$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/dded8e61-2654-367c-8bf2-b7c820c106cc.roa File: dded8e61-2654-367c-8bf2-b7c820c106cc.roa (raw, json) Hash identifier: hBQrGQfIGHIiaoSaM4oXQwu4or8Y/4Bc+mpR47rAxBw= Subject key identifier: 9C:F1:65:E7:D0:AE:FF:7F:FC:AA:15:36:A3:D9:D9:89:9A:7D:8E:A4 Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F4328584D2644B46EACAFCBFA4EFD08A0 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/dded8e61-2654-367c-8bf2-b7c820c106cc.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 16433 IP address blocks: 198.89.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:b4:6e:ac:af:cb:fa:4e:fd:08:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=58a10414-dc72-4d09-9ab0-380de595aa7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a7:be:07:5f:f6:5f:08:7f:c0:80:67:72:1a: 5c:49:df:4f:44:0f:35:c9:f7:34:20:b9:9a:cf:4e: f4:cc:29:d4:b4:78:70:4e:1c:8a:0a:6f:8d:92:2c: 9b:69:b3:4d:17:5c:50:b3:7d:cf:69:ed:df:83:24: e1:f3:49:6d:78:c9:b4:43:3b:24:64:ae:72:2c:aa: c2:04:d5:bc:c6:91:49:b8:12:25:80:29:61:58:e9: 66:40:46:92:01:fd:75:87:83:dc:20:be:c3:1f:f0: c8:6d:b5:76:27:57:35:68:3a:b4:50:f1:4a:f4:f0: 8d:3f:a8:56:18:fc:d1:6f:4d:bd:9c:f9:a4:b9:87: d3:b8:6c:9e:64:cf:91:6f:d5:89:c0:0c:bc:11:53: 6d:47:4f:af:69:4c:fd:64:9a:6a:93:10:16:91:e0: 1d:9a:2f:c5:d3:64:d2:02:70:10:70:30:52:96:d8: 11:80:ed:b0:49:f4:1f:9f:ff:21:b1:49:d3:86:7d: bf:6d:5e:d6:42:7e:12:08:b6:7e:bb:d7:4a:d3:a7: 3f:60:c4:e8:d6:82:db:87:4e:f5:bc:c5:f5:ca:df: db:2b:64:fe:f8:97:a3:55:b7:1f:f0:51:ab:b6:b0: 8b:0f:06:f1:69:a6:cf:57:65:bf:6b:0d:11:38:6e: e2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F1:65:E7:D0:AE:FF:7F:FC:AA:15:36:A3:D9:D9:89:9A:7D:8E:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/dded8e61-2654-367c-8bf2-b7c820c106cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 198.89.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:ad:6a:5d:d8:cb:c5:43:4f:f3:01:52:d6:e7:08:3b:2d:92: c2:e2:53:36:4f:a8:29:ed:0f:6a:a2:9b:69:60:76:92:7c:71: 7e:87:dd:9d:ec:f8:0a:9d:98:97:ce:4d:1b:f3:23:58:b1:45: 90:29:0f:f6:cd:77:b9:d2:1e:ae:9e:e2:3a:68:ac:59:e2:12: 15:75:65:5e:bc:cb:92:be:27:8c:c7:fb:44:3a:17:0e:35:a2: 4a:fe:e4:b5:48:81:e2:b5:fb:dd:6a:b8:d0:94:e9:f9:c3:54: a1:2a:39:0b:f2:bc:6e:24:6b:a7:a5:d4:81:27:5e:47:9d:6d: a0:74:1d:3b:3d:fd:be:a5:f3:c1:ee:87:24:fb:83:e1:9d:42: c3:a1:cc:eb:24:ab:ff:17:f8:4f:8b:74:07:fc:b5:13:65:ca: cf:4a:74:69:97:0a:39:d0:5f:0a:26:0e:09:5c:6a:e9:59:e9: 31:ae:36:a0:85:f9:2c:5d:49:9e:66:1c:f6:42:d6:a3:67:45: 03:75:e9:54:e6:b6:4d:af:d2:5d:66:2c:c4:61:04:32:6e:18: ae:63:80:77:e6:44:0c:f5:b3:4e:df:4a:0b:81:86:57:54:c8: 4a:ac:5f:fe:da:17:31:b0:3f:5d:6a:3b:a0:17:fe:17:12:50: 41:82:78:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mRLRurK/L+k79CKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk NThhMTA0MTQtZGM3Mi00ZDA5LTlhYjAtMzgwZGU1OTVhYTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoae+B1/2Xwh/wIBnchpcSd9PRA81yfc0ILma z070zCnUtHhwThyKCm+NkiybabNNF1xQs33Pae3fgyTh80lteMm0QzskZK5yLKrC BNW8xpFJuBIlgClhWOlmQEaSAf11h4PcIL7DH/DIbbV2J1c1aDq0UPFK9PCNP6hW GPzRb029nPmkuYfTuGyeZM+Rb9WJwAy8EVNtR0+vaUz9ZJpqkxAWkeAdmi/F02TS AnAQcDBSltgRgO2wSfQfn/8hsUnThn2/bV7WQn4SCLZ+u9dK06c/YMTo1oLbh071 vMX1yt/bK2T++JejVbcf8FGrtrCLDwbxaabPV2W/aw0ROG7iywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJzxZefQrv9//KoVNqPZ2YmafY6kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvZGRlZDhlNjEtMjY1NC0z NjdjLThiZjItYjdjODIwYzEwNmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxlkcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWtal3Yy8VDT/MBUtbnCDstksLiUzZPqCntD2qim2lgdpJ8cX6H3Z3s +AqdmJfOTRvzI1ixRZApD/bNd7nSHq6e4jporFniEhV1ZV68y5K+J4zH+0Q6Fw41 okr+5LVIgeK1+91quNCU6fnDVKEqOQvyvG4ka6el1IEnXkedbaB0HTs9/b6l88Hu hyT7g+GdQsOhzOskq/8X+E+LdAf8tRNlys9KdGmXCjnQXwomDglcaulZ6TGuNqCF +SxdSZ5mHPZC1qNnRQN16VTmtk2v0l1mLMRhBDJuGK5jgHfmRAz1s07fSguBhldU yEqsX/7aFzGwP11qO6AX/hcSUEGCeO4= -----END CERTIFICATE-----Generated at Thu Mar 26 12:57:50 2026 by rpki-client