$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a2347a0-a386-4424-8887-fb176c5cf0b5/a7b64aee-0e1f-3e9b-ae42-a25a00b9d7d8.roa File: a7b64aee-0e1f-3e9b-ae42-a25a00b9d7d8.roa (raw, json) Hash identifier: 08YnMN8qH/GG/T+7h+QC1h8b+cFnjHw9GmJBXAehZoc= Subject key identifier: E9:C8:91:9A:57:4F:F6:F6:B5:9F:2E:41:0A:DC:97:F8:AA:5F:B1:CD Certificate issuer: /CN=4a2347a0-a386-4424-8887-fb176c5cf0b5 Certificate serial: 010D0C9F4328584D1B19F46BC96EE3DD22BF94E0 Authority key identifier: B8:C4:63:F6:52:C6:6B:14:23:9F:6A:89:24:69:F3:96:4F:79:D8:FD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a2347a0-a386-4424-8887-fb176c5cf0b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a2347a0-a386-4424-8887-fb176c5cf0b5/a7b64aee-0e1f-3e9b-ae42-a25a00b9d7d8.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 397041 IP address blocks: 198.136.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a2347a0-a386-4424-8887-fb176c5cf0b5/4a2347a0-a386-4424-8887-fb176c5cf0b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a2347a0-a386-4424-8887-fb176c5cf0b5/4a2347a0-a386-4424-8887-fb176c5cf0b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a2347a0-a386-4424-8887-fb176c5cf0b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:19:f4:6b:c9:6e:e3:dd:22:bf:94:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a2347a0-a386-4424-8887-fb176c5cf0b5 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=4ece77fd-bbfa-42de-9086-c578c9c1087e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a6:0b:91:81:72:e3:ed:86:df:b1:99:77:12: a3:fc:56:4e:e1:7b:87:48:64:6a:4a:ac:90:37:b0: d9:0e:f2:3f:74:58:fb:53:0e:84:03:a1:92:d8:5e: 9f:1a:e0:62:41:dc:c0:45:fb:47:dd:5d:80:f5:f2: 63:eb:4d:a3:2a:a6:54:97:b1:e4:35:a3:35:6a:0c: 8b:01:63:62:69:9c:b8:23:26:e8:11:d3:20:8f:59: 92:a0:27:4c:a1:04:a8:16:f2:8d:c2:09:9b:e0:f3: ef:48:ed:f0:5b:9c:88:e1:f2:76:30:00:a2:4b:f4: 04:81:8b:ad:ed:6e:9f:ce:bc:2e:3f:92:7c:f0:38: 2c:d1:e2:df:0f:f4:51:f5:b3:be:c8:7c:de:b0:43: 39:23:44:c8:99:07:01:6f:ce:08:16:30:c5:d0:99: 23:03:33:e2:81:fa:34:aa:b8:e0:f9:ef:60:08:9d: cb:7b:0e:24:50:eb:4f:f5:a8:79:1f:33:c8:21:4f: 25:72:dc:43:6b:69:b6:aa:a7:8c:bb:f2:6e:11:89: 70:71:ba:38:e3:f5:b0:7a:98:88:c7:d3:33:a1:95: 2f:14:a8:b3:21:8c:36:03:51:d0:a4:01:29:36:cc: 5f:1c:f9:a3:2d:77:fd:0c:0e:63:c3:64:f3:b4:d4: 54:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:C8:91:9A:57:4F:F6:F6:B5:9F:2E:41:0A:DC:97:F8:AA:5F:B1:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a2347a0-a386-4424-8887-fb176c5cf0b5/a7b64aee-0e1f-3e9b-ae42-a25a00b9d7d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a2347a0-a386-4424-8887-fb176c5cf0b5/4a2347a0-a386-4424-8887-fb176c5cf0b5.crl X509v3 Authority Key Identifier: keyid:B8:C4:63:F6:52:C6:6B:14:23:9F:6A:89:24:69:F3:96:4F:79:D8:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a2347a0-a386-4424-8887-fb176c5cf0b5.cer sbgp-ipAddrBlock: critical IPv4: 198.136.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:04:e4:50:65:c3:a0:1f:74:0a:3c:d0:b4:04:5c:5e:f3:e8: 3c:a5:17:16:12:58:3f:de:4e:bd:c4:3c:26:9d:15:e8:2a:c8: 2e:df:5a:18:3f:9d:c9:e7:83:4d:ad:26:7e:b8:ea:78:a9:71: e6:ae:6a:21:f8:bb:7b:b5:5b:21:91:05:59:6a:9f:ac:4c:5a: 5e:a9:d6:49:0b:4f:71:4f:2c:15:5b:87:3d:d6:83:fd:63:e6: d7:03:5b:9e:e7:ee:a6:9d:f3:38:74:98:c9:d2:e6:e4:9c:5d: b9:2f:88:fa:78:e7:ab:70:09:02:6c:2f:85:d5:49:b6:14:13: cd:3f:ec:ed:80:b9:d6:df:27:6e:1a:79:f5:d3:8b:f7:99:db: bf:04:7e:f7:1c:1e:95:4d:d0:c5:71:d8:d4:57:21:33:89:f1: bc:a0:71:b9:63:66:3a:2c:e0:0d:ff:01:07:2f:65:9e:eb:13: e7:70:3c:fd:51:17:81:d6:2d:99:36:8c:a9:10:94:13:43:5a: 5e:94:e6:e9:9f:c9:71:ed:63:13:d0:1d:ca:63:81:67:63:f8: 10:5f:d3:d9:7c:3e:34:60:e3:6f:36:28:d8:9c:72:5a:a5:aa: f2:75:a8:cd:95:99:a1:e5:11:8b:56:7f:55:84:3d:05:18:df: 82:01:60:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGfRryW7j3SK/lOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEyMzQ3YTAtYTM4Ni00NDI0LTg4ODctZmIxNzZjNWNm MGI1MB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk NGVjZTc3ZmQtYmJmYS00MmRlLTkwODYtYzU3OGM5YzEwODdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6YLkYFy4+2G37GZdxKj/FZO4XuHSGRqSqyQ N7DZDvI/dFj7Uw6EA6GS2F6fGuBiQdzARftH3V2A9fJj602jKqZUl7HkNaM1agyL AWNiaZy4IyboEdMgj1mSoCdMoQSoFvKNwgmb4PPvSO3wW5yI4fJ2MACiS/QEgYut 7W6fzrwuP5J88Dgs0eLfD/RR9bO+yHzesEM5I0TImQcBb84IFjDF0JkjAzPigfo0 qrjg+e9gCJ3Lew4kUOtP9ah5HzPIIU8lctxDa2m2qqeMu/JuEYlwcbo44/WwepiI x9MzoZUvFKizIYw2A1HQpAEpNsxfHPmjLXf9DA5jw2TztNRUFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOnIkZpXT/b2tZ8uQQrcl/iqX7HNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80YTIz NDdhMC1hMzg2LTQ0MjQtODg4Ny1mYjE3NmM1Y2YwYjUvYTdiNjRhZWUtMGUxZi0z ZTliLWFlNDItYTI1YTAwYjlkN2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNGEyMzQ3YTAtYTM4Ni00NDI0LTg4 ODctZmIxNzZjNWNmMGI1LzRhMjM0N2EwLWEzODYtNDQyNC04ODg3LWZiMTc2YzVj ZjBiNS5jcmwwHwYDVR0jBBgwFoAUuMRj9lLGaxQjn2qJJGnzlk952P0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80YTIzNDdhMC1hMzg2LTQ0MjQtODg4Ny1mYjE3 NmM1Y2YwYjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxoicMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwE5FBlw6AfdAo80LQEXF7z6DylFxYSWD/eTr3EPCadFegqyC7fWhg/ ncnng02tJn646nipceauaiH4u3u1WyGRBVlqn6xMWl6p1kkLT3FPLBVbhz3Wg/1j 5tcDW57n7qad8zh0mMnS5uScXbkviPp456twCQJsL4XVSbYUE80/7O2AudbfJ24a efXTi/eZ278EfvccHpVN0MVx2NRXITOJ8bygcbljZjos4A3/AQcvZZ7rE+dwPP1R F4HWLZk2jKkQlBNDWl6U5umfyXHtYxPQHcpjgWdj+BBf09l8PjRg4282KNicclql qvJ1qM2VmaHlEYtWf1WEPQUY34IBYPo= -----END CERTIFICATE-----Generated at Sun Mar 15 08:10:43 2026 by rpki-client