$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4d98a805-abed-37f8-a3c2-4b3ef4f6f7a0.roa File: 4d98a805-abed-37f8-a3c2-4b3ef4f6f7a0.roa (raw, json) Hash identifier: WH3zy1VXPL7pv5AiHjN2h5cbQyYILaN9nMG/rXyQd98= Subject key identifier: 68:47:C1:04:C1:99:25:71:5B:5E:DB:98:7C:D1:9E:6F:99:73:E2:D2 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584D47C4E1E408B8FD51478F8700 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4d98a805-abed-37f8-a3c2-4b3ef4f6f7a0.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 134365 IP address blocks: 198.44.172.0/23 maxlen: 23 198.44.172.0/24 maxlen: 24 198.44.173.0/24 maxlen: 24 198.44.174.0/23 maxlen: 23 198.44.174.0/24 maxlen: 24 198.44.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c4:e1:e4:08:b8:fd:51:47:8f:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=cf605d64-eab2-4548-b1a7-1a4afdf370cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a5:b4:4a:62:2a:3c:a9:08:00:c4:09:e1:04: 8e:89:5a:3d:87:3f:a7:58:1f:1e:f9:08:81:eb:f8: ef:52:2c:78:a1:c7:c1:f2:eb:6f:f5:c1:d5:ea:e5: 8d:d7:04:24:de:40:b4:87:56:1c:f1:7b:fa:e0:7d: f5:20:3f:c4:30:e7:38:45:2e:8b:9b:71:2c:f0:b0: 86:47:37:91:9d:fd:03:a0:44:c3:81:9d:58:cf:1f: 44:da:75:8c:7c:12:05:ee:76:58:70:8e:d0:66:57: a4:b0:ad:54:04:70:97:28:01:21:88:56:7b:b0:73: f2:88:93:d2:6a:ec:bd:c1:2f:e1:a2:54:fe:4a:cb: 13:7f:6b:d4:db:cb:82:5b:2a:d6:a8:b2:f1:03:18: 85:39:06:5e:2c:e8:a7:58:1b:13:b0:cf:c4:ef:4a: d2:82:a9:77:de:8d:10:72:eb:e3:b1:51:47:1f:4b: 5e:84:53:98:5c:c8:ed:9b:61:fc:fd:02:0b:1f:5b: c6:be:2d:7e:c5:48:ea:37:77:57:de:4b:79:51:ff: b6:1d:08:c9:fe:f1:16:01:a5:e1:38:69:dc:b8:a6: f1:ef:f1:95:c8:67:2d:7e:d5:9b:02:46:44:19:3c: 9a:07:69:e6:9a:e5:b0:f7:40:c9:c9:12:d2:9a:72: b5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:47:C1:04:C1:99:25:71:5B:5E:DB:98:7C:D1:9E:6F:99:73:E2:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4d98a805-abed-37f8-a3c2-4b3ef4f6f7a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 198.44.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:a5:45:ed:1a:e8:56:1d:cb:c7:1c:63:b0:c8:5c:a0:73:5b: b7:88:c9:46:11:22:97:03:92:00:e8:9d:a4:ee:04:2d:92:00: 6b:31:91:84:59:0f:70:db:b1:99:0a:e9:6f:0d:4c:a9:cd:52: f2:8f:2d:56:81:e8:72:4c:f1:02:f4:7c:ff:0d:95:1d:32:ca: 0d:e4:12:9f:47:5e:1a:21:f1:a2:05:a1:82:11:34:ac:da:98: 53:ec:83:6d:57:e8:e7:58:6c:27:be:7f:b7:09:db:93:73:4e: 96:f8:3a:ba:33:91:a0:21:56:c0:4c:f7:89:ef:9d:38:76:de: af:bc:9d:7d:a5:b5:0d:2b:8a:77:2d:85:9d:70:51:b8:87:61: f0:5f:50:e7:8a:f0:a0:e5:82:b4:e2:90:ab:2d:4d:6a:f3:bc: 5b:28:dd:f1:e7:fa:9d:00:f8:0b:a1:9d:8d:a6:4d:0c:6c:2e: 12:96:2d:e4:69:68:af:4a:dd:2c:ca:94:04:9c:3d:49:83:e2: 38:c2:3a:94:ed:1d:7e:ea:fd:1f:8b:86:f3:55:30:00:58:3f: bc:b5:50:70:02:55:52:be:db:0c:c6:f3:b7:99:1c:e2:30:11: cb:bf:06:59:86:63:43:17:2a:6d:f0:8c:8e:82:5d:93:e1:ac: 6b:51:2b:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxOHkCLj9UUePhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk Y2Y2MDVkNjQtZWFiMi00NTQ4LWIxYTctMWE0YWZkZjM3MGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqW0SmIqPKkIAMQJ4QSOiVo9hz+nWB8e+QiB 6/jvUix4ocfB8utv9cHV6uWN1wQk3kC0h1Yc8Xv64H31ID/EMOc4RS6Lm3Es8LCG RzeRnf0DoETDgZ1Yzx9E2nWMfBIF7nZYcI7QZleksK1UBHCXKAEhiFZ7sHPyiJPS auy9wS/holT+SssTf2vU28uCWyrWqLLxAxiFOQZeLOinWBsTsM/E70rSgql33o0Q cuvjsVFHH0tehFOYXMjtm2H8/QILH1vGvi1+xUjqN3dX3kt5Uf+2HQjJ/vEWAaXh OGncuKbx7/GVyGctftWbAkZEGTyaB2nmmuWw90DJyRLSmnK1HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhHwQTBmSVxW17bmHzRnm+Zc+LSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvNGQ5OGE4MDUtYWJlZC0z N2Y4LWEzYzItNGIzZWY0ZjZmN2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxiysMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAylRe0a6FYdy8ccY7DIXKBzW7eIyUYRIpcDkgDonaTuBC2SAGsxkYRZ D3DbsZkK6W8NTKnNUvKPLVaB6HJM8QL0fP8NlR0yyg3kEp9HXhoh8aIFoYIRNKza mFPsg21X6OdYbCe+f7cJ25NzTpb4OrozkaAhVsBM94nvnTh23q+8nX2ltQ0rinct hZ1wUbiHYfBfUOeK8KDlgrTikKstTWrzvFso3fHn+p0A+AuhnY2mTQxsLhKWLeRp aK9K3SzKlAScPUmD4jjCOpTtHX7q/R+LhvNVMABYP7y1UHACVVK+2wzG87eZHOIw Ecu/BlmGY0MXKm3wjI6CXZPhrGtRK70= -----END CERTIFICATE-----Generated at Thu Mar 26 06:13:40 2026 by rpki-client