$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/8a949a8c-f8cc-3e30-adca-4e77c28241f1.roa File: 8a949a8c-f8cc-3e30-adca-4e77c28241f1.roa (raw, json) Hash identifier: Eyhn9s7VH9iWejoeleWNkhRkaH+o15sLbNRGwb6l7d0= Subject key identifier: 3A:45:97:6A:C7:F9:92:55:D1:EC:35:9A:1F:7A:FE:09:CA:A1:04:1B Certificate issuer: /CN=88842878-1050-4df7-822b-ea8ec25db83d Certificate serial: 010D0C9F4328584DA6B00ED4706F64E2FFE5BA00 Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/8a949a8c-f8cc-3e30-adca-4e77c28241f1.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 2495 IP address blocks: 198.248.36.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:0e:d4:70:6f:64:e2:ff:e5:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=809fea5d-f069-4260-bcf6-144f96dbb1d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ac:81:be:f1:02:e6:71:c3:6e:d1:9b:0a:dd: 9a:b3:d2:68:eb:31:89:ae:2e:3e:9e:01:63:04:15: 27:ce:8e:39:4f:d0:8e:74:d5:ae:25:6a:5d:f6:6e: 35:90:68:9b:d3:4e:34:eb:26:6e:77:7b:31:3c:19: a8:b3:57:60:d5:ef:94:dd:65:d3:b0:fa:cd:41:3e: c5:46:79:8b:66:fe:79:8c:5c:86:9d:58:2d:25:50: 8c:6c:e0:fe:45:58:15:13:83:fc:de:ec:9d:18:52: 5c:fb:9d:bf:5d:22:16:4e:08:2d:f8:16:24:f0:eb: 25:18:0a:d5:8d:49:55:65:c5:d6:ec:80:cc:ec:b4: b8:23:8b:50:7e:c9:4d:b5:c4:59:a9:2d:be:77:1c: de:a7:43:59:c4:17:69:8c:ab:86:ab:e9:ce:12:c9: e1:21:d4:b0:4b:45:51:29:39:5c:1e:8b:49:52:dc: 4e:3a:f4:1a:be:73:10:d0:28:be:df:6f:9a:d4:10: 9e:08:d5:cb:37:d9:a7:da:1b:a3:fc:f7:7d:af:9c: 17:61:26:b8:00:2e:22:64:b5:f6:8d:bf:2e:c4:f4: a4:b6:d8:2e:af:0c:d7:ed:b5:95:92:9b:26:37:96: bc:79:fc:a5:a4:4b:59:92:5f:a9:76:05:cc:4a:e1: 7d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:45:97:6A:C7:F9:92:55:D1:EC:35:9A:1F:7A:FE:09:CA:A1:04:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/8a949a8c-f8cc-3e30-adca-4e77c28241f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl X509v3 Authority Key Identifier: keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer sbgp-ipAddrBlock: critical IPv4: 198.248.36.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:50:3d:c5:c1:13:ed:81:5c:65:e9:24:48:c7:8e:51:86:f3: 0f:c0:bb:a3:a7:ae:c5:2c:18:fa:ec:0d:66:29:64:44:36:36: 4b:fe:38:1c:bb:2c:fb:d6:7d:68:03:dd:41:59:23:ad:36:7a: 06:07:51:06:21:ae:90:23:fd:c7:53:21:91:fe:ca:aa:f7:71: 07:0e:4c:05:fd:c3:50:07:a4:d9:4c:59:82:10:45:98:da:35: 7c:ed:c0:a0:55:ef:7b:fe:a5:39:c2:a6:52:dd:41:1e:d8:d9: 84:ef:3b:44:8a:57:e5:be:bc:85:de:a8:00:e0:c6:4c:64:22: bc:33:ba:4d:5f:90:f6:72:72:fb:0d:3a:e4:f3:ef:1b:52:8d: af:f3:e0:a8:f8:1b:60:84:45:3b:55:88:86:6a:c5:0d:f2:74: 2b:02:29:53:bb:fe:08:21:31:21:7a:23:52:34:ef:40:18:5d: 7b:35:4c:8e:09:93:02:86:0d:59:04:ab:86:90:41:a0:2a:4b: 47:67:12:9d:d8:76:1b:3e:af:48:de:75:c8:91:3a:00:c0:40: 17:e3:b6:9f:25:f8:20:c6:20:c4:49:95:56:bf:60:75:7d:d6: 67:f5:ff:fc:14:44:0c:d3:f0:47:8c:28:0f:2b:d5:df:d7:77: c4:37:66:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msA7UcG9k4v/lugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg4NDI4NzgtMTA1MC00ZGY3LTgyMmItZWE4ZWMyNWRi ODNkMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk ODA5ZmVhNWQtZjA2OS00MjYwLWJjZjYtMTQ0Zjk2ZGJiMWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxayBvvEC5nHDbtGbCt2as9Jo6zGJri4+ngFj BBUnzo45T9COdNWuJWpd9m41kGib00406yZud3sxPBmos1dg1e+U3WXTsPrNQT7F RnmLZv55jFyGnVgtJVCMbOD+RVgVE4P83uydGFJc+52/XSIWTggt+BYk8OslGArV jUlVZcXW7IDM7LS4I4tQfslNtcRZqS2+dxzep0NZxBdpjKuGq+nOEsnhIdSwS0VR KTlcHotJUtxOOvQavnMQ0Ci+32+a1BCeCNXLN9mn2huj/Pd9r5wXYSa4AC4iZLX2 jb8uxPSkttgurwzX7bWVkpsmN5a8efylpEtZkl+pdgXMSuF9nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpFl2rH+ZJV0ew1mh96/gnKoQQbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0 Mjg3OC0xMDUwLTRkZjctODIyYi1lYThlYzI1ZGI4M2QvOGE5NDlhOGMtZjhjYy0z ZTMwLWFkY2EtNGU3N2MyODI0MWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODg4NDI4NzgtMTA1MC00ZGY3LTgy MmItZWE4ZWMyNWRiODNkLzg4ODQyODc4LTEwNTAtNGRmNy04MjJiLWVhOGVjMjVk YjgzZC5jcmwwHwYDVR0jBBgwFoAUCvQvaSDxqtdtZzyGmgTIgB6tfZkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0Mjg3OC0xMDUwLTRkZjctODIyYi1lYThl YzI1ZGI4M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxvgkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALtQPcXBE+2BXGXpJEjHjlGG8w/Au6OnrsUsGPrsDWYpZEQ2Nkv+OBy7 LPvWfWgD3UFZI602egYHUQYhrpAj/cdTIZH+yqr3cQcOTAX9w1AHpNlMWYIQRZja NXztwKBV73v+pTnCplLdQR7Y2YTvO0SKV+W+vIXeqADgxkxkIrwzuk1fkPZycvsN OuTz7xtSja/z4Kj4G2CERTtViIZqxQ3ydCsCKVO7/gghMSF6I1I070AYXXs1TI4J kwKGDVkEq4aQQaAqS0dnEp3Ydhs+r0jedciROgDAQBfjtp8l+CDGIMRJlVa/YHV9 1mf1//wURAzT8EeMKA8r1d/Xd8Q3Zjk= -----END CERTIFICATE-----Generated at Wed Apr 29 19:22:47 2026 by rpki-client