$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/ad3baf08-80ff-383c-bc9e-4c7090cee332.roa File: ad3baf08-80ff-383c-bc9e-4c7090cee332.roa (raw, json) Hash identifier: kIWLqeq7IIHZtP1IWOOQ70e4vP/dzm/jN0qklEEBbfo= Subject key identifier: 38:3D:07:FF:60:35:B7:C2:EA:16:B7:AB:58:55:84:7F:8A:19:FE:A4 Certificate issuer: /CN=88842878-1050-4df7-822b-ea8ec25db83d Certificate serial: 010D0C9F4328584DA6B00EAF10820896C7396400 Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/ad3baf08-80ff-383c-bc9e-4c7090cee332.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 2495 IP address blocks: 198.248.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:0e:af:10:82:08:96:c7:39:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=40758441-f9f6-4748-97c4-ab3ec4147d20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:3c:0f:44:45:35:8d:70:68:91:4e:12:bf:1d: a5:f0:60:2c:ea:b6:23:22:d7:48:40:a1:e5:c5:cb: 30:f0:17:46:c9:8a:85:b9:0f:22:8d:08:e9:65:1b: a8:38:42:30:3c:4f:90:b2:12:6b:f5:42:5e:6f:8a: 5c:fa:ff:ca:31:f9:8b:fa:3b:95:35:a0:e2:f7:72: cc:d1:91:40:08:de:2a:a8:e4:2d:ab:b2:90:b8:dc: c2:77:ef:60:dc:c2:cf:94:b5:8b:7a:cd:92:6e:b2: 8e:38:d3:62:c1:0f:fe:2b:0d:f5:ff:3e:d0:26:3a: f9:3e:d5:9e:bd:30:05:98:52:44:ec:e2:a3:b1:9d: e0:96:b0:57:58:59:77:ed:d0:7a:9c:2a:c0:a6:c3: 24:e7:59:a9:51:c4:26:8e:74:2d:0b:93:81:06:83: be:d3:08:d5:9a:a2:ed:4e:65:c5:31:19:a6:49:15: e0:be:de:8a:d5:15:94:49:9e:af:8a:3d:e1:b9:dd: be:bf:7f:41:c1:af:d4:8f:fe:e8:e8:80:9c:3d:9c: cb:de:a6:35:25:2a:f6:d6:24:aa:3e:2c:85:f4:0a: 1f:96:d3:06:13:7f:a1:48:86:fd:68:8c:c6:91:c9: b1:02:3c:0f:fc:27:2e:53:6b:b6:68:73:91:99:9e: 20:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:3D:07:FF:60:35:B7:C2:EA:16:B7:AB:58:55:84:7F:8A:19:FE:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/ad3baf08-80ff-383c-bc9e-4c7090cee332.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl X509v3 Authority Key Identifier: keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer sbgp-ipAddrBlock: critical IPv4: 198.248.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:69:31:8b:5d:d8:e4:85:62:23:61:a5:17:31:5d:a2:b6:71: 09:8e:8d:9c:e9:df:44:64:4b:b7:ce:36:52:df:ff:9a:9d:cc: 81:a6:84:6e:a9:8d:34:ea:3d:e6:d3:6a:be:d9:c5:8a:79:30: 5a:cf:4a:aa:af:d9:23:e2:23:ef:15:34:38:cf:f0:f3:21:b3: 92:cc:f3:81:b7:9a:c5:97:b5:34:7d:e7:20:97:72:eb:e7:79: 7b:d7:90:8d:b7:6a:98:0c:b6:6f:c9:1b:49:c9:a6:88:84:5d: 40:58:87:98:1f:59:aa:bd:79:d9:6a:82:48:ce:0c:ec:38:d7: 89:1f:34:5e:7b:5b:5a:77:a8:43:5d:07:4f:c9:a1:c5:fa:ec: 93:2a:5e:4f:f3:1d:d7:be:ac:b2:28:7b:a4:fb:f5:46:5c:bb: 13:b1:a8:f8:08:f7:7a:d8:89:8e:50:43:b7:06:0e:6f:1a:0e: e8:60:89:c9:fa:40:f7:d6:c6:48:c8:d4:05:27:dc:84:20:57: 1e:8b:d5:5c:6e:23:68:96:25:b2:e7:8b:a1:93:f2:05:45:2f: 8e:1f:15:c3:24:84:ff:ab:08:e5:16:8e:19:4c:80:36:1a:56: 95:87:2a:65:e5:9d:ad:49:6b:bf:30:31:85:61:d4:79:a3:02: d4:26:ea:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msA6vEIIIlsc5ZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg4NDI4NzgtMTA1MC00ZGY3LTgyMmItZWE4ZWMyNWRi ODNkMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk NDA3NTg0NDEtZjlmNi00NzQ4LTk3YzQtYWIzZWM0MTQ3ZDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzwPREU1jXBokU4Svx2l8GAs6rYjItdIQKHl xcsw8BdGyYqFuQ8ijQjpZRuoOEIwPE+QshJr9UJeb4pc+v/KMfmL+juVNaDi93LM 0ZFACN4qqOQtq7KQuNzCd+9g3MLPlLWLes2SbrKOONNiwQ/+Kw31/z7QJjr5PtWe vTAFmFJE7OKjsZ3glrBXWFl37dB6nCrApsMk51mpUcQmjnQtC5OBBoO+0wjVmqLt TmXFMRmmSRXgvt6K1RWUSZ6vij3hud2+v39Bwa/Uj/7o6ICcPZzL3qY1JSr21iSq PiyF9AofltMGE3+hSIb9aIzGkcmxAjwP/CcuU2u2aHORmZ4g4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDg9B/9gNbfC6ha3q1hVhH+KGf6kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0 Mjg3OC0xMDUwLTRkZjctODIyYi1lYThlYzI1ZGI4M2QvYWQzYmFmMDgtODBmZi0z ODNjLWJjOWUtNGM3MDkwY2VlMzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODg4NDI4NzgtMTA1MC00ZGY3LTgy MmItZWE4ZWMyNWRiODNkLzg4ODQyODc4LTEwNTAtNGRmNy04MjJiLWVhOGVjMjVk YjgzZC5jcmwwHwYDVR0jBBgwFoAUCvQvaSDxqtdtZzyGmgTIgB6tfZkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0Mjg3OC0xMDUwLTRkZjctODIyYi1lYThl YzI1ZGI4M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxvjIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVpMYtd2OSFYiNhpRcxXaK2cQmOjZzp30RkS7fONlLf/5qdzIGmhG6p jTTqPebTar7ZxYp5MFrPSqqv2SPiI+8VNDjP8PMhs5LM84G3msWXtTR95yCXcuvn eXvXkI23apgMtm/JG0nJpoiEXUBYh5gfWaq9edlqgkjODOw414kfNF57W1p3qENd B0/JocX67JMqXk/zHde+rLIoe6T79UZcuxOxqPgI93rYiY5QQ7cGDm8aDuhgicn6 QPfWxkjI1AUn3IQgVx6L1VxuI2iWJbLni6GT8gVFL44fFcMkhP+rCOUWjhlMgDYa VpWHKmXlna1Ja78wMYVh1HmjAtQm6mc= -----END CERTIFICATE-----Generated at Wed Apr 29 19:22:54 2026 by rpki-client