$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/d5af8938-fe55-34cf-8a95-3ff9247e6446.roa File: d5af8938-fe55-34cf-8a95-3ff9247e6446.roa (raw, json) Hash identifier: on0pUZJJ+Lad5ZklpRr0/sNO/G00xNbbEmEuHeBQ/pc= Subject key identifier: 1D:10:33:F2:7B:D9:9C:49:72:B6:E7:D3:63:4A:D6:08:2E:F7:BD:E3 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584D1B1A0D421A2D549C89DCB240 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/d5af8938-fe55-34cf-8a95-3ff9247e6446.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 152705 IP address blocks: 107.151.244.0/22 maxlen: 24 198.44.170.0/24 maxlen: 24 198.44.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:0d:42:1a:2d:54:9c:89:dc:b2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=ced0850e-fdbb-49c4-9860-cbb0cda73392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:4b:ff:c3:9c:ce:4e:ad:87:93:c4:d7:24:14: 19:f2:16:ad:2b:68:14:86:52:7f:32:0d:6d:28:b1: bd:ed:09:c0:bc:b2:27:80:23:12:43:59:af:b6:bf: c9:94:07:43:fc:91:3b:b0:43:58:7e:8e:fd:43:0a: 35:52:d9:73:b6:94:c9:0e:7e:59:a2:1f:c4:05:aa: bf:55:55:e6:14:d4:b5:be:6f:71:e1:67:6a:2e:e9: 24:e1:6c:e2:c7:15:a4:5f:9e:02:45:2a:70:4b:49: 5b:08:5a:e8:64:8a:55:34:20:cb:c0:b9:ef:a7:15: 45:2f:f3:c3:69:95:46:0e:b7:18:b7:b8:2b:1d:b2: d1:b5:ad:66:92:07:e6:55:6a:8a:7e:29:46:5b:58: 83:0a:b2:f2:05:7f:2b:a6:0d:23:fb:04:2f:77:27: 78:ec:70:68:ac:ab:fb:53:a4:c6:41:de:0c:ae:6f: 45:df:06:a8:6a:c2:e4:b4:f0:18:f9:7b:8c:f9:d4: 8e:95:96:01:84:28:9d:0e:2a:4a:4a:9e:1b:9b:da: b3:38:87:84:54:56:ad:e7:57:79:77:08:fc:f2:ec: 7f:5d:d4:83:31:71:ec:d4:5d:d4:bb:2c:b4:ff:5a: 34:75:6d:12:1d:15:11:42:5a:0b:f1:88:10:35:71: ac:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:10:33:F2:7B:D9:9C:49:72:B6:E7:D3:63:4A:D6:08:2E:F7:BD:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/d5af8938-fe55-34cf-8a95-3ff9247e6446.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 107.151.244.0/22 198.44.170.0/24 198.44.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:1c:5b:e8:75:56:03:a8:f2:c5:67:01:89:06:8c:aa:27:63: 37:a5:a3:45:da:34:4a:69:2e:c3:68:96:cb:51:27:92:f9:4a: f5:a5:53:77:04:e7:f0:3b:03:e9:04:bb:62:fa:81:98:01:6a: 12:bf:aa:bc:41:da:18:c9:87:a1:d2:97:6a:21:57:ac:70:08: 62:d7:b6:82:e3:c1:33:fe:52:fc:5f:ee:41:6e:91:5d:6e:de: 4a:96:9a:b1:0e:0f:70:3f:ab:0a:d3:4c:aa:79:eb:6b:44:ca: 7c:1b:96:07:70:3e:bf:04:e0:87:5b:2e:42:90:1e:c1:45:e6: 42:8f:2c:e8:d7:6c:be:f6:37:48:a5:50:45:4e:a9:96:9a:8c: e1:0f:eb:a9:86:40:67:de:e7:02:9b:e6:18:f8:c0:ae:04:bf: 29:d8:95:07:45:1b:15:e3:4f:38:f8:b4:28:65:74:ba:4f:c6: ce:a6:4c:8b:57:3b:c5:1d:1e:b2:40:9e:b8:51:c3:20:af:d2: cc:89:a4:2f:8c:29:36:a4:75:a0:09:e2:78:92:ca:9c:2a:4e: 7d:20:62:80:50:4e:f6:68:af:34:a3:c3:55:1b:75:73:4b:11: 74:dc:a9:a5:35:26:40:83:b4:93:98:42:d5:0d:25:d5:27:5a: f5:ae:2b:8a -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE0bGg1CGi1UnIncskAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk Y2VkMDg1MGUtZmRiYi00OWM0LTk4NjAtY2JiMGNkYTczMzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0v/w5zOTq2Hk8TXJBQZ8hatK2gUhlJ/Mg1t KLG97QnAvLIngCMSQ1mvtr/JlAdD/JE7sENYfo79Qwo1UtlztpTJDn5Zoh/EBaq/ VVXmFNS1vm9x4WdqLukk4WzixxWkX54CRSpwS0lbCFroZIpVNCDLwLnvpxVFL/PD aZVGDrcYt7grHbLRta1mkgfmVWqKfilGW1iDCrLyBX8rpg0j+wQvdyd47HBorKv7 U6TGQd4Mrm9F3waoasLktPAY+XuM+dSOlZYBhCidDipKSp4bm9qzOIeEVFat51d5 dwj88ux/XdSDMXHs1F3Uuyy0/1o0dW0SHRURQloL8YgQNXGsEQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFB0QM/J72ZxJcrbn02NK1ggu973jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvZDVhZjg5MzgtZmU1NS0z NGNmLThhOTUtM2ZmOTI0N2U2NDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCa5f0AwQA xiyqAwQCxiywMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBABYcW+h1VgOo8sVnAYkGjKonYzelo0XaNEppLsNo lstRJ5L5SvWlU3cE5/A7A+kEu2L6gZgBahK/qrxB2hjJh6HSl2ohV6xwCGLXtoLj wTP+Uvxf7kFukV1u3kqWmrEOD3A/qwrTTKp562tEynwblgdwPr8E4IdbLkKQHsFF 5kKPLOjXbL72N0ilUEVOqZaajOEP66mGQGfe5wKb5hj4wK4EvynYlQdFGxXjTzj4 tChldLpPxs6mTItXO8UdHrJAnrhRwyCv0syJpC+MKTakdaAJ4niSypwqTn0gYoBQ TvZorzSjw1UbdXNLEXTcqaU1JkCDtJOYQtUNJdUnWvWuK4o= -----END CERTIFICATE-----Generated at Sat Mar 21 23:05:21 2026 by rpki-client