$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/cfa6afac-c953-3625-b664-6b5f5be6d982.roa File: cfa6afac-c953-3625-b664-6b5f5be6d982.roa (raw, json) Hash identifier: TGWOTk2PpfZ5N/rhZs3eIjkxhNbo8/xaXSY9Vsf89t4= Subject key identifier: CB:CC:95:1A:EF:CC:FC:C7:9C:94:20:B4:C3:22:0D:71:71:BF:4A:08 Certificate issuer: /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd Certificate serial: 010D0C9F4328584D5F7FA819DBD6187B9B4D5800 Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/cfa6afac-c953-3625-b664-6b5f5be6d982.roa Signing time: Thu 02 Apr 2026 13:00:30 +0000 ROA not before: Thu 02 Apr 2026 13:00:30 +0000 ROA not after: Wed 01 Jul 2026 13:00:30 +0000 asID: 54913 IP address blocks: 198.52.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5f:7f:a8:19:db:d6:18:7b:9b:4d:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd Validity Not Before: Apr 2 13:00:30 2026 GMT Not After : Jul 1 13:00:30 2026 GMT Subject: CN=2a5f75e1-ac84-4d55-b2d2-28b88523bb60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:46:38:55:44:ad:b3:2f:29:a5:3f:50:7a:d2: e3:70:c8:cc:e9:8c:4c:41:72:b1:e2:58:ce:07:73: 3b:4a:51:07:01:8e:da:3b:45:03:3f:69:69:7b:06: e3:d5:c1:9c:de:06:26:a4:20:bb:ca:b1:cd:95:2a: c7:28:0c:74:e7:04:1d:c1:9d:e7:c2:87:52:52:5d: d6:0f:a5:86:d6:44:ed:ac:70:04:04:ec:7c:c4:49: 58:62:40:d8:e0:93:b8:15:39:a0:4a:00:e8:01:ab: ee:95:c3:8a:aa:3a:22:92:2b:1a:f9:44:dd:9a:3c: b8:07:e2:47:73:9c:33:9a:0f:80:de:45:99:02:d4: 31:76:b0:71:9d:b6:3e:a8:95:06:b1:5b:27:3e:13: b2:9e:73:25:74:2c:ef:c7:c5:ed:67:82:f0:56:52: 67:48:6d:06:47:51:8a:ad:a1:ac:7a:82:a4:03:d4: d6:29:2b:3f:f9:b7:5b:39:39:ad:82:12:6f:72:33: e6:11:9b:2d:ce:a8:da:42:5a:2f:2d:cc:68:09:b7: 9f:e3:75:86:bc:57:c0:24:24:78:6b:8d:65:df:50: 17:38:f7:43:7b:d6:b6:bd:eb:55:e0:95:37:ed:08: cf:f2:79:9e:72:60:af:d7:e3:11:89:bd:ea:cf:e2: b8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:CC:95:1A:EF:CC:FC:C7:9C:94:20:B4:C3:22:0D:71:71:BF:4A:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/cfa6afac-c953-3625-b664-6b5f5be6d982.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl X509v3 Authority Key Identifier: keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer sbgp-ipAddrBlock: critical IPv4: 198.52.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:12:8b:26:dc:dd:67:f0:29:b0:0c:c8:97:43:6e:35:d0:76: dc:4d:6b:81:7b:8e:79:62:18:af:2e:60:ad:fc:78:4f:15:c9: 5a:b5:01:27:96:25:e7:d1:f2:e7:c2:da:84:1a:e0:7f:66:61: 24:ba:c1:c3:03:68:a8:43:72:0c:8a:fe:24:2b:4b:27:b8:24: a0:52:92:e3:01:e5:78:e8:9c:9b:8c:aa:1f:34:ac:9b:72:01: b7:df:b7:40:3e:ca:43:e8:65:5c:53:a8:89:92:05:b6:2a:7a: 80:da:92:1a:9c:8b:8b:57:a8:d8:0a:86:67:99:b9:94:0a:62: 8d:75:b2:1b:fa:1e:d9:f4:01:3c:6d:ed:c8:a2:a3:70:2f:f6: f5:f3:9e:f9:88:01:d7:f6:09:d6:aa:ea:b6:d2:cd:4a:49:67: 58:82:98:4a:75:f5:69:95:c4:a0:dc:c1:6f:60:ba:78:68:97: 10:1e:8c:38:40:2d:aa:8f:e8:b9:09:b1:b0:c1:c4:19:7f:21: e1:ce:d8:e1:2a:19:3a:90:00:ab:42:b9:8e:80:c2:82:42:a8: 2c:e9:ee:17:e1:f0:86:0c:87:07:8e:7b:b9:54:4c:c5:93:01: 27:de:77:31:b5:f7:2e:46:61:0f:62:8c:ee:5c:7d:8c:f4:4f: cb:03:47:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1ff6gZ29YYe5tNWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVkYzk3NDEtNTU5ZC00ZDliLTlmOGQtYmUzNTYwNzU0 ZmZkMB4XDTI2MDQwMjEzMDAzMFoXDTI2MDcwMTEzMDAzMFowLzEtMCsGA1UEAxMk MmE1Zjc1ZTEtYWM4NC00ZDU1LWIyZDItMjhiODg1MjNiYjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0Y4VUStsy8ppT9QetLjcMjM6YxMQXKx4ljO B3M7SlEHAY7aO0UDP2lpewbj1cGc3gYmpCC7yrHNlSrHKAx05wQdwZ3nwodSUl3W D6WG1kTtrHAEBOx8xElYYkDY4JO4FTmgSgDoAavulcOKqjoikisa+UTdmjy4B+JH c5wzmg+A3kWZAtQxdrBxnbY+qJUGsVsnPhOynnMldCzvx8XtZ4LwVlJnSG0GR1GK raGseoKkA9TWKSs/+bdbOTmtghJvcjPmEZstzqjaQlovLcxoCbef43WGvFfAJCR4 a41l31AXOPdDe9a2vetV4JU37QjP8nmecmCv1+MRib3qz+K49QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMvMlRrvzPzHnJQgtMMiDXFxv0oIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85NWRj OTc0MS01NTlkLTRkOWItOWY4ZC1iZTM1NjA3NTRmZmQvY2ZhNmFmYWMtYzk1My0z NjI1LWI2NjQtNmI1ZjViZTZkOTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTVkYzk3NDEtNTU5ZC00ZDliLTlm OGQtYmUzNTYwNzU0ZmZkLzk1ZGM5NzQxLTU1OWQtNGQ5Yi05ZjhkLWJlMzU2MDc1 NGZmZC5jcmwwHwYDVR0jBBgwFoAU6PV/ieoECgMeYW7fmRTMWxY4sJQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85NWRjOTc0MS01NTlkLTRkOWItOWY4ZC1iZTM1 NjA3NTRmZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxjT1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8Siybc3WfwKbAMyJdDbjXQdtxNa4F7jnliGK8uYK38eE8VyVq1ASeW JefR8ufC2oQa4H9mYSS6wcMDaKhDcgyK/iQrSye4JKBSkuMB5XjonJuMqh80rJty Abfft0A+ykPoZVxTqImSBbYqeoDakhqci4tXqNgKhmeZuZQKYo11shv6Htn0ATxt 7ciio3Av9vXznvmIAdf2Cdaq6rbSzUpJZ1iCmEp19WmVxKDcwW9gunholxAejDhA LaqP6LkJsbDBxBl/IeHO2OEqGTqQAKtCuY6AwoJCqCzp7hfh8IYMhweOe7lUTMWT ASfedzG19y5GYQ9ijO5cfYz0T8sDR9g= -----END CERTIFICATE-----Generated at Fri Apr 17 16:00:42 2026 by rpki-client