$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dc5aee6f-5cf8-3970-bc17-0929e3b3f01d.roa File: dc5aee6f-5cf8-3970-bc17-0929e3b3f01d.roa (raw, json) Hash identifier: LzqGM+oihOcc7w/fyBuFds1hXjOyPZxjeDoOur4dyWU= Subject key identifier: F8:06:26:A7:28:C7:35:5D:B8:4C:48:2A:7B:D5:69:61:25:46:17:2E Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584D5CB4FD0651AA4C6DFEED52C0 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dc5aee6f-5cf8-3970-bc17-0929e3b3f01d.roa Signing time: Wed 01 Apr 2026 13:00:30 +0000 ROA not before: Wed 01 Apr 2026 13:00:30 +0000 ROA not after: Tue 30 Jun 2026 13:00:30 +0000 asID: 154321 IP address blocks: 198.44.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5c:b4:fd:06:51:aa:4c:6d:fe:ed:52:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Apr 1 13:00:30 2026 GMT Not After : Jun 30 13:00:30 2026 GMT Subject: CN=7e307d8d-290a-469f-9593-830e962c54fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:07:82:de:db:90:ae:c7:74:ae:04:a5:16:04: ea:55:90:99:af:09:d9:13:a1:7a:57:5c:33:c1:ff: 05:b2:b7:ee:34:d7:03:1c:81:ad:dd:5f:04:16:ac: e8:6f:22:05:0c:a9:87:5e:ba:cf:9f:e0:27:da:52: 3e:52:f4:79:f7:f3:6d:de:5d:02:82:d7:b3:7c:13: dd:d6:00:7f:6c:28:b1:7f:3a:b5:ca:43:4a:47:e2: 47:3f:9b:4d:ff:a7:50:38:47:c7:b0:0d:37:5f:a4: 8c:06:c0:22:84:7e:c7:de:54:d0:0e:7f:10:ca:bc: 15:d1:35:3d:8f:83:4c:fd:77:f8:5c:2c:bc:58:62: ca:0b:41:dc:68:cf:2d:1c:e9:61:64:cd:f8:5a:15: e5:c8:b9:fa:7e:5e:7c:97:71:12:a5:58:4d:c3:06: 60:3e:ec:fe:7e:b3:82:f0:d1:f5:5a:c3:e3:19:b5: 78:fb:41:a5:3c:6d:99:a7:d8:13:c3:a7:e2:7e:2a: d2:c2:8f:d5:71:be:6a:4a:24:a1:46:cf:bf:58:ce: da:c5:a1:29:a5:42:6f:f0:63:6a:ba:4d:c5:01:bf: 56:b0:ca:f5:5d:ef:54:2c:bf:08:db:f2:36:d9:9b: ab:98:38:79:76:44:59:55:fc:4a:7b:b9:f1:5b:18: 42:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:06:26:A7:28:C7:35:5D:B8:4C:48:2A:7B:D5:69:61:25:46:17:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dc5aee6f-5cf8-3970-bc17-0929e3b3f01d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 198.44.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:0f:4d:65:0d:6a:9a:5e:a6:98:d2:6e:03:29:2d:d6:97:27: c1:30:c6:ee:56:dc:3e:6c:29:93:fd:2d:f2:24:20:41:31:5c: 45:d1:b6:7a:54:07:6b:a3:0e:b5:d9:29:5e:1d:77:16:bd:95: 5d:d9:5c:5e:44:23:65:1f:73:b6:5b:74:74:d9:ee:b9:f2:3d: 0a:ff:61:b8:77:c9:ad:ed:53:b4:0f:b6:18:42:36:0d:79:e3: f9:39:4b:9b:6b:70:e0:86:8a:bc:26:94:7f:dd:84:a4:be:10: 17:9f:68:7c:ed:3e:e3:d6:10:05:ad:18:e6:00:2b:91:02:7c: 2b:f6:fc:4b:b5:fe:66:76:97:b9:8c:69:1a:84:eb:73:74:a6: a9:57:13:e4:5c:4c:b7:f9:17:8c:62:22:58:39:8c:56:1c:b1: 9d:e1:a9:0d:f0:34:3c:d2:57:3f:c6:a1:82:e4:f4:55:0f:d9: 10:ea:bb:e5:73:0f:26:37:ba:2a:ed:58:e5:4c:51:d0:f0:d9: d8:e3:d9:8d:92:05:c1:47:43:b9:57:74:e6:a1:0d:79:ed:39: 7e:92:51:70:4e:c0:8a:40:d6:82:3b:3d:b7:94:fa:25:68:d4: 8a:d3:6f:8a:8b:4a:67:16:90:c7:b8:e5:75:e9:b3:42:26:e2: 00:f7:17:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1ctP0GUapMbf7tUsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI2MDQwMTEzMDAzMFoXDTI2MDYzMDEzMDAzMFowLzEtMCsGA1UEAxMk N2UzMDdkOGQtMjkwYS00NjlmLTk1OTMtODMwZTk2MmM1NGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQeC3tuQrsd0rgSlFgTqVZCZrwnZE6F6V1wz wf8FsrfuNNcDHIGt3V8EFqzobyIFDKmHXrrPn+An2lI+UvR59/Nt3l0CgtezfBPd 1gB/bCixfzq1ykNKR+JHP5tN/6dQOEfHsA03X6SMBsAihH7H3lTQDn8QyrwV0TU9 j4NM/Xf4XCy8WGLKC0HcaM8tHOlhZM34WhXlyLn6fl58l3ESpVhNwwZgPuz+frOC 8NH1WsPjGbV4+0GlPG2Zp9gTw6fifirSwo/Vcb5qSiShRs+/WM7axaEppUJv8GNq uk3FAb9WsMr1Xe9ULL8I2/I22ZurmDh5dkRZVfxKe7nxWxhCfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPgGJqcoxzVduExIKnvVaWElRhcuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvZGM1YWVlNmYtNWNmOC0z OTcwLWJjMTctMDkyOWUzYjNmMDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxiyqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAPTWUNappeppjSbgMpLdaXJ8Ewxu5W3D5sKZP9LfIkIEExXEXRtnpU B2ujDrXZKV4ddxa9lV3ZXF5EI2Ufc7ZbdHTZ7rnyPQr/Ybh3ya3tU7QPthhCNg15 4/k5S5trcOCGirwmlH/dhKS+EBefaHztPuPWEAWtGOYAK5ECfCv2/Eu1/mZ2l7mM aRqE63N0pqlXE+RcTLf5F4xiIlg5jFYcsZ3hqQ3wNDzSVz/GoYLk9FUP2RDqu+Vz DyY3uirtWOVMUdDw2djj2Y2SBcFHQ7lXdOahDXntOX6SUXBOwIpA1oI7PbeU+iVo 1IrTb4qLSmcWkMe45XXps0Im4gD3FyE= -----END CERTIFICATE-----Generated at Fri Apr 17 17:53:31 2026 by rpki-client