certificate issuer: /CN=cd2d7d85-61d0-4ba6-b4d2-afda9b820a78 Certificate serial: 010D0C9F4328584D300A5D3FC96AAE4B54DA4750 Authority key identifier: D6:26:E1:8A:8F:B4:0F:B5:DB:1C:70:1F:86:FB:4A:BA:D5:E2:19:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/40ca3da7-d905-3def-9f19-2e32b7805f82.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 19782 IP address blocks: 198.51.243.0/24 maxlen: 24 198.51.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:5d:3f:c9:6a:ae:4b:54:da:47:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd2d7d85-61d0-4ba6-b4d2-afda9b820a78 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=cc9645d9-8682-4fd8-a656-43b77c7ecb9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:73:5c:75:97:d2:8a:37:15:39:e4:10:eb:45: 1d:ab:52:5a:1d:44:55:54:41:d4:b0:f7:c2:88:f4: e4:a6:d1:35:d5:9d:4b:a5:68:06:50:c8:b4:9e:07: 92:3e:9f:36:43:21:71:4e:f3:ec:1c:13:0e:e7:fd: 3a:b1:a9:b3:96:12:01:c8:ed:a8:28:bc:f7:3d:15: d6:b1:79:c0:48:47:de:c9:61:fd:76:a8:56:b8:6e: 46:ec:3c:29:68:7c:db:08:6f:f5:7f:ad:e4:54:24: e5:44:2d:1e:25:5d:9f:ba:15:b9:55:fc:66:47:41: 15:50:16:db:dc:29:ef:29:cf:d3:c7:2d:36:5e:83: ad:d0:62:37:27:e1:c0:29:ea:5e:6d:cf:58:45:c4: a2:58:c3:d4:48:16:a7:47:cd:68:ad:a4:15:74:59: 6c:04:ae:9d:df:0c:8b:c4:ad:08:e2:3e:95:7f:86: eb:e4:75:04:8b:9d:89:47:e4:07:5d:b2:ef:9b:ea: f5:c0:cc:0b:f0:8f:6b:11:4a:02:35:78:45:3a:a0: 4a:47:9f:c4:25:98:2e:03:7e:c2:3d:da:ee:19:cc: 0a:25:d4:1c:5e:8f:81:9d:1d:52:87:d5:fb:2e:bf: 0d:34:ca:85:9b:c8:b1:79:54:e7:7e:ea:03:32:20: 2b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:C5:0C:61:06:E8:66:96:80:8C:7C:4F:D3:68:67:81:38:21:44:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/40ca3da7-d905-3def-9f19-2e32b7805f82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.crl X509v3 Authority Key Identifier: keyid:D6:26:E1:8A:8F:B4:0F:B5:DB:1C:70:1F:86:FB:4A:BA:D5:E2:19:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer sbgp-ipAddrBlock: critical IPv4: 198.51.243.0-198.51.244.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:9b:2e:67:29:f5:0c:2c:7e:e8:af:32:c2:79:5d:b5:9a:2c: 6b:88:b3:ab:41:01:56:5f:3c:da:02:3b:05:6a:2a:16:8e:7f: 72:60:ae:7d:5f:7d:9f:39:50:7d:dc:5a:79:97:ad:9f:e0:b4: de:40:ec:8d:f2:44:a6:a7:4f:d5:69:7a:dd:0b:65:66:fa:99: cb:b2:5a:4c:e2:70:11:a6:64:72:af:32:32:d5:6d:a3:55:17: b0:3f:be:ba:af:69:d9:da:2e:57:50:b7:bf:aa:cc:36:1b:ae: 34:19:6c:96:d5:63:a8:72:50:a5:30:24:66:fa:d1:62:50:54: 1e:9c:db:c3:c0:1a:65:0c:81:4d:27:9d:d4:b7:fd:65:f7:9e: db:6f:e0:fb:f5:b5:1e:7f:fd:b8:12:4e:5b:70:d5:ac:64:0c: 90:4e:39:d8:54:00:84:17:73:47:9d:35:38:f1:3b:b1:06:a1: 1a:8e:8a:9a:e8:da:ac:87:b6:e4:d9:c5:a4:63:10:78:27:6f: a1:7d:81:da:f6:e9:3a:6f:50:4d:c5:b7:5a:f9:c1:96:90:da: 16:24:11:3f:65:5e:9b:df:c9:ed:76:30:7c:80:57:1b:5c:da: f0:fe:b4:8e:2e:3b:79:06:71:45:41:42:64:04:23:7c:ae:16: e4:e6:5b:c7 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE0wCl0/yWquS1TaR1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QyZDdkODUtNjFkMC00YmE2LWI0ZDItYWZkYTliODIw YTc4MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk Y2M5NjQ1ZDktODY4Mi00ZmQ4LWE2NTYtNDNiNzdjN2VjYjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXNcdZfSijcVOeQQ60Udq1JaHURVVEHUsPfC iPTkptE11Z1LpWgGUMi0ngeSPp82QyFxTvPsHBMO5/06samzlhIByO2oKLz3PRXW sXnASEfeyWH9dqhWuG5G7DwpaHzbCG/1f63kVCTlRC0eJV2fuhW5VfxmR0EVUBbb 3CnvKc/Txy02XoOt0GI3J+HAKepebc9YRcSiWMPUSBanR81oraQVdFlsBK6d3wyL xK0I4j6Vf4br5HUEi52JR+QHXbLvm+r1wMwL8I9rEUoCNXhFOqBKR5/EJZguA37C PdruGcwKJdQcXo+BnR1Sh9X7Lr8NNMqFm8ixeVTnfuoDMiArkwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFILFDGEG6GaWgIx8T9NoZ4E4IUQFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZDJk N2Q4NS02MWQwLTRiYTYtYjRkMi1hZmRhOWI4MjBhNzgvNDBjYTNkYTctZDkwNS0z ZGVmLTlmMTktMmUzMmI3ODA1ZjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2QyZDdkODUtNjFkMC00YmE2LWI0 ZDItYWZkYTliODIwYTc4L2NkMmQ3ZDg1LTYxZDAtNGJhNi1iNGQyLWFmZGE5Yjgy MGE3OC5jcmwwHwYDVR0jBBgwFoAU1ibhio+0D7XbHHAfhvtKutXiGQowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jZDJkN2Q4NS02MWQwLTRiYTYtYjRkMi1hZmRh OWI4MjBhNzguY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADGM/MD BADGM/QwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAT5suZyn1DCx+6K8ywnldtZosa4izq0EBVl882gI7BWoq Fo5/cmCufV99nzlQfdxaeZetn+C03kDsjfJEpqdP1Wl63QtlZvqZy7JaTOJwEaZk cq8yMtVto1UXsD++uq9p2douV1C3v6rMNhuuNBlsltVjqHJQpTAkZvrRYlBUHpzb w8AaZQyBTSed1Lf9Zfee22/g+/W1Hn/9uBJOW3DVrGQMkE452FQAhBdzR501OPE7 sQahGo6KmujarIe25NnFpGMQeCdvoX2B2vbpOm9QTcW3WvnBlpDaFiQRP2Vem9/J 7XYwfIBXG1za8P60ji47eQZxRUFCZAQjfK4W5OZbxw== -----END CERTIFICATE-----Generated at Sun Mar 22 12:11:13 2026 by rpki-client