$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4b0406a0-d232-31f1-bb38-282832e4317a.roa File: 4b0406a0-d232-31f1-bb38-282832e4317a.roa (raw, json) Hash identifier: Ior0OvmjbXo+6U6pMxuozfisPEx+f2HdaA8Qg8p8OAg= Subject key identifier: D6:4C:1A:71:ED:CE:D5:C0:FC:5A:C5:04:9D:0F:FA:AC:4A:9F:5C:57 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584D0EA7C0FD4CD4ED8C5E689B60 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4b0406a0-d232-31f1-bb38-282832e4317a.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 137443 IP address blocks: 198.44.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:c0:fd:4c:d4:ed:8c:5e:68:9b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=83c93d1d-559e-4dd6-9b4b-5a0e558a9423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:cf:8b:35:56:7d:70:8b:5b:cd:e5:f3:4e:63: c1:9c:4b:f1:15:07:e1:5d:55:60:dc:8b:82:7b:fb: 8d:19:a5:b4:3e:bc:18:9f:7b:c5:1d:2e:c6:95:d6: 67:2e:6b:0f:3b:2d:57:4b:18:ce:2a:82:7c:95:3e: 0b:79:f6:71:31:63:a8:e1:1b:49:3f:b4:d8:f8:57: 77:a0:b3:1c:61:80:a6:fd:87:e1:dc:17:b8:32:32: 9e:96:25:c6:2e:af:7f:19:58:15:b5:2f:31:2a:ed: b8:3f:5f:b5:ce:5a:02:e5:1f:14:d6:71:53:e9:4c: 8e:5d:69:dd:84:81:eb:fb:1a:1e:63:b2:5e:9d:f0: 17:75:94:3b:4a:be:6a:ea:b6:44:13:a3:31:de:26: 56:4f:5d:97:a8:de:65:88:cd:80:47:d4:47:d4:d2: b4:d3:1f:44:bd:cd:7d:fc:21:99:28:24:e3:c2:a5: 8a:4c:01:15:02:e5:09:09:df:86:97:12:95:7f:bd: 4f:2c:c6:86:c1:98:d7:88:59:7d:90:ab:c2:a4:c7: 1e:79:a4:32:f7:74:5e:82:89:8b:e6:5e:c1:5b:a9: 37:83:06:e4:ff:5a:9c:a3:25:0b:8b:ab:c2:59:17: 42:33:04:31:c1:16:cf:05:3b:0d:2b:f8:23:ce:23: 5d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:4C:1A:71:ED:CE:D5:C0:FC:5A:C5:04:9D:0F:FA:AC:4A:9F:5C:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4b0406a0-d232-31f1-bb38-282832e4317a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 198.44.166.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:a0:0b:3d:41:0f:07:0a:2a:5a:be:2a:d2:ad:05:b6:21:e2: 9a:43:d7:87:bf:0f:9e:1e:6f:b3:09:96:57:2f:62:10:73:b0: ef:24:89:34:f0:38:39:9a:0a:22:77:c2:07:f6:0e:6d:92:c9: b3:95:b2:1a:1d:35:1a:18:68:57:8b:9c:af:cf:67:0a:50:0f: 79:e9:26:1b:0e:45:81:a7:be:9a:2a:b8:54:7c:6c:c6:49:ca: 66:50:47:3d:75:59:9b:5e:6e:76:f0:d2:49:82:fb:45:8f:f4: f8:a6:97:7a:2e:76:46:68:10:bf:af:2e:c9:80:a5:ef:aa:18: 9a:b7:85:10:83:c7:57:4e:12:f4:2f:85:c2:ca:5f:aa:81:15: 2b:ff:c0:d3:e9:30:51:46:61:c2:1b:9f:a4:77:97:c9:82:b9: 3b:6c:df:7a:a8:75:31:07:7e:9b:f8:b2:79:b9:42:ad:90:3b: a0:96:2a:c1:35:03:92:65:c2:b3:51:63:0e:f4:3e:63:51:ed: c6:32:32:35:df:1a:60:b5:b3:0e:16:e8:a1:f2:09:4f:74:c8: 2e:9d:d4:2a:55:55:59:c7:66:04:ac:57:0f:5a:4b:6f:e8:d5: 15:fc:b1:e2:fc:43:f5:e8:d6:25:93:70:66:27:7f:f5:56:7e: fd:49:44:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Op8D9TNTtjF5om2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk ODNjOTNkMWQtNTU5ZS00ZGQ2LTliNGItNWEwZTU1OGE5NDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8+LNVZ9cItbzeXzTmPBnEvxFQfhXVVg3IuC e/uNGaW0PrwYn3vFHS7GldZnLmsPOy1XSxjOKoJ8lT4LefZxMWOo4RtJP7TY+Fd3 oLMcYYCm/Yfh3Be4MjKeliXGLq9/GVgVtS8xKu24P1+1zloC5R8U1nFT6UyOXWnd hIHr+xoeY7JenfAXdZQ7Sr5q6rZEE6Mx3iZWT12XqN5liM2AR9RH1NK00x9Evc19 /CGZKCTjwqWKTAEVAuUJCd+GlxKVf71PLMaGwZjXiFl9kKvCpMceeaQy93RegomL 5l7BW6k3gwbk/1qcoyULi6vCWRdCMwQxwRbPBTsNK/gjziNd1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZMGnHtztXA/FrFBJ0P+qxKn1xXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvNGIwNDA2YTAtZDIzMi0z MWYxLWJiMzgtMjgyODMyZTQzMTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxiymMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKKgCz1BDwcKKlq+KtKtBbYh4ppD14e/D54eb7MJllcvYhBzsO8kiTTw ODmaCiJ3wgf2Dm2SybOVshodNRoYaFeLnK/PZwpQD3npJhsORYGnvpoquFR8bMZJ ymZQRz11WZtebnbw0kmC+0WP9Piml3oudkZoEL+vLsmApe+qGJq3hRCDx1dOEvQv hcLKX6qBFSv/wNPpMFFGYcIbn6R3l8mCuTts33qodTEHfpv4snm5Qq2QO6CWKsE1 A5JlwrNRYw70PmNR7cYyMjXfGmC1sw4W6KHyCU90yC6d1CpVVVnHZgSsVw9aS2/o 1RX8seL8Q/Xo1iWTcGYnf/VWfv1JRBc= -----END CERTIFICATE-----Generated at Thu Mar 26 16:20:19 2026 by rpki-client