$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/dfec57e8-4be0-3a83-b962-789595b0a605.roa File: dfec57e8-4be0-3a83-b962-789595b0a605.roa (raw, json) Hash identifier: jrRhTWHqsXmFejSHqXI67SJkgexZz7Z05lbpO9DxJZ0= Subject key identifier: 39:4F:64:2F:5C:3E:6E:AF:3E:06:42:1C:6B:46:1A:CF:21:37:C6:B4 Certificate issuer: /CN=6acf8afa-6cb1-4c9d-84c7-5ee8845003d1 Certificate serial: 010D0C9F4328584D300A4C0F8F0905C869EFB1E0 Authority key identifier: D8:2C:17:54:D8:10:8C:24:31:5E:DA:EA:32:BD:49:1C:54:5E:95:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/dfec57e8-4be0-3a83-b962-789595b0a605.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 22987 IP address blocks: 198.52.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:4c:0f:8f:09:05:c8:69:ef:b1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6acf8afa-6cb1-4c9d-84c7-5ee8845003d1 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=31ab154f-b25b-4a50-9bcd-6384f70eee26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:31:20:32:9b:8a:6a:df:4e:2d:10:7b:97:4e: 63:13:80:e6:6c:1b:b4:38:2b:48:86:da:13:68:7d: a8:9a:d1:3b:5c:21:51:09:06:ca:e1:b7:4e:92:ad: 98:ca:39:fc:aa:af:85:15:ea:b2:42:74:fc:a1:6b: 80:5e:f0:88:78:a5:1d:44:3f:98:05:95:dc:f5:76: b4:e4:da:2b:2a:22:69:68:e0:fb:0c:e3:2a:a3:17: fa:73:4b:79:bc:ad:60:2e:12:d3:46:2e:9f:f8:31: 12:9b:e0:eb:f4:e0:c1:d2:12:a8:29:6f:82:71:ab: 9f:af:0e:97:4a:b4:6b:63:8a:53:f6:cd:e6:2c:12: db:40:3a:96:c2:82:fa:84:a5:bc:6a:04:b7:43:99: 47:44:c1:b9:d3:e9:76:b5:3d:49:95:56:08:7d:7d: f5:ab:66:6e:e9:58:16:f2:12:fa:c1:6e:b7:f2:d8: 20:29:6c:d2:81:07:2c:9e:0f:88:fc:fb:ad:6a:89: 99:91:74:f8:20:86:23:f6:bf:be:9f:16:9e:95:a0: 1b:f6:eb:f5:00:da:42:3c:4d:44:8c:c0:5f:ab:21: 96:b7:85:91:90:65:8f:27:82:31:1c:43:db:ba:67: cd:b3:44:75:4f:80:58:9b:19:c8:e8:cf:ff:1a:a9: 17:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:4F:64:2F:5C:3E:6E:AF:3E:06:42:1C:6B:46:1A:CF:21:37:C6:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/dfec57e8-4be0-3a83-b962-789595b0a605.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.crl X509v3 Authority Key Identifier: keyid:D8:2C:17:54:D8:10:8C:24:31:5E:DA:EA:32:BD:49:1C:54:5E:95:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer sbgp-ipAddrBlock: critical IPv4: 198.52.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:9d:b2:4b:46:c0:ee:ab:99:d4:70:c6:d6:58:eb:7a:a6:31: 31:33:09:81:01:d6:c3:f8:05:62:be:0e:25:39:0b:7c:d3:1e: 84:f4:25:bc:76:5b:0a:bd:43:b4:e3:be:ac:c2:52:4d:2a:82: 7f:be:16:fb:9f:4c:fa:89:24:5a:47:fb:2f:75:f7:38:3d:cb: 40:0c:0e:9d:73:15:91:f6:35:e8:62:45:84:89:76:f7:17:2d: 94:4b:57:d0:48:0b:f6:97:1d:74:18:13:ec:1e:14:76:6c:cc: 66:0e:e0:3a:77:47:02:98:23:00:ad:db:80:ef:25:1f:e3:80: fd:21:79:cd:d4:74:76:a3:28:a0:2c:5d:14:4c:c8:ab:9f:e3: 8b:af:6e:fe:59:76:16:be:eb:34:2a:4a:60:cb:2f:5d:b5:8b: 3c:53:af:14:7e:f6:d2:d0:93:e0:3f:ff:03:5c:e2:ff:2a:b3: f3:94:c9:8c:15:fd:e6:34:ad:77:d7:ed:69:73:16:71:d9:5f: c0:cd:94:b1:7e:8d:85:c0:ea:44:9f:4a:37:15:39:69:2d:9c: 56:0d:74:f8:df:c3:e6:fd:34:ec:58:19:85:22:d5:4b:ae:d4: 77:74:a0:d8:8a:47:66:a3:a2:e4:50:c4:d3:a4:4d:5e:f4:8e: 41:fa:c8:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCkwPjwkFyGnvseAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmFjZjhhZmEtNmNiMS00YzlkLTg0YzctNWVlODg0NTAw M2QxMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MzFhYjE1NGYtYjI1Yi00YTUwLTliY2QtNjM4NGY3MGVlZTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljEgMpuKat9OLRB7l05jE4DmbBu0OCtIhtoT aH2omtE7XCFRCQbK4bdOkq2Yyjn8qq+FFeqyQnT8oWuAXvCIeKUdRD+YBZXc9Xa0 5NorKiJpaOD7DOMqoxf6c0t5vK1gLhLTRi6f+DESm+Dr9ODB0hKoKW+Ccaufrw6X SrRrY4pT9s3mLBLbQDqWwoL6hKW8agS3Q5lHRMG50+l2tT1JlVYIfX31q2Zu6VgW 8hL6wW638tggKWzSgQcsng+I/PutaomZkXT4IIYj9r++nxaelaAb9uv1ANpCPE1E jMBfqyGWt4WRkGWPJ4IxHEPbumfNs0R1T4BYmxnI6M//GqkXGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDlPZC9cPm6vPgZCHGtGGs8hN8a0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YWNm OGFmYS02Y2IxLTRjOWQtODRjNy01ZWU4ODQ1MDAzZDEvZGZlYzU3ZTgtNGJlMC0z YTgzLWI5NjItNzg5NTk1YjBhNjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmFjZjhhZmEtNmNiMS00YzlkLTg0 YzctNWVlODg0NTAwM2QxLzZhY2Y4YWZhLTZjYjEtNGM5ZC04NGM3LTVlZTg4NDUw MDNkMS5jcmwwHwYDVR0jBBgwFoAU2CwXVNgQjCQxXtrqMr1JHFRelVYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YWNmOGFmYS02Y2IxLTRjOWQtODRjNy01ZWU4 ODQ1MDAzZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFxjTAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6dsktGwO6rmdRwxtZY63qmMTEzCYEB1sP4BWK+DiU5C3zTHoT0Jbx2 Wwq9Q7TjvqzCUk0qgn++FvufTPqJJFpH+y919zg9y0AMDp1zFZH2NehiRYSJdvcX LZRLV9BIC/aXHXQYE+weFHZszGYO4Dp3RwKYIwCt24DvJR/jgP0hec3UdHajKKAs XRRMyKuf44uvbv5Zdha+6zQqSmDLL121izxTrxR+9tLQk+A//wNc4v8qs/OUyYwV /eY0rXfX7WlzFnHZX8DNlLF+jYXA6kSfSjcVOWktnFYNdPjfw+b9NOxYGYUi1Uuu 1Hd0oNiKR2ajouRQxNOkTV70jkH6yGM= -----END CERTIFICATE-----Generated at Thu Mar 26 16:55:38 2026 by rpki-client