$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/b2ed4966-d792-34c7-806d-aaa85e042841.roa File: b2ed4966-d792-34c7-806d-aaa85e042841.roa (raw, json) Hash identifier: wprhQRJFzyquVvqhdCrEwa42NZVQi726gyLRJ4PUwMc= Subject key identifier: FA:6D:F7:D0:0D:68:86:D1:F0:09:55:AE:9E:1F:18:FF:62:D0:11:89 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584E4824938CD37138AA47C0AAC0 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/b2ed4966-d792-34c7-806d-aaa85e042841.roa Signing time: Wed 24 Jun 2026 21:00:12 +0000 ROA not before: Wed 24 Jun 2026 21:00:12 +0000 ROA not after: Tue 22 Sep 2026 21:00:12 +0000 asID: 62468 IP address blocks: 198.44.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:48:24:93:8c:d3:71:38:aa:47:c0:aa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Jun 24 21:00:12 2026 GMT Not After : Sep 22 21:00:12 2026 GMT Subject: CN=d32a1c28-7f1f-4d6f-9ce8-7fbaed54cad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1b:f1:39:54:ad:9a:06:58:29:e2:85:39:20: 01:fb:87:e2:fd:c3:d0:6b:1d:b7:a3:f4:86:d2:64: a6:47:f6:9f:9c:4a:69:de:74:df:2c:3d:fe:15:74: 7f:b7:22:dd:2e:6a:4c:06:6f:bb:62:af:9e:22:f5: 85:b2:b7:e4:d6:f4:76:a3:43:76:38:53:b8:db:1b: 99:c8:c6:21:7a:90:78:f8:48:3a:40:db:3d:c1:21: 95:b6:00:b8:28:76:de:82:13:49:d4:e9:5e:a6:a5: a6:d0:ca:e3:26:04:23:27:51:7e:f2:8e:c6:ad:b7: 56:e4:fa:4c:e1:3d:20:b8:f0:f8:bf:3a:c5:aa:16: 62:bb:b4:31:ca:28:46:00:9d:cd:7e:cf:a9:cb:5c: c7:64:97:5e:b6:21:04:bb:46:ff:7b:36:e3:a4:28: 92:d1:53:90:e4:61:7a:e6:b8:17:f6:ca:2c:39:8a: 83:f5:dd:76:97:b9:e8:e1:2f:da:9f:35:15:b8:d1: 23:2c:17:25:de:6e:f8:63:71:cd:37:10:54:de:94: 93:7a:dd:34:50:d9:6b:92:8a:98:d1:9d:95:a4:2d: 99:c3:18:a8:f3:dc:97:75:eb:f2:92:82:86:2d:9f: 07:5e:71:3b:44:b3:b8:32:f4:69:28:39:9c:95:73: 3c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:6D:F7:D0:0D:68:86:D1:F0:09:55:AE:9E:1F:18:FF:62:D0:11:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/b2ed4966-d792-34c7-806d-aaa85e042841.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 198.44.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:52:45:32:f9:3e:f0:a2:41:dc:f1:07:e9:67:f1:77:70:72: 44:bd:fd:4d:a6:97:45:d5:1f:6f:99:c3:79:3c:b3:7b:0f:9b: 1f:ed:08:17:79:b8:4a:27:e3:e3:cf:21:12:38:40:d0:bd:fd: 80:97:13:2d:f6:a1:cf:6a:cc:03:20:c0:6d:bf:df:33:47:73: 35:30:1a:bf:df:ff:8c:cd:07:14:65:c1:f1:ff:3e:c7:45:7f: 51:48:ae:02:4a:20:62:b2:77:60:97:51:14:c1:d9:4a:29:9f: 56:dd:28:7e:26:3f:70:d2:89:d9:4f:a8:76:56:46:5a:44:c1: 63:31:6b:fb:24:b7:9c:89:bc:8a:4d:8d:64:0f:ca:12:e7:7a: b1:26:07:1c:27:0d:60:3e:58:76:f8:81:37:11:16:da:f8:9a: 98:fb:b1:54:bb:ef:05:4d:57:c7:0c:61:a4:8c:56:98:d1:bc: ea:93:7a:96:88:4b:e5:d8:c7:d7:22:30:a0:8a:8c:b9:42:62: 78:bf:eb:df:48:89:ff:4d:73:37:22:f9:cb:cb:53:db:df:81: f8:30:7c:31:60:2f:e7:27:b9:f0:1b:8c:fd:64:71:d9:e9:cf: 69:af:de:49:40:e0:0e:bb:e0:4b:6f:d7:5e:bd:6e:e5:4a:01: 37:d4:39:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5IJJOM03E4qkfAqsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk ZDMyYTFjMjgtN2YxZi00ZDZmLTljZTgtN2ZiYWVkNTRjYWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBvxOVStmgZYKeKFOSAB+4fi/cPQax23o/SG 0mSmR/afnEpp3nTfLD3+FXR/tyLdLmpMBm+7Yq+eIvWFsrfk1vR2o0N2OFO42xuZ yMYhepB4+Eg6QNs9wSGVtgC4KHbeghNJ1OlepqWm0MrjJgQjJ1F+8o7GrbdW5PpM 4T0guPD4vzrFqhZiu7QxyihGAJ3Nfs+py1zHZJdetiEEu0b/ezbjpCiS0VOQ5GF6 5rgX9sosOYqD9d12l7no4S/anzUVuNEjLBcl3m74Y3HNNxBU3pSTet00UNlrkoqY 0Z2VpC2Zwxio89yXdevykoKGLZ8HXnE7RLO4MvRpKDmclXM8EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPpt99ANaIbR8AlVrp4fGP9i0BGJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvYjJlZDQ5NjYtZDc5Mi0z NGM3LTgwNmQtYWFhODVlMDQyODQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxiyjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBSRTL5PvCiQdzxB+ln8XdwckS9/U2ml0XVH2+Zw3k8s3sPmx/tCBd5 uEon4+PPIRI4QNC9/YCXEy32oc9qzAMgwG2/3zNHczUwGr/f/4zNBxRlwfH/PsdF f1FIrgJKIGKyd2CXURTB2Uopn1bdKH4mP3DSidlPqHZWRlpEwWMxa/skt5yJvIpN jWQPyhLnerEmBxwnDWA+WHb4gTcRFtr4mpj7sVS77wVNV8cMYaSMVpjRvOqTepaI S+XYx9ciMKCKjLlCYni/699Iif9Nczci+cvLU9vfgfgwfDFgL+cnufAbjP1kcdnp z2mv3klA4A674Etv1169buVKATfUORQ= -----END CERTIFICATE-----Generated at Tue Jul 21 20:41:04 2026 by rpki-client