$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/a61a6602-9cfc-3547-b30e-c9320912a8db.roa File: a61a6602-9cfc-3547-b30e-c9320912a8db.roa (raw, json) Hash identifier: D2uRQ0HJgUuoSYAQ4RqPxKigk+cgBV9V7oR392O0plU= Subject key identifier: 87:EB:EE:C3:E8:A8:E8:E1:6F:E6:7E:B9:F3:29:CB:9D:9F:F1:C8:EB Certificate issuer: /CN=88842878-1050-4df7-822b-ea8ec25db83d Certificate serial: 010D0C9F4328584DA6B013DB66D791C3F6DB1FC0 Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/a61a6602-9cfc-3547-b30e-c9320912a8db.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 2495 IP address blocks: 198.248.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:13:db:66:d7:91:c3:f6:db:1f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=5191e374-cdee-46ca-b54d-2fc08880011f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:61:95:b5:03:65:02:6c:da:00:07:9e:bc:3b: b1:7d:7f:78:1f:b8:f0:10:57:3e:33:67:b3:83:c0: 14:54:4c:cd:18:37:b6:2e:ac:31:66:ef:2e:7c:a3: 53:01:28:69:96:83:3b:06:16:a7:05:d4:07:a9:61: c0:ba:60:69:d7:d1:c1:aa:ee:8d:6c:9f:5d:18:dc: bd:c4:ca:95:28:cd:f8:a5:30:18:d0:25:73:48:5e: c4:49:3c:ad:4c:1f:62:5f:67:66:05:12:e1:90:8c: 99:34:62:ac:68:f8:07:54:bd:29:c5:c9:e0:ca:61: 4a:4b:4e:a7:29:61:6a:fc:16:88:bf:ab:13:cd:c1: 24:e5:3d:76:76:f4:2d:2d:d5:be:bf:30:e4:66:ed: 24:2b:38:41:96:70:ee:24:73:82:56:e5:c7:ca:1d: e5:e1:62:b2:76:bd:49:9c:e5:d4:ef:0c:75:44:f3: 98:f0:89:27:4a:ff:48:7b:24:08:1d:73:df:5e:b7: e2:d0:ad:ce:27:e5:be:94:6d:cb:03:9f:52:3c:6d: 61:e1:5f:4f:f3:e0:56:2e:a3:31:06:3d:90:d4:90: 7a:ae:e3:0c:3a:5e:ee:e3:ba:a0:02:ae:19:95:90: 5b:85:fb:54:44:94:6f:2d:ee:6a:67:26:9c:11:e7: 49:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:EB:EE:C3:E8:A8:E8:E1:6F:E6:7E:B9:F3:29:CB:9D:9F:F1:C8:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/a61a6602-9cfc-3547-b30e-c9320912a8db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl X509v3 Authority Key Identifier: keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer sbgp-ipAddrBlock: critical IPv4: 198.248.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:5f:e3:99:65:bc:80:52:a2:1c:57:f5:96:56:c1:2c:bb:de: 68:39:41:00:c2:8e:3b:62:ae:7c:81:08:8e:c8:58:eb:33:d5: d8:6a:28:78:28:95:c6:9f:c6:85:17:b5:0a:4d:35:c1:e5:bf: 37:45:22:85:30:98:58:4a:83:ac:c8:32:13:4b:03:97:f3:01: 55:8a:1c:cc:6b:c0:d3:1b:50:54:4a:da:71:8f:5a:c2:d3:c9: cb:74:3d:4d:4e:12:ba:89:73:ef:22:f5:f4:c7:23:b1:c8:71: 58:51:eb:86:48:e5:60:b8:7e:11:eb:59:b8:9f:ab:85:b1:6e: 6d:0f:19:1f:25:46:ba:1a:b5:e7:bf:8b:0c:04:7c:8c:d9:b5: 4a:49:e1:6d:19:0b:bf:b3:2a:5d:ba:79:15:7e:74:9b:eb:aa: 6c:c7:e2:46:97:cd:af:dd:34:a2:7b:ed:62:f7:8a:a0:92:fe: 57:bc:c8:4d:6b:70:36:00:95:a1:b5:5b:5b:1e:03:71:71:79: 09:ce:55:92:13:b2:13:1c:a2:62:9c:6b:b1:51:92:eb:13:1a: cf:e0:cf:d9:5a:d2:10:7f:44:28:36:a0:b4:e5:bd:38:96:5f: a1:3c:4d:61:2a:11:13:01:80:a7:48:d3:1e:8a:73:c5:d1:cb: 18:53:62:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msBPbZteRw/bbH8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg4NDI4NzgtMTA1MC00ZGY3LTgyMmItZWE4ZWMyNWRi ODNkMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk NTE5MWUzNzQtY2RlZS00NmNhLWI1NGQtMmZjMDg4ODAwMTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmGVtQNlAmzaAAeevDuxfX94H7jwEFc+M2ez g8AUVEzNGDe2LqwxZu8ufKNTAShploM7BhanBdQHqWHAumBp19HBqu6NbJ9dGNy9 xMqVKM34pTAY0CVzSF7ESTytTB9iX2dmBRLhkIyZNGKsaPgHVL0pxcngymFKS06n KWFq/BaIv6sTzcEk5T12dvQtLdW+vzDkZu0kKzhBlnDuJHOCVuXHyh3l4WKydr1J nOXU7wx1RPOY8IknSv9IeyQIHXPfXrfi0K3OJ+W+lG3LA59SPG1h4V9P8+BWLqMx Bj2Q1JB6ruMMOl7u47qgAq4ZlZBbhftURJRvLe5qZyacEedJgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIfr7sPoqOjhb+Z+ufMpy52f8cjrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0 Mjg3OC0xMDUwLTRkZjctODIyYi1lYThlYzI1ZGI4M2QvYTYxYTY2MDItOWNmYy0z NTQ3LWIzMGUtYzkzMjA5MTJhOGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODg4NDI4NzgtMTA1MC00ZGY3LTgy MmItZWE4ZWMyNWRiODNkLzg4ODQyODc4LTEwNTAtNGRmNy04MjJiLWVhOGVjMjVk YjgzZC5jcmwwHwYDVR0jBBgwFoAUCvQvaSDxqtdtZzyGmgTIgB6tfZkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0Mjg3OC0xMDUwLTRkZjctODIyYi1lYThl YzI1ZGI4M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxvhIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFf45llvIBSohxX9ZZWwSy73mg5QQDCjjtirnyBCI7IWOsz1dhqKHgo lcafxoUXtQpNNcHlvzdFIoUwmFhKg6zIMhNLA5fzAVWKHMxrwNMbUFRK2nGPWsLT yct0PU1OErqJc+8i9fTHI7HIcVhR64ZI5WC4fhHrWbifq4Wxbm0PGR8lRroatee/ iwwEfIzZtUpJ4W0ZC7+zKl26eRV+dJvrqmzH4kaXza/dNKJ77WL3iqCS/le8yE1r cDYAlaG1W1seA3FxeQnOVZITshMcomKca7FRkusTGs/gz9la0hB/RCg2oLTlvTiW X6E8TWEqERMBgKdI0x6Kc8XRyxhTYhY= -----END CERTIFICATE-----Generated at Wed Apr 29 20:07:19 2026 by rpki-client