$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/3b17e899-4e7e-3822-926f-bb9ab91e287d.roa File: 3b17e899-4e7e-3822-926f-bb9ab91e287d.roa (raw, json) Hash identifier: HtSNMT+asdVqv/HF0pNOm3H1Q3yh580OX6E/QNLGdik= Subject key identifier: D1:36:C4:FA:B6:37:E3:CD:FA:F0:B3:79:4A:F0:0F:FB:0C:34:DA:5E Certificate issuer: /CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4 Certificate serial: 010D0C9F4328584C69F17609198BE6BAD9217500 Authority key identifier: 0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/3b17e899-4e7e-3822-926f-bb9ab91e287d.roa Signing time: Sun 04 Jan 2026 14:00:38 +0000 ROA not before: Sun 04 Jan 2026 14:00:38 +0000 ROA not after: Sat 04 Apr 2026 13:00:38 +0000 asID: 30383 IP address blocks: 198.208.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:69:f1:76:09:19:8b:e6:ba:d9:21:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4 Validity Not Before: Jan 4 14:00:38 2026 GMT Not After : Apr 4 13:00:38 2026 GMT Subject: CN=74789fe4-e4b8-42da-9dc1-9ab656fce8fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f3:38:ab:a9:94:d7:89:fd:4d:e2:b8:2d:a8: 6a:aa:56:d6:74:26:a4:97:a2:1b:2a:35:c6:13:59: f3:6b:4b:ce:af:af:96:45:2a:4f:f7:b3:c0:ad:61: 36:9e:6a:78:87:2d:f5:60:7f:7a:86:b2:ef:09:c1: e2:62:a2:17:a1:3f:81:ce:83:61:47:0c:a3:fd:be: 91:b0:9e:d8:53:07:eb:ae:f0:e5:0d:95:ee:16:04: a3:1c:ac:32:1d:fb:ac:40:30:d7:f6:f5:36:00:2c: 7b:8e:cc:98:e1:4e:80:6c:dc:ed:20:a8:01:4f:42: d3:ca:82:f1:c7:db:68:2f:5a:db:6b:50:74:b6:a0: cc:40:a6:bd:bf:71:1c:07:6d:72:74:5c:c9:45:41: 6b:0b:23:ac:e1:29:c3:ff:4f:fb:0a:b7:e8:30:2d: 18:31:62:84:68:16:8f:3d:3c:db:31:83:4d:cb:e9: e0:a1:f5:15:10:a2:9e:79:23:5d:68:36:d3:ae:0d: ba:30:4e:95:67:55:52:75:52:d9:b6:81:1f:9c:80: 2b:d4:7f:c6:aa:e5:77:1c:52:cb:ba:dc:71:1b:5d: 2f:a6:75:9c:b8:df:29:0e:77:4d:32:67:ad:7b:2d: 60:cc:c7:31:38:73:58:60:f0:dc:df:4f:af:eb:7a: 74:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:36:C4:FA:B6:37:E3:CD:FA:F0:B3:79:4A:F0:0F:FB:0C:34:DA:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/3b17e899-4e7e-3822-926f-bb9ab91e287d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl X509v3 Authority Key Identifier: keyid:0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer sbgp-ipAddrBlock: critical IPv4: 198.208.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:01:b2:e5:d7:ff:75:0d:5a:2a:32:3c:fd:ff:d1:b1:50:ef: 05:d0:a7:44:a4:f2:fa:1d:ac:af:d9:4d:ac:01:0b:1c:6b:9b: c7:09:19:37:df:ba:52:ab:47:15:24:b7:73:6f:b3:2f:42:4f: 9b:ee:2b:9e:e2:40:6c:56:e2:a9:ad:1e:22:88:b9:df:b5:0b: fa:93:bb:11:99:11:aa:23:55:c4:47:86:b3:4f:d0:cb:c7:fd: 54:40:f4:ef:f5:b6:a9:9c:46:87:c0:be:2c:52:7f:f2:49:1c: c5:16:84:4a:09:92:74:fa:64:a3:df:56:47:b8:2c:f3:cf:9d: 1c:7a:4d:72:b9:e8:05:08:76:b9:d9:af:9c:e8:b0:dc:09:d8: ea:d9:c1:61:17:90:72:a7:f0:e3:30:ec:8a:81:47:29:5b:77: ef:35:66:9c:50:6a:e8:bd:3b:68:4f:b4:98:6e:5e:2b:ea:cf: 77:1b:80:04:d1:4b:d9:36:8a:ca:7e:3b:28:bc:f5:a0:7a:6b: 88:4e:fe:0c:48:ba:c2:ef:f9:e7:e5:58:de:71:7d:e1:37:14: c3:67:dd:44:a5:bc:3f:41:8a:d1:f5:a4:2c:36:b5:b1:14:af: 11:1f:3f:d5:9f:8e:a7:c4:6f:06:10:ce:7d:13:8f:40:3f:70: 53:55:df:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExp8XYJGYvmutkhdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkNjdlNTQtN2RkNy00MGJhLWFmYTMtNWU4YzQ5NTRl M2U0MB4XDTI2MDEwNDE0MDAzOFoXDTI2MDQwNDEzMDAzOFowLzEtMCsGA1UEAxMk NzQ3ODlmZTQtZTRiOC00MmRhLTlkYzEtOWFiNjU2ZmNlOGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvM4q6mU14n9TeK4LahqqlbWdCakl6IbKjXG E1nza0vOr6+WRSpP97PArWE2nmp4hy31YH96hrLvCcHiYqIXoT+BzoNhRwyj/b6R sJ7YUwfrrvDlDZXuFgSjHKwyHfusQDDX9vU2ACx7jsyY4U6AbNztIKgBT0LTyoLx x9toL1rba1B0tqDMQKa9v3EcB21ydFzJRUFrCyOs4SnD/0/7CrfoMC0YMWKEaBaP PTzbMYNNy+ngofUVEKKeeSNdaDbTrg26ME6VZ1VSdVLZtoEfnIAr1H/GquV3HFLL utxxG10vpnWcuN8pDndNMmetey1gzMcxOHNYYPDc30+v63p0OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNE2xPq2N+PN+vCzeUrwD/sMNNpeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2 N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThjNDk1NGUzZTQvM2IxN2U4OTktNGU3ZS0z ODIyLTkyNmYtYmI5YWI5MWUyODdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDdkNjdlNTQtN2RkNy00MGJhLWFm YTMtNWU4YzQ5NTRlM2U0L2Q3ZDY3ZTU0LTdkZDctNDBiYS1hZmEzLTVlOGM0OTU0 ZTNlNC5jcmwwHwYDVR0jBBgwFoAUDncEDXJF/Vqw2VztD25SNx11Lh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThj NDk1NGUzZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxtAUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0BsuXX/3UNWioyPP3/0bFQ7wXQp0Sk8vodrK/ZTawBCxxrm8cJGTff ulKrRxUkt3Nvsy9CT5vuK57iQGxW4qmtHiKIud+1C/qTuxGZEaojVcRHhrNP0MvH /VRA9O/1tqmcRofAvixSf/JJHMUWhEoJknT6ZKPfVke4LPPPnRx6TXK56AUIdrnZ r5zosNwJ2OrZwWEXkHKn8OMw7IqBRylbd+81ZpxQaui9O2hPtJhuXivqz3cbgATR S9k2isp+Oyi89aB6a4hO/gxIusLv+eflWN5xfeE3FMNn3USlvD9BitH1pCw2tbEU rxEfP9WfjqfEbwYQzn0Tj0A/cFNV38w= -----END CERTIFICATE-----Generated at Mon Mar 2 02:13:00 2026 by rpki-client