$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/db3cba64-f46e-3705-bc34-06bef8b2191d.roa File: db3cba64-f46e-3705-bc34-06bef8b2191d.roa (raw, json) Hash identifier: s7tvIxlCE+gapzUlvaq3O/UhR+4O3gXRzRxE81GeDAA= Subject key identifier: 52:7C:CE:7E:DC:F2:D1:F2:E6:69:E2:65:C5:A2:11:51:25:51:E0:F7 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584E3A2F38309AE64946108F6E80 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/db3cba64-f46e-3705-bc34-06bef8b2191d.roa Signing time: Fri 19 Jun 2026 21:00:12 +0000 ROA not before: Fri 19 Jun 2026 21:00:12 +0000 ROA not after: Thu 17 Sep 2026 21:00:12 +0000 asID: 25899 IP address blocks: 98.142.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3a:2f:38:30:9a:e6:49:46:10:8f:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Jun 19 21:00:12 2026 GMT Not After : Sep 17 21:00:12 2026 GMT Subject: CN=3a76f6cc-42a9-450b-8346-de76690c198e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b6:32:ef:fb:d6:f9:33:f5:9d:e4:6c:40:71: 23:b0:e6:a8:f6:fb:e3:ee:29:4d:7a:10:c6:a3:d6: c9:44:72:b2:a4:db:90:a4:40:9e:dd:7c:85:9a:11: a6:c6:8d:37:ab:bf:46:cb:6e:df:ac:29:09:cc:ee: 55:82:93:98:fc:15:28:fa:df:be:a2:3c:8e:df:c1: e4:10:fb:1c:78:e2:1c:de:f4:6a:af:f9:f9:5a:e9: 53:fc:af:3b:84:37:4f:16:19:88:da:73:5b:72:c1: 31:e2:05:52:5e:ba:ce:88:17:31:dc:df:64:0b:3b: 60:02:d0:f7:e0:3c:f1:42:69:12:fa:d1:30:cd:6f: 32:e9:d0:78:f4:1b:b2:df:2a:62:2c:30:b2:d3:e9: ce:d5:ed:28:0f:a8:0b:0b:1f:c7:aa:b8:ee:d0:2a: bf:f0:12:31:8a:9a:4b:85:6b:65:f6:01:b7:bc:cb: be:67:4e:e3:24:fb:34:25:b0:68:ad:4d:98:0f:b6: 78:27:ff:cd:b6:c4:6d:2c:bd:e9:dd:15:c2:11:53: ff:48:0d:aa:69:07:9e:3e:99:2a:9c:6e:81:24:74: 1f:45:20:6e:84:3a:8e:de:c6:2c:77:ee:6d:ee:02: d3:fd:27:b0:7e:2b:e3:13:ad:6b:96:84:6a:4f:2e: ff:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:7C:CE:7E:DC:F2:D1:F2:E6:69:E2:65:C5:A2:11:51:25:51:E0:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/db3cba64-f46e-3705-bc34-06bef8b2191d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 98.142.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:f3:b0:78:31:e9:d5:86:01:99:07:bb:e3:39:16:e7:17:c8: 52:5f:7b:c1:ed:dc:ed:b3:2a:aa:a0:1e:d1:2f:87:c7:31:72: 48:e6:46:a3:9f:80:dc:75:c4:fc:92:87:1e:14:67:9c:21:73: dd:e8:86:9e:f7:16:ac:29:37:5e:54:aa:b2:51:5d:2a:eb:f2: 7f:a1:c4:95:70:c8:a3:9c:64:94:1d:ef:77:36:ac:91:1e:0b: a3:6a:c4:66:62:4c:67:95:cf:5d:96:14:87:d5:bd:d6:2a:7b: c3:c9:60:b3:15:29:b6:ee:57:9e:cc:5c:12:3a:86:e6:d6:dd: fd:af:c9:08:bb:c1:e2:0d:a3:eb:74:79:b0:b9:9f:d3:a6:cf: d4:78:1b:3a:7a:d5:20:bc:b1:99:24:77:02:14:d0:d2:85:72: df:b7:e0:b3:bb:c1:e5:d2:af:14:b8:cd:1b:d7:90:26:29:7b: 37:26:9e:07:71:f0:28:f9:92:9e:f5:ed:85:43:69:3a:30:b4: ee:23:fd:72:a2:2e:43:e5:31:6e:e8:ef:c0:5b:0b:e7:d0:48: 90:2f:9c:64:57:89:61:70:2e:a3:ed:45:0c:25:4f:0f:0d:d4: 02:65:8a:05:89:6e:a8:d6:d2:78:68:72:df:d7:0e:d7:d8:32: a8:80:f4:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE46LzgwmuZJRhCPboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk M2E3NmY2Y2MtNDJhOS00NTBiLTgzNDYtZGU3NjY5MGMxOThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7Yy7/vW+TP1neRsQHEjsOao9vvj7ilNehDG o9bJRHKypNuQpECe3XyFmhGmxo03q79Gy27frCkJzO5VgpOY/BUo+t++ojyO38Hk EPsceOIc3vRqr/n5WulT/K87hDdPFhmI2nNbcsEx4gVSXrrOiBcx3N9kCztgAtD3 4DzxQmkS+tEwzW8y6dB49Buy3ypiLDCy0+nO1e0oD6gLCx/Hqrju0Cq/8BIxippL hWtl9gG3vMu+Z07jJPs0JbBorU2YD7Z4J//NtsRtLL3p3RXCEVP/SA2qaQeePpkq nG6BJHQfRSBuhDqO3sYsd+5t7gLT/SewfivjE61rloRqTy7/uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJ8zn7c8tHy5mniZcWiEVElUeD3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvZGIzY2JhNjQtZjQ2ZS0z NzA1LWJjMzQtMDZiZWY4YjIxOTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYo4hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvzsHgx6dWGAZkHu+M5FucXyFJfe8Ht3O2zKqqgHtEvh8cxckjmRqOf gNx1xPyShx4UZ5whc93ohp73FqwpN15UqrJRXSrr8n+hxJVwyKOcZJQd73c2rJEe C6NqxGZiTGeVz12WFIfVvdYqe8PJYLMVKbbuV57MXBI6hubW3f2vyQi7weINo+t0 ebC5n9Omz9R4Gzp61SC8sZkkdwIU0NKFct+34LO7weXSrxS4zRvXkCYpezcmngdx 8Cj5kp717YVDaTowtO4j/XKiLkPlMW7o78BbC+fQSJAvnGRXiWFwLqPtRQwlTw8N 1AJligWJbqjW0nhoct/XDtfYMqiA9NM= -----END CERTIFICATE-----Generated at Fri Jul 17 10:47:29 2026 by rpki-client