$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4e2cd7fe-733c-343e-8ec9-91664ca73f8f.roa File: 4e2cd7fe-733c-343e-8ec9-91664ca73f8f.roa (raw, json) Hash identifier: g4y6nmyp6IKgyK45dLHveGodRXrcRgC5cFggxsqntrw= Subject key identifier: B5:04:FE:BA:D7:3A:1E:D8:35:F1:8D:87:C4:4C:8E:45:86:51:54:0A Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584E2809A32E2E41BABF66FFD300 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4e2cd7fe-733c-343e-8ec9-91664ca73f8f.roa Signing time: Sat 13 Jun 2026 09:00:12 +0000 ROA not before: Sat 13 Jun 2026 09:00:12 +0000 ROA not after: Fri 11 Sep 2026 09:00:12 +0000 asID: 137443 IP address blocks: 198.44.172.0/23 maxlen: 23 198.44.172.0/24 maxlen: 24 198.44.173.0/24 maxlen: 24 198.44.174.0/23 maxlen: 23 198.44.174.0/24 maxlen: 24 198.44.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:28:09:a3:2e:2e:41:ba:bf:66:ff:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Jun 13 09:00:12 2026 GMT Not After : Sep 11 09:00:12 2026 GMT Subject: CN=72b475b8-ccc2-4e2e-a6d4-cc3cdf37ddb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8e:b4:61:b7:2f:47:4c:d2:08:3f:1d:cd:ac: ff:b3:62:85:c8:7b:02:d0:f7:e3:81:53:c7:bd:3f: 53:b4:f2:b0:fd:c5:41:37:98:c8:14:23:25:d7:91: f4:4f:a4:75:68:74:1f:97:7b:34:a8:6d:b7:7a:a2: b9:85:f8:d1:ef:1c:1b:28:2d:49:69:1c:46:1e:17: 7e:80:6b:72:ce:cf:ea:d1:cf:ab:72:7e:6b:e8:03: 95:4b:9e:d4:e8:3d:ba:0c:bc:4b:be:94:8e:a2:6a: 14:d1:e2:84:dc:7e:0d:ca:fb:a0:08:b2:57:61:c3: 65:f9:b3:c2:44:08:f6:cc:1a:c6:11:96:ff:e6:7a: 19:eb:49:83:a1:e0:d4:c2:e3:ee:6f:46:a6:d8:19: c9:77:ab:ea:9a:b1:8b:fe:bb:6d:08:56:50:c7:2d: 47:2d:a1:c4:b8:4f:fc:ce:96:47:81:b3:31:ac:fd: f4:49:97:24:29:2f:cb:f0:29:75:ba:59:c3:1c:3d: 77:7e:db:51:ae:90:4a:9b:85:41:24:6d:75:f3:12: ad:27:f4:b7:dc:68:bc:9e:4a:e7:a1:f1:05:f5:21: b4:4b:39:eb:24:7e:f5:bf:e8:87:ac:9a:5e:cf:bf: 37:cc:a0:7b:a8:25:57:2d:44:49:be:aa:9a:7b:61: a4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:04:FE:BA:D7:3A:1E:D8:35:F1:8D:87:C4:4C:8E:45:86:51:54:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4e2cd7fe-733c-343e-8ec9-91664ca73f8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 198.44.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:05:6b:e4:b1:dd:02:87:cf:ea:81:0b:ac:e6:79:5a:ec:73: 94:48:8e:1e:cb:12:19:e9:87:28:bd:1a:6b:09:59:ac:01:10: f6:10:60:02:46:08:95:d5:04:65:32:92:20:18:7d:cb:5c:ff: ed:fc:d2:53:56:47:2f:7b:ab:94:c9:4f:22:bf:00:78:95:34: 5e:df:57:e8:30:0e:c6:a4:93:3d:54:ed:73:4c:0a:84:a2:e2: 95:96:59:f2:9e:1c:ed:35:67:04:24:07:9e:70:1d:d8:48:f7: 85:62:e8:83:eb:28:3f:e6:ab:ec:49:38:4e:c0:72:eb:ed:81: 99:4e:f6:48:70:32:81:9f:36:2b:cf:4f:08:44:c1:4d:5f:99: c0:03:a3:41:d4:79:d5:e7:4e:c3:e1:ff:9e:53:33:cb:11:88: 0f:6a:8d:e5:d3:44:06:44:12:ab:17:21:b6:83:18:7d:39:98: 60:f1:b4:8e:bf:83:9d:58:1b:c9:c5:bb:47:c1:04:10:53:52: c1:50:eb:08:bd:e9:6c:e7:c2:4d:d6:5d:1d:1c:93:08:04:da: c1:7a:6d:ad:76:e5:4e:77:5b:94:6e:04:f4:b1:c8:5a:1e:ca: 64:a3:83:79:ab:2e:13:38:98:ce:9c:28:6b:99:e0:74:f3:f0: dc:7c:82:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4oCaMuLkG6v2b/0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI2MDYxMzA5MDAxMloXDTI2MDkxMTA5MDAxMlowLzEtMCsGA1UEAxMk NzJiNDc1YjgtY2NjMi00ZTJlLWE2ZDQtY2MzY2RmMzdkZGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApY60YbcvR0zSCD8dzaz/s2KFyHsC0PfjgVPH vT9TtPKw/cVBN5jIFCMl15H0T6R1aHQfl3s0qG23eqK5hfjR7xwbKC1JaRxGHhd+ gGtyzs/q0c+rcn5r6AOVS57U6D26DLxLvpSOomoU0eKE3H4NyvugCLJXYcNl+bPC RAj2zBrGEZb/5noZ60mDoeDUwuPub0am2BnJd6vqmrGL/rttCFZQxy1HLaHEuE/8 zpZHgbMxrP30SZckKS/L8Cl1ulnDHD13fttRrpBKm4VBJG118xKtJ/S33Gi8nkrn ofEF9SG0SznrJH71v+iHrJpez783zKB7qCVXLURJvqqae2Gk4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLUE/rrXOh7YNfGNh8RMjkWGUVQKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvNGUyY2Q3ZmUtNzMzYy0z NDNlLThlYzktOTE2NjRjYTczZjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxiysMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgFa+Sx3QKHz+qBC6zmeVrsc5RIjh7LEhnphyi9GmsJWawBEPYQYAJG CJXVBGUykiAYfctc/+380lNWRy97q5TJTyK/AHiVNF7fV+gwDsakkz1U7XNMCoSi 4pWWWfKeHO01ZwQkB55wHdhI94Vi6IPrKD/mq+xJOE7AcuvtgZlO9khwMoGfNivP TwhEwU1fmcADo0HUedXnTsPh/55TM8sRiA9qjeXTRAZEEqsXIbaDGH05mGDxtI6/ g51YG8nFu0fBBBBTUsFQ6wi96Wznwk3WXR0ckwgE2sF6ba125U53W5RuBPSxyFoe ymSjg3mrLhM4mM6cKGuZ4HTz8Nx8gkA= -----END CERTIFICATE-----Generated at Tue Jul 21 20:32:30 2026 by rpki-client