$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ad22a04d-22d2-4c7c-a48f-df4a8a696676/dbb8b524-3a57-312c-9319-4454a4553065.roa File: dbb8b524-3a57-312c-9319-4454a4553065.roa (raw, json) Hash identifier: S/4O/0KszZQ5x/Lt7LjCVwEDYGID0jD9rvkKmxDbgYQ= Subject key identifier: AE:12:2E:5C:EE:52:54:2A:8A:1C:04:1A:D3:F5:B8:B1:B8:AB:91:51 Certificate issuer: /CN=ad22a04d-22d2-4c7c-a48f-df4a8a696676 Certificate serial: 010D0C9F4328584F7B24C363BA4979A9C8692800 Authority key identifier: B1:2D:F5:6D:C2:98:1C:49:C8:06:83:F7:44:21:AA:AD:2D:E8:79:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ad22a04d-22d2-4c7c-a48f-df4a8a696676.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ad22a04d-22d2-4c7c-a48f-df4a8a696676/dbb8b524-3a57-312c-9319-4454a4553065.roa Signing time: Mon 12 Oct 2026 20:13:57 +0000 ROA not before: Mon 12 Oct 2026 20:13:57 +0000 ROA not after: Sun 10 Jan 2027 21:13:57 +0000 asID: 54197 IP address blocks: 198.28.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ad22a04d-22d2-4c7c-a48f-df4a8a696676/ad22a04d-22d2-4c7c-a48f-df4a8a696676.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ad22a04d-22d2-4c7c-a48f-df4a8a696676/ad22a04d-22d2-4c7c-a48f-df4a8a696676.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ad22a04d-22d2-4c7c-a48f-df4a8a696676.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:24:c3:63:ba:49:79:a9:c8:69:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad22a04d-22d2-4c7c-a48f-df4a8a696676 Validity Not Before: Oct 12 20:13:57 2026 GMT Not After : Jan 10 21:13:57 2027 GMT Subject: CN=4f76b7b4-2de3-4d78-a26c-42d257fce611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:92:89:47:e7:01:cb:00:3c:a5:82:37:da:49: cb:5e:40:55:94:ab:a7:7e:3d:26:d3:d7:2f:c2:4c: 1e:29:06:d6:5f:0b:d4:dc:04:10:1c:e6:16:65:e7: 74:c7:00:14:ea:73:d3:36:27:2b:30:61:60:e2:4e: 14:a8:3e:02:0c:3e:4a:66:ca:bb:29:60:d2:24:57: 2f:05:5d:dd:96:7a:99:9a:11:ec:93:12:1a:f5:74: 69:fd:91:07:19:b2:8f:fa:43:3e:8c:fa:cb:01:99: bb:db:d8:43:8d:0e:e2:ce:8d:00:b3:ff:9e:22:c3: 00:a2:df:6b:9d:58:4e:60:f9:ee:9b:2e:6c:17:d1: c8:31:22:2f:c0:8e:6a:1e:18:c6:40:ed:79:74:dc: 29:fe:79:9b:2f:5a:43:f3:4b:39:d9:b8:5e:b6:5d: d5:19:e7:21:79:b4:39:1b:af:96:1f:d0:e4:6e:d0: 2a:4a:68:5d:98:57:ce:79:50:ec:89:5f:25:7a:89: 04:8d:b3:0e:c7:77:de:49:94:3b:d3:80:99:b4:19: 20:12:d3:67:54:91:b0:33:bd:3a:88:04:25:47:2d: 84:74:5a:62:dd:51:9f:a9:8a:e1:79:48:ce:7c:d1: 9a:80:f7:93:50:17:07:f5:a1:f3:ef:0c:7f:3a:99: f5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:12:2E:5C:EE:52:54:2A:8A:1C:04:1A:D3:F5:B8:B1:B8:AB:91:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ad22a04d-22d2-4c7c-a48f-df4a8a696676/dbb8b524-3a57-312c-9319-4454a4553065.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ad22a04d-22d2-4c7c-a48f-df4a8a696676/ad22a04d-22d2-4c7c-a48f-df4a8a696676.crl X509v3 Authority Key Identifier: keyid:B1:2D:F5:6D:C2:98:1C:49:C8:06:83:F7:44:21:AA:AD:2D:E8:79:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ad22a04d-22d2-4c7c-a48f-df4a8a696676.cer sbgp-ipAddrBlock: critical IPv4: 198.28.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:79:db:3a:26:1c:15:b9:b8:ec:78:4d:7b:72:94:e1:0c:f4: 3e:26:04:b6:3e:63:3d:e7:f5:fc:d5:b4:b9:1f:d4:30:ac:f4: 48:d1:61:a3:4c:c7:0f:d5:29:43:39:16:e2:7c:e7:d8:37:98: e1:e7:97:57:48:7d:cf:60:64:38:88:fd:5a:cf:da:01:57:13: 1a:86:67:0b:c8:3a:5d:21:3f:07:2e:19:51:c1:0c:ea:52:75: 2e:ce:9e:26:d4:96:0f:6c:00:c2:23:61:64:03:6d:5b:a9:b5: b1:19:6b:32:94:a2:5b:ae:f5:4e:f7:aa:14:44:38:a9:5a:c7: db:42:e4:fa:b0:f1:47:e5:bb:fe:ef:44:95:ea:87:1e:8a:48: 48:78:52:38:7e:2b:b9:05:77:a6:7a:94:b4:e0:4e:a6:90:67: ee:43:17:f7:52:a8:fe:81:3d:01:47:11:b5:db:e8:8d:c2:7d: 7a:ed:37:72:4b:ed:ba:31:35:77:60:80:e4:b3:1d:df:59:63: 75:ed:a2:10:53:cd:4f:4b:ec:a4:df:82:07:cc:1d:53:0d:fa: 08:71:24:f6:fb:ac:fd:93:96:16:12:7a:e4:09:14:bd:6f:1c: b8:97:24:bf:0f:54:15:fe:e3:d6:37:4c:64:9d:d4:ab:fc:5a: d1:ce:e9:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE97JMNjukl5qchpKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWQyMmEwNGQtMjJkMi00YzdjLWE0OGYtZGY0YThhNjk2 Njc2MB4XDTI2MTAxMjIwMTM1N1oXDTI3MDExMDIxMTM1N1owLzEtMCsGA1UEAxMk NGY3NmI3YjQtMmRlMy00ZDc4LWEyNmMtNDJkMjU3ZmNlNjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5KJR+cBywA8pYI32knLXkBVlKunfj0m09cv wkweKQbWXwvU3AQQHOYWZed0xwAU6nPTNicrMGFg4k4UqD4CDD5KZsq7KWDSJFcv BV3dlnqZmhHskxIa9XRp/ZEHGbKP+kM+jPrLAZm729hDjQ7izo0As/+eIsMAot9r nVhOYPnumy5sF9HIMSIvwI5qHhjGQO15dNwp/nmbL1pD80s52bhetl3VGechebQ5 G6+WH9DkbtAqSmhdmFfOeVDsiV8leokEjbMOx3feSZQ704CZtBkgEtNnVJGwM706 iAQlRy2EdFpi3VGfqYrheUjOfNGagPeTUBcH9aHz7wx/Opn1RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4SLlzuUlQqihwEGtP1uLG4q5FRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9hZDIy YTA0ZC0yMmQyLTRjN2MtYTQ4Zi1kZjRhOGE2OTY2NzYvZGJiOGI1MjQtM2E1Ny0z MTJjLTkzMTktNDQ1NGE0NTUzMDY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvYWQyMmEwNGQtMjJkMi00YzdjLWE0 OGYtZGY0YThhNjk2Njc2L2FkMjJhMDRkLTIyZDItNGM3Yy1hNDhmLWRmNGE4YTY5 NjY3Ni5jcmwwHwYDVR0jBBgwFoAUsS31bcKYHEnIBoP3RCGqrS3oeUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS9hZDIyYTA0ZC0yMmQyLTRjN2MtYTQ4Zi1kZjRh OGE2OTY2NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhwIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJ52zomHBW5uOx4TXtylOEM9D4mBLY+Yz3n9fzVtLkf1DCs9EjRYaNM xw/VKUM5FuJ859g3mOHnl1dIfc9gZDiI/VrP2gFXExqGZwvIOl0hPwcuGVHBDOpS dS7OnibUlg9sAMIjYWQDbVuptbEZazKUoluu9U73qhREOKlax9tC5Pqw8Uflu/7v RJXqhx6KSEh4Ujh+K7kFd6Z6lLTgTqaQZ+5DF/dSqP6BPQFHEbXb6I3CfXrtN3JL 7boxNXdggOSzHd9ZY3XtohBTzU9L7KTfggfMHVMN+ghxJPb7rP2TlhYSeuQJFL1v HLiXJL8PVBX+49Y3TGSd1Kv8WtHO6R4= -----END CERTIFICATE-----Generated at Sun Nov 1 21:03:36 2026 by rpki-client