$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4b0406a0-d232-31f1-bb38-282832e4317a.roa File: 4b0406a0-d232-31f1-bb38-282832e4317a.roa (raw, json) Hash identifier: 13P06CMQt3hxvVnoyw13aOgUhlbKe3AT9FvIdCJFoz0= Subject key identifier: 7F:8C:60:08:80:D4:C3:29:FD:16:8A:D3:07:3C:93:00:0E:A2:C0:C1 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584DEF45E425DF56E043974D9E80 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4b0406a0-d232-31f1-bb38-282832e4317a.roa Signing time: Sun 24 May 2026 01:00:27 +0000 ROA not before: Sun 24 May 2026 01:00:27 +0000 ROA not after: Sat 22 Aug 2026 01:00:27 +0000 asID: 137443 IP address blocks: 198.44.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ef:45:e4:25:df:56:e0:43:97:4d:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: May 24 01:00:27 2026 GMT Not After : Aug 22 01:00:27 2026 GMT Subject: CN=723abcdb-d1ad-4a52-8b80-048c701b03f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2e:36:40:ac:14:cc:ca:35:d2:0f:97:c9:69: 97:e1:c8:ba:2e:87:df:c0:aa:e7:e9:4a:dd:3f:7b: 64:30:d3:bf:df:58:59:e6:d6:ea:17:87:10:ed:0a: 69:89:4c:18:2d:49:6c:b8:f1:78:76:6c:0a:12:d5: eb:07:45:64:02:f5:dc:24:1e:a2:f8:58:d0:9c:1d: 12:32:f9:ab:42:d8:16:30:3d:6d:9c:76:e7:eb:cd: 18:94:a2:67:30:c3:f0:16:69:90:24:e6:2e:39:fb: 9d:06:4f:f0:73:cc:a3:9a:09:18:b6:fa:f6:73:56: 51:58:6e:bc:0e:ed:4b:34:14:5b:54:aa:68:fc:8a: 92:a7:c0:9a:24:60:99:b2:56:68:e1:c3:04:26:cd: 2e:06:15:a3:80:5e:3e:fc:45:83:a7:24:7a:dc:25: c0:6a:03:cc:91:d3:cb:9b:ca:ea:8d:e6:a4:2f:69: 89:d9:f8:38:d4:56:59:f6:39:5d:df:22:36:5a:ba: ec:c9:a1:d4:59:55:dd:c7:fe:d1:70:49:27:20:43: a7:f4:e1:3a:ed:af:9e:1e:9e:99:fb:d6:73:31:2f: 30:a1:87:2e:ef:a4:6f:4e:42:06:2e:ca:86:ed:29: 98:e8:14:fb:a0:b1:01:26:fa:c4:99:d9:76:86:a8: d8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:8C:60:08:80:D4:C3:29:FD:16:8A:D3:07:3C:93:00:0E:A2:C0:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4b0406a0-d232-31f1-bb38-282832e4317a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 198.44.166.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:94:f5:2b:ca:ed:59:04:2a:b4:94:f3:82:5a:8c:fe:de:22: fe:2d:9c:cb:65:72:e7:8c:03:44:85:e3:a2:f0:a7:db:46:65: 79:93:27:43:e3:4e:83:57:bc:ad:16:e4:5b:40:af:9d:f1:9a: 94:b0:a8:65:15:1b:8c:2f:a6:d7:0b:bd:93:f6:58:ed:79:c5: b6:a3:da:75:f2:a2:46:a6:c4:46:27:95:1b:d4:b0:48:24:e1: b1:3d:74:99:aa:01:1d:d3:7a:b8:70:70:74:ff:f5:85:99:0c: 03:84:b3:89:f2:52:64:a5:b6:68:f5:0b:0c:f5:af:4e:a3:7f: c7:f6:cb:e1:2d:bd:c9:5e:71:1d:cb:d4:42:32:e5:8e:27:33: 6b:dd:8f:59:46:67:50:a7:23:26:6f:34:ed:5c:32:65:5a:de: 4e:7d:db:da:7f:21:b9:31:ef:11:5e:be:db:b5:71:61:ae:79: 4a:2a:92:27:2f:7f:48:b8:6c:6f:fa:4f:5a:15:0b:58:0c:49: 79:d9:5d:95:8c:b9:32:4c:68:f0:b3:cb:f7:bf:76:31:d7:f6: 17:40:4f:51:df:9e:bc:9a:d9:61:6d:f6:7d:6b:ea:d2:15:81: 96:56:ac:23:ff:87:63:ea:0c:ce:e2:9c:86:3c:ad:cd:0a:35: d2:fa:b6:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3vReQl31bgQ5dNnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI2MDUyNDAxMDAyN1oXDTI2MDgyMjAxMDAyN1owLzEtMCsGA1UEAxMk NzIzYWJjZGItZDFhZC00YTUyLThiODAtMDQ4YzcwMWIwM2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmS42QKwUzMo10g+XyWmX4ci6LoffwKrn6Urd P3tkMNO/31hZ5tbqF4cQ7QppiUwYLUlsuPF4dmwKEtXrB0VkAvXcJB6i+FjQnB0S MvmrQtgWMD1tnHbn680YlKJnMMPwFmmQJOYuOfudBk/wc8yjmgkYtvr2c1ZRWG68 Du1LNBRbVKpo/IqSp8CaJGCZslZo4cMEJs0uBhWjgF4+/EWDpyR63CXAagPMkdPL m8rqjeakL2mJ2fg41FZZ9jld3yI2WrrsyaHUWVXdx/7RcEknIEOn9OE67a+eHp6Z +9ZzMS8woYcu76RvTkIGLsqG7SmY6BT7oLEBJvrEmdl2hqjYtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH+MYAiA1MMp/RaK0wc8kwAOosDBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvNGIwNDA2YTAtZDIzMi0z MWYxLWJiMzgtMjgyODMyZTQzMTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxiymMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ+U9SvK7VkEKrSU84JajP7eIv4tnMtlcueMA0SF46Lwp9tGZXmTJ0Pj ToNXvK0W5FtAr53xmpSwqGUVG4wvptcLvZP2WO15xbaj2nXyokamxEYnlRvUsEgk 4bE9dJmqAR3TerhwcHT/9YWZDAOEs4nyUmSltmj1Cwz1r06jf8f2y+EtvclecR3L 1EIy5Y4nM2vdj1lGZ1CnIyZvNO1cMmVa3k5929p/Ibkx7xFevtu1cWGueUoqkicv f0i4bG/6T1oVC1gMSXnZXZWMuTJMaPCzy/e/djHX9hdAT1Hfnrya2WFt9n1r6tIV gZZWrCP/h2PqDM7inIY8rc0KNdL6ttM= -----END CERTIFICATE-----Generated at Sat Jun 6 08:29:51 2026 by rpki-client