$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/7539456a-1ede-30db-a5cf-fe160402f89e.roa File: 7539456a-1ede-30db-a5cf-fe160402f89e.roa (raw, json) Hash identifier: v9pIfDnhR9lWiD5WOSvartMoTKJTRVJqmTHh48WvhV4= Subject key identifier: A8:B2:B6:33:28:76:F3:43:19:9D:BE:43:92:58:1D:E5:44:91:6F:E1 Certificate issuer: /CN=dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1 Certificate serial: 010D0C9F4328584DAC45728FF6F60B215DA55FC0 Authority key identifier: 0A:4D:D1:2F:80:E5:2F:D9:F9:0A:B6:5D:8F:FF:C0:B1:2C:66:58:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/7539456a-1ede-30db-a5cf-fe160402f89e.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 198949 IP address blocks: 198.177.154.0/24 maxlen: 24 204.52.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:72:8f:f6:f6:0b:21:5d:a5:5f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1 Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=daa93f59-e9d3-4cb7-a44c-e5ea43e575b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3e:c2:06:cd:57:bf:72:88:14:df:58:b4:cb: 4f:bc:21:20:6d:b7:18:24:aa:95:a5:c2:5b:12:d2: 6e:2c:60:4b:62:0e:0d:8c:93:5d:98:0a:af:07:18: 01:1e:7c:d3:d2:ed:0a:d2:ff:b0:52:1e:74:56:d5: e8:3e:36:02:2f:09:3b:01:02:f2:4f:67:df:67:0e: e8:b1:20:42:88:a2:1d:96:9b:4d:04:22:0a:20:af: 11:9d:3f:3b:17:54:18:69:a1:e0:d3:15:07:20:40: 75:68:36:f6:e4:52:e3:56:52:5b:dd:4f:6b:31:4e: d3:82:96:f2:9a:35:47:a0:51:57:f0:d7:3b:cb:07: 21:d1:ee:92:cf:42:94:3d:01:15:d0:0d:fd:4f:d0: ef:1a:f6:ec:67:f3:e7:5f:e9:17:16:f4:88:b0:6c: 82:d2:e4:63:28:e0:5c:15:11:95:2d:30:30:83:48: 63:ed:99:b1:73:43:01:4f:84:9c:e4:f3:bc:34:5a: fb:d9:1c:79:92:82:45:f5:96:fa:bd:88:41:6f:bb: f8:02:f9:a0:7d:b1:d0:08:f3:06:33:4d:4d:4a:92: df:43:a1:82:34:37:11:51:2d:43:ee:19:1d:d8:a3: 88:00:06:f2:46:90:39:d9:8a:72:b1:70:c7:69:bc: 45:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B2:B6:33:28:76:F3:43:19:9D:BE:43:92:58:1D:E5:44:91:6F:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/7539456a-1ede-30db-a5cf-fe160402f89e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.crl X509v3 Authority Key Identifier: keyid:0A:4D:D1:2F:80:E5:2F:D9:F9:0A:B6:5D:8F:FF:C0:B1:2C:66:58:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.cer sbgp-ipAddrBlock: critical IPv4: 198.177.154.0/24 204.52.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:f5:e7:8c:9e:05:bc:9e:a9:e6:a3:26:a8:05:9c:65:8c:91: 16:88:91:c7:d3:79:38:99:7e:eb:dd:95:84:6f:00:28:9a:1d: 74:fd:7f:1b:d1:54:c8:c9:37:7e:a5:39:12:3b:5d:74:e4:5f: b0:8d:59:25:f1:49:dd:13:ca:94:83:89:da:82:94:75:74:70: 9b:13:37:2b:da:ab:4d:53:18:59:ca:47:1b:56:df:a3:33:a7: 87:a2:39:c3:9f:ff:8c:18:13:56:6c:ec:52:cc:af:c6:c8:f2: e2:6f:9d:76:e8:06:02:84:cc:df:1c:37:ed:71:12:8c:49:0d: 50:43:40:68:dc:b9:3b:fe:57:46:7a:fb:c5:0a:b9:f6:97:16: 30:54:59:9c:23:f7:11:7e:ec:fc:3b:f9:dc:53:43:a3:46:df: f8:58:a4:53:05:40:ed:5f:20:2d:50:ad:8d:12:82:a1:c6:18: 25:28:74:f4:0a:39:77:c4:ba:48:30:ed:b1:cc:13:33:92:c0: 9c:7f:97:13:af:bc:4d:91:a2:3f:a7:1a:8c:e1:dd:06:65:d7: 14:86:e5:f5:9e:5b:de:c6:67:ee:9e:c8:13:89:e8:f8:48:a0: ee:df:7a:c0:00:66:4c:89:57:dc:84:ab:8b:be:30:9f:1a:a1: da:e5:e6:46 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE2sRXKP9vYLIV2lX8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNiMGE1OTctZjZlYi00Yzk3LWFhNmMtMzZkMDRiZDdj MmQxMB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk ZGFhOTNmNTktZTlkMy00Y2I3LWE0NGMtZTVlYTQzZTU3NWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1D7CBs1Xv3KIFN9YtMtPvCEgbbcYJKqVpcJb EtJuLGBLYg4NjJNdmAqvBxgBHnzT0u0K0v+wUh50VtXoPjYCLwk7AQLyT2ffZw7o sSBCiKIdlptNBCIKIK8RnT87F1QYaaHg0xUHIEB1aDb25FLjVlJb3U9rMU7Tgpby mjVHoFFX8Nc7ywch0e6Sz0KUPQEV0A39T9DvGvbsZ/PnX+kXFvSIsGyC0uRjKOBc FRGVLTAwg0hj7Zmxc0MBT4Sc5PO8NFr72Rx5koJF9Zb6vYhBb7v4AvmgfbHQCPMG M01NSpLfQ6GCNDcRUS1D7hkd2KOIAAbyRpA52YpysXDHabxFnQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKiytjModvNDGZ2+Q5JYHeVEkW/hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Iw YTU5Ny1mNmViLTRjOTctYWE2Yy0zNmQwNGJkN2MyZDEvNzUzOTQ1NmEtMWVkZS0z MGRiLWE1Y2YtZmUxNjA0MDJmODllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNiMGE1OTctZjZlYi00Yzk3LWFh NmMtMzZkMDRiZDdjMmQxL2RjYjBhNTk3LWY2ZWItNGM5Ny1hYTZjLTM2ZDA0YmQ3 YzJkMS5jcmwwHwYDVR0jBBgwFoAUCk3RL4DlL9n5CrZdj//AsSxmWLUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2IwYTU5Ny1mNmViLTRjOTctYWE2Yy0zNmQw NGJkN2MyZDEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAxrGaAwQA zDT8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAP154yeBbyeqeajJqgFnGWMkRaIkcfTeTiZfuvdlYRvACia HXT9fxvRVMjJN36lORI7XXTkX7CNWSXxSd0TypSDidqClHV0cJsTNyvaq01TGFnK RxtW36Mzp4eiOcOf/4wYE1Zs7FLMr8bI8uJvnXboBgKEzN8cN+1xEoxJDVBDQGjc uTv+V0Z6+8UKufaXFjBUWZwj9xF+7Pw7+dxTQ6NG3/hYpFMFQO1fIC1QrY0SgqHG GCUodPQKOXfEukgw7bHMEzOSwJx/lxOvvE2Roj+nGozh3QZl1xSG5fWeW97GZ+6e yBOJ6PhIoO7fesAAZkyJV9yEq4u+MJ8aodrl5kY= -----END CERTIFICATE-----Generated at Wed May 13 12:22:43 2026 by rpki-client