$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/557b0708-0206-328f-92e4-7aa700401b12.roa File: 557b0708-0206-328f-92e4-7aa700401b12.roa (raw, json) Hash identifier: tJmxLBfX9Uw6zlhoTkOxgbeJWVYkvdXsjn8yqK2o2QY= Subject key identifier: 68:B3:26:7A:3A:40:3B:EC:B5:9B:BF:6A:24:01:98:CE:E5:4C:5F:B1 Certificate issuer: /CN=88842878-1050-4df7-822b-ea8ec25db83d Certificate serial: 010D0C9F4328584D59EA56D5FC1AB9B633E3F640 Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/557b0708-0206-328f-92e4-7aa700401b12.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 2495 IP address blocks: 198.248.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:56:d5:fc:1a:b9:b6:33:e3:f6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=8960fdd0-a28e-4e63-b16c-e544cd152c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7f:a7:3e:44:09:4a:b2:1a:b5:e5:51:51:95: e5:55:93:49:ff:aa:0e:33:2a:b7:58:63:71:f1:30: ee:37:ab:ef:8d:ad:cb:9b:64:a1:d6:13:e6:c4:a0: 53:4d:f4:31:37:82:18:ad:e7:fc:eb:25:4a:19:8f: 41:50:f9:f1:59:54:98:da:09:7a:39:6b:07:5d:f9: c1:16:97:e0:23:b0:d1:7d:de:3a:dc:5f:55:92:45: 41:9e:b5:01:e5:9f:20:56:27:b9:bd:74:e9:8e:04: 0d:22:7a:a6:de:88:fb:60:49:31:89:1f:e8:97:d7: 7d:c7:8c:ab:c5:23:7a:8a:15:44:20:f8:e4:03:db: 0f:da:d1:17:8b:ed:5c:18:ef:06:28:70:77:cb:5c: 92:0e:cc:f6:a6:8f:41:15:52:fb:18:6d:1f:29:8c: 50:11:8d:7c:3e:55:d7:a3:62:11:3d:19:e5:0c:70: 29:20:5b:b1:97:fc:5b:4b:09:a9:5b:8b:b8:1d:3f: 0e:c0:a3:fb:53:f2:77:56:99:b1:24:8d:55:26:e7: 30:64:fb:4a:cc:76:00:2d:a8:3b:52:05:13:c4:b4: d9:58:06:79:6c:a5:e2:89:cb:c4:58:f6:00:02:1a: 57:d0:0f:a1:d5:48:c0:9c:6f:9d:7f:7d:64:b9:62: 0e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B3:26:7A:3A:40:3B:EC:B5:9B:BF:6A:24:01:98:CE:E5:4C:5F:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/557b0708-0206-328f-92e4-7aa700401b12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl X509v3 Authority Key Identifier: keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer sbgp-ipAddrBlock: critical IPv4: 198.248.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:52:61:70:fc:e3:dd:1e:7e:d0:ff:4c:85:30:25:83:64:e1: fb:19:c1:4f:20:18:d4:85:fc:cd:53:24:68:12:d3:d5:b0:51: ed:3e:a1:48:ed:7f:bb:1d:d4:d2:bf:e3:9c:b0:a5:3f:c7:30: b1:24:9b:04:f1:c5:3d:e4:cb:a9:8b:cd:18:16:46:08:a5:3f: ce:5d:d9:93:91:63:38:73:d2:c4:47:79:31:12:68:e5:e7:9c: 54:c8:8a:5c:7d:6a:3d:42:a0:24:a0:3a:17:91:f7:72:89:1b: 7a:63:23:f7:f6:80:a5:61:76:26:aa:83:c6:f5:2d:60:3b:29: 88:3c:ac:27:7c:90:d6:43:67:71:61:57:ce:c3:c4:0d:1b:bd: 1a:d3:1a:14:b7:32:c3:fa:6b:49:7a:13:04:6a:2f:18:6a:3a: 24:71:f3:b1:0b:77:f8:f5:88:f0:6f:7d:e7:e0:ae:1e:cc:18: 0b:65:8e:28:c2:fc:62:46:26:1d:8b:c6:00:67:38:21:94:f9: 36:18:36:ae:60:c0:51:65:76:40:45:3f:91:08:90:02:34:81: 0d:d3:75:bd:8c:45:98:23:b2:b9:4f:86:22:62:d2:ad:29:4a: a1:c6:5e:15:1a:7e:ce:81:cd:e6:0c:d4:94:bd:79:10:83:9e: 8e:f8:29:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6lbV/Bq5tjPj9kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg4NDI4NzgtMTA1MC00ZGY3LTgyMmItZWE4ZWMyNWRi ODNkMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk ODk2MGZkZDAtYTI4ZS00ZTYzLWIxNmMtZTU0NGNkMTUyYzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsH+nPkQJSrIateVRUZXlVZNJ/6oOMyq3WGNx 8TDuN6vvja3Lm2Sh1hPmxKBTTfQxN4IYref86yVKGY9BUPnxWVSY2gl6OWsHXfnB FpfgI7DRfd463F9VkkVBnrUB5Z8gVie5vXTpjgQNInqm3oj7YEkxiR/ol9d9x4yr xSN6ihVEIPjkA9sP2tEXi+1cGO8GKHB3y1ySDsz2po9BFVL7GG0fKYxQEY18PlXX o2IRPRnlDHApIFuxl/xbSwmpW4u4HT8OwKP7U/J3VpmxJI1VJucwZPtKzHYALag7 UgUTxLTZWAZ5bKXiicvEWPYAAhpX0A+h1UjAnG+df31kuWIO7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGizJno6QDvstZu/aiQBmM7lTF+xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0 Mjg3OC0xMDUwLTRkZjctODIyYi1lYThlYzI1ZGI4M2QvNTU3YjA3MDgtMDIwNi0z MjhmLTkyZTQtN2FhNzAwNDAxYjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODg4NDI4NzgtMTA1MC00ZGY3LTgy MmItZWE4ZWMyNWRiODNkLzg4ODQyODc4LTEwNTAtNGRmNy04MjJiLWVhOGVjMjVk YjgzZC5jcmwwHwYDVR0jBBgwFoAUCvQvaSDxqtdtZzyGmgTIgB6tfZkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0Mjg3OC0xMDUwLTRkZjctODIyYi1lYThl YzI1ZGI4M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvhzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALlSYXD8490eftD/TIUwJYNk4fsZwU8gGNSF/M1TJGgS09WwUe0+oUjt f7sd1NK/45ywpT/HMLEkmwTxxT3ky6mLzRgWRgilP85d2ZORYzhz0sRHeTESaOXn nFTIilx9aj1CoCSgOheR93KJG3pjI/f2gKVhdiaqg8b1LWA7KYg8rCd8kNZDZ3Fh V87DxA0bvRrTGhS3MsP6a0l6EwRqLxhqOiRx87ELd/j1iPBvfefgrh7MGAtljijC /GJGJh2LxgBnOCGU+TYYNq5gwFFldkBFP5EIkAI0gQ3Tdb2MRZgjsrlPhiJi0q0p SqHGXhUafs6BzeYM1JS9eRCDno74KZU= -----END CERTIFICATE-----Generated at Fri Apr 17 20:56:09 2026 by rpki-client