$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/c7ec8882-d567-38d8-b18d-49b39b44c840.roa File: c7ec8882-d567-38d8-b18d-49b39b44c840.roa (raw, json) Hash identifier: klMlTZhsEUDL49WKLhONCsI2Co58CsAWYV/Qiuk+0Pc= Subject key identifier: DE:59:89:67:C7:1C:39:E5:DF:B9:46:ED:BD:C1:9F:DC:A3:A6:D8:69 Certificate issuer: /CN=cd198da4-dbcc-4bec-a1a0-31d61d5ccc71 Certificate serial: 010D0C9F4328584ED9C759812D870FC3A9359380 Authority key identifier: 83:34:B9:70:BA:25:80:24:26:DF:15:AE:FB:C4:6C:D6:42:0B:68:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/c7ec8882-d567-38d8-b18d-49b39b44c840.roa Signing time: Sun 16 Aug 2026 01:00:14 +0000 ROA not before: Sun 16 Aug 2026 01:00:14 +0000 ROA not after: Sat 14 Nov 2026 02:00:14 +0000 asID: 7018 IP address blocks: 208.99.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d9:c7:59:81:2d:87:0f:c3:a9:35:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd198da4-dbcc-4bec-a1a0-31d61d5ccc71 Validity Not Before: Aug 16 01:00:14 2026 GMT Not After : Nov 14 02:00:14 2026 GMT Subject: CN=a27aa8ec-3c78-4854-ab11-7ff43ab45d8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a8:16:e0:cd:c2:81:51:ee:6c:e0:86:81:b7: d6:b8:1c:a5:9d:9a:82:4b:de:89:42:48:4c:16:bf: 2e:1b:b7:3a:d6:1d:91:06:2e:06:f2:69:44:d1:d2: 49:ee:95:52:04:72:30:22:b4:8c:7c:16:65:73:72: 71:49:df:38:76:b3:42:8e:fc:2c:ce:ce:e8:cc:bf: bf:6b:b5:e9:24:04:49:0c:26:ea:a3:e5:c2:c8:35: 9d:87:29:b7:c1:f9:8a:52:cb:bd:d7:43:a6:c7:77: d0:13:ba:b6:8b:04:f5:58:9d:3c:be:36:09:da:d2: c3:81:1c:e7:36:97:d1:89:97:39:ca:96:a2:61:07: 1c:31:b9:22:87:ea:61:93:c3:c9:5b:a8:cc:03:b5: ac:10:ae:62:8f:b9:d7:0c:2f:10:48:cd:dc:37:7a: 68:c8:e6:c1:e7:7e:d1:ff:e9:36:c6:33:1a:34:15: c7:ee:e7:39:49:67:d9:e0:a4:c0:ac:57:b2:eb:95: 88:b7:d5:ff:31:3a:17:52:c1:05:68:cf:84:a9:9d: 71:3d:f2:a2:71:33:d8:13:2c:98:03:c7:34:06:80: 4f:0e:8c:31:bb:15:60:fb:37:b6:de:23:1b:dc:84: e0:71:5b:cb:b4:5d:98:34:bd:d2:ad:ff:5c:cb:a0: 11:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:59:89:67:C7:1C:39:E5:DF:B9:46:ED:BD:C1:9F:DC:A3:A6:D8:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/c7ec8882-d567-38d8-b18d-49b39b44c840.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.crl X509v3 Authority Key Identifier: keyid:83:34:B9:70:BA:25:80:24:26:DF:15:AE:FB:C4:6C:D6:42:0B:68:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer sbgp-ipAddrBlock: critical IPv4: 208.99.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:7e:af:aa:f6:93:a8:e9:85:ad:3e:6d:2e:dc:7d:16:65:27: 21:fa:b4:e1:c7:4f:9a:36:21:30:37:43:ac:6b:b2:73:9f:c4: 0e:e5:6a:55:38:89:56:16:c6:17:4c:17:41:7b:23:03:a0:03: 73:5a:4d:00:8e:f9:2f:15:94:08:47:77:a1:39:50:a2:9c:90: c9:37:72:bf:26:98:70:0c:74:85:61:65:c0:37:c9:37:36:12: 21:3d:9f:64:f4:35:f0:09:ad:6c:62:60:28:76:38:df:6c:59: b6:d2:83:bc:f8:b3:a3:b6:5f:33:65:9d:42:95:d8:fc:6d:21: c9:ef:ac:90:f4:72:c8:ad:b7:31:57:ac:b1:fc:4e:48:a7:f9: 28:94:66:ac:2c:f2:d3:09:20:27:1c:d6:19:03:ad:cb:73:07: c2:4b:99:32:e4:64:3d:ef:bc:21:93:e7:f3:c6:e4:5a:2b:c1: 79:73:db:de:0a:b3:53:ea:e9:d4:ee:dc:96:a0:d0:40:d6:0d: 7b:61:78:81:26:fa:57:c2:c4:a3:8f:90:69:4f:bb:0a:b1:a0: 14:e3:8e:92:b9:fb:94:b1:c8:26:57:d7:87:93:fc:d7:9f:c4: b8:6f:8d:5b:fb:b2:b1:6d:16:64:c6:06:2c:83:cb:1f:14:73: 96:ff:8f:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Zx1mBLYcPw6k1k4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QxOThkYTQtZGJjYy00YmVjLWExYTAtMzFkNjFkNWNj YzcxMB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk YTI3YWE4ZWMtM2M3OC00ODU0LWFiMTEtN2ZmNDNhYjQ1ZDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqgW4M3CgVHubOCGgbfWuBylnZqCS96JQkhM Fr8uG7c61h2RBi4G8mlE0dJJ7pVSBHIwIrSMfBZlc3JxSd84drNCjvwszs7ozL+/ a7XpJARJDCbqo+XCyDWdhym3wfmKUsu910Omx3fQE7q2iwT1WJ08vjYJ2tLDgRzn NpfRiZc5ypaiYQccMbkih+phk8PJW6jMA7WsEK5ij7nXDC8QSM3cN3poyObB537R /+k2xjMaNBXH7uc5SWfZ4KTArFey65WIt9X/MToXUsEFaM+EqZ1xPfKicTPYEyyY A8c0BoBPDowxuxVg+ze23iMb3ITgcVvLtF2YNL3Srf9cy6ARnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5ZiWfHHDnl37lG7b3Bn9yjpthpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDE5 OGRhNC1kYmNjLTRiZWMtYTFhMC0zMWQ2MWQ1Y2NjNzEvYzdlYzg4ODItZDU2Ny0z OGQ4LWIxOGQtNDliMzliNDRjODQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxOThkYTQtZGJjYy00YmVjLWEx YTAtMzFkNjFkNWNjYzcxL2NkMTk4ZGE0LWRiY2MtNGJlYy1hMWEwLTMxZDYxZDVj Y2M3MS5jcmwwHwYDVR0jBBgwFoAUgzS5cLolgCQm3xWu+8Rs1kILaC4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDE5OGRhNC1kYmNjLTRiZWMtYTFhMC0zMWQ2 MWQ1Y2NjNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0GMmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHl+r6r2k6jpha0+bS7cfRZlJyH6tOHHT5o2ITA3Q6xrsnOfxA7lalU4 iVYWxhdMF0F7IwOgA3NaTQCO+S8VlAhHd6E5UKKckMk3cr8mmHAMdIVhZcA3yTc2 EiE9n2T0NfAJrWxiYCh2ON9sWbbSg7z4s6O2XzNlnUKV2PxtIcnvrJD0csittzFX rLH8Tkin+SiUZqws8tMJICcc1hkDrctzB8JLmTLkZD3vvCGT5/PG5ForwXlz294K s1Pq6dTu3Jag0EDWDXtheIEm+lfCxKOPkGlPuwqxoBTjjpK5+5SxyCZX14eT/Nef xLhvjVv7srFtFmTGBiyDyx8Uc5b/j70= -----END CERTIFICATE-----Generated at Tue Sep 1 04:33:49 2026 by rpki-client