$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5afc74d5-bd90-3262-99c1-264ee819ce2a.roa File: 5afc74d5-bd90-3262-99c1-264ee819ce2a.roa (raw, json) Hash identifier: x1jKlIXH1RZOiq3KqPoIgOUpLI/VQzlX3JQ6iOEqDvw= Subject key identifier: B5:36:F9:7B:7E:C0:47:1B:B7:F2:DE:1B:63:D8:89:5A:A8:30:CC:5F Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16 Certificate serial: 010D0C9F4328584DAC45816BE37249FE61949DA0 Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5afc74d5-bd90-3262-99c1-264ee819ce2a.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 13332 IP address blocks: 198.89.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:81:6b:e3:72:49:fe:61:94:9d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16 Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=b7807e7d-e262-45b8-9656-9d409080276f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6f:f3:38:75:35:6c:f9:14:12:a2:72:38:ef: 2c:10:8a:dd:e7:a4:0b:dc:6d:b8:2b:79:2c:c7:dd: 51:65:0f:0f:1c:2f:3f:09:1a:c6:a6:cb:aa:5d:df: 6a:97:d0:e2:d1:77:70:48:e1:61:51:0c:2c:e3:12: 42:b7:b4:d9:b5:49:c9:39:b9:bf:de:74:e2:2a:0f: 58:0c:43:77:29:11:19:0c:82:8d:73:57:8d:7f:b5: a4:75:53:f4:17:30:f5:ec:43:84:6b:26:8b:18:cf: 30:61:85:4d:26:b8:d8:0c:66:92:dd:1f:52:f5:e5: 22:0e:7b:b7:db:c5:0c:23:ec:10:b6:50:ad:1b:1a: a6:f8:4f:97:2f:ff:9a:a1:1f:33:4d:08:1c:59:5f: 0e:c6:ca:8a:f3:d4:55:9b:0b:54:c1:76:a4:14:84: c0:a6:d2:6a:43:c8:ef:77:1c:02:a9:83:54:4f:24: ee:a8:80:40:b6:ca:60:44:7c:9b:42:42:4e:1d:d0: 6e:c6:6b:04:cb:41:6d:39:8e:21:e2:31:11:b9:0d: 59:82:e5:05:52:f8:97:12:1d:45:55:4f:28:f7:1e: 6f:11:1c:94:84:fc:4f:ff:59:28:5f:73:cb:eb:3c: 74:04:cb:18:e8:77:8d:3d:1b:d2:15:6d:a6:ab:25: 73:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:36:F9:7B:7E:C0:47:1B:B7:F2:DE:1B:63:D8:89:5A:A8:30:CC:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5afc74d5-bd90-3262-99c1-264ee819ce2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl X509v3 Authority Key Identifier: keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer sbgp-ipAddrBlock: critical IPv4: 198.89.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:a2:cd:e1:79:66:84:7b:6f:1b:e0:18:60:17:3f:87:db:7d: a1:e7:a0:81:6e:32:6b:a1:a4:e9:ca:5c:02:fb:c4:4a:d3:a7: da:7d:3a:8b:32:9b:4e:15:cf:28:1a:b0:de:d5:ea:24:48:1c: bd:15:83:45:28:b8:ef:19:a2:c7:fa:1b:31:af:fe:9c:b1:2f: ed:72:18:8d:fb:ca:c5:ab:16:2f:a8:d5:b2:9c:e3:0a:1e:4b: ff:2f:d6:5e:7e:0d:5e:de:0b:fe:42:e5:4f:7d:3d:d8:e9:7c: ee:5c:ec:b7:ec:67:c8:2b:1e:67:e4:b6:a9:f4:bf:bc:11:1a: 85:ea:58:a7:9f:d6:5f:52:f9:0a:2c:b4:3f:5e:cb:96:f9:5c: 4a:40:18:de:32:7b:a7:58:8c:de:d5:30:3c:bc:3f:ab:0b:06: 08:f7:a3:84:49:12:10:83:c7:cc:c4:19:e9:05:6a:f8:9d:1d: 0d:0d:a5:dd:bf:9c:56:83:86:5a:01:74:a6:30:a3:15:af:9a: 82:4a:30:f0:1b:27:8a:16:f8:64:e7:45:c8:f7:c8:86:ea:29: 43:d0:6a:1b:92:cc:95:11:dc:e7:84:d0:a4:a0:ee:45:5b:5b: d6:cb:8a:4f:58:05:b0:88:34:3e:31:5d:30:70:cc:8a:9b:f1: e7:d3:01:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRYFr43JJ/mGUnaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw ZTE2MB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk Yjc4MDdlN2QtZTI2Mi00NWI4LTk2NTYtOWQ0MDkwODAyNzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAom/zOHU1bPkUEqJyOO8sEIrd56QL3G24K3ks x91RZQ8PHC8/CRrGpsuqXd9ql9Di0XdwSOFhUQws4xJCt7TZtUnJObm/3nTiKg9Y DEN3KREZDIKNc1eNf7WkdVP0FzD17EOEayaLGM8wYYVNJrjYDGaS3R9S9eUiDnu3 28UMI+wQtlCtGxqm+E+XL/+aoR8zTQgcWV8OxsqK89RVmwtUwXakFITAptJqQ8jv dxwCqYNUTyTuqIBAtspgRHybQkJOHdBuxmsEy0FtOY4h4jERuQ1ZguUFUviXEh1F VU8o9x5vERyUhPxP/1koX3PL6zx0BMsY6HeNPRvSFW2mqyVzlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLU2+Xt+wEcbt/LeG2PYiVqoMMxfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvNWFmYzc0ZDUtYmQ5MC0z MjYyLTk5YzEtMjY0ZWU4MTljZTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0 OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxll4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL+izeF5ZoR7bxvgGGAXP4fbfaHnoIFuMmuhpOnKXAL7xErTp9p9Oosy m04VzygasN7V6iRIHL0Vg0UouO8Zosf6GzGv/pyxL+1yGI37ysWrFi+o1bKc4woe S/8v1l5+DV7eC/5C5U99PdjpfO5c7LfsZ8grHmfktqn0v7wRGoXqWKef1l9S+Qos tD9ey5b5XEpAGN4ye6dYjN7VMDy8P6sLBgj3o4RJEhCDx8zEGekFavidHQ0Npd2/ nFaDhloBdKYwoxWvmoJKMPAbJ4oW+GTnRcj3yIbqKUPQahuSzJUR3OeE0KSg7kVb W9bLik9YBbCIND4xXTBwzIqb8efTAZ8= -----END CERTIFICATE-----Generated at Mon May 4 20:09:52 2026 by rpki-client