$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/04c4ff3f-33aa-3550-8e99-e3c724d7c968.roa File: 04c4ff3f-33aa-3550-8e99-e3c724d7c968.roa (raw, json) Hash identifier: ImN7ev9N/bGjtheQds7NwLvLnMjEMS7hKLdAcRtvh6w= Subject key identifier: FE:C6:65:F0:FF:C9:DA:54:0F:5F:9F:97:88:C1:EF:E4:03:7D:BB:7A Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584E842A37E8184DCBC53E7CD680 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/04c4ff3f-33aa-3550-8e99-e3c724d7c968.roa Signing time: Thu 16 Jul 2026 09:00:12 +0000 ROA not before: Thu 16 Jul 2026 09:00:12 +0000 ROA not after: Wed 14 Oct 2026 09:00:12 +0000 asID: 22781 IP address blocks: 98.158.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:84:2a:37:e8:18:4d:cb:c5:3e:7c:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Jul 16 09:00:12 2026 GMT Not After : Oct 14 09:00:12 2026 GMT Subject: CN=9d0ff5a0-45bd-405b-9c4a-d5e428f81c72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:95:92:2f:7d:95:c5:a8:07:2d:8c:5d:e4:b7: 19:43:69:22:6c:3c:eb:33:e9:cb:b3:86:12:e2:7b: 8e:db:e0:13:05:c8:ad:64:8c:90:27:3a:fd:e0:19: 1a:96:23:86:e6:ef:ed:ae:2d:87:d1:5f:59:ad:da: 8f:71:8f:9d:04:e8:88:66:36:43:51:e7:a2:9a:90: 17:2e:3d:09:70:81:5b:54:a1:d1:88:dc:44:44:eb: d0:f9:15:34:ab:de:c7:8a:f7:34:00:c7:79:1f:27: 56:5d:44:f3:af:1c:97:83:90:01:64:d7:55:ff:9c: 45:28:59:7a:d2:c9:52:45:8a:08:93:0f:1a:6f:8d: 9c:5a:96:ab:c4:2b:65:b8:5e:bc:5e:50:4d:21:cd: ca:ed:58:2c:8c:d2:b5:e1:87:a5:57:5d:ef:78:05: 97:62:24:eb:4b:db:ca:7a:93:18:1a:15:93:06:ec: 78:af:6e:d6:9d:50:f8:56:54:e6:8b:10:65:54:0a: ba:0f:ea:79:95:9a:f9:42:9c:22:1b:40:7b:ba:50: f0:95:50:da:ee:55:ac:5e:cb:48:cd:bb:09:ab:b6: 22:7d:36:03:e9:9d:f7:5a:f5:c3:fa:a8:c9:da:61: 72:e8:30:0a:ab:b6:f9:15:10:26:c5:f8:5a:f2:6f: 98:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:C6:65:F0:FF:C9:DA:54:0F:5F:9F:97:88:C1:EF:E4:03:7D:BB:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/04c4ff3f-33aa-3550-8e99-e3c724d7c968.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 98.158.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:7c:3c:97:1c:2b:cd:fb:1a:55:ec:ea:3a:54:34:c8:27:9d: 42:8d:86:cd:fe:73:75:88:52:d2:f3:ab:40:49:1f:d3:3a:86: a6:3a:5b:10:2b:53:c2:b7:56:3d:00:58:56:37:91:13:32:d1: 18:a0:f9:a9:e5:c5:a1:c2:aa:74:38:c4:cb:e5:97:e5:7b:86: 7a:06:3d:af:5a:67:b6:76:6d:97:4e:64:9c:5c:75:6f:31:30: 32:ed:48:ee:af:54:e4:cf:18:61:86:76:b4:2c:cf:fa:58:84: cd:0c:26:3a:39:76:8e:30:4c:78:78:dd:dd:1b:ea:9b:5f:cb: be:bc:bb:8e:38:3f:4c:1b:49:60:4c:05:4a:1b:aa:e9:02:ea: ba:e6:b8:ce:f2:09:29:cb:29:4b:d5:25:f3:39:8d:12:78:26: fc:23:dd:d7:4d:00:9f:69:a9:55:7f:32:f9:0b:13:57:3c:d3: bb:2a:10:f2:10:88:d4:42:73:e0:c0:11:8d:c5:b2:8b:66:94: 5e:72:56:24:1c:40:53:ff:20:cc:35:85:ce:15:7d:60:ec:c9: ec:30:20:4e:8e:a8:c3:26:74:34:71:11:1c:c1:47:9d:ee:73: fc:87:f7:be:c2:a8:80:b7:d2:ce:df:c2:b4:6e:3c:01:45:93: 87:88:c7:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6EKjfoGE3LxT581oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI2MDcxNjA5MDAxMloXDTI2MTAxNDA5MDAxMlowLzEtMCsGA1UEAxMk OWQwZmY1YTAtNDViZC00MDViLTljNGEtZDVlNDI4ZjgxYzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopWSL32VxagHLYxd5LcZQ2kibDzrM+nLs4YS 4nuO2+ATBcitZIyQJzr94BkaliOG5u/tri2H0V9ZrdqPcY+dBOiIZjZDUeeimpAX Lj0JcIFbVKHRiNxEROvQ+RU0q97Hivc0AMd5HydWXUTzrxyXg5ABZNdV/5xFKFl6 0slSRYoIkw8ab42cWparxCtluF68XlBNIc3K7VgsjNK14YelV13veAWXYiTrS9vK epMYGhWTBux4r27WnVD4VlTmixBlVAq6D+p5lZr5QpwiG0B7ulDwlVDa7lWsXstI zbsJq7YifTYD6Z33WvXD+qjJ2mFy6DAKq7b5FRAmxfha8m+YDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP7GZfD/ydpUD1+fl4jB7+QDfbt6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMDRjNGZmM2YtMzNhYS0z NTUwLThlOTktZTNjNzI0ZDdjOTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYp5wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFx8PJccK837GlXs6jpUNMgnnUKNhs3+c3WIUtLzq0BJH9M6hqY6WxAr U8K3Vj0AWFY3kRMy0Rig+anlxaHCqnQ4xMvll+V7hnoGPa9aZ7Z2bZdOZJxcdW8x MDLtSO6vVOTPGGGGdrQsz/pYhM0MJjo5do4wTHh43d0b6ptfy768u444P0wbSWBM BUobqukC6rrmuM7yCSnLKUvVJfM5jRJ4Jvwj3ddNAJ9pqVV/MvkLE1c807sqEPIQ iNRCc+DAEY3FsotmlF5yViQcQFP/IMw1hc4VfWDsyewwIE6OqMMmdDRxERzBR53u c/yH977CqIC30s7fwrRuPAFFk4eIxzw= -----END CERTIFICATE-----Generated at Tue Jul 21 22:34:04 2026 by rpki-client