$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5d35eb8b-40d6-4e37-beae-ce9733027467/bd81b659-bc77-3a9c-a8cb-fcd72b0f8840.roa File: bd81b659-bc77-3a9c-a8cb-fcd72b0f8840.roa (raw, json) Hash identifier: 5C/RxdZnQQKWLfJ8bVXWT96WCq/Gb4bHmTzxyUgX+KY= Subject key identifier: 1F:FE:76:FB:42:8A:48:1F:6F:FD:A2:3A:69:63:51:31:C1:5E:11:B3 Certificate issuer: /CN=5d35eb8b-40d6-4e37-beae-ce9733027467 Certificate serial: 010D0C9F4328584C7D7C1450FC0DFD5BCD9B298A Authority key identifier: 6F:59:45:11:43:B1:12:C5:88:7B:D2:DA:58:1E:F4:C1:4E:90:BD:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5d35eb8b-40d6-4e37-beae-ce9733027467.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5d35eb8b-40d6-4e37-beae-ce9733027467/bd81b659-bc77-3a9c-a8cb-fcd72b0f8840.roa Signing time: Sun 11 Jan 2026 14:00:39 +0000 ROA not before: Sun 11 Jan 2026 14:00:39 +0000 ROA not after: Sat 11 Apr 2026 13:00:39 +0000 asID: 401244 IP address blocks: 198.160.238.0/23 maxlen: 23 198.160.240.0/23 maxlen: 23 2602:819:c000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5d35eb8b-40d6-4e37-beae-ce9733027467/5d35eb8b-40d6-4e37-beae-ce9733027467.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5d35eb8b-40d6-4e37-beae-ce9733027467/5d35eb8b-40d6-4e37-beae-ce9733027467.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5d35eb8b-40d6-4e37-beae-ce9733027467.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:7d:7c:14:50:fc:0d:fd:5b:cd:9b:29:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d35eb8b-40d6-4e37-beae-ce9733027467 Validity Not Before: Jan 11 14:00:39 2026 GMT Not After : Apr 11 13:00:39 2026 GMT Subject: CN=5590ae55-1ae6-442f-a009-bfa385e3e99e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0d:6b:e2:71:b0:bf:0d:9e:9c:6e:c5:45:75: 13:af:77:70:0b:dd:87:d5:b3:b9:85:1d:0a:6f:94: 56:2a:6d:6b:9a:8a:5e:06:d5:04:14:fb:04:e8:5c: be:84:3f:b7:83:1c:a0:7e:c7:8a:a5:46:81:25:c8: 78:14:41:00:0a:4f:e6:cc:92:75:61:1c:f2:be:73: 7c:f8:80:a4:ff:39:48:d0:79:d9:10:c3:61:4b:45: 10:f6:ac:01:63:2a:ff:fc:84:a2:a4:b5:23:b5:94: 32:72:c6:b4:02:b0:28:41:4e:33:93:d2:75:67:79: 72:b1:2c:e6:27:13:e3:69:c0:7f:39:54:36:57:50: 2a:5b:9c:9d:cf:0c:12:3a:3f:28:8b:63:e5:c9:66: b7:2b:05:ff:f3:1a:8d:f5:45:30:5a:e0:e1:8d:a1: cd:66:e5:00:a5:5b:7d:5b:32:47:ce:8a:eb:b3:46: fd:7f:7a:22:7f:fa:95:bf:0a:32:c2:ef:fc:ee:67: 58:9e:f4:fc:79:03:c2:95:e3:e4:6f:4c:8a:83:d4: 02:70:92:a2:25:45:38:c3:f4:64:e1:05:8f:06:cc: 6e:e1:c5:25:2e:0a:b7:50:c6:9f:ea:17:95:e4:6f: 63:cb:de:05:82:50:f8:ad:c7:9a:d9:3c:91:02:45: cf:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:FE:76:FB:42:8A:48:1F:6F:FD:A2:3A:69:63:51:31:C1:5E:11:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5d35eb8b-40d6-4e37-beae-ce9733027467/bd81b659-bc77-3a9c-a8cb-fcd72b0f8840.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5d35eb8b-40d6-4e37-beae-ce9733027467/5d35eb8b-40d6-4e37-beae-ce9733027467.crl X509v3 Authority Key Identifier: keyid:6F:59:45:11:43:B1:12:C5:88:7B:D2:DA:58:1E:F4:C1:4E:90:BD:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5d35eb8b-40d6-4e37-beae-ce9733027467.cer sbgp-ipAddrBlock: critical IPv4: 198.160.238.0-198.160.241.255 IPv6: 2602:819:c000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:26:1d:73:9f:5c:90:bf:13:50:87:cb:7d:7b:96:0e:aa:6b: b4:35:cc:57:7f:e8:83:d1:74:66:9c:f6:15:fc:22:ed:1b:a6: 20:95:6e:c3:f0:b3:17:fe:83:a7:fb:2c:8c:84:cb:69:46:45: 48:44:59:5f:ee:9d:2a:a1:c6:13:79:9a:66:b8:06:5f:4a:c7: d4:38:97:61:d4:90:0a:fe:9b:e0:36:d3:34:71:68:95:c6:ab: d0:4d:0d:54:5a:61:a2:fb:b7:8f:fe:e4:1e:3a:26:3e:e1:67: f9:65:ed:da:31:65:b2:00:bf:f2:7a:9d:5c:9c:b8:3e:45:8f: a2:d3:93:4a:d2:0f:bb:5b:e2:b5:9a:c6:ea:ec:74:96:05:19: 54:97:98:8d:7d:3c:f4:24:0b:27:d2:cc:13:a1:12:72:9b:06: 34:d5:1f:60:8c:7e:d9:56:7d:93:8a:83:a0:b7:bf:4a:c7:a8: 21:ce:ee:dd:94:6e:0e:6d:2c:72:f7:53:93:11:71:c4:fd:a0: 25:73:6f:4b:65:5a:82:ea:33:90:22:fc:04:1d:4d:0c:b2:31: ca:aa:7e:08:34:8d:83:50:ab:03:aa:f7:be:53:54:50:95:3f: d9:37:ca:8d:df:f4:e1:61:36:27:67:5f:43:98:cb:ee:03:b2: 45:dc:93:96 -----BEGIN CERTIFICATE----- MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWEx9fBRQ/A39W82bKYowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQzNWViOGItNDBkNi00ZTM3LWJlYWUtY2U5NzMzMDI3 NDY3MB4XDTI2MDExMTE0MDAzOVoXDTI2MDQxMTEzMDAzOVowLzEtMCsGA1UEAxMk NTU5MGFlNTUtMWFlNi00NDJmLWEwMDktYmZhMzg1ZTNlOTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQ1r4nGwvw2enG7FRXUTr3dwC92H1bO5hR0K b5RWKm1rmopeBtUEFPsE6Fy+hD+3gxygfseKpUaBJch4FEEACk/mzJJ1YRzyvnN8 +ICk/zlI0HnZEMNhS0UQ9qwBYyr//ISipLUjtZQycsa0ArAoQU4zk9J1Z3lysSzm JxPjacB/OVQ2V1AqW5ydzwwSOj8oi2PlyWa3KwX/8xqN9UUwWuDhjaHNZuUApVt9 WzJHzorrs0b9f3oif/qVvwoywu/87mdYnvT8eQPClePkb0yKg9QCcJKiJUU4w/Rk 4QWPBsxu4cUlLgq3UMaf6heV5G9jy94FglD4rcea2TyRAkXPIQIDAQABo4IDbTCC A2kwHQYDVR0OBBYEFB/+dvtCikgfb/2iOmljUTHBXhGzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81ZDM1 ZWI4Yi00MGQ2LTRlMzctYmVhZS1jZTk3MzMwMjc0NjcvYmQ4MWI2NTktYmM3Ny0z YTljLWE4Y2ItZmNkNzJiMGY4ODQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWQzNWViOGItNDBkNi00ZTM3LWJl YWUtY2U5NzMzMDI3NDY3LzVkMzVlYjhiLTQwZDYtNGUzNy1iZWFlLWNlOTczMzAy NzQ2Ny5jcmwwHwYDVR0jBBgwFoAUb1lFEUOxEsWIe9LaWB70wU6QvTkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81ZDM1ZWI4Yi00MGQ2LTRlMzctYmVhZS1jZTk3 MzMwMjc0NjcuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAUBAIAATAOMAwDBAHGoO4D BAHGoPAwDgQCAAIwCAMGACYCCBnAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABgmHXOfXJC/E1CHy317lg6q a7Q1zFd/6IPRdGac9hX8Iu0bpiCVbsPwsxf+g6f7LIyEy2lGRUhEWV/unSqhxhN5 mma4Bl9Kx9Q4l2HUkAr+m+A20zRxaJXGq9BNDVRaYaL7t4/+5B46Jj7hZ/ll7dox ZbIAv/J6nVycuD5Fj6LTk0rSD7tb4rWaxursdJYFGVSXmI19PPQkCyfSzBOhEnKb BjTVH2CMftlWfZOKg6C3v0rHqCHO7t2Ubg5tLHL3U5MRccT9oCVzb0tlWoLqM5Ai /AQdTQyyMcqqfgg0jYNQqwOq975TVFCVP9k3yo3f9OFhNidnX0OYy+4DskXck5Y= -----END CERTIFICATE-----Generated at Mon Mar 2 12:40:32 2026 by rpki-client