$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/c7ec8882-d567-38d8-b18d-49b39b44c840.roa File: c7ec8882-d567-38d8-b18d-49b39b44c840.roa (raw, json) Hash identifier: QnFcI/KMi7vA7nWTmq7fH7EigS98b3JUquo+HYmIhlU= Subject key identifier: EF:46:6D:D7:95:4E:58:7A:8E:52:5E:29:87:DD:25:42:7C:92:50:4F Certificate issuer: /CN=cd198da4-dbcc-4bec-a1a0-31d61d5ccc71 Certificate serial: 010D0C9F4328584E376479E24C3BC40E92A3BD00 Authority key identifier: 83:34:B9:70:BA:25:80:24:26:DF:15:AE:FB:C4:6C:D6:42:0B:68:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/c7ec8882-d567-38d8-b18d-49b39b44c840.roa Signing time: Thu 18 Jun 2026 21:00:12 +0000 ROA not before: Thu 18 Jun 2026 21:00:12 +0000 ROA not after: Wed 16 Sep 2026 21:00:12 +0000 asID: 7018 IP address blocks: 208.99.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:37:64:79:e2:4c:3b:c4:0e:92:a3:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd198da4-dbcc-4bec-a1a0-31d61d5ccc71 Validity Not Before: Jun 18 21:00:12 2026 GMT Not After : Sep 16 21:00:12 2026 GMT Subject: CN=0ef8aaee-5c06-43b8-a96d-48b70d6fcc36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d3:61:4e:4a:bf:f9:4d:8e:ab:7d:84:db:ac: f1:2c:4a:38:f9:75:4a:48:65:74:9b:71:81:fc:27: 6e:57:a9:a9:6c:df:a6:07:f2:e8:47:03:b7:ce:ce: 13:94:c9:52:fd:02:d2:76:65:59:6b:d6:a0:47:5b: d1:e1:53:f8:47:b7:f2:c8:58:88:86:2a:2b:ce:1a: cd:f0:b8:0b:bb:18:d8:41:d3:e2:8b:47:b4:39:72: 21:3e:c7:c1:b8:d1:c6:90:1f:9a:8d:63:35:9c:24: 6f:00:73:f7:b0:ee:50:3d:e3:1c:73:5c:42:55:4e: 00:29:58:33:66:62:c9:52:7a:19:bf:49:51:f6:5a: 76:82:f5:93:87:5a:ca:0c:d8:e2:fd:64:28:d4:32: 0e:19:72:66:35:9e:48:14:48:d6:a4:81:5c:0c:5c: ab:82:c3:30:02:f6:72:a8:b4:6a:28:cd:be:6a:0d: bc:92:1f:95:48:c5:bb:f1:db:54:f1:38:90:47:d4: 35:a6:88:bc:f3:bf:a0:e9:f3:b8:4e:fb:98:75:ad: e6:29:92:4d:ff:cd:2c:a8:76:63:25:15:f5:48:5e: 72:0c:2e:0b:b0:0e:b7:9c:f9:b8:a5:41:25:15:54: b3:ab:ad:2d:af:6e:55:cd:9b:0e:ce:d0:5f:dc:88: 19:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:46:6D:D7:95:4E:58:7A:8E:52:5E:29:87:DD:25:42:7C:92:50:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/c7ec8882-d567-38d8-b18d-49b39b44c840.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.crl X509v3 Authority Key Identifier: keyid:83:34:B9:70:BA:25:80:24:26:DF:15:AE:FB:C4:6C:D6:42:0B:68:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer sbgp-ipAddrBlock: critical IPv4: 208.99.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:5a:ca:34:58:79:8c:63:3a:b9:83:65:5c:7e:1c:d4:21:63: 1b:d0:2b:38:8a:06:f5:0a:f8:0e:1b:12:b8:58:63:81:de:7c: a1:91:00:e5:cf:05:6e:8e:4b:d8:ff:3f:ef:f2:75:ae:9e:10: 52:b0:84:4e:62:e7:dc:9e:de:76:98:35:83:05:66:56:7d:07: 6f:9b:5f:a0:81:13:66:03:2a:ef:58:a2:0c:72:b9:8e:3d:8c: fc:fc:b2:d9:52:54:fb:fb:04:92:bb:d5:0a:64:dd:85:fd:59: 78:66:bd:cd:cc:4f:0f:2e:b1:72:b5:aa:1f:13:a7:a8:77:2b: c1:3d:1f:7a:6c:51:15:c2:c4:a3:b2:9d:2e:81:e9:19:76:39: 5b:b6:a8:ea:7f:1e:96:d8:07:8d:24:f4:14:4a:6e:c2:3d:e4: ce:8f:7a:a0:da:07:e6:e9:e9:b1:d5:38:75:d7:46:d2:03:ea: 23:55:e3:db:f9:78:be:87:b0:a0:90:84:13:f8:7f:8d:e7:05: 2f:c3:88:04:7d:0b:2e:90:70:df:a7:33:83:aa:bf:fc:ff:71: 12:7f:c2:68:bf:9d:8e:35:b0:6b:38:de:b6:b2:ec:7b:fa:79: ef:d8:9c:f5:d3:72:21:96:dc:9d:02:f2:08:0f:d4:dc:10:e5: 68:20:12:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE43ZHniTDvEDpKjvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QxOThkYTQtZGJjYy00YmVjLWExYTAtMzFkNjFkNWNj YzcxMB4XDTI2MDYxODIxMDAxMloXDTI2MDkxNjIxMDAxMlowLzEtMCsGA1UEAxMk MGVmOGFhZWUtNWMwNi00M2I4LWE5NmQtNDhiNzBkNmZjYzM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNNhTkq/+U2Oq32E26zxLEo4+XVKSGV0m3GB /CduV6mpbN+mB/LoRwO3zs4TlMlS/QLSdmVZa9agR1vR4VP4R7fyyFiIhiorzhrN 8LgLuxjYQdPii0e0OXIhPsfBuNHGkB+ajWM1nCRvAHP3sO5QPeMcc1xCVU4AKVgz ZmLJUnoZv0lR9lp2gvWTh1rKDNji/WQo1DIOGXJmNZ5IFEjWpIFcDFyrgsMwAvZy qLRqKM2+ag28kh+VSMW78dtU8TiQR9Q1poi887+g6fO4TvuYda3mKZJN/80sqHZj JRX1SF5yDC4LsA63nPm4pUElFVSzq60tr25VzZsOztBf3IgZqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO9GbdeVTlh6jlJeKYfdJUJ8klBPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDE5 OGRhNC1kYmNjLTRiZWMtYTFhMC0zMWQ2MWQ1Y2NjNzEvYzdlYzg4ODItZDU2Ny0z OGQ4LWIxOGQtNDliMzliNDRjODQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxOThkYTQtZGJjYy00YmVjLWEx YTAtMzFkNjFkNWNjYzcxL2NkMTk4ZGE0LWRiY2MtNGJlYy1hMWEwLTMxZDYxZDVj Y2M3MS5jcmwwHwYDVR0jBBgwFoAUgzS5cLolgCQm3xWu+8Rs1kILaC4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDE5OGRhNC1kYmNjLTRiZWMtYTFhMC0zMWQ2 MWQ1Y2NjNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0GMmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElayjRYeYxjOrmDZVx+HNQhYxvQKziKBvUK+A4bErhYY4HefKGRAOXP BW6OS9j/P+/yda6eEFKwhE5i59ye3naYNYMFZlZ9B2+bX6CBE2YDKu9YogxyuY49 jPz8stlSVPv7BJK71Qpk3YX9WXhmvc3MTw8usXK1qh8Tp6h3K8E9H3psURXCxKOy nS6B6Rl2OVu2qOp/HpbYB40k9BRKbsI95M6PeqDaB+bp6bHVOHXXRtID6iNV49v5 eL6HsKCQhBP4f43nBS/DiAR9Cy6QcN+nM4Oqv/z/cRJ/wmi/nY41sGs43ray7Hv6 ee/YnPXTciGW3J0C8ggP1NwQ5WggEok= -----END CERTIFICATE-----Generated at Sat Jul 18 00:18:06 2026 by rpki-client