$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/8664bab9-f4cb-3429-aa9c-b577fdb1a1a7.roa File: 8664bab9-f4cb-3429-aa9c-b577fdb1a1a7.roa (raw, json) Hash identifier: 4ee1jYsZQQzAr8Pfp+LkjkpwE+JdEtduykdox/CVYkc= Subject key identifier: 0D:AE:F4:4F:45:3F:B1:E9:34:92:68:10:4B:00:46:D6:29:D8:C0:81 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584D20AF40328B13D68D13796CE0 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/8664bab9-f4cb-3429-aa9c-b577fdb1a1a7.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 40779 IP address blocks: 198.44.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:40:32:8b:13:d6:8d:13:79:6c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=38e7d8f6-7df3-4cfc-b6a4-cc47d00fbe17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b5:d7:71:fa:eb:ea:71:5f:21:c4:3c:63:e2: 61:2b:11:74:c0:2c:b9:43:ae:9e:19:b8:de:b4:32: 9f:51:83:7d:8c:bd:7c:ee:f2:6d:44:15:b2:5a:40: a0:27:4b:65:94:98:a9:7c:6a:93:3a:9f:13:41:d8: fe:52:7c:00:a1:a8:de:bc:18:1a:7f:12:a0:41:5a: 52:2c:dd:49:c4:d5:34:b0:b4:9b:e9:2c:39:a8:79: 5c:a4:07:32:0e:31:78:23:3a:b0:22:01:66:e1:38: d2:37:21:7e:37:d5:a5:da:54:43:af:1e:6a:60:18: ce:04:46:56:75:b5:f5:3e:51:79:8f:c1:b9:04:86: b8:6a:84:ca:cd:25:7d:1b:5d:2b:d1:c9:0a:24:c5: 68:e7:58:71:1d:40:d0:0a:21:03:61:99:09:4d:90: 8a:28:53:34:78:6c:77:ad:dd:5a:f6:d9:96:70:6c: 80:f3:16:fc:d3:7f:59:f9:73:86:b2:2c:99:3f:20: ac:13:2a:a1:1d:10:6c:fb:63:02:e1:20:8f:a1:8d: ea:f8:83:d6:26:6f:94:a5:d1:af:59:e6:ee:db:38: 8f:f3:36:af:f7:19:a5:3f:1b:f0:7e:f5:e7:e7:5b: 29:e9:d5:ef:cf:2f:ec:db:ad:01:88:41:ba:8b:14: 6e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:AE:F4:4F:45:3F:B1:E9:34:92:68:10:4B:00:46:D6:29:D8:C0:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/8664bab9-f4cb-3429-aa9c-b577fdb1a1a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 198.44.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:73:e1:30:4e:44:8a:44:44:b7:3a:81:ce:66:19:38:6a:45: 57:a6:de:58:bf:32:56:cd:14:ff:f9:4c:94:24:4b:20:96:7f: f9:f1:d5:77:f9:79:e0:97:5c:0d:d7:f6:ba:52:81:7e:64:4b: e5:b4:44:e7:e0:4d:06:88:f9:90:cb:8e:f6:7f:35:b2:06:da: 07:a2:e0:78:2f:fc:96:4f:74:62:64:67:21:af:55:3c:20:66: e9:09:bb:7a:66:84:a7:56:59:e8:b9:89:9f:0f:d1:34:9c:86: bf:23:8d:d3:a0:19:d4:91:e8:fb:ce:9c:47:07:17:1d:de:3f: 3b:1d:3a:44:d4:f9:e1:ae:3b:ae:85:7d:df:58:ce:57:32:a0: cb:a6:41:1e:25:6c:31:e7:75:14:c3:ae:37:28:02:8c:64:f0: 5f:07:ce:1f:1b:89:ce:15:7a:f8:d4:97:b1:d4:31:e6:a8:87: 9f:35:04:b2:76:e6:35:46:6e:f7:15:b1:3e:84:b0:49:2f:9a: 51:53:3c:15:63:46:b2:6c:36:66:fc:6a:24:00:94:51:79:16: bc:ce:3a:ae:d4:c1:54:d7:4a:5b:7b:5d:a4:e7:10:31:d1:84: 1b:0a:6e:c9:cc:35:0d:88:58:fb:32:c1:04:96:8d:ef:6b:53: 9b:28:3a:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gr0AyixPWjRN5bOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk MzhlN2Q4ZjYtN2RmMy00Y2ZjLWI2YTQtY2M0N2QwMGZiZTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbXXcfrr6nFfIcQ8Y+JhKxF0wCy5Q66eGbje tDKfUYN9jL187vJtRBWyWkCgJ0tllJipfGqTOp8TQdj+UnwAoajevBgafxKgQVpS LN1JxNU0sLSb6Sw5qHlcpAcyDjF4IzqwIgFm4TjSNyF+N9Wl2lRDrx5qYBjOBEZW dbX1PlF5j8G5BIa4aoTKzSV9G10r0ckKJMVo51hxHUDQCiEDYZkJTZCKKFM0eGx3 rd1a9tmWcGyA8xb8039Z+XOGsiyZPyCsEyqhHRBs+2MC4SCPoY3q+IPWJm+UpdGv Webu2ziP8zav9xmlPxvwfvXn51sp6dXvzy/s260BiEG6ixRuZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA2u9E9FP7HpNJJoEEsARtYp2MCBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvODY2NGJhYjktZjRjYi0z NDI5LWFhOWMtYjU3N2ZkYjFhMWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxiy4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRz4TBORIpERLc6gc5mGThqRVem3li/MlbNFP/5TJQkSyCWf/nx1Xf5 eeCXXA3X9rpSgX5kS+W0ROfgTQaI+ZDLjvZ/NbIG2gei4Hgv/JZPdGJkZyGvVTwg ZukJu3pmhKdWWei5iZ8P0TSchr8jjdOgGdSR6PvOnEcHFx3ePzsdOkTU+eGuO66F fd9YzlcyoMumQR4lbDHndRTDrjcoAoxk8F8Hzh8bic4VevjUl7HUMeaoh581BLJ2 5jVGbvcVsT6EsEkvmlFTPBVjRrJsNmb8aiQAlFF5FrzOOq7UwVTXSlt7XaTnEDHR hBsKbsnMNQ2IWPsywQSWje9rU5soOps= -----END CERTIFICATE-----Generated at Thu Mar 26 06:30:22 2026 by rpki-client