$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dfb89ee3-c085-3c66-bffa-55be6e6bbf1e.roa File: dfb89ee3-c085-3c66-bffa-55be6e6bbf1e.roa (raw, json) Hash identifier: Nr2r5pQkkVxPG7OlSj2/Ry6EbUM0xjiSOo8tkYMSQnY= Subject key identifier: 1A:EF:0A:D6:60:86:A7:3D:58:AD:50:43:7F:D8:21:6C:98:7C:FD:AE Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E296EFFC40CC21A1AF60FF500 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dfb89ee3-c085-3c66-bffa-55be6e6bbf1e.roa Signing time: Sat 13 Jun 2026 21:00:12 +0000 ROA not before: Sat 13 Jun 2026 21:00:12 +0000 ROA not after: Fri 11 Sep 2026 21:00:12 +0000 asID: 36617 IP address blocks: 198.17.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:29:6e:ff:c4:0c:c2:1a:1a:f6:0f:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 13 21:00:12 2026 GMT Not After : Sep 11 21:00:12 2026 GMT Subject: CN=04f54b92-999d-466c-b64e-1b121dc703a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4b:b6:73:d7:59:11:ba:07:e3:d8:e3:bf:21: c6:4e:77:39:96:f1:a0:13:79:f5:b8:52:a9:4b:cd: 5f:d1:8b:f9:b7:3f:7f:56:3c:33:6b:6a:99:c6:4c: 83:53:20:ed:96:e8:8a:cf:9c:28:68:dc:95:2a:9c: d6:f4:a1:ab:78:29:9d:fe:f5:86:38:a7:d4:a3:2f: a5:93:c0:71:60:db:b2:55:b5:9a:8a:84:25:ac:5f: fd:71:17:0a:55:75:cd:e0:b5:8c:4c:cc:15:95:57: aa:05:cc:55:bf:7c:f5:17:48:a7:9f:20:6d:02:30: fc:39:77:d0:21:a7:d9:f1:32:06:1b:68:69:e2:02: e1:a1:54:85:bc:a1:38:2d:cb:4c:10:dd:22:02:0c: a9:74:7c:fa:d0:04:6c:45:64:ef:f9:8d:48:33:a8: ba:33:2e:f6:90:8a:2a:6f:85:a5:15:80:b7:2c:85: 35:b9:48:1d:81:d4:98:b1:51:dd:bf:66:30:6e:b8: 4c:14:bc:33:7f:eb:49:38:a7:69:5f:ff:90:f4:90: 6c:88:b6:00:d2:35:bb:20:c9:7b:55:28:ff:41:b1: 41:4b:ec:0b:0f:32:ca:b6:68:15:28:33:93:08:4b: e9:aa:7b:3c:e9:7e:ed:24:67:60:7d:7c:af:37:c4: 14:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:EF:0A:D6:60:86:A7:3D:58:AD:50:43:7F:D8:21:6C:98:7C:FD:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dfb89ee3-c085-3c66-bffa-55be6e6bbf1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 198.17.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:7a:27:e6:1c:7b:f2:a6:c9:f4:cd:26:e7:2c:68:71:9b:06: f4:cf:28:81:ae:0d:99:33:c9:45:95:a0:73:66:80:87:54:d6: 3e:da:6b:b6:9e:b5:af:a5:05:76:61:2d:9a:35:31:39:ca:6e: a1:a0:98:d9:01:99:e4:da:61:64:4a:f2:2f:2b:88:c9:2b:45: cb:52:56:f0:1b:46:30:0e:a6:d7:72:63:fa:4a:9f:17:a9:6d: e2:dd:65:0f:56:36:d4:d5:03:cb:ca:b3:3a:fb:8b:ff:89:75: be:95:c2:f4:40:45:01:5e:06:44:be:aa:0e:09:e5:d2:0c:ba: 3c:47:12:35:4b:d7:17:ab:65:9c:79:e7:77:f7:0c:1f:bc:46: 4d:ba:64:a9:d5:3a:4e:be:62:53:0b:c7:46:dd:58:6e:9b:b3: 31:c0:3f:35:0b:b4:c4:02:46:b9:b5:b9:15:f0:b8:f3:3e:64: 05:5d:f2:c0:bc:48:66:45:a0:64:47:af:a7:ba:87:3f:34:3f: d9:d2:6b:ed:e5:19:50:eb:4d:aa:2e:6a:75:87:18:7a:47:03: 70:44:bc:29:4f:54:fe:b4:22:0c:c0:f0:e7:32:a9:62:b2:06: 9f:ae:5a:bd:a6:ae:03:1b:29:72:54:d0:2e:0e:06:f3:ae:7f: 57:e3:83:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4pbv/EDMIaGvYP9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDYxMzIxMDAxMloXDTI2MDkxMTIxMDAxMlowLzEtMCsGA1UEAxMk MDRmNTRiOTItOTk5ZC00NjZjLWI2NGUtMWIxMjFkYzcwM2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEu2c9dZEboH49jjvyHGTnc5lvGgE3n1uFKp S81f0Yv5tz9/Vjwza2qZxkyDUyDtluiKz5woaNyVKpzW9KGreCmd/vWGOKfUoy+l k8BxYNuyVbWaioQlrF/9cRcKVXXN4LWMTMwVlVeqBcxVv3z1F0innyBtAjD8OXfQ IafZ8TIGG2hp4gLhoVSFvKE4LctMEN0iAgypdHz60ARsRWTv+Y1IM6i6My72kIoq b4WlFYC3LIU1uUgdgdSYsVHdv2YwbrhMFLwzf+tJOKdpX/+Q9JBsiLYA0jW7IMl7 VSj/QbFBS+wLDzLKtmgVKDOTCEvpqns86X7tJGdgfXyvN8QUNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBrvCtZghqc9WK1QQ3/YIWyYfP2uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGZiODllZTMtYzA4NS0z YzY2LWJmZmEtNTViZTZlNmJiZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABx6J+Yce/KmyfTNJucsaHGbBvTPKIGuDZkzyUWVoHNmgIdU1j7aa7ae ta+lBXZhLZo1MTnKbqGgmNkBmeTaYWRK8i8riMkrRctSVvAbRjAOptdyY/pKnxep beLdZQ9WNtTVA8vKszr7i/+Jdb6VwvRARQFeBkS+qg4J5dIMujxHEjVL1xerZZx5 53f3DB+8Rk26ZKnVOk6+YlMLx0bdWG6bszHAPzULtMQCRrm1uRXwuPM+ZAVd8sC8 SGZFoGRHr6e6hz80P9nSa+3lGVDrTaouanWHGHpHA3BEvClPVP60IgzA8OcyqWKy Bp+uWr2mrgMbKXJU0C4OBvOuf1fjgxY= -----END CERTIFICATE-----Generated at Sun Jun 28 19:34:36 2026 by rpki-client