$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/2c99c21e-0bd7-31ad-90df-40b918e4402f.roa File: 2c99c21e-0bd7-31ad-90df-40b918e4402f.roa (raw, json) Hash identifier: 3eYkjCLPHkMTRxwo4HNJ46lFHC98uh9DycUiI81SaKA= Subject key identifier: C8:8A:08:2E:C0:44:E5:6E:6D:35:67:0F:C8:43:B3:74:98:12:B9:13 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584D316F63E0B3D7E40958EE01C0 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/2c99c21e-0bd7-31ad-90df-40b918e4402f.roa Signing time: Tue 17 Mar 2026 01:00:32 +0000 ROA not before: Tue 17 Mar 2026 01:00:32 +0000 ROA not after: Mon 15 Jun 2026 01:00:32 +0000 asID: 137899 IP address blocks: 198.44.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:31:6f:63:e0:b3:d7:e4:09:58:ee:01:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Mar 17 01:00:32 2026 GMT Not After : Jun 15 01:00:32 2026 GMT Subject: CN=e15bce79-016e-455e-9f0c-b6edbb283ddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:be:da:be:de:9c:00:04:f8:90:61:76:6c:fe: a7:d2:49:31:5d:92:12:98:53:8b:8b:f5:af:29:5b: 3d:2f:f5:1c:2d:af:52:3d:d8:b5:14:0d:ea:18:93: 95:e5:1d:5c:a1:6d:14:1f:17:d9:ea:ae:9d:79:0c: 86:3a:5e:fc:38:63:2c:b9:eb:f5:94:25:fa:b8:22: 9f:39:05:86:a5:17:7c:ba:8d:89:09:d6:b3:07:8d: 78:a3:48:63:d8:33:30:0f:a9:17:ad:5b:d3:7b:ac: a9:79:2b:59:5c:44:ec:b0:3d:4d:19:b3:44:c9:86: 62:47:00:92:ca:52:f8:76:1b:be:37:14:69:6f:e9: 14:cd:15:40:f8:ae:b8:e2:1d:de:e0:af:2d:50:47: ca:38:bf:57:38:fe:6b:95:7d:1a:8c:db:62:4d:75: 7e:99:1c:08:b0:38:a6:73:bd:ad:80:25:ed:91:97: 6b:93:f2:22:94:22:b6:ce:7a:a8:d2:d5:60:ef:e9: ed:3b:b2:05:4a:d5:1a:4e:1e:4a:80:df:93:ce:8b: c3:2e:cf:ad:30:67:4b:1f:2d:bf:42:e2:92:bb:f7: c8:9f:cb:2c:af:ee:6e:11:66:5b:d6:45:16:82:34: 2f:f9:6b:d9:77:18:a6:f0:14:93:30:c5:ff:31:00: eb:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:8A:08:2E:C0:44:E5:6E:6D:35:67:0F:C8:43:B3:74:98:12:B9:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/2c99c21e-0bd7-31ad-90df-40b918e4402f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 198.44.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:62:3e:8f:4f:5e:47:48:6a:70:60:84:58:5d:80:5b:fa:59: 45:72:e8:b5:d2:79:5a:fe:82:84:f3:ed:e8:35:fc:5e:89:8a: 92:4d:3f:34:93:5f:82:19:97:92:65:dc:27:5b:11:25:4d:2f: 7f:dd:bb:2d:29:95:5d:63:39:df:38:21:61:22:16:3c:11:29: 63:f1:1a:2d:4d:db:fa:0d:97:2e:3b:13:8e:80:14:84:d7:27: 1f:dd:8a:7b:bf:74:6c:aa:4e:e5:e0:d8:e2:ab:a7:ed:45:2b: 32:e3:1d:32:0c:49:2a:f4:6a:2c:6a:62:9f:bf:4a:7b:6e:1a: 6a:7d:18:ff:80:2e:22:c6:af:38:96:d4:59:36:4a:9f:0b:b2: 1f:25:9e:a0:dc:e1:53:de:16:56:de:b6:e9:23:f0:36:f7:09: 18:0c:a6:db:9f:37:68:48:e5:a0:bd:9b:cf:b5:8f:a4:dc:41: b0:ad:c8:55:80:9d:a2:71:99:49:b8:93:2d:54:3a:2f:e9:3b: 17:2c:21:22:a8:35:03:c8:46:f8:e7:79:2a:2a:e4:bf:51:92: 0d:fb:41:ee:7e:79:a3:43:70:2a:8e:a6:3e:45:e1:87:2f:fb: 5a:9d:73:b6:17:ad:d6:6e:49:d0:a7:c7:48:60:32:8d:12:26: a3:80:90:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0xb2Pgs9fkCVjuAcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI2MDMxNzAxMDAzMloXDTI2MDYxNTAxMDAzMlowLzEtMCsGA1UEAxMk ZTE1YmNlNzktMDE2ZS00NTVlLTlmMGMtYjZlZGJiMjgzZGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr7avt6cAAT4kGF2bP6n0kkxXZISmFOLi/Wv KVs9L/UcLa9SPdi1FA3qGJOV5R1coW0UHxfZ6q6deQyGOl78OGMsuev1lCX6uCKf OQWGpRd8uo2JCdazB414o0hj2DMwD6kXrVvTe6ypeStZXETssD1NGbNEyYZiRwCS ylL4dhu+NxRpb+kUzRVA+K644h3e4K8tUEfKOL9XOP5rlX0ajNtiTXV+mRwIsDim c72tgCXtkZdrk/IilCK2znqo0tVg7+ntO7IFStUaTh5KgN+TzovDLs+tMGdLHy2/ QuKSu/fIn8ssr+5uEWZb1kUWgjQv+WvZdxim8BSTMMX/MQDr9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMiKCC7AROVubTVnD8hDs3SYErkTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvMmM5OWMyMWUtMGJkNy0z MWFkLTkwZGYtNDBiOTE4ZTQ0MDJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxiy4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFiPo9PXkdIanBghFhdgFv6WUVy6LXSeVr+goTz7eg1/F6JipJNPzST X4IZl5Jl3CdbESVNL3/duy0plV1jOd84IWEiFjwRKWPxGi1N2/oNly47E46AFITX Jx/dinu/dGyqTuXg2OKrp+1FKzLjHTIMSSr0aixqYp+/SntuGmp9GP+ALiLGrziW 1Fk2Sp8Lsh8lnqDc4VPeFlbetukj8Db3CRgMptufN2hI5aC9m8+1j6TcQbCtyFWA naJxmUm4ky1UOi/pOxcsISKoNQPIRvjneSoq5L9Rkg37Qe5+eaNDcCqOpj5F4Ycv +1qdc7YXrdZuSdCnx0hgMo0SJqOAkOk= -----END CERTIFICATE-----Generated at Thu Mar 26 06:20:47 2026 by rpki-client