$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/7d504fa1-eb21-3521-9c74-4413e34563a4.roa File: 7d504fa1-eb21-3521-9c74-4413e34563a4.roa (raw, json) Hash identifier: /urrfdVpelsIm+kXS/CcvnQwtDG1yJhaaHknlTKFsho= Subject key identifier: 93:3F:0A:0D:88:A1:20:23:A2:EE:C3:E9:1F:4B:10:14:04:C3:37:0D Certificate issuer: /CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a Certificate serial: 010D0C9F4328584EA786F8FAC2B71CA9C533FC80 Authority key identifier: A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/7d504fa1-eb21-3521-9c74-4413e34563a4.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 400666 IP address blocks: 198.98.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Aug 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:86:f8:fa:c2:b7:1c:a9:c5:33:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=108240de-3af0-4ddb-953d-5db4364d4456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:37:7f:18:f6:91:28:67:0e:ef:29:67:90:41: f0:c2:97:d1:94:2f:89:19:d9:cd:40:dd:91:c9:5a: 82:2f:1b:19:77:c3:1c:15:56:1d:33:19:79:8e:58: 93:95:a6:09:3c:2d:f0:96:bf:82:39:2b:09:bd:5e: 10:a3:a6:78:15:92:5e:37:32:ad:e7:c8:f3:14:64: d6:1b:5d:5e:11:d4:18:be:89:63:04:04:58:b7:bf: c1:66:aa:75:b7:5a:b4:47:5b:d2:62:ed:90:7a:82: 8f:e7:1e:3e:c6:3f:53:ad:ce:d0:05:50:75:b7:89: c4:5e:7e:84:f7:92:b1:01:47:84:c6:71:54:9f:92: ac:3c:01:97:e6:f1:f6:87:71:d1:ff:b4:b8:17:8f: b7:17:3b:9a:9f:bb:78:2b:d8:02:24:28:a6:e4:cd: c4:46:08:bd:ea:7a:d1:52:7a:c2:6d:61:94:0f:bf: 97:99:11:86:1f:1e:88:85:e3:c3:fd:c7:08:3f:02: 85:d5:cd:2b:5a:08:54:ba:51:79:60:7d:39:90:53: 8e:fd:7d:4d:ab:fb:08:93:58:c3:f9:37:8a:07:b8: 6d:48:f6:c2:97:ea:0b:20:37:07:3b:dc:6b:f2:64: 1f:12:c1:e0:19:d7:9d:2a:1b:3b:97:85:fc:aa:bc: bd:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:3F:0A:0D:88:A1:20:23:A2:EE:C3:E9:1F:4B:10:14:04:C3:37:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/7d504fa1-eb21-3521-9c74-4413e34563a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl X509v3 Authority Key Identifier: keyid:A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer sbgp-ipAddrBlock: critical IPv4: 198.98.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:57:13:ff:dc:01:40:4c:e1:6d:87:45:f1:15:82:46:14:29: 00:c8:1f:50:9e:04:44:71:bc:57:69:0e:15:de:44:95:69:fd: 81:7b:fc:8a:ae:0f:ce:2e:67:b0:04:1d:1c:82:69:8a:22:2b: 9e:dd:d1:1f:13:3c:a3:67:44:0b:0d:69:47:fd:ea:d0:71:ac: 14:ae:c7:a0:32:28:50:aa:ac:ed:79:a0:d6:08:9f:84:3b:41: e3:ef:ca:b3:80:20:78:33:f2:4e:15:26:61:9d:82:04:bf:a8: 56:2e:8f:20:bf:2a:59:99:9f:eb:5d:12:61:51:3c:d0:e6:48: d5:33:59:16:ae:0d:9b:d8:55:c3:9b:fd:2f:1b:37:b7:e3:14: 5e:bc:93:8d:6e:8c:0f:e5:69:3e:e6:b2:35:53:6f:74:0f:a1: 3b:81:d9:2b:2e:81:95:5f:76:a2:59:cf:fa:5f:4f:3e:ea:bf: ef:21:cd:74:6d:5c:c6:cc:02:01:18:65:53:bb:43:b1:17:5b: de:84:f9:b3:15:22:c6:57:47:5e:1e:94:a2:58:89:8f:33:6f: c3:6b:36:8f:33:9f:64:f0:c3:a0:65:17:19:51:e0:e6:c0:56: 86:13:13:cb:4d:04:d8:e0:4d:4d:51:9a:e2:80:77:fb:e1:87: 07:17:44:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhvj6wrccqcUz/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRhMWIzODMtZjk3NS00ZmIxLTljZTYtZTQzNjExZWFm YTFhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MTA4MjQwZGUtM2FmMC00ZGRiLTk1M2QtNWRiNDM2NGQ0NDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjd/GPaRKGcO7ylnkEHwwpfRlC+JGdnNQN2R yVqCLxsZd8McFVYdMxl5jliTlaYJPC3wlr+COSsJvV4Qo6Z4FZJeNzKt58jzFGTW G11eEdQYvoljBARYt7/BZqp1t1q0R1vSYu2QeoKP5x4+xj9Trc7QBVB1t4nEXn6E 95KxAUeExnFUn5KsPAGX5vH2h3HR/7S4F4+3Fzuan7t4K9gCJCim5M3ERgi96nrR UnrCbWGUD7+XmRGGHx6IhePD/ccIPwKF1c0rWghUulF5YH05kFOO/X1Nq/sIk1jD +TeKB7htSPbCl+oLIDcHO9xr8mQfEsHgGdedKhs7l4X8qry9+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJM/Cg2IoSAjou7D6R9LEBQEwzcNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81ZGEx YjM4My1mOTc1LTRmYjEtOWNlNi1lNDM2MTFlYWZhMWEvN2Q1MDRmYTEtZWIyMS0z NTIxLTljNzQtNDQxM2UzNDU2M2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWRhMWIzODMtZjk3NS00ZmIxLTlj ZTYtZTQzNjExZWFmYTFhLzVkYTFiMzgzLWY5NzUtNGZiMS05Y2U2LWU0MzYxMWVh ZmExYS5jcmwwHwYDVR0jBBgwFoAUomwcT7YhlG/6poaO5igrec40Hx8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81ZGExYjM4My1mOTc1LTRmYjEtOWNlNi1lNDM2 MTFlYWZhMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxmIYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhXE//cAUBM4W2HRfEVgkYUKQDIH1CeBERxvFdpDhXeRJVp/YF7/Iqu D84uZ7AEHRyCaYoiK57d0R8TPKNnRAsNaUf96tBxrBSux6AyKFCqrO15oNYIn4Q7 QePvyrOAIHgz8k4VJmGdggS/qFYujyC/KlmZn+tdEmFRPNDmSNUzWRauDZvYVcOb /S8bN7fjFF68k41ujA/laT7msjVTb3QPoTuB2SsugZVfdqJZz/pfTz7qv+8hzXRt XMbMAgEYZVO7Q7EXW96E+bMVIsZXR14elKJYiY8zb8NrNo8zn2Tww6BlFxlR4ObA VoYTE8tNBNjgTU1RmuKAd/vhhwcXROw= -----END CERTIFICATE-----Generated at Thu Aug 20 00:08:13 2026 by rpki-client