$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/289a5c12-4aa0-3194-a722-67211740bbad.roa File: 289a5c12-4aa0-3194-a722-67211740bbad.roa (raw, json) Hash identifier: dchmFTrZBfC1rKW5vsAoyZbHzpQm9AYYfXpLIwsspyI= Subject key identifier: 25:04:38:2C:50:8A:BA:BC:B8:42:DA:31:A9:66:7C:6A:54:9D:0F:ED Certificate issuer: /CN=d41a3f41-d9b3-4528-8251-900156f4efac Certificate serial: 010D0C9F4328584EA799C03AF7F6B7E678D5E000 Authority key identifier: 39:E5:33:99:84:FC:E9:9C:F0:38:96:9B:D1:90:CA:AC:83:7E:E0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/289a5c12-4aa0-3194-a722-67211740bbad.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 14525 IP address blocks: 198.22.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:99:c0:3a:f7:f6:b7:e6:78:d5:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d41a3f41-d9b3-4528-8251-900156f4efac Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d09ca75f-fa00-4bb4-b5e8-ed7d164d27cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:da:a9:d1:89:45:89:3c:4e:1d:b5:35:99:38: 9f:72:6f:e2:31:7d:d1:74:81:81:4b:19:41:54:e9: 33:3a:f1:c9:1a:3f:69:27:a3:42:d0:25:6f:b4:16: 19:8d:02:a7:54:00:e4:e1:1f:6d:3a:40:4e:17:a7: 83:37:2f:e2:d2:8f:f1:53:c2:fb:11:29:38:28:7a: d2:3d:6b:ba:a5:14:e4:2a:1c:06:15:03:f8:b9:be: 3c:7b:59:12:0e:d6:6d:22:27:f0:8e:2c:c3:10:1f: 36:d4:03:25:19:52:28:db:cf:8c:be:92:e3:10:96: e1:b6:dc:2d:4a:9a:1e:1a:e3:7a:f6:1d:42:fb:2c: 11:d4:99:f0:46:f5:c1:d4:ee:6a:fc:66:69:f7:18: 70:6e:43:a5:5f:62:2d:22:bc:64:4b:23:45:4a:b7: 1a:dc:da:43:e8:72:48:93:0a:b5:19:b6:87:a9:ea: fd:24:e1:bc:22:6b:7e:85:bc:8c:96:80:7b:bd:26: 4f:c3:66:61:cb:79:f5:4b:08:9f:06:b9:a3:e3:00: 45:c5:ae:25:25:eb:69:4c:2c:27:39:82:3e:b8:b8: 3c:30:6e:e5:66:69:d8:7a:bf:17:1c:a0:30:8e:46: 0f:3f:c8:b3:2a:7d:1e:4b:5c:ec:ce:61:7a:6c:b5: 1a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:04:38:2C:50:8A:BA:BC:B8:42:DA:31:A9:66:7C:6A:54:9D:0F:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/289a5c12-4aa0-3194-a722-67211740bbad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac/d41a3f41-d9b3-4528-8251-900156f4efac.crl X509v3 Authority Key Identifier: keyid:39:E5:33:99:84:FC:E9:9C:F0:38:96:9B:D1:90:CA:AC:83:7E:E0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d41a3f41-d9b3-4528-8251-900156f4efac.cer sbgp-ipAddrBlock: critical IPv4: 198.22.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:d9:c1:76:f2:7f:9b:c8:28:0f:03:14:7b:6d:a0:8a:66:72: d7:93:5d:0a:19:3e:2b:ea:6c:4a:40:57:43:f8:15:f2:70:97: f1:d4:91:46:47:09:b4:13:df:66:bf:1d:da:11:81:f7:25:08: 2b:20:55:d5:5e:c0:4a:da:fb:dd:b3:4c:5f:4e:84:cc:86:9f: e5:99:a1:30:c1:c0:6f:6c:9b:c1:6c:51:04:fa:5a:76:95:80: a7:88:a1:36:ff:d9:1e:58:6a:1b:71:43:4b:27:e5:90:4b:94: 18:19:05:67:93:ed:1b:ac:48:f5:31:34:3b:e0:44:41:ae:df: b8:66:2f:a8:58:86:2b:72:c7:e2:ba:a7:1a:82:b7:c1:64:fe: f1:34:12:06:2c:77:51:ff:cb:50:fb:ac:e4:31:71:ab:b2:57: e2:d2:8a:47:95:c6:b5:f9:77:a1:80:a0:98:a5:0d:3b:6d:4f: 76:6e:aa:ce:bb:23:99:81:5a:d0:fc:45:cc:9e:19:d1:2f:06: e2:29:8e:d2:9b:7e:91:42:6b:4a:0b:e0:21:8b:11:bf:28:8e: c9:3a:c9:16:fd:b3:32:77:5f:a0:fc:cc:62:58:4d:6b:c2:d2: a3:04:a8:57:4f:ff:0d:83:14:4e:50:16:a9:7b:45:e3:03:79: 70:b9:ef:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmcA69/a35njV4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQxYTNmNDEtZDliMy00NTI4LTgyNTEtOTAwMTU2ZjRl ZmFjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDA5Y2E3NWYtZmEwMC00YmI0LWI1ZTgtZWQ3ZDE2NGQyN2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9qp0YlFiTxOHbU1mTifcm/iMX3RdIGBSxlB VOkzOvHJGj9pJ6NC0CVvtBYZjQKnVADk4R9tOkBOF6eDNy/i0o/xU8L7ESk4KHrS PWu6pRTkKhwGFQP4ub48e1kSDtZtIifwjizDEB821AMlGVIo28+MvpLjEJbhttwt SpoeGuN69h1C+ywR1JnwRvXB1O5q/GZp9xhwbkOlX2ItIrxkSyNFSrca3NpD6HJI kwq1GbaHqer9JOG8Imt+hbyMloB7vSZPw2Zhy3n1SwifBrmj4wBFxa4lJetpTCwn OYI+uLg8MG7lZmnYer8XHKAwjkYPP8izKn0eS1zszmF6bLUaTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUEOCxQirq8uELaMalmfGpUnQ/tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNDFh M2Y0MS1kOWIzLTQ1MjgtODI1MS05MDAxNTZmNGVmYWMvMjg5YTVjMTItNGFhMC0z MTk0LWE3MjItNjcyMTE3NDBiYmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDQxYTNmNDEtZDliMy00NTI4LTgy NTEtOTAwMTU2ZjRlZmFjL2Q0MWEzZjQxLWQ5YjMtNDUyOC04MjUxLTkwMDE1NmY0 ZWZhYy5jcmwwHwYDVR0jBBgwFoAUOeUzmYT86ZzwOJab0ZDKrIN+4IIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNDFhM2Y0MS1kOWIzLTQ1MjgtODI1MS05MDAx NTZmNGVmYWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLZwXbyf5vIKA8DFHttoIpmcteTXQoZPivqbEpAV0P4FfJwl/HUkUZH CbQT32a/HdoRgfclCCsgVdVewEra+92zTF9OhMyGn+WZoTDBwG9sm8FsUQT6WnaV gKeIoTb/2R5YahtxQ0sn5ZBLlBgZBWeT7RusSPUxNDvgREGu37hmL6hYhityx+K6 pxqCt8Fk/vE0EgYsd1H/y1D7rOQxcauyV+LSikeVxrX5d6GAoJilDTttT3Zuqs67 I5mBWtD8RcyeGdEvBuIpjtKbfpFCa0oL4CGLEb8ojsk6yRb9szJ3X6D8zGJYTWvC 0qMEqFdP/w2DFE5QFql7ReMDeXC57zA= -----END CERTIFICATE-----Generated at Fri Aug 21 22:14:59 2026 by rpki-client