$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/409f642b-be8e-3ab9-9ebc-e0c88eba795c.roa File: 409f642b-be8e-3ab9-9ebc-e0c88eba795c.roa (raw, json) Hash identifier: C33mhh4bOeiPFaQqXb/gXkQwcYkB/XldzsnLvn+i03I= Subject key identifier: A3:9F:91:EF:A5:C7:E5:F9:BB:91:97:B8:17:E2:DB:EB:BA:A6:C2:76 Certificate issuer: /CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c Certificate serial: 010D0C9F4328584ECBD1D2F8074A9E3EFFB74CC0 Authority key identifier: 58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/409f642b-be8e-3ab9-9ebc-e0c88eba795c.roa Signing time: Tue 11 Aug 2026 01:00:11 +0000 ROA not before: Tue 11 Aug 2026 01:00:11 +0000 ROA not after: Mon 09 Nov 2026 02:00:11 +0000 asID: 2906 IP address blocks: 198.45.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cb:d1:d2:f8:07:4a:9e:3e:ff:b7:4c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c Validity Not Before: Aug 11 01:00:11 2026 GMT Not After : Nov 9 02:00:11 2026 GMT Subject: CN=e0858935-a92a-423e-ac1b-c809c74fdfb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f4:f4:df:8c:1b:d9:07:25:40:2a:9e:15:d5: df:75:11:2c:c9:af:d4:75:07:ac:2e:85:16:9e:e9: fe:c4:5b:86:51:46:f1:48:db:6a:a2:78:7c:65:dc: 02:35:62:5f:3f:8a:d6:ea:48:10:9c:28:f4:95:2c: 28:63:c3:88:a0:5c:63:57:a6:0c:96:23:5c:83:fd: 94:0b:c3:82:f5:e9:b1:90:81:49:1a:5f:aa:68:38: ee:0d:dd:68:10:95:3b:2d:a1:6f:11:f8:a0:e4:4a: 92:d6:60:44:d8:3b:9f:3d:d9:f8:7e:c6:e4:3c:b2: 60:fb:c7:77:11:80:e9:6e:0f:ce:1f:ae:83:39:78: 41:a0:0f:0a:68:fa:ec:16:94:6d:11:a3:61:8d:94: e3:c6:b6:48:73:14:71:65:b1:e3:e7:a1:a9:93:4a: b4:67:78:3e:2c:31:98:dd:3e:a5:02:9d:b4:ac:8d: 75:75:09:34:77:8d:eb:f1:24:3b:d2:9b:78:1f:b5: 4c:52:c7:4c:5c:a6:8a:b7:90:e6:eb:63:77:e4:2b: 44:cc:a0:66:3d:86:f0:90:20:d4:9d:b6:07:21:63: 06:f0:2b:03:9f:10:d6:81:9b:af:53:49:33:22:87: 43:2d:4e:cb:bd:d4:37:60:0c:fc:25:52:97:9f:1a: bd:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:9F:91:EF:A5:C7:E5:F9:BB:91:97:B8:17:E2:DB:EB:BA:A6:C2:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/409f642b-be8e-3ab9-9ebc-e0c88eba795c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl X509v3 Authority Key Identifier: keyid:58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer sbgp-ipAddrBlock: critical IPv4: 198.45.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:d5:08:7e:3b:9b:43:c2:85:a8:6c:e4:bb:7d:1f:60:dc:34: 7e:f6:4d:f1:2a:ba:40:35:20:27:3b:8d:24:fc:dd:ac:58:18: 5a:c2:74:61:00:e8:1a:30:af:39:f8:fa:ad:49:a8:08:1d:32: 02:70:bc:48:e8:0b:72:73:00:d3:3d:24:cf:a7:27:6e:6c:2c: 26:c9:c7:44:e8:77:96:26:17:26:b7:fb:d4:e9:ac:b3:1f:91: 0d:48:80:4a:bf:bf:3d:4a:0f:2a:1a:a2:7c:5f:20:e9:32:da: 66:1b:a2:c2:88:40:90:dc:5e:67:56:75:f7:77:15:4f:d8:9e: a7:e4:60:5f:0e:16:a2:2c:92:c9:48:1e:6b:c6:1c:56:cb:29: e4:06:fb:3c:ed:1c:de:44:03:06:98:9c:95:6a:80:a6:84:04: 32:dd:e7:65:f6:e7:aa:06:1e:26:96:0f:50:b3:6b:aa:db:cd: a2:23:96:d1:f1:cf:13:48:ac:18:a5:73:3a:d3:89:41:27:75: b1:31:46:ea:2e:68:7f:31:9f:eb:06:ec:83:a2:fb:25:d1:6b: f4:b7:66:f8:2e:86:2e:82:9d:19:56:0f:84:43:79:a9:9a:8c: 45:2d:12:13:1c:59:3f:4f:e0:45:65:5e:05:8e:4a:6d:f3:ff: 8e:96:e4:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7L0dL4B0qePv+3TMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ4NjYzOGEtMmUxMi00YWE0LWJkY2QtMjI2NjViMjZl NTdjMB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk ZTA4NTg5MzUtYTkyYS00MjNlLWFjMWItYzgwOWM3NGZkZmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPT034wb2QclQCqeFdXfdREsya/UdQesLoUW nun+xFuGUUbxSNtqonh8ZdwCNWJfP4rW6kgQnCj0lSwoY8OIoFxjV6YMliNcg/2U C8OC9emxkIFJGl+qaDjuDd1oEJU7LaFvEfig5EqS1mBE2DufPdn4fsbkPLJg+8d3 EYDpbg/OH66DOXhBoA8KaPrsFpRtEaNhjZTjxrZIcxRxZbHj56Gpk0q0Z3g+LDGY 3T6lAp20rI11dQk0d43r8SQ70pt4H7VMUsdMXKaKt5Dm62N35CtEzKBmPYbwkCDU nbYHIWMG8CsDnxDWgZuvU0kzIodDLU7LvdQ3YAz8JVKXnxq9twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOfke+lx+X5u5GXuBfi2+u6psJ2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wZDg2 NjM4YS0yZTEyLTRhYTQtYmRjZC0yMjY2NWIyNmU1N2MvNDA5ZjY0MmItYmU4ZS0z YWI5LTllYmMtZTBjODhlYmE3OTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMGQ4NjYzOGEtMmUxMi00YWE0LWJk Y2QtMjI2NjViMjZlNTdjLzBkODY2MzhhLTJlMTItNGFhNC1iZGNkLTIyNjY1YjI2 ZTU3Yy5jcmwwHwYDVR0jBBgwFoAUWEZxtOubjmMGeKRywWglQLM/E9cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wZDg2NjM4YS0yZTEyLTRhYTQtYmRjZC0yMjY2 NWIyNmU1N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExi0wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/VCH47m0PChahs5Lt9H2DcNH72TfEqukA1ICc7jST83axYGFrCdGEA 6Bowrzn4+q1JqAgdMgJwvEjoC3JzANM9JM+nJ25sLCbJx0Tod5YmFya3+9TprLMf kQ1IgEq/vz1KDyoaonxfIOky2mYbosKIQJDcXmdWdfd3FU/YnqfkYF8OFqIskslI HmvGHFbLKeQG+zztHN5EAwaYnJVqgKaEBDLd52X256oGHiaWD1Cza6rbzaIjltHx zxNIrBilczrTiUEndbExRuouaH8xn+sG7IOi+yXRa/S3Zvguhi6CnRlWD4RDeama jEUtEhMcWT9P4EVlXgWOSm3z/46W5KE= -----END CERTIFICATE-----Generated at Fri Aug 21 00:18:25 2026 by rpki-client