$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/958b8918-f172-31ae-a424-106ec0eef078.roa File: 958b8918-f172-31ae-a424-106ec0eef078.roa (raw, json) Hash identifier: tLIh1ZiwmJA83VTLPWbh3gynomDgl1grWzgOBdSgAjM= Subject key identifier: CA:E7:9F:9C:A8:40:D2:31:D6:CC:D2:AE:7D:36:E9:41:57:EE:23:F8 Certificate issuer: /CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4 Certificate serial: 010D0C9F4328584D3DFFA93921BBB9AC580BDF80 Authority key identifier: 0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/958b8918-f172-31ae-a424-106ec0eef078.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 56274 IP address blocks: 198.208.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:a9:39:21:bb:b9:ac:58:0b:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=2c147d82-b1c0-4a35-8635-900c38275e29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5c:1e:5c:8d:58:a5:df:d4:b4:a3:fa:18:88: d9:8d:b4:fd:78:44:9d:78:07:ba:1c:ee:97:6f:9e: 9a:b4:48:c0:24:7b:01:e9:64:b5:1d:21:54:6e:9d: 98:5b:51:5e:dc:d3:02:7d:88:6f:b8:c8:f2:b3:b8: 5a:c2:e4:e2:70:06:21:2b:e4:a7:f9:10:5e:17:63: 2c:22:7b:73:51:a9:7d:33:fd:c0:65:d4:fe:67:a3: a9:b6:c8:33:72:46:43:f1:7e:86:17:39:2a:b8:1e: 4a:05:d2:1a:53:d3:69:b2:49:86:95:54:d9:bd:4c: b2:8b:17:80:b5:fa:d3:6b:b5:b6:cf:1b:c5:43:27: e9:0f:db:fb:79:d3:be:cf:32:49:c4:30:b4:79:9e: cb:2e:10:e1:06:71:57:e8:09:81:64:41:bc:fb:51: 89:c4:65:c2:56:62:3f:f1:ae:6c:e7:e9:57:4b:0c: 9b:1f:68:bf:b4:2c:db:6d:7e:04:0a:af:a4:f9:77: ab:d2:1d:9f:91:32:08:fa:e4:4e:84:71:38:5f:6c: ff:d3:b5:08:74:01:2c:84:70:0b:73:67:3c:73:50: 20:3f:55:30:db:6a:37:6d:9e:cb:90:fb:65:65:5d: b0:32:37:e0:6b:1e:79:cd:37:0e:11:d2:17:70:1b: 15:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E7:9F:9C:A8:40:D2:31:D6:CC:D2:AE:7D:36:E9:41:57:EE:23:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/958b8918-f172-31ae-a424-106ec0eef078.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl X509v3 Authority Key Identifier: keyid:0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer sbgp-ipAddrBlock: critical IPv4: 198.208.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:0b:87:6c:15:c2:29:33:85:ee:96:e6:70:75:34:e3:9e:04: 6b:6e:e7:65:92:e8:cc:bd:4e:97:bd:6e:f4:16:eb:10:59:40: 4d:ca:70:a3:f4:9f:ba:06:f2:d0:96:d5:1b:1f:0d:b7:a6:12: a3:c2:ab:80:b8:d3:dd:f4:e4:e1:22:d7:69:8d:ab:96:0f:d0: a9:ca:d2:1f:22:23:84:a0:25:00:98:89:48:ea:95:a8:16:cc: 8b:d4:66:a8:7a:23:c9:4c:a3:d9:12:91:40:ea:a9:c5:bd:a0: 25:4b:85:71:37:60:88:30:45:18:39:6d:94:57:64:e9:1a:17: da:36:8f:1b:b7:2d:a3:6d:59:4e:f7:cc:89:5a:08:1f:ad:40: 18:39:bb:99:af:db:38:84:5b:46:20:b7:17:4e:e8:1f:c1:0f: 78:ec:ef:fc:24:7b:30:7f:84:b4:3b:fc:20:7a:67:ba:ee:c8: e1:fd:b2:31:38:02:29:d4:21:01:c1:e3:1e:a7:1e:e7:c0:f3: a8:34:42:9a:4f:b3:06:da:09:13:2f:62:40:14:fe:06:3c:7d: 22:0b:3e:df:14:db:bc:ce:d0:20:99:5e:87:df:65:e4:aa:aa: 69:5b:4b:f6:fe:1d:69:25:59:0f:97:54:ba:6c:15:99:9d:c6: ca:40:83:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/6k5Ibu5rFgL34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkNjdlNTQtN2RkNy00MGJhLWFmYTMtNWU4YzQ5NTRl M2U0MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk MmMxNDdkODItYjFjMC00YTM1LTg2MzUtOTAwYzM4Mjc1ZTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolweXI1Ypd/UtKP6GIjZjbT9eESdeAe6HO6X b56atEjAJHsB6WS1HSFUbp2YW1Fe3NMCfYhvuMjys7hawuTicAYhK+Sn+RBeF2Ms IntzUal9M/3AZdT+Z6OptsgzckZD8X6GFzkquB5KBdIaU9NpskmGlVTZvUyyixeA tfrTa7W2zxvFQyfpD9v7edO+zzJJxDC0eZ7LLhDhBnFX6AmBZEG8+1GJxGXCVmI/ 8a5s5+lXSwybH2i/tCzbbX4ECq+k+Xer0h2fkTII+uROhHE4X2z/07UIdAEshHAL c2c8c1AgP1Uw22o3bZ7LkPtlZV2wMjfgax55zTcOEdIXcBsVZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMrnn5yoQNIx1szSrn026UFX7iP4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2 N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThjNDk1NGUzZTQvOTU4Yjg5MTgtZjE3Mi0z MWFlLWE0MjQtMTA2ZWMwZWVmMDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDdkNjdlNTQtN2RkNy00MGJhLWFm YTMtNWU4YzQ5NTRlM2U0L2Q3ZDY3ZTU0LTdkZDctNDBiYS1hZmEzLTVlOGM0OTU0 ZTNlNC5jcmwwHwYDVR0jBBgwFoAUDncEDXJF/Vqw2VztD25SNx11Lh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThj NDk1NGUzZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxtAmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMLh2wVwikzhe6W5nB1NOOeBGtu52WS6My9Tpe9bvQW6xBZQE3KcKP0 n7oG8tCW1RsfDbemEqPCq4C409305OEi12mNq5YP0KnK0h8iI4SgJQCYiUjqlagW zIvUZqh6I8lMo9kSkUDqqcW9oCVLhXE3YIgwRRg5bZRXZOkaF9o2jxu3LaNtWU73 zIlaCB+tQBg5u5mv2ziEW0YgtxdO6B/BD3js7/wkezB/hLQ7/CB6Z7ruyOH9sjE4 AinUIQHB4x6nHufA86g0QppPswbaCRMvYkAU/gY8fSILPt8U27zO0CCZXoffZeSq qmlbS/b+HWklWQ+XVLpsFZmdxspAg+A= -----END CERTIFICATE-----Generated at Thu Mar 26 13:36:20 2026 by rpki-client