$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b07d4ad0-c782-4df0-8b2f-1442c683b9bb/cc4dc957-3aa0-32ff-9029-c5e98efc981f.roa File: cc4dc957-3aa0-32ff-9029-c5e98efc981f.roa (raw, json) Hash identifier: hWqCy0txfGngD8+27PzNKMqgwgcr0koS7h4T/Tk6o7E= Subject key identifier: 8E:AC:25:B4:86:FD:32:58:23:F9:79:1F:EC:EC:E5:1F:DE:C8:E0:C6 Certificate issuer: /CN=b07d4ad0-c782-4df0-8b2f-1442c683b9bb Certificate serial: 010D0C9F4328584D9A200621D5431C368254F100 Authority key identifier: DD:2E:28:57:DD:67:C8:0D:9C:8B:C1:AF:8E:21:DB:8B:7B:97:32:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b07d4ad0-c782-4df0-8b2f-1442c683b9bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b07d4ad0-c782-4df0-8b2f-1442c683b9bb/cc4dc957-3aa0-32ff-9029-c5e98efc981f.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 22890 IP address blocks: 192.203.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b07d4ad0-c782-4df0-8b2f-1442c683b9bb/b07d4ad0-c782-4df0-8b2f-1442c683b9bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b07d4ad0-c782-4df0-8b2f-1442c683b9bb/b07d4ad0-c782-4df0-8b2f-1442c683b9bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b07d4ad0-c782-4df0-8b2f-1442c683b9bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:06:21:d5:43:1c:36:82:54:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b07d4ad0-c782-4df0-8b2f-1442c683b9bb Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=c4b62a2a-c1d6-48f1-beea-5578dbb5a90b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ce:be:9b:b0:a3:ba:2a:05:f0:cc:90:b0:ee: f5:24:37:1e:39:cb:4b:85:f9:5e:09:d1:3d:fe:25: 61:2e:88:43:f3:45:ce:4d:ee:fc:a2:80:0c:b8:de: 85:97:1c:02:73:12:73:c9:f2:f1:f5:7f:25:ae:df: b4:06:3a:2d:97:98:09:aa:4d:18:66:20:30:8f:06: d8:96:8b:7e:76:2f:3c:fb:0f:74:4b:d3:9b:36:7f: c9:24:0b:9b:f7:e5:37:33:b3:59:88:85:4b:02:41: 11:9f:23:02:b6:09:b8:25:1a:28:7b:f5:a0:e6:c8: 44:9c:ad:7d:cb:b7:53:81:fe:df:6e:a7:1d:42:de: 09:f0:99:4d:ed:c2:4b:08:4e:f8:ac:26:07:d8:22: 0d:35:83:e3:01:59:b8:95:d9:c7:aa:17:43:3e:76: 74:66:c2:48:56:1c:ac:23:fc:e9:c8:19:1a:39:4d: 4e:41:71:ed:e5:2d:11:d1:b8:22:67:6c:1a:3e:4a: 94:9c:fd:8a:55:2b:30:53:c2:60:e4:09:dd:48:52: cf:c0:c6:3b:95:37:49:00:2e:47:48:c6:7f:43:95: 96:a3:21:a5:3e:d1:5d:07:d3:36:d2:1c:cf:7f:cb: d0:f9:3a:a4:3a:b8:7d:b9:ab:01:cb:5f:09:3d:6d: 90:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:AC:25:B4:86:FD:32:58:23:F9:79:1F:EC:EC:E5:1F:DE:C8:E0:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b07d4ad0-c782-4df0-8b2f-1442c683b9bb/cc4dc957-3aa0-32ff-9029-c5e98efc981f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b07d4ad0-c782-4df0-8b2f-1442c683b9bb/b07d4ad0-c782-4df0-8b2f-1442c683b9bb.crl X509v3 Authority Key Identifier: keyid:DD:2E:28:57:DD:67:C8:0D:9C:8B:C1:AF:8E:21:DB:8B:7B:97:32:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b07d4ad0-c782-4df0-8b2f-1442c683b9bb.cer sbgp-ipAddrBlock: critical IPv4: 192.203.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:f9:63:5d:ac:37:a9:f2:f9:34:fe:17:21:f0:14:a0:2e:62: 8d:56:f5:56:7b:53:e2:dc:55:01:d0:d4:4b:98:82:57:ce:55: e1:10:97:3a:92:f3:3d:03:fc:72:d4:a5:61:62:48:5a:50:2f: 52:b1:9c:f2:2e:48:54:1c:41:26:60:0a:9d:78:47:05:77:a2: c0:1d:2a:74:78:b3:eb:85:ce:2d:a7:77:3f:f7:47:86:89:62: 4b:da:d4:c3:e1:d2:21:37:a0:af:0a:cf:40:ca:44:54:6a:79: 08:2a:71:b9:a7:53:bb:85:c7:4a:08:31:7c:ff:37:14:e0:87: 4a:16:07:64:ae:19:8d:39:36:0a:aa:57:c3:08:11:3a:2c:07: 28:a5:1a:f6:ae:ee:ab:7c:10:c5:6d:90:49:48:7c:fe:35:cd: 85:bd:af:8a:a0:73:dc:91:dc:4e:7a:83:61:26:0e:05:96:7e: f6:d6:78:5b:11:80:e9:98:41:73:35:1b:d1:63:18:82:c1:82: b9:ea:6e:a4:c5:ad:4b:67:e9:91:da:89:11:76:9a:35:b6:56: 06:ac:8c:9f:1d:14:8d:b0:8e:42:b7:ad:42:13:84:03:1a:a6: 7c:27:03:36:49:a7:9d:31:fd:5c:5f:43:a9:91:7b:16:ce:6d: 60:14:00:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2aIAYh1UMcNoJU8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjA3ZDRhZDAtYzc4Mi00ZGYwLThiMmYtMTQ0MmM2ODNi OWJiMB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk YzRiNjJhMmEtYzFkNi00OGYxLWJlZWEtNTU3OGRiYjVhOTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv86+m7CjuioF8MyQsO71JDceOctLhfleCdE9 /iVhLohD80XOTe78ooAMuN6FlxwCcxJzyfLx9X8lrt+0Bjotl5gJqk0YZiAwjwbY lot+di88+w90S9ObNn/JJAub9+U3M7NZiIVLAkERnyMCtgm4JRooe/Wg5shEnK19 y7dTgf7fbqcdQt4J8JlN7cJLCE74rCYH2CINNYPjAVm4ldnHqhdDPnZ0ZsJIVhys I/zpyBkaOU1OQXHt5S0R0bgiZ2waPkqUnP2KVSswU8Jg5AndSFLPwMY7lTdJAC5H SMZ/Q5WWoyGlPtFdB9M20hzPf8vQ+TqkOrh9uasBy18JPW2QHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6sJbSG/TJYI/l5H+zs5R/eyODGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iMDdk NGFkMC1jNzgyLTRkZjAtOGIyZi0xNDQyYzY4M2I5YmIvY2M0ZGM5NTctM2FhMC0z MmZmLTkwMjktYzVlOThlZmM5ODFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjA3ZDRhZDAtYzc4Mi00ZGYwLThi MmYtMTQ0MmM2ODNiOWJiL2IwN2Q0YWQwLWM3ODItNGRmMC04YjJmLTE0NDJjNjgz YjliYi5jcmwwHwYDVR0jBBgwFoAU3S4oV91nyA2ci8GvjiHbi3uXMocwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iMDdkNGFkMC1jNzgyLTRkZjAtOGIyZi0xNDQy YzY4M2I5YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwMtiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABj5Y12sN6ny+TT+FyHwFKAuYo1W9VZ7U+LcVQHQ1EuYglfOVeEQlzqS 8z0D/HLUpWFiSFpQL1KxnPIuSFQcQSZgCp14RwV3osAdKnR4s+uFzi2ndz/3R4aJ Ykva1MPh0iE3oK8Kz0DKRFRqeQgqcbmnU7uFx0oIMXz/NxTgh0oWB2SuGY05Ngqq V8MIETosByilGvau7qt8EMVtkElIfP41zYW9r4qgc9yR3E56g2EmDgWWfvbWeFsR gOmYQXM1G9FjGILBgrnqbqTFrUtn6ZHaiRF2mjW2VgasjJ8dFI2wjkK3rUIThAMa pnwnAzZJp50x/VxfQ6mRexbObWAUALw= -----END CERTIFICATE-----Generated at Sun May 3 00:29:18 2026 by rpki-client