$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/17e3eedc-636b-367b-9c8b-c31ffa765b7e.roa File: 17e3eedc-636b-367b-9c8b-c31ffa765b7e.roa (raw, json) Hash identifier: wwuZpWCjTTsyUvaCYdkvkN9d0cOOOE/OGADm3yw6d7E= Subject key identifier: 64:2C:81:C5:24:B8:EE:6E:5E:4B:32:A8:C4:54:C6:7C:D8:86:EA:D0 Certificate issuer: /CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4 Certificate serial: 010D0C9F4328584CAE572C61A493B79BA093AE9C Authority key identifier: 0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/17e3eedc-636b-367b-9c8b-c31ffa765b7e.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 56274 IP address blocks: 198.208.96.0/21 maxlen: 24 198.208.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:2c:61:a4:93:b7:9b:a0:93:ae:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=5fa32126-dd3b-4e68-aae9-a58409d7155b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:84:c7:42:0c:e8:70:f8:2f:39:e8:2e:ad:9c: 3b:41:9b:c9:c7:1a:3b:80:b5:ea:00:94:ed:48:0c: 23:d3:21:47:2a:98:c2:e4:fd:a0:73:8c:a9:fd:6d: dc:66:78:55:c3:15:4b:55:b6:24:f1:79:8d:0e:25: 53:1b:2f:01:1f:e5:41:67:64:6d:63:f7:72:86:1e: ee:b1:29:a5:99:8d:fc:f5:90:58:88:89:70:c5:b7: ee:35:81:75:8a:7f:e8:af:2a:51:45:e0:a4:07:9d: b0:e9:16:28:e7:29:7b:8b:35:cd:9f:ea:a2:2c:33: 58:4a:28:11:16:a9:d0:90:1c:7e:82:79:ed:12:7e: 83:ed:ab:e1:ec:25:ec:d6:b0:1c:18:71:87:cc:79: 28:10:48:8c:e6:87:d3:64:4a:58:a1:81:2c:3c:4d: 93:e1:a1:51:58:22:dd:9c:c1:eb:c7:48:49:24:ee: 42:30:93:7c:d7:a2:d7:5b:2e:e7:86:c0:cf:18:50: 34:13:80:13:a3:4b:8a:f6:87:33:59:cf:3e:5b:c9: 73:1b:7b:47:c8:64:ef:8a:16:9d:3e:dc:2c:20:3d: 7b:cf:e9:1f:37:51:06:20:6f:95:9b:a5:cf:a1:7b: b3:3e:f3:41:61:70:45:d2:a0:3c:19:75:4d:ac:b3: 4d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:2C:81:C5:24:B8:EE:6E:5E:4B:32:A8:C4:54:C6:7C:D8:86:EA:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/17e3eedc-636b-367b-9c8b-c31ffa765b7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl X509v3 Authority Key Identifier: keyid:0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer sbgp-ipAddrBlock: critical IPv4: 198.208.96.0/21 198.208.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:0f:8d:e9:98:e4:eb:34:93:50:4c:ee:7c:c6:60:d8:4d:a0: 0b:45:8e:4f:39:e6:0a:7c:73:c9:56:74:8f:26:b0:59:16:31: 23:b1:0f:5e:7c:ad:5b:8a:da:80:df:63:81:74:be:4e:92:60: 53:05:86:64:95:5d:7e:3e:db:e3:f3:3c:2f:bd:f4:ae:6b:83: 2f:71:62:50:12:80:f9:3a:1b:85:09:78:59:8f:32:3c:1e:da: bf:a3:8b:68:22:5f:5d:03:1f:ce:d7:8e:e6:2f:d3:45:67:62: c3:eb:7d:45:ed:80:02:b4:cd:1d:83:24:20:21:27:a9:06:43: 8d:44:ae:88:a6:7c:f1:37:b5:32:f1:08:eb:6b:25:76:94:99: 79:ae:03:01:94:ed:00:62:12:21:31:86:6e:ca:58:4e:e7:16: 35:6f:93:0d:d6:6f:55:cd:80:23:32:f1:3a:ac:f6:3b:8c:68: ef:1b:a8:42:f9:5b:d4:cc:5a:e6:4b:47:3f:5a:cb:15:ce:a5: a0:51:3c:fb:00:88:84:9b:6b:1d:88:62:3e:f1:61:0e:61:6c: 99:6a:f8:1a:d3:c6:61:3e:9e:e5:8b:41:77:f2:bb:3a:49:5a: ea:3f:5e:1a:3f:f8:f9:46:2d:ef:59:f6:03:ec:c5:62:d3:df: 38:b6:72:05 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEyuVyxhpJO3m6CTrpwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkNjdlNTQtN2RkNy00MGJhLWFmYTMtNWU4YzQ5NTRl M2U0MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NWZhMzIxMjYtZGQzYi00ZTY4LWFhZTktYTU4NDA5ZDcxNTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoTHQgzocPgvOegurZw7QZvJxxo7gLXqAJTt SAwj0yFHKpjC5P2gc4yp/W3cZnhVwxVLVbYk8XmNDiVTGy8BH+VBZ2RtY/dyhh7u sSmlmY389ZBYiIlwxbfuNYF1in/orypRReCkB52w6RYo5yl7izXNn+qiLDNYSigR FqnQkBx+gnntEn6D7avh7CXs1rAcGHGHzHkoEEiM5ofTZEpYoYEsPE2T4aFRWCLd nMHrx0hJJO5CMJN816LXWy7nhsDPGFA0E4ATo0uK9oczWc8+W8lzG3tHyGTvihad PtwsID17z+kfN1EGIG+Vm6XPoXuzPvNBYXBF0qA8GXVNrLNN8QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGQsgcUkuO5uXksyqMRUxnzYhurQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2 N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThjNDk1NGUzZTQvMTdlM2VlZGMtNjM2Yi0z NjdiLTljOGItYzMxZmZhNzY1YjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDdkNjdlNTQtN2RkNy00MGJhLWFm YTMtNWU4YzQ5NTRlM2U0L2Q3ZDY3ZTU0LTdkZDctNDBiYS1hZmEzLTVlOGM0OTU0 ZTNlNC5jcmwwHwYDVR0jBBgwFoAUDncEDXJF/Vqw2VztD25SNx11Lh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThj NDk1NGUzZTQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDxtBgAwQA xtCGMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACEPjemY5Os0k1BM7nzGYNhNoAtFjk855gp8c8lWdI8msFkW MSOxD158rVuK2oDfY4F0vk6SYFMFhmSVXX4+2+PzPC+99K5rgy9xYlASgPk6G4UJ eFmPMjwe2r+ji2giX10DH87XjuYv00VnYsPrfUXtgAK0zR2DJCAhJ6kGQ41Eroim fPE3tTLxCOtrJXaUmXmuAwGU7QBiEiExhm7KWE7nFjVvkw3Wb1XNgCMy8Tqs9juM aO8bqEL5W9TMWuZLRz9ayxXOpaBRPPsAiISbax2IYj7xYQ5hbJlq+BrTxmE+nuWL QXfyuzpJWuo/Xho/+PlGLe9Z9gPsxWLT3zi2cgU= -----END CERTIFICATE-----Generated at Mon Mar 2 05:37:54 2026 by rpki-client