$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1040c089-26bf-4af5-9c25-bcef963829d2/b60f6871-bf1e-313d-a518-8618b46d517a.roa File: b60f6871-bf1e-313d-a518-8618b46d517a.roa (raw, json) Hash identifier: IFbHfUojUok1Ae1mnbdRHXf/e5qGRC0k1D0pIRvd6Kg= Subject key identifier: 2B:82:53:B1:8B:18:0A:C9:E2:C4:A0:27:3F:18:2D:3F:6D:9B:D3:0B Certificate issuer: /CN=1040c089-26bf-4af5-9c25-bcef963829d2 Certificate serial: 010D0C9F4328584E4129D0BAA7FC95D5D976FFC0 Authority key identifier: 20:DD:EC:4A:B6:08:24:0A:53:F2:07:C7:47:62:F0:32:CC:8F:8C:6E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1040c089-26bf-4af5-9c25-bcef963829d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1040c089-26bf-4af5-9c25-bcef963829d2/b60f6871-bf1e-313d-a518-8618b46d517a.roa Signing time: Mon 22 Jun 2026 09:00:11 +0000 ROA not before: Mon 22 Jun 2026 09:00:11 +0000 ROA not after: Sun 20 Sep 2026 09:00:11 +0000 asID: 32704 IP address blocks: 198.38.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1040c089-26bf-4af5-9c25-bcef963829d2/1040c089-26bf-4af5-9c25-bcef963829d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1040c089-26bf-4af5-9c25-bcef963829d2/1040c089-26bf-4af5-9c25-bcef963829d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1040c089-26bf-4af5-9c25-bcef963829d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:41:29:d0:ba:a7:fc:95:d5:d9:76:ff:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1040c089-26bf-4af5-9c25-bcef963829d2 Validity Not Before: Jun 22 09:00:11 2026 GMT Not After : Sep 20 09:00:11 2026 GMT Subject: CN=80a35ac3-d7e9-401a-b017-c4c13b468f54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f6:65:0a:9c:41:b5:87:00:28:a5:5a:52:b4: d2:28:5f:56:bf:3a:b5:7d:ee:33:e2:dc:ae:c4:b3: de:0b:3f:f3:fa:c0:2b:e7:30:55:a8:43:9f:73:3e: 0b:ad:5c:7d:7d:69:19:f3:76:4c:79:0d:4e:01:bb: 1a:c8:47:02:0d:04:cb:78:6c:62:ff:6a:47:2b:6a: 2d:11:53:e0:51:14:e6:98:7a:0b:50:ab:bd:53:57: e5:64:fa:f0:82:7a:c2:e5:45:7d:c3:8f:c1:d3:1e: 2a:01:a0:6c:ef:8d:4d:19:9b:e4:f5:38:d7:75:43: 66:0d:53:ac:48:f4:81:cf:9d:4d:f5:2a:26:56:20: 83:75:27:2e:89:b6:5e:9a:59:7e:de:09:36:4b:e2: 1d:c6:f1:26:f4:62:2b:c6:8b:7f:48:ca:9f:54:a7: 7e:d7:11:fd:f6:76:71:a4:ab:05:ba:78:b9:3d:02: d0:76:73:6c:ee:c9:16:b9:61:3d:fc:77:95:f4:18: 58:08:b1:e8:2d:39:39:37:5d:8a:26:6a:8e:e4:c0: 61:5b:80:1b:2e:d0:0c:a2:3a:b4:bc:3f:9f:84:28: 63:6f:b4:02:45:91:02:0b:4b:71:94:60:b1:e2:8e: 95:af:10:a8:f1:67:56:40:03:b1:1b:ba:65:e5:dc: 51:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:82:53:B1:8B:18:0A:C9:E2:C4:A0:27:3F:18:2D:3F:6D:9B:D3:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1040c089-26bf-4af5-9c25-bcef963829d2/b60f6871-bf1e-313d-a518-8618b46d517a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1040c089-26bf-4af5-9c25-bcef963829d2/1040c089-26bf-4af5-9c25-bcef963829d2.crl X509v3 Authority Key Identifier: keyid:20:DD:EC:4A:B6:08:24:0A:53:F2:07:C7:47:62:F0:32:CC:8F:8C:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1040c089-26bf-4af5-9c25-bcef963829d2.cer sbgp-ipAddrBlock: critical IPv4: 198.38.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:7e:ec:99:7a:ce:fe:d8:1b:c2:5c:cd:0c:51:ac:eb:b1:33: 9a:9c:51:06:e4:01:4c:32:1b:4a:2d:49:d6:18:ce:16:f4:9c: d4:82:72:63:e8:7a:bb:7b:4f:01:95:43:4d:fe:75:ad:d7:7d: 7d:d3:38:f5:e2:18:02:1d:43:aa:5d:58:00:8f:57:cb:fb:05: d7:95:20:bf:bf:19:8b:d9:1b:d4:3c:5f:d5:83:ad:5a:02:8c: ad:47:6f:b3:b8:b7:6c:05:2c:03:4a:a7:9d:3c:32:99:4e:f1: d8:d7:03:a9:05:a7:5f:4d:d4:6a:62:03:25:62:fb:60:1b:82: 7d:3f:11:00:57:47:d8:37:c9:5d:b3:ab:7d:60:87:8f:af:df: 9b:b6:99:41:03:84:7a:3b:ee:5a:7c:57:70:e1:2d:8a:4c:21: 98:a5:72:01:5c:54:15:69:61:e9:0d:83:38:14:c1:10:d8:9b: 77:ad:8a:25:46:93:14:a0:3e:4a:d5:c7:9a:36:f8:ed:a6:cb: f7:ae:10:af:ca:43:4d:1b:7d:d2:b4:44:ce:da:71:16:26:f8: 4f:00:35:b3:3b:23:25:aa:00:40:19:38:38:93:1d:07:48:c0: 32:7d:e0:7b:60:73:17:43:b2:05:44:84:4c:e0:ba:aa:34:30: bc:ad:92:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5BKdC6p/yV1dl2/8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTA0MGMwODktMjZiZi00YWY1LTljMjUtYmNlZjk2Mzgy OWQyMB4XDTI2MDYyMjA5MDAxMVoXDTI2MDkyMDA5MDAxMVowLzEtMCsGA1UEAxMk ODBhMzVhYzMtZDdlOS00MDFhLWIwMTctYzRjMTNiNDY4ZjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivZlCpxBtYcAKKVaUrTSKF9Wvzq1fe4z4tyu xLPeCz/z+sAr5zBVqEOfcz4LrVx9fWkZ83ZMeQ1OAbsayEcCDQTLeGxi/2pHK2ot EVPgURTmmHoLUKu9U1flZPrwgnrC5UV9w4/B0x4qAaBs741NGZvk9TjXdUNmDVOs SPSBz51N9SomViCDdScuibZemll+3gk2S+IdxvEm9GIrxot/SMqfVKd+1xH99nZx pKsFuni5PQLQdnNs7skWuWE9/HeV9BhYCLHoLTk5N12KJmqO5MBhW4AbLtAMojq0 vD+fhChjb7QCRZECC0txlGCx4o6VrxCo8WdWQAOxG7pl5dxRDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCuCU7GLGArJ4sSgJz8YLT9tm9MLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xMDQw YzA4OS0yNmJmLTRhZjUtOWMyNS1iY2VmOTYzODI5ZDIvYjYwZjY4NzEtYmYxZS0z MTNkLWE1MTgtODYxOGI0NmQ1MTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTA0MGMwODktMjZiZi00YWY1LTlj MjUtYmNlZjk2MzgyOWQyLzEwNDBjMDg5LTI2YmYtNGFmNS05YzI1LWJjZWY5NjM4 MjlkMi5jcmwwHwYDVR0jBBgwFoAUIN3sSrYIJApT8gfHR2LwMsyPjG4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xMDQwYzA4OS0yNmJmLTRhZjUtOWMyNS1iY2Vm OTYzODI5ZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxiYNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADV+7Jl6zv7YG8JczQxRrOuxM5qcUQbkAUwyG0otSdYYzhb0nNSCcmPo ert7TwGVQ03+da3XfX3TOPXiGAIdQ6pdWACPV8v7BdeVIL+/GYvZG9Q8X9WDrVoC jK1Hb7O4t2wFLANKp508MplO8djXA6kFp19N1GpiAyVi+2Abgn0/EQBXR9g3yV2z q31gh4+v35u2mUEDhHo77lp8V3DhLYpMIZilcgFcVBVpYekNgzgUwRDYm3etiiVG kxSgPkrVx5o2+O2my/euEK/KQ00bfdK0RM7acRYm+E8ANbM7IyWqAEAZODiTHQdI wDJ94HtgcxdDsgVEhEzguqo0MLytkpw= -----END CERTIFICATE-----Generated at Wed Jul 8 16:10:44 2026 by rpki-client