$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/43d601dd-3d32-35d5-9f2e-d40b27897027.roa File: 43d601dd-3d32-35d5-9f2e-d40b27897027.roa (raw, json) Hash identifier: rYD1oL+NEqLmu6e67Hi5yCl3VCJDZIWnP8K4ONOnvIU= Subject key identifier: 7F:03:FF:D2:16:64:DE:EB:9B:22:37:2A:61:FE:3C:5C:A9:7B:61:C7 Certificate issuer: /CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4 Certificate serial: 010D0C9F4328584D44FA65FCE0EA2441EBE4F380 Authority key identifier: 0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/43d601dd-3d32-35d5-9f2e-d40b27897027.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 30383 IP address blocks: 198.208.14.0/24 maxlen: 24 198.208.15.0/24 maxlen: 24 198.208.115.0/24 maxlen: 24 198.208.119.0/24 maxlen: 24 198.208.128.0/24 maxlen: 24 198.208.135.0/24 maxlen: 24 198.208.142.0/24 maxlen: 24 198.208.144.0/24 maxlen: 24 198.208.149.0/24 maxlen: 24 198.208.156.0/23 maxlen: 23 198.208.161.0/24 maxlen: 24 198.208.163.0/24 maxlen: 24 198.208.165.0/24 maxlen: 24 198.208.170.0/24 maxlen: 24 198.208.172.0/23 maxlen: 23 198.208.176.0/24 maxlen: 24 198.208.179.0/24 maxlen: 24 198.208.180.0/24 maxlen: 24 198.208.182.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:65:fc:e0:ea:24:41:eb:e4:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=acbecfae-a929-4f4e-b15f-ccf7060e9c33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e2:62:d4:26:c3:c6:57:47:4b:b3:87:f5:e8: 1c:75:fc:86:86:c1:68:fe:c6:76:23:bd:a7:34:e2: 34:49:8a:7b:a5:9f:fe:8c:fe:49:8e:da:a2:e0:8d: 9a:19:c2:5c:af:cb:db:7b:ba:8d:25:17:88:02:fc: 9b:f9:0e:21:c0:2c:5e:27:5b:26:ee:21:3b:1d:1a: da:e4:6a:3b:18:34:c8:ec:13:8d:f2:a8:47:18:42: c1:65:8e:02:ee:f7:96:64:5f:5e:8f:da:71:f5:66: 3a:9b:ac:57:2d:98:43:c4:ff:2f:50:3b:80:31:7b: 58:69:58:29:77:79:4f:c1:3c:6e:27:a5:b1:c6:9d: 66:0e:99:ac:0f:94:16:82:a3:96:da:0b:91:b3:09: 7e:f4:8b:e7:a8:fa:27:45:ab:9c:c9:06:6b:4d:16: 3c:63:0f:f5:23:02:f2:97:a4:59:4a:b5:d6:b9:04: 27:67:f0:26:79:86:f0:c7:bc:c6:11:d2:d9:fe:e4: e3:9b:23:5d:30:b7:f1:bc:85:07:a7:f0:27:ed:ed: 91:3c:60:64:92:10:e9:e8:80:df:c9:21:68:d9:6a: 5e:0e:b4:36:bc:10:25:9f:fd:6d:7b:29:ad:92:ab: 83:87:8f:d1:26:bc:48:b2:56:fc:cb:4f:88:5b:62: 45:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:03:FF:D2:16:64:DE:EB:9B:22:37:2A:61:FE:3C:5C:A9:7B:61:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/43d601dd-3d32-35d5-9f2e-d40b27897027.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl X509v3 Authority Key Identifier: keyid:0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer sbgp-ipAddrBlock: critical IPv4: 198.208.14.0/23 198.208.115.0/24 198.208.119.0/24 198.208.128.0/24 198.208.135.0/24 198.208.142.0/24 198.208.144.0/24 198.208.149.0/24 198.208.156.0/23 198.208.161.0/24 198.208.163.0/24 198.208.165.0/24 198.208.170.0/24 198.208.172.0/23 198.208.176.0/24 198.208.179.0-198.208.180.255 198.208.182.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:57:9c:bc:bd:12:38:14:ef:53:c7:47:14:fa:96:0a:0b:a2: 15:c1:2e:9c:3a:60:a5:49:61:77:69:5a:69:9c:f7:9f:bc:b2: 33:3e:70:86:95:60:95:e8:3e:3e:e7:39:8b:db:ff:a3:c6:1f: 52:b0:2a:db:98:7e:a8:9d:b5:61:9a:f4:f5:27:a0:b9:f6:8c: 2c:86:82:3c:f6:8c:68:51:12:08:e9:8b:ac:d3:c2:db:8a:cc: d3:e3:08:f4:e0:24:cb:d1:88:aa:a7:45:23:87:de:cd:59:a1: 7e:fc:ee:ac:2a:0b:48:64:06:1d:c2:c4:2f:a4:b7:71:68:f1: 44:ed:89:2a:8a:65:cf:f4:d3:a7:6f:a9:3a:8a:7e:3c:66:bf: fe:4b:ce:4b:f2:28:8f:2a:04:c5:5a:ac:1a:6e:33:52:67:3f: b4:07:d7:95:ab:82:02:3f:c3:a0:b6:99:b8:e3:be:3c:57:13: b3:f3:f7:1c:53:29:50:7a:44:ab:27:85:32:fe:56:fd:a3:16: 1c:a4:12:5a:90:49:96:21:ee:18:0d:9e:15:41:6f:4e:c6:cb: 47:ab:d9:4d:9d:90:80:ba:86:b2:a9:ec:de:d3:28:3b:44:ca: 6e:17:fe:6c:3d:99:c0:f1:da:3e:b8:08:bb:31:ef:f6:5f:02: b1:24:cd:93 -----BEGIN CERTIFICATE----- MIIGrDCCBZSgAwIBAgIUAQ0Mn0MoWE1E+mX84OokQevk84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkNjdlNTQtN2RkNy00MGJhLWFmYTMtNWU4YzQ5NTRl M2U0MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk YWNiZWNmYWUtYTkyOS00ZjRlLWIxNWYtY2NmNzA2MGU5YzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eJi1CbDxldHS7OH9egcdfyGhsFo/sZ2I72n NOI0SYp7pZ/+jP5Jjtqi4I2aGcJcr8vbe7qNJReIAvyb+Q4hwCxeJ1sm7iE7HRra 5Go7GDTI7BON8qhHGELBZY4C7veWZF9ej9px9WY6m6xXLZhDxP8vUDuAMXtYaVgp d3lPwTxuJ6Wxxp1mDpmsD5QWgqOW2guRswl+9IvnqPonRaucyQZrTRY8Yw/1IwLy l6RZSrXWuQQnZ/AmeYbwx7zGEdLZ/uTjmyNdMLfxvIUHp/An7e2RPGBkkhDp6IDf ySFo2WpeDrQ2vBAln/1teymtkquDh4/RJrxIslb8y0+IW2JFdwIDAQABo4IDvjCC A7owHQYDVR0OBBYEFH8D/9IWZN7rmyI3KmH+PFype2HHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2 N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThjNDk1NGUzZTQvNDNkNjAxZGQtM2QzMi0z NWQ1LTlmMmUtZDQwYjI3ODk3MDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDdkNjdlNTQtN2RkNy00MGJhLWFm YTMtNWU4YzQ5NTRlM2U0L2Q3ZDY3ZTU0LTdkZDctNDBiYS1hZmEzLTVlOGM0OTU0 ZTNlNC5jcmwwHwYDVR0jBBgwFoAUDncEDXJF/Vqw2VztD25SNx11Lh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThj NDk1NGUzZTQuY2VyMIGHBggrBgEFBQcBBwEB/wR4MHYwdAQCAAEwbgMEAcbQDgME AMbQcwMEAMbQdwMEAMbQgAMEAMbQhwMEAMbQjgMEAMbQkAMEAMbQlQMEAcbQnAME AMbQoQMEAMbQowMEAMbQpQMEAMbQqgMEAcbQrAMEAMbQsDAMAwQAxtCzAwQAxtC0 AwQBxtC2MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBAD1XnLy9EjgU71PHRxT6lgoLohXBLpw6YKVJYXdpWmmc 95+8sjM+cIaVYJXoPj7nOYvb/6PGH1KwKtuYfqidtWGa9PUnoLn2jCyGgjz2jGhR Egjpi6zTwtuKzNPjCPTgJMvRiKqnRSOH3s1ZoX787qwqC0hkBh3CxC+kt3Fo8UTt iSqKZc/006dvqTqKfjxmv/5LzkvyKI8qBMVarBpuM1JnP7QH15WrggI/w6C2mbjj vjxXE7Pz9xxTKVB6RKsnhTL+Vv2jFhykElqQSZYh7hgNnhVBb07Gy0er2U2dkIC6 hrKp7N7TKDtEym4X/mw9mcDx2j64CLsx7/ZfArEkzZM= -----END CERTIFICATE-----Generated at Thu Mar 26 14:25:49 2026 by rpki-client