$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216/1480a659-dff0-3379-854a-3902b5d6c9ea.roa File: 1480a659-dff0-3379-854a-3902b5d6c9ea.roa (raw, json) Hash identifier: llvMV/Zk0VXc590LfU9FVSGlWHyYpm8rx1mqUDtHc+o= Subject key identifier: 8A:48:80:95:1A:4A:89:DA:0D:A3:E0:E8:D8:29:E8:18:72:74:D0:21 Certificate issuer: /CN=8a2ad923-7dbc-4ed4-b351-e2fd2359a216 Certificate serial: 010D0C9F4328584E3764689ABFFD40B8BECC2900 Authority key identifier: F8:7E:19:AC:F9:0D:12:48:FF:B3:C8:57:62:54:7A:12:AC:1B:D3:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216/1480a659-dff0-3379-854a-3902b5d6c9ea.roa Signing time: Thu 18 Jun 2026 21:00:12 +0000 ROA not before: Thu 18 Jun 2026 21:00:12 +0000 ROA not after: Wed 16 Sep 2026 21:00:12 +0000 asID: 16509 IP address blocks: 198.99.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216/8a2ad923-7dbc-4ed4-b351-e2fd2359a216.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216/8a2ad923-7dbc-4ed4-b351-e2fd2359a216.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:37:64:68:9a:bf:fd:40:b8:be:cc:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a2ad923-7dbc-4ed4-b351-e2fd2359a216 Validity Not Before: Jun 18 21:00:12 2026 GMT Not After : Sep 16 21:00:12 2026 GMT Subject: CN=7fadc265-8b3c-4454-bb04-94276f536da4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:2d:29:6e:c0:d6:10:8d:57:94:9c:11:fc:cc: ab:eb:d9:c6:a4:54:64:6c:6e:76:57:d9:1c:5d:8e: 69:14:64:52:30:5c:09:a0:e4:1a:da:54:f3:e9:1a: 53:2d:25:ef:a3:e6:08:e9:05:6c:fb:e7:1b:c8:a8: 27:bb:e4:5f:66:ee:7b:2a:44:f1:8f:87:27:74:5b: f0:6d:db:24:1f:c8:9f:1c:2c:38:13:91:58:8b:01: 1c:e2:05:44:28:e1:d5:5b:59:f5:ec:d9:6e:98:01: 70:48:8b:fe:75:20:01:91:ae:4e:45:d8:f5:43:27: c3:69:be:b8:b6:8f:b9:51:b6:6b:fb:78:8c:47:3f: de:d8:cf:38:9c:03:97:dd:ee:da:db:71:e2:f6:2b: 9d:75:c5:a2:b3:cf:51:71:e9:47:42:50:de:c8:63: a3:b7:36:6d:6e:71:3c:60:69:fc:6c:8e:b1:ca:bb: a7:1b:bf:32:3e:b0:3b:0f:6e:5f:cd:ff:e9:71:d6: 57:11:45:7b:18:cf:67:e6:47:51:71:57:ec:29:78: db:1f:44:6a:60:de:68:d2:d4:16:75:35:55:2f:a9: 77:6c:6a:40:b9:55:15:ec:68:68:1d:a6:bf:86:be: a3:98:ac:e4:f1:39:1d:c1:ce:fe:12:d8:99:09:4f: 9b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:48:80:95:1A:4A:89:DA:0D:A3:E0:E8:D8:29:E8:18:72:74:D0:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216/1480a659-dff0-3379-854a-3902b5d6c9ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216/8a2ad923-7dbc-4ed4-b351-e2fd2359a216.crl X509v3 Authority Key Identifier: keyid:F8:7E:19:AC:F9:0D:12:48:FF:B3:C8:57:62:54:7A:12:AC:1B:D3:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a2ad923-7dbc-4ed4-b351-e2fd2359a216.cer sbgp-ipAddrBlock: critical IPv4: 198.99.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:19:07:a0:1e:c0:af:ca:34:bc:88:f3:81:31:12:fd:eb:2a: a4:34:e5:93:d0:47:00:75:03:b6:3d:10:46:46:db:68:84:b5: ac:cc:56:8b:54:3b:e6:9b:14:42:a1:f4:37:ca:d8:a2:a7:61: 2a:c4:44:8c:4a:22:8c:6e:ec:e6:a2:1f:64:40:53:8c:62:70: 7b:ff:20:99:53:17:39:3b:de:c1:08:ba:4c:41:13:73:e9:d5: 03:f6:7c:23:45:57:56:82:a7:c9:ec:ad:8f:2c:ec:7a:40:d3: ea:3f:dc:d4:5a:1a:10:9d:bb:e1:d8:d9:db:f9:19:1a:20:4f: f0:85:17:25:cf:62:c3:d6:11:a9:9c:f8:a0:af:42:09:8e:b7: ac:7b:96:81:a6:4b:65:52:cf:78:3f:41:1e:23:4f:9f:8f:90: 73:4e:b4:ab:15:6a:6b:6d:76:f0:c7:f7:ad:e0:d4:e6:6d:75: cc:61:72:42:08:ea:1a:60:ff:17:75:c6:fe:4c:50:30:41:3e: 94:67:40:45:cf:2f:65:21:11:17:15:5f:be:5f:ac:65:2f:b2: 89:5b:90:e7:2d:86:95:9c:eb:91:92:ab:e6:81:c2:8b:8f:97: 70:4f:60:ca:23:5a:d9:dc:fe:6a:9b:70:98:55:32:bd:e8:de: 17:e8:a9:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE43ZGiav/1AuL7MKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGEyYWQ5MjMtN2RiYy00ZWQ0LWIzNTEtZTJmZDIzNTlh MjE2MB4XDTI2MDYxODIxMDAxMloXDTI2MDkxNjIxMDAxMlowLzEtMCsGA1UEAxMk N2ZhZGMyNjUtOGIzYy00NDU0LWJiMDQtOTQyNzZmNTM2ZGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiS0pbsDWEI1XlJwR/Myr69nGpFRkbG52V9kc XY5pFGRSMFwJoOQa2lTz6RpTLSXvo+YI6QVs++cbyKgnu+RfZu57KkTxj4cndFvw bdskH8ifHCw4E5FYiwEc4gVEKOHVW1n17NlumAFwSIv+dSABka5ORdj1QyfDab64 to+5UbZr+3iMRz/e2M84nAOX3e7a23Hi9iuddcWis89RcelHQlDeyGOjtzZtbnE8 YGn8bI6xyrunG78yPrA7D25fzf/pcdZXEUV7GM9n5kdRcVfsKXjbH0RqYN5o0tQW dTVVL6l3bGpAuVUV7GhoHaa/hr6jmKzk8Tkdwc7+EtiZCU+b1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIpIgJUaSonaDaPg6Ngp6BhydNAhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTJh ZDkyMy03ZGJjLTRlZDQtYjM1MS1lMmZkMjM1OWEyMTYvMTQ4MGE2NTktZGZmMC0z Mzc5LTg1NGEtMzkwMmI1ZDZjOWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGEyYWQ5MjMtN2RiYy00ZWQ0LWIz NTEtZTJmZDIzNTlhMjE2LzhhMmFkOTIzLTdkYmMtNGVkNC1iMzUxLWUyZmQyMzU5 YTIxNi5jcmwwHwYDVR0jBBgwFoAU+H4ZrPkNEkj/s8hXYlR6Eqwb0xkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTJhZDkyMy03ZGJjLTRlZDQtYjM1MS1lMmZk MjM1OWEyMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmO9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAZB6AewK/KNLyI84ExEv3rKqQ05ZPQRwB1A7Y9EEZG22iEtazMVotU O+abFEKh9DfK2KKnYSrERIxKIoxu7OaiH2RAU4xicHv/IJlTFzk73sEIukxBE3Pp 1QP2fCNFV1aCp8nsrY8s7HpA0+o/3NRaGhCdu+HY2dv5GRogT/CFFyXPYsPWEamc +KCvQgmOt6x7loGmS2VSz3g/QR4jT5+PkHNOtKsVamttdvDH963g1OZtdcxhckII 6hpg/xd1xv5MUDBBPpRnQEXPL2UhERcVX75frGUvsolbkOcthpWc65GSq+aBwouP l3BPYMojWtnc/mqbcJhVMr3o3hfoqQ4= -----END CERTIFICATE-----Generated at Mon Jul 6 20:15:17 2026 by rpki-client