$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/521cdfd3-e2d0-3d53-951f-67811b5957ef.roa File: 521cdfd3-e2d0-3d53-951f-67811b5957ef.roa (raw, json) Hash identifier: juCCiaGzEbMGsZ/qRVP/ZYRb5jJ2Kx2yRvq1Mc2tAgE= Subject key identifier: 02:18:59:77:EA:48:30:5E:AC:E3:18:26:E2:91:ED:C6:26:43:5C:CF Certificate issuer: /CN=d2584a20-171d-406f-91e5-a70a19be13b8 Certificate serial: 010D0C9F4328584D00B24D2FA23275FB57558BC0 Authority key identifier: 56:7A:2E:3B:A3:B5:29:D6:1C:46:DF:5F:10:7D:3C:C0:8F:C3:13:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/521cdfd3-e2d0-3d53-951f-67811b5957ef.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 36517 IP address blocks: 198.148.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/d2584a20-171d-406f-91e5-a70a19be13b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/d2584a20-171d-406f-91e5-a70a19be13b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:4d:2f:a2:32:75:fb:57:55:8b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2584a20-171d-406f-91e5-a70a19be13b8 Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=afcb2415-94df-4428-824c-04025ea3e23d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:02:30:64:e3:c8:10:a7:20:43:8f:8a:ff:ae: d7:92:3b:c8:85:0d:47:ac:4e:fe:f8:b9:be:41:55: e2:1a:2a:f9:55:5d:1f:0e:a5:97:eb:76:45:a6:0f: f6:b8:e2:f8:20:41:17:d1:d8:18:c9:b6:83:1a:74: fa:56:e5:4a:b0:5d:8a:44:e9:41:6c:e7:af:50:2f: 8e:64:e4:f0:b5:df:6b:a2:68:31:fb:52:da:76:a4: ac:93:d9:19:06:de:80:3e:ed:92:27:36:43:91:77: d0:61:3c:4d:41:f4:d3:77:f5:42:c0:c3:43:bb:26: bb:d9:1b:14:ab:f1:24:e1:9e:2d:56:78:b0:fd:1c: ab:87:e7:01:0d:15:db:ac:4c:5e:59:5f:0f:5f:71: 6d:62:98:86:c0:38:9f:60:2e:05:40:38:15:d5:da: df:f5:1c:06:7a:de:54:41:d1:77:81:ca:b5:ca:50: 09:14:0e:fd:92:5b:4f:79:8b:62:ce:00:5d:82:8b: 50:08:8d:a8:29:47:c2:5c:fb:7a:b2:18:f1:e3:41: da:da:ba:04:5a:7b:46:1a:f2:5d:f2:82:39:a9:21: 48:e3:35:a0:b5:35:34:66:6d:ec:f5:3f:f2:2d:0f: d4:85:eb:cd:ff:7e:5b:c9:ea:c3:42:07:ae:b6:f7: 9f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:18:59:77:EA:48:30:5E:AC:E3:18:26:E2:91:ED:C6:26:43:5C:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/521cdfd3-e2d0-3d53-951f-67811b5957ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/d2584a20-171d-406f-91e5-a70a19be13b8.crl X509v3 Authority Key Identifier: keyid:56:7A:2E:3B:A3:B5:29:D6:1C:46:DF:5F:10:7D:3C:C0:8F:C3:13:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8.cer sbgp-ipAddrBlock: critical IPv4: 198.148.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:f3:3b:52:c5:c5:25:c0:53:5b:a8:61:59:65:91:4d:eb:8b: 3f:f3:22:e6:2c:10:09:84:40:2a:e0:a6:57:bd:c4:a0:5b:d2: 6e:d8:ad:e5:4a:34:84:65:6c:60:cb:26:ec:cf:62:6d:9a:85: dd:0d:71:b1:39:21:13:00:41:c5:88:b9:58:35:a2:f3:11:29: 1a:7c:8e:0f:ab:e0:8f:59:59:03:83:3f:45:0f:5c:87:63:0f: ad:69:54:60:82:b6:02:9d:00:e6:a1:26:18:49:01:ca:1b:f1: ae:3f:1e:ad:d3:91:36:a0:17:3a:2b:12:51:cc:f5:17:96:72: 05:a8:87:1c:54:63:ca:ae:3a:eb:8f:f6:51:c4:5c:4a:85:29: 29:fc:20:d2:f6:20:78:eb:63:6e:d8:cd:70:08:cd:66:d2:3c: 15:81:77:3f:11:b1:32:94:5f:b5:1b:8f:d5:44:23:d1:8f:ae: fa:59:94:57:86:5f:24:eb:e3:f8:7b:82:b5:57:48:96:a0:69: a5:1e:ef:ab:65:94:0f:93:20:d3:b0:a2:9d:d1:bd:bb:4b:b3: d9:7d:d2:6d:96:44:89:fb:48:53:04:da:98:06:5c:4e:6e:16: 23:3d:94:bd:ae:c3:ac:9b:3d:6b:ed:c3:9f:f5:23:7d:8e:80: 33:a3:e9:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Ask0vojJ1+1dVi8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDI1ODRhMjAtMTcxZC00MDZmLTkxZTUtYTcwYTE5YmUx M2I4MB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk YWZjYjI0MTUtOTRkZi00NDI4LTgyNGMtMDQwMjVlYTNlMjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwIwZOPIEKcgQ4+K/67XkjvIhQ1HrE7++Lm+ QVXiGir5VV0fDqWX63ZFpg/2uOL4IEEX0dgYybaDGnT6VuVKsF2KROlBbOevUC+O ZOTwtd9romgx+1LadqSsk9kZBt6APu2SJzZDkXfQYTxNQfTTd/VCwMNDuya72RsU q/Ek4Z4tVniw/Ryrh+cBDRXbrExeWV8PX3FtYpiGwDifYC4FQDgV1drf9RwGet5U QdF3gcq1ylAJFA79kltPeYtizgBdgotQCI2oKUfCXPt6shjx40Ha2roEWntGGvJd 8oI5qSFI4zWgtTU0Zm3s9T/yLQ/UhevN/35byerDQgeutvefqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIYWXfqSDBerOMYJuKR7cYmQ1zPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kMjU4 NGEyMC0xNzFkLTQwNmYtOTFlNS1hNzBhMTliZTEzYjgvNTIxY2RmZDMtZTJkMC0z ZDUzLTk1MWYtNjc4MTFiNTk1N2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZDI1ODRhMjAtMTcxZC00MDZmLTkx ZTUtYTcwYTE5YmUxM2I4L2QyNTg0YTIwLTE3MWQtNDA2Zi05MWU1LWE3MGExOWJl MTNiOC5jcmwwHwYDVR0jBBgwFoAUVnouO6O1KdYcRt9fEH08wI/DEwswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kMjU4NGEyMC0xNzFkLTQwNmYtOTFlNS1hNzBh MTliZTEzYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpSEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/zO1LFxSXAU1uoYVllkU3riz/zIuYsEAmEQCrgple9xKBb0m7YreVK NIRlbGDLJuzPYm2ahd0NcbE5IRMAQcWIuVg1ovMRKRp8jg+r4I9ZWQODP0UPXIdj D61pVGCCtgKdAOahJhhJAcob8a4/Hq3TkTagFzorElHM9ReWcgWohxxUY8quOuuP 9lHEXEqFKSn8INL2IHjrY27YzXAIzWbSPBWBdz8RsTKUX7Ubj9VEI9GPrvpZlFeG XyTr4/h7grVXSJagaaUe76tllA+TINOwop3RvbtLs9l90m2WRIn7SFME2pgGXE5u FiM9lL2uw6ybPWvtw5/1I32OgDOj6X0= -----END CERTIFICATE-----Generated at Mon Mar 2 09:05:15 2026 by rpki-client