$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/201220ff-d9b0-4de3-ae59-82fd519ff7d1/e53269a1-cfc2-3187-b80a-146dddd77630.roa File: e53269a1-cfc2-3187-b80a-146dddd77630.roa (raw, json) Hash identifier: XjwTXGm/Y3j7BRoQjaPQSzsz4ChkcZrwbB6+xf5a2hU= Subject key identifier: B8:3B:AC:CD:6E:C0:61:3B:1E:88:4C:6B:86:A4:A2:CB:B9:12:E0:80 Certificate issuer: /CN=201220ff-d9b0-4de3-ae59-82fd519ff7d1 Certificate serial: 010D0C9F4328584ED2CC7EE6A4D1D1031EF3E500 Authority key identifier: 92:9B:C2:A0:3E:97:0D:1B:DF:3B:73:F9:2C:B4:B3:02:89:BB:4C:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/201220ff-d9b0-4de3-ae59-82fd519ff7d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/201220ff-d9b0-4de3-ae59-82fd519ff7d1/e53269a1-cfc2-3187-b80a-146dddd77630.roa Signing time: Thu 13 Aug 2026 13:00:12 +0000 ROA not before: Thu 13 Aug 2026 13:00:12 +0000 ROA not after: Wed 11 Nov 2026 14:00:12 +0000 asID: 46746 IP address blocks: 198.160.28.0/24 maxlen: 24 198.160.29.0/24 maxlen: 24 198.160.30.0/24 maxlen: 24 198.160.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/201220ff-d9b0-4de3-ae59-82fd519ff7d1/201220ff-d9b0-4de3-ae59-82fd519ff7d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/201220ff-d9b0-4de3-ae59-82fd519ff7d1/201220ff-d9b0-4de3-ae59-82fd519ff7d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/201220ff-d9b0-4de3-ae59-82fd519ff7d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d2:cc:7e:e6:a4:d1:d1:03:1e:f3:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=201220ff-d9b0-4de3-ae59-82fd519ff7d1 Validity Not Before: Aug 13 13:00:12 2026 GMT Not After : Nov 11 14:00:12 2026 GMT Subject: CN=e34c2d02-3913-4dce-8e02-96c172fffa0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:80:55:03:41:37:00:ae:69:dc:bd:87:f4:c8: 75:9e:fc:3b:6b:df:be:2f:15:eb:55:b4:e9:1c:55: 9a:00:ce:2f:68:d3:80:68:87:d5:52:20:42:3c:bd: 2a:44:5b:20:a9:87:57:cd:2a:02:0a:96:d7:f2:09: 59:72:b7:b2:92:a9:a1:ae:33:dd:da:09:66:f4:65: a9:ab:61:4a:c7:40:e2:b1:da:c6:1a:8f:35:d8:16: ed:ee:37:d9:68:af:c4:4d:0d:dd:74:00:1b:18:59: 15:3c:8b:ee:31:6a:b1:dc:6b:4f:a1:dd:5c:1d:42: cf:d5:1a:a8:17:db:7c:2f:a9:3d:fd:ee:92:9a:3b: 4d:73:07:88:5d:01:f6:30:e5:9e:25:e3:e4:fd:3d: 17:1d:a4:8c:20:fb:fb:61:43:0c:b3:84:57:18:16: 25:4f:6a:97:2f:34:4d:4e:2f:15:b1:19:29:61:45: 9d:bb:0c:3a:e2:0e:ba:8e:d2:a4:4d:fb:9c:bc:36: 86:73:4e:1a:da:7f:58:b2:ee:ed:e3:07:67:27:f5: a7:68:35:d3:19:fe:85:42:e7:e9:24:87:13:57:8b: 3b:ea:86:63:8d:ec:aa:aa:ab:7c:e0:38:74:f5:7e: 86:d2:18:f3:4e:10:52:c6:75:63:85:a8:6c:b4:b8: fd:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:3B:AC:CD:6E:C0:61:3B:1E:88:4C:6B:86:A4:A2:CB:B9:12:E0:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/201220ff-d9b0-4de3-ae59-82fd519ff7d1/e53269a1-cfc2-3187-b80a-146dddd77630.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/201220ff-d9b0-4de3-ae59-82fd519ff7d1/201220ff-d9b0-4de3-ae59-82fd519ff7d1.crl X509v3 Authority Key Identifier: keyid:92:9B:C2:A0:3E:97:0D:1B:DF:3B:73:F9:2C:B4:B3:02:89:BB:4C:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/201220ff-d9b0-4de3-ae59-82fd519ff7d1.cer sbgp-ipAddrBlock: critical IPv4: 198.160.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:45:28:77:04:eb:d3:48:48:42:20:1e:f9:c4:a6:42:2e:08: fd:4f:9b:37:1a:cd:17:1d:fa:50:5f:77:e1:6c:e6:0b:d8:b7: c5:85:e7:95:ca:5c:47:c4:74:e3:59:6a:9e:cd:50:ae:8d:13: 69:df:b9:f5:98:7f:b5:b9:cf:ec:ec:b7:cc:e8:6a:7e:6f:ec: 64:0d:0c:74:24:5b:69:8a:16:02:b5:45:e8:df:c6:aa:f5:b4: 1a:6f:03:ef:ec:93:b7:73:51:c6:b4:e9:d3:68:5c:21:0a:21: b4:75:e6:d5:03:11:fb:b3:11:c4:c7:0f:d5:89:b6:6e:2f:25: b7:03:22:91:89:62:f6:ef:a8:6e:e0:ac:82:0a:d1:87:37:f0: e2:fa:2b:53:4b:94:1a:de:a5:f7:c2:20:88:ab:5b:4a:67:34: 43:99:0b:ff:12:9c:63:76:64:ce:de:d1:91:39:49:8c:08:61: 9f:be:b3:fb:60:1b:e1:8f:b8:9a:c0:73:85:6c:37:7a:e4:33: 93:da:1b:bb:bd:33:48:63:58:bf:f7:a6:65:6c:82:6c:97:32: b9:a3:3b:a3:8b:05:44:bb:65:bf:09:8d:e1:50:68:7f:ea:7c: 05:f2:6a:4c:22:cf:c2:a8:10:ec:20:f6:3a:fb:2b:83:ce:af: b3:12:8b:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7SzH7mpNHRAx7z5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjAxMjIwZmYtZDliMC00ZGUzLWFlNTktODJmZDUxOWZm N2QxMB4XDTI2MDgxMzEzMDAxMloXDTI2MTExMTE0MDAxMlowLzEtMCsGA1UEAxMk ZTM0YzJkMDItMzkxMy00ZGNlLThlMDItOTZjMTcyZmZmYTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YBVA0E3AK5p3L2H9Mh1nvw7a9++LxXrVbTp HFWaAM4vaNOAaIfVUiBCPL0qRFsgqYdXzSoCCpbX8glZcreykqmhrjPd2glm9GWp q2FKx0DisdrGGo812Bbt7jfZaK/ETQ3ddAAbGFkVPIvuMWqx3GtPod1cHULP1Rqo F9t8L6k9/e6SmjtNcweIXQH2MOWeJePk/T0XHaSMIPv7YUMMs4RXGBYlT2qXLzRN Ti8VsRkpYUWduww64g66jtKkTfucvDaGc04a2n9Ysu7t4wdnJ/WnaDXTGf6FQufp JIcTV4s76oZjjeyqqqt84Dh09X6G0hjzThBSxnVjhahstLj9wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLg7rM1uwGE7HohMa4akosu5EuCAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yMDEy MjBmZi1kOWIwLTRkZTMtYWU1OS04MmZkNTE5ZmY3ZDEvZTUzMjY5YTEtY2ZjMi0z MTg3LWI4MGEtMTQ2ZGRkZDc3NjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjAxMjIwZmYtZDliMC00ZGUzLWFl NTktODJmZDUxOWZmN2QxLzIwMTIyMGZmLWQ5YjAtNGRlMy1hZTU5LTgyZmQ1MTlm ZjdkMS5jcmwwHwYDVR0jBBgwFoAUkpvCoD6XDRvfO3P5LLSzAom7TMgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yMDEyMjBmZi1kOWIwLTRkZTMtYWU1OS04MmZk NTE5ZmY3ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxqAcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9FKHcE69NISEIgHvnEpkIuCP1PmzcazRcd+lBfd+Fs5gvYt8WF55XK XEfEdONZap7NUK6NE2nfufWYf7W5z+zst8zoan5v7GQNDHQkW2mKFgK1Rejfxqr1 tBpvA+/sk7dzUca06dNoXCEKIbR15tUDEfuzEcTHD9WJtm4vJbcDIpGJYvbvqG7g rIIK0Yc38OL6K1NLlBrepffCIIirW0pnNEOZC/8SnGN2ZM7e0ZE5SYwIYZ++s/tg G+GPuJrAc4VsN3rkM5PaG7u9M0hjWL/3pmVsgmyXMrmjO6OLBUS7Zb8JjeFQaH/q fAXyakwiz8KoEOwg9jr7K4POr7MSi34= -----END CERTIFICATE-----Generated at Thu Aug 27 12:28:33 2026 by rpki-client