$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/a5813508-28da-316e-9e85-47818567b716.roa File: a5813508-28da-316e-9e85-47818567b716.roa (raw, json) Hash identifier: Fx93Z3Bv3zfyC3rNqxG2CLnv04qp3I9JUT5Sdb0xxg0= Subject key identifier: B7:20:71:A7:A5:A3:D1:B4:32:AF:87:A8:4F:55:A7:B9:FF:7F:D3:F7 Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Certificate serial: 010D0C9F4328584E35FF142F2E7FDD75FAC58A00 Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/a5813508-28da-316e-9e85-47818567b716.roa Signing time: Thu 18 Jun 2026 09:00:12 +0000 ROA not before: Thu 18 Jun 2026 09:00:12 +0000 ROA not after: Wed 16 Sep 2026 09:00:12 +0000 asID: 25649 IP address blocks: 198.207.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:35:ff:14:2f:2e:7f:dd:75:fa:c5:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Validity Not Before: Jun 18 09:00:12 2026 GMT Not After : Sep 16 09:00:12 2026 GMT Subject: CN=646959d3-3948-40bb-862f-a7310d36dac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:90:0e:09:8d:61:82:59:2f:4d:2d:77:32:e6: 06:07:80:a3:d0:11:a3:1d:e2:cf:84:ec:1f:56:df: 11:13:a9:41:71:f4:a6:85:55:62:a8:cc:d1:bd:ca: ee:a2:59:dd:5b:f7:7a:cb:83:4b:06:2d:ff:e0:89: b7:de:97:b7:bd:53:47:fa:9c:10:dc:47:68:ac:92: 94:94:31:9c:f9:af:b7:b8:79:13:de:3a:28:e1:80: 36:40:ce:31:9f:4f:aa:0c:4b:3f:dd:c4:2d:cb:c6: ac:a9:16:6b:78:88:be:17:df:08:47:a8:ca:b6:a2: 6d:56:dd:b8:8d:69:37:87:d1:1b:24:6b:d2:dd:50: 5d:bb:7c:41:c5:e3:ab:de:8e:d3:52:a3:57:a1:cf: be:ca:e3:69:90:eb:90:56:71:56:42:e2:00:91:60: f5:7e:8e:7b:7b:d7:35:27:77:f5:cd:07:d6:1e:4b: ff:bb:1c:dd:66:8a:6c:9f:e5:94:f0:4c:96:ab:96: 22:71:a6:a7:a2:2c:ab:2e:db:c7:3e:b6:d3:05:00: 88:e9:82:08:41:1a:f2:10:61:9a:92:12:1a:93:62: 9a:53:e5:0b:dd:f3:88:b9:c4:62:2e:54:44:9a:3e: eb:28:0b:3c:c5:9b:e1:15:ce:8d:d6:da:f2:98:2f: 33:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:20:71:A7:A5:A3:D1:B4:32:AF:87:A8:4F:55:A7:B9:FF:7F:D3:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/a5813508-28da-316e-9e85-47818567b716.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl X509v3 Authority Key Identifier: keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer sbgp-ipAddrBlock: critical IPv4: 198.207.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:e5:55:66:aa:a1:e2:81:fb:ad:fa:c7:2f:46:a0:c2:9e:75: c4:6d:5c:24:48:b1:63:17:56:9b:5c:8d:2a:69:77:c0:aa:46: 2e:77:6b:47:c1:4d:22:5d:48:0e:3b:9e:aa:c1:8e:31:ef:3e: c3:6f:f6:8f:a7:ad:41:cb:e1:8d:a3:7a:4b:10:d2:43:17:47: 1d:6c:e1:56:8f:40:5b:73:85:ed:96:6a:4c:3f:99:83:ee:cb: 50:f5:c3:dc:2e:95:f4:90:d2:7c:6f:a3:57:aa:97:af:77:25: a9:b6:e1:8e:52:68:66:fa:0e:5c:51:df:78:c4:f6:18:c2:f6: f2:e4:a1:30:c3:1c:08:84:10:b3:e5:7b:64:9d:54:a9:24:4e: 7b:3d:36:e9:ee:da:99:8b:6c:21:8b:cb:7a:47:2d:33:2c:60: fa:f0:dc:f8:09:aa:cb:89:aa:d3:0f:09:1f:da:78:a3:32:55: 1a:6d:42:db:5c:ec:28:02:e0:59:aa:8c:61:41:d8:aa:e4:a8: c3:f5:d1:5b:fb:b0:5c:6f:35:31:32:61:2a:9e:86:62:a9:60: f3:6c:b6:21:8b:06:da:fb:99:ec:9f:62:61:b7:ff:8b:22:4e: db:f3:e8:38:d2:5e:b0:51:33:e1:96:8a:c8:1f:d6:19:13:3e: aa:4a:0f:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE41/xQvLn/ddfrFigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy ZThlMB4XDTI2MDYxODA5MDAxMloXDTI2MDkxNjA5MDAxMlowLzEtMCsGA1UEAxMk NjQ2OTU5ZDMtMzk0OC00MGJiLTg2MmYtYTczMTBkMzZkYWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJAOCY1hglkvTS13MuYGB4Cj0BGjHeLPhOwf Vt8RE6lBcfSmhVViqMzRvcruolndW/d6y4NLBi3/4Im33pe3vVNH+pwQ3EdorJKU lDGc+a+3uHkT3joo4YA2QM4xn0+qDEs/3cQty8asqRZreIi+F98IR6jKtqJtVt24 jWk3h9EbJGvS3VBdu3xBxeOr3o7TUqNXoc++yuNpkOuQVnFWQuIAkWD1fo57e9c1 J3f1zQfWHkv/uxzdZopsn+WU8EyWq5YicaanoiyrLtvHPrbTBQCI6YIIQRryEGGa khIak2KaU+UL3fOIucRiLlREmj7rKAs8xZvhFc6N1trymC8z6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLcgcaelo9G0Mq+HqE9Vp7n/f9P3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvYTU4MTM1MDgtMjhkYS0z MTZlLTllODUtNDc4MTg1NjdiNzE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxs+UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTlVWaqoeKB+636xy9GoMKedcRtXCRIsWMXVptcjSppd8CqRi53a0fB TSJdSA47nqrBjjHvPsNv9o+nrUHL4Y2jeksQ0kMXRx1s4VaPQFtzhe2Wakw/mYPu y1D1w9wulfSQ0nxvo1eql693Jam24Y5SaGb6DlxR33jE9hjC9vLkoTDDHAiEELPl e2SdVKkkTns9Nunu2pmLbCGLy3pHLTMsYPrw3PgJqsuJqtMPCR/aeKMyVRptQttc 7CgC4FmqjGFB2KrkqMP10Vv7sFxvNTEyYSqehmKpYPNstiGLBtr7meyfYmG3/4si Ttvz6DjSXrBRM+GWisgf1hkTPqpKD0E= -----END CERTIFICATE-----Generated at Wed Jul 8 15:49:11 2026 by rpki-client