$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/30859cb8-c929-30aa-bad4-950f640e28f0.roa File: 30859cb8-c929-30aa-bad4-950f640e28f0.roa (raw, json) Hash identifier: eryeT61yXdsysno9MutoG7k6ANu3tzVGbUbd8b1q5Y4= Subject key identifier: 3A:FA:1E:DF:90:A1:A2:28:DD:43:FB:5E:5C:23:B9:C5:EC:19:2B:48 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584D703FDDC15EA82B4DDC2AE580 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/30859cb8-c929-30aa-bad4-950f640e28f0.roa Signing time: Wed 08 Apr 2026 13:00:33 +0000 ROA not before: Wed 08 Apr 2026 13:00:33 +0000 ROA not after: Tue 07 Jul 2026 13:00:33 +0000 asID: 142032 IP address blocks: 198.44.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:3f:dd:c1:5e:a8:2b:4d:dc:2a:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Apr 8 13:00:33 2026 GMT Not After : Jul 7 13:00:33 2026 GMT Subject: CN=1166756e-e3bd-44bb-a92b-8f63084200db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:63:b7:f6:4f:af:19:27:81:96:0d:cf:0f:27: 69:86:b6:af:dc:69:e8:86:2c:3e:ca:f8:3b:b9:65: 1b:92:f8:82:9c:97:f1:b6:05:49:21:de:ea:ce:af: 1d:78:4c:e4:a9:e9:d6:bd:fe:9a:8e:8a:66:53:e3: 0b:af:45:ca:fd:b6:44:d8:2c:71:34:19:36:b9:e0: 93:d6:fe:67:98:fc:69:8b:7d:1e:6f:1a:ef:35:19: f3:f4:b0:90:5c:9f:6c:f6:1e:78:8a:ae:0d:49:8c: 71:35:b0:7c:a3:30:18:49:69:db:ac:4e:3a:af:46: 80:e0:50:f8:85:f4:d3:f1:80:11:9b:b6:2f:13:e1: 5d:ec:9b:2f:10:c8:3f:ad:76:ab:19:b6:db:f1:ed: 6d:24:87:c7:f6:99:cd:29:38:da:a7:f4:b3:4c:f8: ef:bd:16:38:fe:15:45:07:99:1e:1f:9c:6d:8e:d2: 58:ac:13:bd:a1:4f:9f:bc:67:f6:92:28:6d:26:08: 7a:8b:37:7b:c3:50:83:ce:54:4a:93:64:b5:57:1c: 66:68:b0:99:fb:fb:6b:e7:c9:9d:cb:8c:9a:f9:05: ce:1d:10:ba:2c:09:19:20:01:a0:a6:ef:d9:52:24: e3:d2:47:85:b8:fc:d3:b8:1c:5a:6f:a1:bb:7b:53: 5a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:FA:1E:DF:90:A1:A2:28:DD:43:FB:5E:5C:23:B9:C5:EC:19:2B:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/30859cb8-c929-30aa-bad4-950f640e28f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 198.44.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:3f:19:15:18:e7:1c:47:a5:e4:a1:2b:85:99:42:18:c4:ff: c6:2a:ae:cb:03:fd:cb:42:a1:ee:20:f5:ce:9a:2a:bc:cd:9d: 1a:32:63:2b:1f:11:19:ff:89:cf:0d:03:20:47:63:5a:d5:99: b2:e4:86:2a:43:56:d1:53:49:4a:64:66:33:33:af:1c:c8:6e: 35:79:40:da:c8:3d:7b:be:77:d0:15:df:c6:05:67:b7:83:dd: 41:79:0a:bb:ff:0f:74:d4:a6:b0:ee:f9:72:e2:6f:c8:7b:2d: ce:11:7d:44:fb:30:60:5e:9a:82:3b:56:bd:ec:9a:a5:db:e1: 05:b4:f3:a7:48:6c:98:77:a1:43:d1:5c:cc:fa:e6:f8:9d:d7: f9:37:d6:8c:8f:55:9f:81:fa:33:1d:d6:2b:e4:4d:91:c3:87: 2a:62:58:0d:68:b9:0b:9b:63:06:3b:6b:4c:42:77:c4:0f:30: a3:1a:e0:b4:17:b0:e8:2a:d9:e4:9d:08:ac:79:7a:0c:08:46: 80:85:8d:11:9b:d5:2d:d9:5c:55:45:e0:6c:a5:6d:74:ca:40: a5:a1:6c:42:e0:04:9a:23:94:52:0a:44:10:ce:6e:c8:db:50: 7a:f8:9c:57:18:ee:a7:f2:82:df:eb:9a:35:1b:c4:ba:c7:76: c0:61:da:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wP93BXqgrTdwq5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk MTE2Njc1NmUtZTNiZC00NGJiLWE5MmItOGY2MzA4NDIwMGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmO39k+vGSeBlg3PDydphrav3Gnohiw+yvg7 uWUbkviCnJfxtgVJId7qzq8deEzkqenWvf6ajopmU+MLr0XK/bZE2CxxNBk2ueCT 1v5nmPxpi30ebxrvNRnz9LCQXJ9s9h54iq4NSYxxNbB8ozAYSWnbrE46r0aA4FD4 hfTT8YARm7YvE+Fd7JsvEMg/rXarGbbb8e1tJIfH9pnNKTjap/SzTPjvvRY4/hVF B5keH5xtjtJYrBO9oU+fvGf2kihtJgh6izd7w1CDzlRKk2S1VxxmaLCZ+/tr58md y4ya+QXOHRC6LAkZIAGgpu/ZUiTj0keFuPzTuBxab6G7e1NagQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDr6Ht+QoaIo3UP7XlwjucXsGStIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvMzA4NTljYjgtYzkyOS0z MGFhLWJhZDQtOTUwZjY0MGUyOGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxiy4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABA/GRUY5xxHpeShK4WZQhjE/8YqrssD/ctCoe4g9c6aKrzNnRoyYysf ERn/ic8NAyBHY1rVmbLkhipDVtFTSUpkZjMzrxzIbjV5QNrIPXu+d9AV38YFZ7eD 3UF5Crv/D3TUprDu+XLib8h7Lc4RfUT7MGBemoI7Vr3smqXb4QW086dIbJh3oUPR XMz65vid1/k31oyPVZ+B+jMd1ivkTZHDhypiWA1ouQubYwY7a0xCd8QPMKMa4LQX sOgq2eSdCKx5egwIRoCFjRGb1S3ZXFVF4GylbXTKQKWhbELgBJojlFIKRBDObsjb UHr4nFcY7qfygt/rmjUbxLrHdsBh2uI= -----END CERTIFICATE-----Generated at Fri Apr 17 18:04:03 2026 by rpki-client