$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/b3948b88-f2f9-3342-82a0-950f9a8ba804.roa File: b3948b88-f2f9-3342-82a0-950f9a8ba804.roa (raw, json) Hash identifier: MUd7iOHawyvqowStL89pesID7kok0MOKGIE4p8Mn9gw= Subject key identifier: DC:8F:CD:31:96:07:C7:F2:E9:D3:54:69:E9:66:37:4D:B6:5E:05:B3 Certificate issuer: /CN=88842878-1050-4df7-822b-ea8ec25db83d Certificate serial: 010D0C9F4328584DA6B013A98C497231F2648D80 Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/b3948b88-f2f9-3342-82a0-950f9a8ba804.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 2495 IP address blocks: 198.248.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:13:a9:8c:49:72:31:f2:64:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=4628e194-02ce-4751-8868-41387c2c6153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ab:5f:ba:f3:9e:ec:b7:f1:8e:92:2e:19:5e: f4:83:29:e2:3a:66:6b:56:62:fa:3a:c5:af:25:54: 6f:a7:a8:66:e1:e5:af:c7:62:8f:9e:75:cb:2f:8e: f0:7c:8c:0b:cb:de:4c:16:4c:66:48:89:8d:ff:1c: 32:30:30:53:83:88:12:05:42:5f:3f:f2:5f:de:85: a8:3d:02:30:c9:4c:fa:38:62:d9:ab:ed:df:10:c2: 6a:6b:c8:5a:0b:80:79:57:27:52:f2:18:03:29:d3: e8:3d:74:79:39:20:53:7a:de:21:b8:00:82:13:36: 4e:8e:2e:e3:ed:c4:2d:e6:8b:6c:42:bf:6c:75:c4: 8e:cc:35:cc:b0:17:45:25:85:dc:88:31:ab:ef:b8: ee:77:7d:1b:d9:f5:d2:ca:e2:69:f1:9d:b8:bd:c6: 75:c9:9d:34:4f:4f:cc:03:7f:68:02:09:71:db:4d: cc:92:cf:ba:d6:3a:d1:7a:88:f4:61:5f:ca:a7:cc: 6f:ec:03:bc:11:15:08:28:f0:cc:c5:c2:d4:9e:8e: 6d:fc:1c:8a:73:5b:5c:f3:b6:b3:db:82:7a:b1:68: e0:f6:8f:87:87:05:9b:13:f2:85:7a:21:dd:47:69: 1c:c6:ae:bf:25:84:73:b5:85:b1:ef:9d:52:b4:ec: 13:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:8F:CD:31:96:07:C7:F2:E9:D3:54:69:E9:66:37:4D:B6:5E:05:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/b3948b88-f2f9-3342-82a0-950f9a8ba804.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl X509v3 Authority Key Identifier: keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer sbgp-ipAddrBlock: critical IPv4: 198.248.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:4b:63:58:f7:77:9d:99:1d:be:97:00:30:4e:24:34:53:29: 6b:13:ce:c0:bd:96:bd:50:f1:cc:ee:c9:6a:15:96:c6:00:27: 04:2e:a5:aa:c5:e0:6b:d6:7c:94:ad:d7:cd:aa:e6:2f:c1:c3: c0:15:3b:ee:5d:26:4e:bc:8f:ad:c7:94:9f:6b:51:44:54:3b: 7b:07:43:8f:3d:f9:cb:31:7f:9a:b1:40:71:41:f1:db:0a:63: cb:2a:9e:e6:55:e7:60:d7:80:88:cf:3a:89:04:f2:54:8c:e7: a9:fc:6f:30:9c:45:75:5c:de:9b:ee:2a:96:61:d1:ed:bf:1d: 6e:12:67:78:36:5c:10:8b:9f:52:56:ab:98:1f:21:c1:2c:55: 78:70:83:f7:e4:7d:80:14:18:81:4f:a0:6c:76:87:8c:a2:ec: bc:33:e5:40:39:61:83:31:9b:4a:9a:8f:32:23:bf:fa:4d:c6: 5b:38:b1:f0:e5:a8:4d:31:99:d6:de:dd:dd:12:c6:85:35:60: fc:28:80:88:16:22:28:17:4a:6f:40:35:cc:4a:14:ab:ef:a6: fa:6c:db:c2:ee:bc:b2:a3:a5:6c:11:33:2e:1d:11:c4:89:02: 6a:1f:9a:b2:01:ef:66:43:6b:ec:81:cc:47:44:d9:2b:43:98: 7b:1e:64:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msBOpjElyMfJkjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg4NDI4NzgtMTA1MC00ZGY3LTgyMmItZWE4ZWMyNWRi ODNkMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk NDYyOGUxOTQtMDJjZS00NzUxLTg4NjgtNDEzODdjMmM2MTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKtfuvOe7LfxjpIuGV70gyniOmZrVmL6OsWv JVRvp6hm4eWvx2KPnnXLL47wfIwLy95MFkxmSImN/xwyMDBTg4gSBUJfP/Jf3oWo PQIwyUz6OGLZq+3fEMJqa8haC4B5VydS8hgDKdPoPXR5OSBTet4huACCEzZOji7j 7cQt5otsQr9sdcSOzDXMsBdFJYXciDGr77jud30b2fXSyuJp8Z24vcZ1yZ00T0/M A39oAglx203Mks+61jrReoj0YV/Kp8xv7AO8ERUIKPDMxcLUno5t/ByKc1tc87az 24J6sWjg9o+HhwWbE/KFeiHdR2kcxq6/JYRztYWx751StOwTHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNyPzTGWB8fy6dNUaelmN022XgWzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0 Mjg3OC0xMDUwLTRkZjctODIyYi1lYThlYzI1ZGI4M2QvYjM5NDhiODgtZjJmOS0z MzQyLTgyYTAtOTUwZjlhOGJhODA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODg4NDI4NzgtMTA1MC00ZGY3LTgy MmItZWE4ZWMyNWRiODNkLzg4ODQyODc4LTEwNTAtNGRmNy04MjJiLWVhOGVjMjVk YjgzZC5jcmwwHwYDVR0jBBgwFoAUCvQvaSDxqtdtZzyGmgTIgB6tfZkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0Mjg3OC0xMDUwLTRkZjctODIyYi1lYThl YzI1ZGI4M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxvjCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZLY1j3d52ZHb6XADBOJDRTKWsTzsC9lr1Q8czuyWoVlsYAJwQuparF 4GvWfJSt182q5i/Bw8AVO+5dJk68j63HlJ9rUURUO3sHQ489+csxf5qxQHFB8dsK Y8sqnuZV52DXgIjPOokE8lSM56n8bzCcRXVc3pvuKpZh0e2/HW4SZ3g2XBCLn1JW q5gfIcEsVXhwg/fkfYAUGIFPoGx2h4yi7Lwz5UA5YYMxm0qajzIjv/pNxls4sfDl qE0xmdbe3d0SxoU1YPwogIgWIigXSm9ANcxKFKvvpvps28LuvLKjpWwRMy4dEcSJ AmofmrIB72ZDa+yBzEdE2StDmHseZLU= -----END CERTIFICATE-----Generated at Wed Apr 29 19:24:22 2026 by rpki-client