$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/420963fb-a3d2-3813-9896-a813e2840697.roa File: 420963fb-a3d2-3813-9896-a813e2840697.roa (raw, json) Hash identifier: /isXCtGr4uiDWegQ4vK4+pkBtMbiXjHnWnstcSln5U8= Subject key identifier: 16:B8:F8:D3:DD:65:F4:D4:B4:C5:97:AA:DB:D2:7E:89:4B:E6:CC:12 Certificate issuer: /CN=88842878-1050-4df7-822b-ea8ec25db83d Certificate serial: 010D0C9F4328584DA6B00EE28F4CB3FEB7B59A00 Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/420963fb-a3d2-3813-9896-a813e2840697.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 2495 IP address blocks: 198.248.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:0e:e2:8f:4c:b3:fe:b7:b5:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=da83f42b-df59-487e-8948-301dd08a8a26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:26:d7:ac:f3:3f:b7:76:8a:aa:82:86:f1:50: be:3c:4e:c7:aa:78:5b:db:d0:fc:aa:b4:e9:a6:47: 9a:61:3a:24:3c:c2:37:2b:de:12:2b:5b:7c:31:6e: 0e:4d:ae:c6:8a:6b:ab:a4:ed:7e:4c:6b:16:22:7a: f4:1f:be:91:b7:79:ba:f6:83:9a:92:cb:7a:1c:2c: 0e:98:e5:70:0e:34:97:6d:f1:35:59:03:df:40:94: 44:50:82:65:23:f2:91:ca:bf:9c:a4:2a:8f:50:d9: 25:7c:d2:2c:d4:5e:13:94:6a:90:ed:d3:80:6d:31: 3b:78:f7:79:62:8f:a6:fa:9b:45:ef:7e:40:dd:6b: 90:ff:78:de:13:a8:27:59:71:ad:70:e0:90:f0:54: c4:e3:05:ab:9a:8b:2d:7b:12:91:5b:d8:a8:74:d7: eb:17:da:ee:d9:f7:ff:b4:93:12:f3:6f:89:52:12: c7:64:b2:fb:6e:ca:45:a5:5e:e9:ab:f9:d4:63:aa: f7:d0:00:37:24:6c:87:92:05:6f:86:7f:8d:bd:7b: e4:c5:a9:c8:34:5d:2b:51:1e:a0:ff:d4:a0:34:71: fd:ca:48:a4:07:ac:de:63:0c:28:e3:ea:95:a5:54: 01:0e:ec:62:b0:77:69:2a:a1:8d:63:87:61:fd:82: db:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:B8:F8:D3:DD:65:F4:D4:B4:C5:97:AA:DB:D2:7E:89:4B:E6:CC:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/420963fb-a3d2-3813-9896-a813e2840697.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl X509v3 Authority Key Identifier: keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer sbgp-ipAddrBlock: critical IPv4: 198.248.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:59:53:98:5f:e1:fe:a4:71:f5:ab:09:90:c6:1f:65:6c:04: d6:d3:df:9c:5c:25:01:80:36:6e:5c:2e:a2:92:62:83:4a:87: 68:b1:ba:f1:63:7b:ba:13:d3:fd:99:35:87:a7:ac:6a:0a:90: 76:63:0f:2f:a3:73:59:46:f8:33:75:91:bd:dd:e3:4d:83:42: 92:87:2a:e9:5b:03:b6:3c:2c:5c:63:5f:55:74:8e:e6:77:14: 16:dd:07:43:3c:59:ee:ca:d9:4d:81:36:66:9e:41:24:43:8a: 8d:1e:34:41:36:36:dd:94:7d:cf:77:14:8d:a0:ba:33:1c:d6: bf:39:3d:a7:06:92:34:43:92:63:32:23:19:93:14:0c:e6:0d: a0:5d:6f:6d:7b:f1:35:25:70:0f:86:c2:21:63:7d:9a:b2:a6: d7:3d:93:74:dc:de:7b:60:98:58:1b:54:08:6d:a4:cc:30:4f: a1:da:74:c7:12:a0:ea:5d:84:4a:e4:f3:9d:f1:1c:ef:42:49: cd:58:22:83:c8:ee:a9:1a:1e:4e:7a:da:41:c1:a2:f2:a8:f1: 30:eb:09:5d:55:0c:9e:1a:ca:91:ed:10:23:17:1b:d9:13:6a: cf:19:1c:91:c5:e3:18:7d:54:62:8b:6d:49:36:68:4a:c3:39: af:6e:b9:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msA7ij0yz/re1mgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg4NDI4NzgtMTA1MC00ZGY3LTgyMmItZWE4ZWMyNWRi ODNkMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk ZGE4M2Y0MmItZGY1OS00ODdlLTg5NDgtMzAxZGQwOGE4YTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5SbXrPM/t3aKqoKG8VC+PE7Hqnhb29D8qrTp pkeaYTokPMI3K94SK1t8MW4OTa7GimurpO1+TGsWInr0H76Rt3m69oOakst6HCwO mOVwDjSXbfE1WQPfQJREUIJlI/KRyr+cpCqPUNklfNIs1F4TlGqQ7dOAbTE7ePd5 Yo+m+ptF735A3WuQ/3jeE6gnWXGtcOCQ8FTE4wWrmostexKRW9iodNfrF9ru2ff/ tJMS82+JUhLHZLL7bspFpV7pq/nUY6r30AA3JGyHkgVvhn+NvXvkxanINF0rUR6g /9SgNHH9ykikB6zeYwwo4+qVpVQBDuxisHdpKqGNY4dh/YLbjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBa4+NPdZfTUtMWXqtvSfolL5swSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0 Mjg3OC0xMDUwLTRkZjctODIyYi1lYThlYzI1ZGI4M2QvNDIwOTYzZmItYTNkMi0z ODEzLTk4OTYtYTgxM2UyODQwNjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODg4NDI4NzgtMTA1MC00ZGY3LTgy MmItZWE4ZWMyNWRiODNkLzg4ODQyODc4LTEwNTAtNGRmNy04MjJiLWVhOGVjMjVk YjgzZC5jcmwwHwYDVR0jBBgwFoAUCvQvaSDxqtdtZzyGmgTIgB6tfZkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0Mjg3OC0xMDUwLTRkZjctODIyYi1lYThl YzI1ZGI4M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxvhEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKVZU5hf4f6kcfWrCZDGH2VsBNbT35xcJQGANm5cLqKSYoNKh2ixuvFj e7oT0/2ZNYenrGoKkHZjDy+jc1lG+DN1kb3d402DQpKHKulbA7Y8LFxjX1V0juZ3 FBbdB0M8We7K2U2BNmaeQSRDio0eNEE2Nt2Ufc93FI2gujMc1r85PacGkjRDkmMy IxmTFAzmDaBdb2178TUlcA+GwiFjfZqyptc9k3Tc3ntgmFgbVAhtpMwwT6HadMcS oOpdhErk853xHO9CSc1YIoPI7qkaHk562kHBovKo8TDrCV1VDJ4aypHtECMXG9kT as8ZHJHF4xh9VGKLbUk2aErDOa9uuXU= -----END CERTIFICATE-----Generated at Wed Apr 29 19:23:28 2026 by rpki-client