$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/9be939da-ddc1-31ed-811c-e2e734533c03.roa File: 9be939da-ddc1-31ed-811c-e2e734533c03.roa (raw, json) Hash identifier: H6DHYSY+zB07PIFqdBKQIL+ivAV7MzkY3Lysk0BC38E= Subject key identifier: 17:F1:10:E2:4A:13:1A:6F:6F:06:34:AF:99:A4:AF:76:BC:E9:18:B6 Certificate issuer: /CN=d2584a20-171d-406f-91e5-a70a19be13b8 Certificate serial: 010D0C9F4328584D00B24D77BF38A02B84B34580 Authority key identifier: 56:7A:2E:3B:A3:B5:29:D6:1C:46:DF:5F:10:7D:3C:C0:8F:C3:13:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/9be939da-ddc1-31ed-811c-e2e734533c03.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 18540 IP address blocks: 198.148.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/d2584a20-171d-406f-91e5-a70a19be13b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/d2584a20-171d-406f-91e5-a70a19be13b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:4d:77:bf:38:a0:2b:84:b3:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2584a20-171d-406f-91e5-a70a19be13b8 Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=fab16a32-0b94-4c2a-a84f-ec4cb6a05a90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0a:17:39:7f:e8:f5:77:8e:61:7f:12:82:76: d3:8f:70:76:79:ca:a1:3f:87:5a:7f:8f:af:22:79: 47:35:7d:59:ef:fe:40:43:56:50:5f:d2:75:2e:4e: 13:9e:99:f0:a2:b0:42:68:1b:23:d5:ca:76:34:7c: ef:b7:41:b2:88:1b:55:50:da:a9:43:70:a9:f2:c9: 30:a7:07:67:21:49:0e:19:dd:64:3a:7c:a9:fc:ea: 1b:8e:40:43:79:52:c5:0d:59:a3:d1:fc:92:01:89: b3:35:1e:41:0f:c9:99:ab:2c:91:ad:ed:97:0a:c3: 6e:d4:c4:f3:38:da:be:c0:7e:6b:af:52:4f:87:42: da:41:f0:19:c6:b0:07:ab:54:5b:73:0b:06:ae:94: b4:4b:59:ad:e7:25:b7:20:8e:15:9b:26:cb:31:67: 65:4a:e6:30:ec:24:d3:0a:4c:25:7e:21:ad:d3:33: 35:33:cb:bd:19:7c:8e:4b:ec:46:8d:3a:e2:c7:6d: c2:e1:57:28:dd:0f:15:54:16:c1:1f:e0:2c:23:39: 8e:35:d6:64:27:10:99:ce:6c:9f:ed:3a:85:4f:72: 8f:59:c3:48:6e:8d:4d:ea:d6:2f:ad:5c:9f:c8:5f: ba:27:19:45:37:8e:7c:5f:54:c7:24:b5:eb:dc:7d: e0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:F1:10:E2:4A:13:1A:6F:6F:06:34:AF:99:A4:AF:76:BC:E9:18:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/9be939da-ddc1-31ed-811c-e2e734533c03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8/d2584a20-171d-406f-91e5-a70a19be13b8.crl X509v3 Authority Key Identifier: keyid:56:7A:2E:3B:A3:B5:29:D6:1C:46:DF:5F:10:7D:3C:C0:8F:C3:13:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2584a20-171d-406f-91e5-a70a19be13b8.cer sbgp-ipAddrBlock: critical IPv4: 198.148.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:73:f6:15:81:d0:a5:4c:62:93:29:d7:d6:fd:e3:39:ed:6f: 8e:67:31:29:c1:f0:51:4b:3a:54:7d:23:ea:51:a7:4d:16:76: 25:fe:25:80:65:90:03:96:f1:21:7f:b8:3a:52:33:0b:98:6e: aa:87:ed:50:15:27:d1:21:a0:f6:02:06:6d:e4:0f:9e:3a:9b: a1:05:25:58:6d:48:bf:18:48:8f:72:27:b1:e8:3e:f4:d0:f2: d0:5f:18:7f:a4:18:c0:c2:b6:ac:2d:f9:26:c3:80:93:d0:aa: dd:99:94:ac:91:16:9f:8e:c9:27:83:3b:b9:5c:42:d1:bd:0a: fe:1b:c6:57:99:1d:a2:32:1f:3c:64:47:96:24:35:4f:8a:46: 1b:0c:83:ef:ec:fe:da:4b:49:0e:59:90:75:f6:0f:ce:5b:18: a9:0e:07:bd:1a:97:c2:76:75:05:4d:62:ad:9a:28:79:c4:6a: 31:e4:35:f6:05:3b:32:84:3f:21:d3:bd:ff:64:88:e5:d7:0d: 16:f5:a0:9d:4b:c8:b5:ba:6f:27:16:61:bb:cd:6e:62:de:01: 23:62:24:15:85:51:a3:64:c1:c1:27:bd:de:d2:fd:6c:d4:a6: 7c:61:8f:b1:bf:3d:8b:f7:18:46:f8:25:15:4a:75:e3:81:ce: fe:0f:ad:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Ask13vzigK4SzRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDI1ODRhMjAtMTcxZC00MDZmLTkxZTUtYTcwYTE5YmUx M2I4MB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk ZmFiMTZhMzItMGI5NC00YzJhLWE4NGYtZWM0Y2I2YTA1YTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowoXOX/o9XeOYX8SgnbTj3B2ecqhP4daf4+v InlHNX1Z7/5AQ1ZQX9J1Lk4TnpnworBCaBsj1cp2NHzvt0GyiBtVUNqpQ3Cp8skw pwdnIUkOGd1kOnyp/OobjkBDeVLFDVmj0fySAYmzNR5BD8mZqyyRre2XCsNu1MTz ONq+wH5rr1JPh0LaQfAZxrAHq1RbcwsGrpS0S1mt5yW3II4VmybLMWdlSuYw7CTT CkwlfiGt0zM1M8u9GXyOS+xGjTrix23C4Vco3Q8VVBbBH+AsIzmONdZkJxCZzmyf 7TqFT3KPWcNIbo1N6tYvrVyfyF+6JxlFN458X1THJLXr3H3glQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBfxEOJKExpvbwY0r5mkr3a86Ri2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kMjU4 NGEyMC0xNzFkLTQwNmYtOTFlNS1hNzBhMTliZTEzYjgvOWJlOTM5ZGEtZGRjMS0z MWVkLTgxMWMtZTJlNzM0NTMzYzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZDI1ODRhMjAtMTcxZC00MDZmLTkx ZTUtYTcwYTE5YmUxM2I4L2QyNTg0YTIwLTE3MWQtNDA2Zi05MWU1LWE3MGExOWJl MTNiOC5jcmwwHwYDVR0jBBgwFoAUVnouO6O1KdYcRt9fEH08wI/DEwswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kMjU4NGEyMC0xNzFkLTQwNmYtOTFlNS1hNzBh MTliZTEzYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpSEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNz9hWB0KVMYpMp19b94zntb45nMSnB8FFLOlR9I+pRp00WdiX+JYBl kAOW8SF/uDpSMwuYbqqH7VAVJ9EhoPYCBm3kD546m6EFJVhtSL8YSI9yJ7HoPvTQ 8tBfGH+kGMDCtqwt+SbDgJPQqt2ZlKyRFp+OySeDO7lcQtG9Cv4bxleZHaIyHzxk R5YkNU+KRhsMg+/s/tpLSQ5ZkHX2D85bGKkOB70al8J2dQVNYq2aKHnEajHkNfYF OzKEPyHTvf9kiOXXDRb1oJ1LyLW6bycWYbvNbmLeASNiJBWFUaNkwcEnvd7S/WzU pnxhj7G/PYv3GEb4JRVKdeOBzv4Prdo= -----END CERTIFICATE-----Generated at Sun Mar 1 22:36:10 2026 by rpki-client