$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/298e19e8-b0ac-38aa-82ff-af63bd135582.roa File: 298e19e8-b0ac-38aa-82ff-af63bd135582.roa (raw, json) Hash identifier: WozCSdzzanwRIX4fAtfBo50YNGjMy6jSwImc1corw00= Subject key identifier: 02:02:F1:13:46:36:C0:AF:CF:1C:44:7C:3E:3B:24:FF:62:DB:5F:98 Certificate issuer: /CN=21428d3a-0040-4c60-9202-cd68b2fd51de Certificate serial: 010D0C9F4328584C8A0C7FA9F3DA22D00077E380 Authority key identifier: 3A:AB:39:2A:FD:92:FC:E2:7B:FA:D0:E7:DF:2A:44:C7:3E:38:3E:FD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/298e19e8-b0ac-38aa-82ff-af63bd135582.roa Signing time: Fri 16 Jan 2026 02:00:31 +0000 ROA not before: Fri 16 Jan 2026 02:00:31 +0000 ROA not after: Thu 16 Apr 2026 01:00:31 +0000 asID: 16509 IP address blocks: 198.207.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:8a:0c:7f:a9:f3:da:22:d0:00:77:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21428d3a-0040-4c60-9202-cd68b2fd51de Validity Not Before: Jan 16 02:00:31 2026 GMT Not After : Apr 16 01:00:31 2026 GMT Subject: CN=d08b96f4-60ca-451e-b7e6-c8bf2d3636f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ad:c0:8f:ca:4b:7a:f0:0f:0c:a7:e3:93:34: 30:5b:8c:60:6b:ef:88:a3:4c:f6:b6:8a:57:55:e7: 42:9f:fd:67:2f:f3:e2:54:2c:50:32:0f:d2:0a:6b: 05:fd:40:33:5c:69:7a:b6:b1:3b:0d:6a:4e:a6:bd: 6c:7f:91:59:b7:fb:2a:73:99:22:df:91:b6:a4:56: c4:cf:1e:be:92:49:93:86:71:a2:be:9f:76:65:74: 0e:0c:bb:a4:2e:6b:3a:4a:18:90:2c:4b:50:3a:31: ec:41:fa:ab:0e:b5:85:77:32:24:d8:7e:4a:1f:10: 42:cb:3c:52:56:4e:8f:1e:a8:34:75:ba:05:49:c1: 68:e0:e8:98:30:73:95:e8:2b:08:10:52:6e:45:ac: f1:ba:78:84:43:54:b2:37:9f:8f:7f:4a:1e:fe:49: b6:03:86:c7:7f:39:d7:e1:ea:be:9d:ab:62:94:45: 62:2c:61:bf:78:dd:8f:30:b2:b6:f0:cd:a8:8e:13: 17:cb:5c:cb:51:af:39:53:39:2a:9e:33:84:1b:28: 73:9f:69:3e:53:bc:c8:53:9c:96:fe:99:16:0e:39: 37:30:ca:ff:30:03:f8:81:b8:be:2c:fa:c0:8b:5c: c9:4f:95:70:c0:47:54:65:ab:68:c0:b8:62:45:b0: 30:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:02:F1:13:46:36:C0:AF:CF:1C:44:7C:3E:3B:24:FF:62:DB:5F:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/298e19e8-b0ac-38aa-82ff-af63bd135582.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.crl X509v3 Authority Key Identifier: keyid:3A:AB:39:2A:FD:92:FC:E2:7B:FA:D0:E7:DF:2A:44:C7:3E:38:3E:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de.cer sbgp-ipAddrBlock: critical IPv4: 198.207.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:72:ad:ac:2e:fe:58:c6:a5:71:58:e1:83:91:a4:6b:a6:35: fb:d6:ca:a9:b0:ba:a2:70:9b:0f:83:c9:42:20:4c:f9:56:56: b2:e6:78:c0:df:5e:68:c3:41:e6:8b:d4:04:cc:57:54:b4:31: 34:13:a9:7a:a7:b5:26:27:04:48:31:78:4b:e0:18:8a:ca:ac: ca:b4:b4:9e:68:af:1c:b6:23:55:e0:b1:58:3c:08:ec:8c:38: c7:f3:43:8f:75:2d:cf:9d:04:9d:5b:85:73:7b:25:39:91:8a: 65:32:07:6f:5a:77:29:50:5d:31:f1:d9:61:24:25:41:ab:ef: 1c:10:36:58:20:99:b6:14:74:8a:1a:9b:f4:07:97:bb:b2:58: 82:f7:aa:c6:97:2c:21:4d:bf:12:c6:10:c3:26:27:d5:31:4d: ae:26:a6:11:87:75:02:bf:43:f3:71:eb:20:5d:fc:24:48:f0: 01:97:33:34:68:38:1f:cd:8d:e7:e9:38:ca:4b:13:b2:0a:cd: 8b:1e:fa:52:24:55:9c:44:5b:4d:08:2a:a8:da:ee:61:01:41: 3b:56:75:f0:74:48:eb:b9:24:48:f3:be:89:ee:19:ad:a3:80: 6f:ef:71:fd:ae:90:e5:b4:f5:a5:a1:d8:5e:8c:0c:6b:1b:f3: 90:61:89:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyKDH+p89oi0AB344AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE0MjhkM2EtMDA0MC00YzYwLTkyMDItY2Q2OGIyZmQ1 MWRlMB4XDTI2MDExNjAyMDAzMVoXDTI2MDQxNjAxMDAzMVowLzEtMCsGA1UEAxMk ZDA4Yjk2ZjQtNjBjYS00NTFlLWI3ZTYtYzhiZjJkMzYzNmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzq3Aj8pLevAPDKfjkzQwW4xga++Io0z2topX VedCn/1nL/PiVCxQMg/SCmsF/UAzXGl6trE7DWpOpr1sf5FZt/sqc5ki35G2pFbE zx6+kkmThnGivp92ZXQODLukLms6ShiQLEtQOjHsQfqrDrWFdzIk2H5KHxBCyzxS Vk6PHqg0dboFScFo4OiYMHOV6CsIEFJuRazxuniEQ1SyN5+Pf0oe/km2A4bHfznX 4eq+natilEViLGG/eN2PMLK28M2ojhMXy1zLUa85UzkqnjOEGyhzn2k+U7zIU5yW /pkWDjk3MMr/MAP4gbi+LPrAi1zJT5VwwEdUZatowLhiRbAwMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIC8RNGNsCvzxxEfD47JP9i21+YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTQy OGQzYS0wMDQwLTRjNjAtOTIwMi1jZDY4YjJmZDUxZGUvMjk4ZTE5ZTgtYjBhYy0z OGFhLTgyZmYtYWY2M2JkMTM1NTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjE0MjhkM2EtMDA0MC00YzYwLTky MDItY2Q2OGIyZmQ1MWRlLzIxNDI4ZDNhLTAwNDAtNGM2MC05MjAyLWNkNjhiMmZk NTFkZS5jcmwwHwYDVR0jBBgwFoAUOqs5Kv2S/OJ7+tDn3ypExz44Pv0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTQyOGQzYS0wMDQwLTRjNjAtOTIwMi1jZDY4 YjJmZDUxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxs+pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxyrawu/ljGpXFY4YORpGumNfvWyqmwuqJwmw+DyUIgTPlWVrLmeMDf XmjDQeaL1ATMV1S0MTQTqXqntSYnBEgxeEvgGIrKrMq0tJ5orxy2I1XgsVg8COyM OMfzQ491Lc+dBJ1bhXN7JTmRimUyB29adylQXTHx2WEkJUGr7xwQNlggmbYUdIoa m/QHl7uyWIL3qsaXLCFNvxLGEMMmJ9UxTa4mphGHdQK/Q/Nx6yBd/CRI8AGXMzRo OB/NjefpOMpLE7IKzYse+lIkVZxEW00IKqja7mEBQTtWdfB0SOu5JEjzvonuGa2j gG/vcf2ukOW09aWh2F6MDGsb85Bhib4= -----END CERTIFICATE-----Generated at Mon Mar 2 04:12:59 2026 by rpki-client