$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8b2752b-5cea-3978-904a-e7f64f022ac2.roa File: b8b2752b-5cea-3978-904a-e7f64f022ac2.roa (raw, json) Hash identifier: t2kjFWzFS7ml7Lk6N5Eybn2W0NusZJBDT4D56gdkZJI= Subject key identifier: 9F:F3:BF:15:F7:7A:A2:D7:2A:38:83:B4:9D:B6:92:9B:56:52:0E:30 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79E7AB4BCADE3B56ABFF380 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8b2752b-5cea-3978-904a-e7f64f022ac2.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 198.45.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9e:7a:b4:bc:ad:e3:b5:6a:bf:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=45adeb94-da34-4543-b0c4-d559437de91c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:de:71:c9:c4:77:93:f0:64:bf:60:a6:38:d8: b0:98:63:41:1a:bf:12:c3:c1:d7:9f:8e:3f:34:0e: ea:04:a2:4a:ba:b4:97:9f:2b:5f:74:72:68:53:0c: 8c:0c:db:06:d8:52:42:09:fd:45:e4:0c:a4:26:99: ff:39:cc:d0:0f:0d:97:18:43:f3:01:3e:6f:62:6a: 9d:f1:7c:6a:e4:1d:b3:10:9a:1c:49:12:37:a5:21: 64:cd:98:e3:e1:aa:28:33:df:d1:8d:3e:bb:01:5f: 89:79:2c:73:4b:a6:a4:f8:67:53:8d:68:37:12:2a: 5b:c9:3e:22:db:32:ac:b4:f1:36:15:c9:99:7c:54: 3c:61:07:59:77:56:68:09:3e:54:94:19:c5:21:42: a3:f8:1e:cb:00:59:a6:46:2a:b6:17:89:76:6d:b4: 82:f3:44:d2:05:c1:20:4e:79:b1:bc:20:85:3f:c3: 12:06:7a:c5:9d:62:9b:87:68:21:17:fb:6c:7f:7e: 51:5f:4a:76:43:ae:2a:6a:6e:60:ae:65:9b:53:2c: f1:0b:35:f6:b0:1b:ff:c6:0c:4c:57:c0:87:14:e0: 98:f0:d1:c0:6c:b4:30:f6:0d:32:42:fc:e1:79:55: 6c:57:96:39:60:21:a0:6f:34:9f:5e:b2:46:0a:56: 29:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:F3:BF:15:F7:7A:A2:D7:2A:38:83:B4:9D:B6:92:9B:56:52:0E:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8b2752b-5cea-3978-904a-e7f64f022ac2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:ee:f7:0c:08:b6:74:65:27:d7:cf:f5:08:a6:1b:c3:a4:2a: 42:b4:94:34:eb:d6:ab:83:2f:3f:29:62:ff:90:4c:9c:55:0d: 61:f4:88:88:34:db:b0:57:8b:bf:e5:49:74:52:4d:cf:b8:b4: 91:84:31:f4:58:bc:65:59:b8:ee:18:16:bf:59:69:f7:76:2e: c8:73:fd:62:c7:39:47:3d:bf:26:52:ed:29:77:ee:c0:c0:32: 81:77:5a:36:a3:f2:d7:a6:8c:c9:7c:0c:06:70:83:5f:55:30: 27:bb:d2:36:28:13:b3:7c:9e:a5:ab:5b:f4:94:77:0a:a9:dc: c5:b8:ef:3b:ee:bd:5b:8a:77:e1:95:46:4a:20:5c:c0:ed:dd: ac:ca:1f:c4:4d:bf:b5:eb:38:51:48:7f:cd:df:ba:48:35:4a: f0:46:83:e0:d1:1d:03:7d:4c:7d:79:b3:cd:c3:6c:32:b2:2e: 06:f1:4b:20:be:c4:c2:ac:e1:10:95:a8:f4:bf:a0:e9:fc:96: 17:b5:70:d2:c7:7a:07:0d:5c:3f:db:02:54:b4:0b:dd:a1:2b: e9:8d:40:3d:2a:2c:33:9f:52:50:b1:f2:87:90:c7:ad:38:bf: 4d:3d:be:c7:a6:8f:58:e4:0c:9a:5d:a7:48:7c:c4:51:17:49: a1:1b:b0:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnnq0vK3jtWq/84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NDVhZGViOTQtZGEzNC00NTQzLWIwYzQtZDU1OTQzN2RlOTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj95xycR3k/Bkv2CmONiwmGNBGr8Sw8HXn44/ NA7qBKJKurSXnytfdHJoUwyMDNsG2FJCCf1F5AykJpn/OczQDw2XGEPzAT5vYmqd 8Xxq5B2zEJocSRI3pSFkzZjj4aooM9/RjT67AV+JeSxzS6ak+GdTjWg3EipbyT4i 2zKstPE2FcmZfFQ8YQdZd1ZoCT5UlBnFIUKj+B7LAFmmRiq2F4l2bbSC80TSBcEg TnmxvCCFP8MSBnrFnWKbh2ghF/tsf35RX0p2Q64qam5grmWbUyzxCzX2sBv/xgxM V8CHFOCY8NHAbLQw9g0yQvzheVVsV5Y5YCGgbzSfXrJGClYpzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ/zvxX3eqLXKjiDtJ22kptWUg4wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjhiMjc1MmItNWNlYS0z OTc4LTkwNGEtZTdmNjRmMDIyYWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi2pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATu9wwItnRlJ9fP9QimG8OkKkK0lDTr1quDLz8pYv+QTJxVDWH0iIg0 27BXi7/lSXRSTc+4tJGEMfRYvGVZuO4YFr9Zafd2Lshz/WLHOUc9vyZS7Sl37sDA MoF3Wjaj8temjMl8DAZwg19VMCe70jYoE7N8nqWrW/SUdwqp3MW47zvuvVuKd+GV RkogXMDt3azKH8RNv7XrOFFIf83fukg1SvBGg+DRHQN9TH15s83DbDKyLgbxSyC+ xMKs4RCVqPS/oOn8lhe1cNLHegcNXD/bAlS0C92hK+mNQD0qLDOfUlCx8oeQx604 v009vsemj1jkDJpdp0h8xFEXSaEbsLw= -----END CERTIFICATE-----Generated at Wed Jul 29 07:57:51 2026 by rpki-client