$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8e25869-fb35-4b76-8053-1b6c51bd3c3f/97648492-9e8b-3c28-a0d8-ce456b1ffd6e.roa File: 97648492-9e8b-3c28-a0d8-ce456b1ffd6e.roa (raw, json) Hash identifier: AdgAk9bn0tB6kIPY+WoPntf0agL4H3QCBqcnzOcy72Y= Subject key identifier: 34:7F:3F:6F:BC:34:73:66:6A:92:ED:1E:01:57:9D:7B:51:F7:86:B1 Certificate issuer: /CN=d8e25869-fb35-4b76-8053-1b6c51bd3c3f Certificate serial: 010D0C9F4328584DDE8809037A37D71ADF9C2E00 Authority key identifier: 55:C5:5C:0C:ED:45:D1:3D:8D:92:AE:1B:FA:AA:A8:17:CB:B9:D7:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8e25869-fb35-4b76-8053-1b6c51bd3c3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8e25869-fb35-4b76-8053-1b6c51bd3c3f/97648492-9e8b-3c28-a0d8-ce456b1ffd6e.roa Signing time: Mon 18 May 2026 01:00:24 +0000 ROA not before: Mon 18 May 2026 01:00:24 +0000 ROA not after: Sun 16 Aug 2026 01:00:24 +0000 asID: 14618 IP address blocks: 208.88.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8e25869-fb35-4b76-8053-1b6c51bd3c3f/d8e25869-fb35-4b76-8053-1b6c51bd3c3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8e25869-fb35-4b76-8053-1b6c51bd3c3f/d8e25869-fb35-4b76-8053-1b6c51bd3c3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8e25869-fb35-4b76-8053-1b6c51bd3c3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 20 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:de:88:09:03:7a:37:d7:1a:df:9c:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8e25869-fb35-4b76-8053-1b6c51bd3c3f Validity Not Before: May 18 01:00:24 2026 GMT Not After : Aug 16 01:00:24 2026 GMT Subject: CN=a880ffbb-3187-4d1f-937c-5e8f6b08030b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:79:aa:3b:cd:6d:f5:77:f4:36:4c:36:27:67: 34:79:18:3d:12:c3:34:76:69:25:d3:69:30:aa:f8: 3e:0f:fb:7d:0b:30:ba:07:90:94:c7:15:6a:f1:fe: dd:80:e6:75:5b:f6:2c:e8:5f:5a:2d:ad:92:d6:1c: 3b:be:0e:6c:d7:30:74:c7:b5:c5:bc:98:9c:9f:b3: fc:db:99:00:ad:f6:ff:9a:98:0d:9d:0a:e8:8a:e0: 02:db:a9:89:50:fa:d9:fb:fd:cd:63:42:1a:9f:bb: 14:b0:53:94:83:96:83:5d:6e:14:8e:19:37:e7:20: 68:a6:e1:ce:12:04:42:da:6b:df:14:5e:6a:d9:75: fa:4a:6f:7d:30:72:ed:2d:f2:fc:a4:bc:d7:18:97: 6f:f9:93:8b:91:16:dc:29:85:3b:32:df:18:c7:fa: 5a:0c:50:87:92:96:97:ee:43:08:9b:e9:a1:58:90: 8d:e1:dc:25:0d:69:db:7f:e4:12:80:27:09:d7:dc: fb:5e:92:04:1c:65:3f:86:78:57:bd:dd:cd:eb:b4: 72:a5:ef:b2:d7:0e:c2:10:cf:c1:b2:98:8d:3a:6a: ef:64:0f:6a:18:bc:92:02:df:4d:53:48:e1:a3:f7: 61:c9:14:fd:d9:81:64:fb:85:fb:c8:fe:c1:79:5b: a7:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:7F:3F:6F:BC:34:73:66:6A:92:ED:1E:01:57:9D:7B:51:F7:86:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8e25869-fb35-4b76-8053-1b6c51bd3c3f/97648492-9e8b-3c28-a0d8-ce456b1ffd6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8e25869-fb35-4b76-8053-1b6c51bd3c3f/d8e25869-fb35-4b76-8053-1b6c51bd3c3f.crl X509v3 Authority Key Identifier: keyid:55:C5:5C:0C:ED:45:D1:3D:8D:92:AE:1B:FA:AA:A8:17:CB:B9:D7:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8e25869-fb35-4b76-8053-1b6c51bd3c3f.cer sbgp-ipAddrBlock: critical IPv4: 208.88.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:1a:5d:34:f8:98:50:63:3b:85:35:03:cf:8a:bc:01:db:d8: 3b:84:14:e1:1e:b5:3a:e6:f5:a0:99:8d:e9:39:02:19:ac:a4: 6e:81:8c:75:14:0e:4b:a8:c9:28:be:66:f6:a5:e3:0d:97:1a: 6a:dd:1e:35:23:aa:18:7b:01:d7:2c:3d:da:aa:a7:93:30:52: 63:92:56:3d:48:98:41:76:2e:85:9f:70:eb:2b:4f:56:28:30: 6f:6c:91:4a:d5:cc:e3:6d:dd:42:38:63:ba:ff:90:aa:5e:27: 53:b3:6d:1b:2b:c8:6a:16:47:37:3c:7d:01:1a:ff:fa:e5:e3: d7:47:52:28:7b:ae:50:9b:af:9d:74:12:96:a5:67:51:da:7e: f3:c8:6f:95:7f:53:33:9c:8c:a0:e9:f4:d7:92:2e:3a:7d:f3: e4:4f:00:5a:a9:0b:59:0b:56:73:39:43:aa:d3:60:e3:09:04: 0d:a5:4d:10:ae:04:8a:4b:8b:39:c2:eb:3f:57:06:da:85:cb: 55:1b:20:b1:b7:dc:46:71:f6:47:06:56:1d:93:92:86:98:39: c9:f7:09:65:cd:e2:86:9a:67:50:16:fd:5e:33:aa:9e:8f:5d: 06:ca:ac:3f:b8:75:9e:17:17:96:10:a0:be:b5:ff:53:d5:88: 8c:69:87:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3eiAkDejfXGt+cLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDhlMjU4NjktZmIzNS00Yjc2LTgwNTMtMWI2YzUxYmQz YzNmMB4XDTI2MDUxODAxMDAyNFoXDTI2MDgxNjAxMDAyNFowLzEtMCsGA1UEAxMk YTg4MGZmYmItMzE4Ny00ZDFmLTkzN2MtNWU4ZjZiMDgwMzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nmqO81t9Xf0Nkw2J2c0eRg9EsM0dmkl02kw qvg+D/t9CzC6B5CUxxVq8f7dgOZ1W/Ys6F9aLa2S1hw7vg5s1zB0x7XFvJicn7P8 25kArfb/mpgNnQroiuAC26mJUPrZ+/3NY0Ian7sUsFOUg5aDXW4Ujhk35yBopuHO EgRC2mvfFF5q2XX6Sm99MHLtLfL8pLzXGJdv+ZOLkRbcKYU7Mt8Yx/paDFCHkpaX 7kMIm+mhWJCN4dwlDWnbf+QSgCcJ19z7XpIEHGU/hnhXvd3N67Rype+y1w7CEM/B spiNOmrvZA9qGLySAt9NU0jho/dhyRT92YFk+4X7yP7BeVunfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDR/P2+8NHNmapLtHgFXnXtR94axMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kOGUy NTg2OS1mYjM1LTRiNzYtODA1My0xYjZjNTFiZDNjM2YvOTc2NDg0OTItOWU4Yi0z YzI4LWEwZDgtY2U0NTZiMWZmZDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZDhlMjU4NjktZmIzNS00Yjc2LTgw NTMtMWI2YzUxYmQzYzNmL2Q4ZTI1ODY5LWZiMzUtNGI3Ni04MDUzLTFiNmM1MWJk M2MzZi5jcmwwHwYDVR0jBBgwFoAUVcVcDO1F0T2Nkq4b+qqoF8u5150wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kOGUyNTg2OS1mYjM1LTRiNzYtODA1My0xYjZj NTFiZDNjM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FhiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQaXTT4mFBjO4U1A8+KvAHb2DuEFOEetTrm9aCZjek5AhmspG6BjHUU DkuoySi+Zval4w2XGmrdHjUjqhh7AdcsPdqqp5MwUmOSVj1ImEF2LoWfcOsrT1Yo MG9skUrVzONt3UI4Y7r/kKpeJ1OzbRsryGoWRzc8fQEa//rl49dHUih7rlCbr510 EpalZ1HafvPIb5V/UzOcjKDp9NeSLjp98+RPAFqpC1kLVnM5Q6rTYOMJBA2lTRCu BIpLiznC6z9XBtqFy1UbILG33EZx9kcGVh2TkoaYOcn3CWXN4oaaZ1AW/V4zqp6P XQbKrD+4dZ4XF5YQoL61/1PViIxph8o= -----END CERTIFICATE-----Generated at Tue May 19 07:53:44 2026 by rpki-client