$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/3b17e899-4e7e-3822-926f-bb9ab91e287d.roa File: 3b17e899-4e7e-3822-926f-bb9ab91e287d.roa (raw, json) Hash identifier: e9fHAKBQQqeXfr/+5Mj++7IUtScC3Abw5y+Nv1kIjnQ= Subject key identifier: B8:F6:81:9B:52:A5:5C:16:92:7C:C2:88:C3:DB:31:05:14:6B:28:D6 Certificate issuer: /CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4 Certificate serial: 010D0C9F4328584D492A47D45B740DB778D116C0 Authority key identifier: 0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/3b17e899-4e7e-3822-926f-bb9ab91e287d.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 30383 IP address blocks: 198.208.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:47:d4:5b:74:0d:b7:78:d1:16:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=f512683e-3131-4431-9108-0983cb584d6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a8:87:99:75:5d:4c:b7:42:0d:e1:fc:19:49: fa:52:1f:6d:66:69:83:a1:24:04:69:f7:44:a1:00: ee:5d:56:52:af:48:3b:5b:f5:ba:c9:0f:6e:b1:17: 36:60:ab:14:5b:2f:fd:7a:83:42:61:75:2f:aa:01: 8a:87:a8:de:36:85:d2:7d:a7:f4:2f:b7:01:d2:d8: 6d:42:1f:8c:cf:bd:97:51:56:68:64:c8:27:cd:f1: 4b:51:56:b5:0b:fa:71:41:bc:75:34:72:4f:bc:1f: 0c:d4:ec:36:cb:18:aa:2b:37:99:59:15:48:4c:5e: 28:3b:44:94:66:ab:2f:04:a3:43:fb:44:84:c0:86: 5a:1e:48:71:26:06:d8:51:76:31:e3:00:cf:20:7e: dc:71:93:f0:71:1e:e7:d2:d7:95:ed:ff:f7:da:36: 1f:74:80:b1:11:43:aa:0d:77:0a:c4:3e:65:ec:bc: 22:9e:e8:fd:38:ea:73:0c:0c:71:76:d2:75:31:15: e0:b7:fb:db:fb:82:85:d5:d2:28:2f:a1:d1:73:9f: 96:90:ab:d7:68:41:83:c9:fd:e4:a1:29:5b:32:2e: 73:52:c0:91:80:1d:0e:76:e7:23:25:be:b3:8f:49: 20:39:32:5f:11:12:81:44:1d:6c:d0:84:5b:03:22: 34:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:F6:81:9B:52:A5:5C:16:92:7C:C2:88:C3:DB:31:05:14:6B:28:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/3b17e899-4e7e-3822-926f-bb9ab91e287d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl X509v3 Authority Key Identifier: keyid:0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer sbgp-ipAddrBlock: critical IPv4: 198.208.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:d7:26:04:6e:80:c5:82:7f:89:51:30:ae:48:b8:27:6b:61: ef:fb:57:ac:62:9d:e7:f4:cf:89:e9:75:92:48:9b:0e:b2:8f: e6:60:85:5b:4c:a9:53:1b:7e:e3:ac:04:d5:2a:65:4a:53:6c: f1:1e:d2:e3:bd:da:26:96:00:0c:31:60:26:6c:c8:b5:3f:57: b0:4c:1c:f0:c2:c1:8c:17:ab:f2:fb:59:2e:bf:2e:2c:be:f0: 61:c4:2d:46:b6:c4:66:40:54:27:df:c6:ee:0e:97:69:d0:56: 80:7b:82:15:ea:a4:65:ba:dc:28:97:03:6b:df:88:4c:82:c7: 1d:83:ad:33:08:96:0f:76:7b:4d:fb:14:76:da:e4:91:08:0c: e7:f2:ca:2a:78:35:5e:b3:49:bf:5e:05:f3:6c:a8:29:b9:d5: 95:be:57:15:76:60:ac:fe:ee:b4:45:dd:98:d3:66:50:7c:28: c9:db:dc:ad:c9:6f:29:60:53:92:0b:b3:6c:e3:65:40:2e:6d: 26:7e:a1:68:cb:8c:62:2a:20:1b:b8:c2:3a:5f:56:b7:e0:16: e9:71:54:60:f9:51:63:6b:80:cd:22:74:4b:2c:82:c0:81:68: b6:f4:00:59:ec:4c:d3:91:98:6b:ca:36:d4:1a:9e:01:63:08: 2e:77:6a:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKkfUW3QNt3jRFsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkNjdlNTQtN2RkNy00MGJhLWFmYTMtNWU4YzQ5NTRl M2U0MB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk ZjUxMjY4M2UtMzEzMS00NDMxLTkxMDgtMDk4M2NiNTg0ZDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKiHmXVdTLdCDeH8GUn6Uh9tZmmDoSQEafdE oQDuXVZSr0g7W/W6yQ9usRc2YKsUWy/9eoNCYXUvqgGKh6jeNoXSfaf0L7cB0tht Qh+Mz72XUVZoZMgnzfFLUVa1C/pxQbx1NHJPvB8M1Ow2yxiqKzeZWRVITF4oO0SU ZqsvBKND+0SEwIZaHkhxJgbYUXYx4wDPIH7ccZPwcR7n0teV7f/32jYfdICxEUOq DXcKxD5l7Lwinuj9OOpzDAxxdtJ1MRXgt/vb+4KF1dIoL6HRc5+WkKvXaEGDyf3k oSlbMi5zUsCRgB0OducjJb6zj0kgOTJfERKBRB1s0IRbAyI0OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLj2gZtSpVwWknzCiMPbMQUUayjWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2 N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThjNDk1NGUzZTQvM2IxN2U4OTktNGU3ZS0z ODIyLTkyNmYtYmI5YWI5MWUyODdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDdkNjdlNTQtN2RkNy00MGJhLWFm YTMtNWU4YzQ5NTRlM2U0L2Q3ZDY3ZTU0LTdkZDctNDBiYS1hZmEzLTVlOGM0OTU0 ZTNlNC5jcmwwHwYDVR0jBBgwFoAUDncEDXJF/Vqw2VztD25SNx11Lh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThj NDk1NGUzZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxtAUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrXJgRugMWCf4lRMK5IuCdrYe/7V6xinef0z4npdZJImw6yj+ZghVtM qVMbfuOsBNUqZUpTbPEe0uO92iaWAAwxYCZsyLU/V7BMHPDCwYwXq/L7WS6/Liy+ 8GHELUa2xGZAVCffxu4Ol2nQVoB7ghXqpGW63CiXA2vfiEyCxx2DrTMIlg92e037 FHba5JEIDOfyyip4NV6zSb9eBfNsqCm51ZW+VxV2YKz+7rRF3ZjTZlB8KMnb3K3J bylgU5ILs2zjZUAubSZ+oWjLjGIqIBu4wjpfVrfgFulxVGD5UWNrgM0idEssgsCB aLb0AFnsTNORmGvKNtQangFjCC53atU= -----END CERTIFICATE-----Generated at Thu Mar 26 11:13:56 2026 by rpki-client