$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f0f7b14c-ac9a-3365-ad5b-ce316f29d877.roa File: f0f7b14c-ac9a-3365-ad5b-ce316f29d877.roa (raw, json) Hash identifier: gIV+j8lkP6830aQBOR9PbQ2pUV2mlEwVzDlZWaum67k= Subject key identifier: 43:13:E3:89:36:AB:26:B9:53:AD:FC:B9:BD:57:B8:C6:7E:8A:4C:6E Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584D667A576F1B9864217B9F2480 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f0f7b14c-ac9a-3365-ad5b-ce316f29d877.roa Signing time: Sun 05 Apr 2026 01:00:24 +0000 ROA not before: Sun 05 Apr 2026 01:00:24 +0000 ROA not after: Sat 04 Jul 2026 01:00:24 +0000 asID: 8987 IP address blocks: 198.251.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:66:7a:57:6f:1b:98:64:21:7b:9f:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Apr 5 01:00:24 2026 GMT Not After : Jul 4 01:00:24 2026 GMT Subject: CN=e7a2b8e8-646c-487c-8645-049c3cad133f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f7:72:36:f7:6b:4c:59:8c:62:a9:67:3b:c0: 0e:30:0b:3b:9c:7f:0f:15:ba:41:46:6d:11:7d:db: e5:3b:24:f9:2f:73:d2:c9:56:2d:12:a1:66:b9:f8: 7a:48:4a:fc:b0:eb:87:1f:2d:9b:e4:36:28:0d:64: 00:92:b0:fe:3a:a5:5c:a5:fc:1e:8e:e0:a6:08:d0: 93:dd:a9:f7:bc:71:f0:ec:c1:4c:ea:cd:6d:ad:66: 16:bb:02:2d:fe:55:f0:4d:e7:0e:3b:36:5a:11:ca: a4:1e:58:62:58:3a:20:c7:c3:9e:ff:f3:fe:a7:07: 38:5d:1c:5b:2d:2a:6a:f9:ac:e4:6f:76:ee:6a:59: 2e:0c:65:ab:d1:6f:c5:80:4b:bd:a0:57:6d:35:81: d7:40:61:f3:1e:60:de:8b:c5:1c:4c:96:36:48:32: 28:cc:95:b2:69:e8:d6:21:d6:47:f1:16:af:d6:fe: 3d:ac:c5:7c:b2:d7:f7:3a:e0:a9:4a:a8:15:04:a4: 7e:ce:cc:09:f6:c8:23:fa:a1:2c:37:f0:03:74:31: 94:60:57:ec:85:21:73:9b:85:76:84:d9:e2:06:6b: 56:8b:f8:d4:b6:82:35:c4:97:44:73:79:c9:f1:49: 0c:ef:d3:11:44:ea:1a:18:dd:df:ea:c4:55:3f:76: 83:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:13:E3:89:36:AB:26:B9:53:AD:FC:B9:BD:57:B8:C6:7E:8A:4C:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f0f7b14c-ac9a-3365-ad5b-ce316f29d877.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 198.251.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:9b:51:83:ba:cf:d1:41:33:06:14:16:87:ba:d6:2c:37:8b: 80:ee:e1:e2:16:3c:f3:8a:3d:32:f7:32:95:cf:25:b4:e0:b1: 45:94:05:c0:11:9f:e0:bf:d0:4a:bd:ab:fa:c5:b2:38:70:20: bd:82:4d:dd:69:3d:c4:7c:5f:3d:82:8f:ae:4b:03:44:04:9f: 90:07:7c:c8:d7:44:30:24:9a:25:b0:af:33:3d:1a:a4:d5:37: bf:41:14:6c:38:92:12:13:bb:5a:78:af:f9:bb:54:c8:83:0b: d4:73:2e:d0:d4:af:6b:92:05:8d:2a:f4:3e:57:46:7b:50:26: 32:3b:7e:ad:ad:f0:2a:22:c0:e2:bc:ea:5f:c4:7d:2c:30:18: c6:7d:86:7d:3c:34:19:b1:4e:41:41:b7:62:a7:a1:78:d0:41: bc:45:a8:75:b2:b4:ec:f4:d2:ba:76:79:a1:a5:71:b2:0c:3d: 75:04:30:9c:26:31:0b:8b:67:dd:05:7f:02:de:d5:98:9b:e6: 98:b3:da:81:72:64:84:c6:4d:cf:18:b7:07:39:15:77:9b:b1: f6:06:f6:20:71:33:f7:14:5b:7c:e3:26:56:ec:3f:d1:88:83: 82:c0:7e:6b:31:6a:d6:ff:1e:8d:3f:da:a2:75:92:a7:ae:c0: 62:d1:94:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1meldvG5hkIXufJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI2MDQwNTAxMDAyNFoXDTI2MDcwNDAxMDAyNFowLzEtMCsGA1UEAxMk ZTdhMmI4ZTgtNjQ2Yy00ODdjLTg2NDUtMDQ5YzNjYWQxMzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPdyNvdrTFmMYqlnO8AOMAs7nH8PFbpBRm0R fdvlOyT5L3PSyVYtEqFmufh6SEr8sOuHHy2b5DYoDWQAkrD+OqVcpfwejuCmCNCT 3an3vHHw7MFM6s1trWYWuwIt/lXwTecOOzZaEcqkHlhiWDogx8Oe//P+pwc4XRxb LSpq+azkb3bualkuDGWr0W/FgEu9oFdtNYHXQGHzHmDei8UcTJY2SDIozJWyaejW IdZH8Rav1v49rMV8stf3OuCpSqgVBKR+zswJ9sgj+qEsN/ADdDGUYFfshSFzm4V2 hNniBmtWi/jUtoI1xJdEc3nJ8UkM79MRROoaGN3f6sRVP3aDdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMT44k2qya5U638ub1XuMZ+ikxuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvZjBmN2IxNGMtYWM5YS0z MzY1LWFkNWItY2UzMTZmMjlkODc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxvvoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHabUYO6z9FBMwYUFoe61iw3i4Du4eIWPPOKPTL3MpXPJbTgsUWUBcAR n+C/0Eq9q/rFsjhwIL2CTd1pPcR8Xz2Cj65LA0QEn5AHfMjXRDAkmiWwrzM9GqTV N79BFGw4khITu1p4r/m7VMiDC9RzLtDUr2uSBY0q9D5XRntQJjI7fq2t8CoiwOK8 6l/EfSwwGMZ9hn08NBmxTkFBt2KnoXjQQbxFqHWytOz00rp2eaGlcbIMPXUEMJwm MQuLZ90FfwLe1Zib5piz2oFyZITGTc8Ytwc5FXebsfYG9iBxM/cUW3zjJlbsP9GI g4LAfmsxatb/Ho0/2qJ1kqeuwGLRlIE= -----END CERTIFICATE-----Generated at Fri Apr 17 18:12:17 2026 by rpki-client