$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/a8b89a81-efd7-3c03-9f7a-77ce8e997e84.roa File: a8b89a81-efd7-3c03-9f7a-77ce8e997e84.roa (raw, json) Hash identifier: Lh7otW6eeb1+B6VOFbu7/Lvb2+rwScpsTN2MDYifDAM= Subject key identifier: 24:99:7E:4D:BE:0C:50:93:53:28:16:6F:F5:FF:69:C7:21:26:32:10 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584D1B1A19BB1762A2521C3EBB80 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/a8b89a81-efd7-3c03-9f7a-77ce8e997e84.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 137443 IP address blocks: 107.151.244.0/22 maxlen: 24 198.44.170.0/24 maxlen: 24 198.44.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:19:bb:17:62:a2:52:1c:3e:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=083a199b-06a9-4a4b-b112-9db43600c8b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:73:a0:6e:81:63:e6:e4:c8:02:4f:0f:c1:8b: a8:e3:be:b3:56:44:5f:92:ad:a5:43:d6:6a:71:e7: 5b:cf:fb:40:b9:72:9e:56:a5:48:98:cb:9e:19:16: 5b:39:30:e3:ae:00:10:66:3c:f8:84:bd:f4:d2:ec: bd:77:9e:03:a8:83:8f:bb:fb:0c:fb:1e:b3:0d:99: 0f:3a:d4:49:6d:21:25:4c:e6:d3:a0:1a:bd:09:63: 5f:37:70:64:10:9d:3d:50:19:58:4c:16:77:06:fd: 4e:85:ad:98:f8:ff:b9:6c:e1:1a:89:38:1c:f7:3f: 98:36:6e:c2:f9:11:f3:93:35:d2:2e:70:3b:f2:4e: d3:ab:59:6d:a3:bf:a4:f9:7e:d9:22:98:9c:95:75: 40:43:18:53:07:19:1d:bb:75:29:f0:c0:40:89:e1: 4c:c0:ad:53:21:3b:4f:bc:3d:dc:85:3a:8c:1d:b0: ca:7a:28:0a:17:73:94:df:e1:ba:6e:df:8b:47:13: 30:6a:55:9d:df:b3:0c:33:64:84:a7:c5:aa:59:ba: 64:cb:2b:b7:a1:b3:e3:be:18:b5:fe:ff:b7:0c:ec: 84:76:3f:00:e9:de:50:77:30:4a:a0:3e:d0:d1:65: ed:ba:75:97:2a:f5:be:7d:31:24:95:60:26:89:5d: be:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:99:7E:4D:BE:0C:50:93:53:28:16:6F:F5:FF:69:C7:21:26:32:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/a8b89a81-efd7-3c03-9f7a-77ce8e997e84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 107.151.244.0/22 198.44.170.0/24 198.44.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:69:bd:32:0a:c9:2b:d0:4a:b5:de:98:f8:46:08:49:ec:78: 2c:82:88:63:66:00:83:95:9b:82:d7:87:77:d0:55:29:0f:f2: 8c:26:e6:a6:88:11:c9:a6:73:0e:40:35:e4:1f:a8:c1:53:ff: 23:0f:7f:f7:6c:4f:c2:22:cc:14:a8:3d:47:7e:36:9e:dd:2e: 21:b6:20:d5:84:86:26:59:fd:cb:d5:81:f8:ca:34:69:66:12: 63:c2:94:f8:fe:85:ef:32:f1:32:1e:af:c6:2c:a3:c5:cc:94: 30:d8:df:a3:b2:6a:13:16:f4:4e:4c:4d:6f:55:3d:22:b4:64: 51:35:1b:d5:92:5e:aa:ca:b5:db:5c:9c:de:11:2e:6c:b3:e7: 7e:b5:05:4f:9f:c0:a4:c5:e9:5f:da:ab:02:43:34:03:35:e6: 5f:0c:f2:01:ed:e8:8f:0f:ab:14:e3:cf:61:d9:1e:a7:24:76: 0c:63:ca:65:d4:19:7d:fe:57:f3:0e:f5:85:73:b8:c3:a2:17: 9a:c9:78:74:e8:93:b6:82:1e:29:43:3d:ce:18:99:4b:f1:9f: 94:f5:b3:ca:4f:35:d0:f5:92:63:49:c7:46:04:6d:73:44:b3: 69:15:38:6b:26:db:b5:ae:05:1d:01:a2:f0:61:16:5c:2d:23: 5d:6b:38:5c -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE0bGhm7F2KiUhw+u4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk MDgzYTE5OWItMDZhOS00YTRiLWIxMTItOWRiNDM2MDBjOGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3OgboFj5uTIAk8PwYuo476zVkRfkq2lQ9Zq cedbz/tAuXKeVqVImMueGRZbOTDjrgAQZjz4hL300uy9d54DqIOPu/sM+x6zDZkP OtRJbSElTObToBq9CWNfN3BkEJ09UBlYTBZ3Bv1Oha2Y+P+5bOEaiTgc9z+YNm7C +RHzkzXSLnA78k7Tq1lto7+k+X7ZIpiclXVAQxhTBxkdu3Up8MBAieFMwK1TITtP vD3chTqMHbDKeigKF3OU3+G6bt+LRxMwalWd37MMM2SEp8WqWbpkyyu3obPjvhi1 /v+3DOyEdj8A6d5QdzBKoD7Q0WXtunWXKvW+fTEklWAmiV2+IQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFCSZfk2+DFCTUygWb/X/acchJjIQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvYThiODlhODEtZWZkNy0z YzAzLTlmN2EtNzdjZThlOTk3ZTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCa5f0AwQA xiyqAwQCxiywMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAHppvTIKySvQSrXemPhGCEnseCyCiGNmAIOVm4LX h3fQVSkP8owm5qaIEcmmcw5ANeQfqMFT/yMPf/dsT8IizBSoPUd+Np7dLiG2INWE hiZZ/cvVgfjKNGlmEmPClPj+he8y8TIer8Yso8XMlDDY36OyahMW9E5MTW9VPSK0 ZFE1G9WSXqrKtdtcnN4RLmyz5361BU+fwKTF6V/aqwJDNAM15l8M8gHt6I8PqxTj z2HZHqckdgxjymXUGX3+V/MO9YVzuMOiF5rJeHTok7aCHilDPc4YmUvxn5T1s8pP NdD1kmNJx0YEbXNEs2kVOGsm27WuBR0BovBhFlwtI11rOFw= -----END CERTIFICATE-----Generated at Thu Mar 26 06:13:50 2026 by rpki-client