$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/5752af09-f786-323e-af94-12d414fd9780.roa File: 5752af09-f786-323e-af94-12d414fd9780.roa (raw, json) Hash identifier: Mnbf4eT6owQtCk4Sd5mP9O2ay7vS3BbWBe/kjVrUs6g= Subject key identifier: 50:D5:A4:42:92:5D:66:B6:3B:F0:04:98:09:6A:09:E4:5F:E4:CC:86 Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584F331D100347AFA2A71CF50F40 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/5752af09-f786-323e-af94-12d414fd9780.roa Signing time: Thu 17 Sep 2026 01:00:11 +0000 ROA not before: Thu 17 Sep 2026 01:00:11 +0000 ROA not after: Wed 16 Dec 2026 02:00:11 +0000 asID: 10279 IP address blocks: 198.13.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:1d:10:03:47:af:a2:a7:1c:f5:0f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Sep 17 01:00:11 2026 GMT Not After : Dec 16 02:00:11 2026 GMT Subject: CN=351542d4-926e-48d5-a0ab-b4336e03c83f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e9:6a:c3:f5:4a:1f:23:d3:08:e4:a7:c1:bc: 9c:d2:b9:9d:03:02:c3:8d:2f:59:2e:53:7b:fc:6b: 28:f0:0c:2d:4d:50:7b:78:86:4e:ac:fd:cb:8f:42: 70:31:f0:c1:80:e6:e6:27:65:3f:ff:6d:a7:54:76: b7:d5:f9:48:02:3d:f9:fe:1f:22:db:2a:6d:39:38: 2c:fd:b4:cf:0a:07:ca:bc:86:d3:ee:af:c3:dd:6e: f2:55:53:72:9e:2f:3e:19:66:14:c3:2f:aa:7c:14: c3:77:3e:d2:ba:62:49:42:2b:fe:9c:02:a9:04:a7: 55:f7:30:18:ea:b0:c3:85:12:7c:4c:05:01:9d:c4: e1:90:64:30:4e:f7:60:2c:22:cf:a0:3b:0f:3d:9d: 49:99:03:e2:96:26:06:e4:0b:52:e1:a8:1c:34:97: 77:56:1d:36:a6:71:df:fc:1b:f4:ba:4c:ea:b7:f6: a8:e9:90:96:cb:39:d6:7f:fa:a1:2f:51:ec:67:2c: 8d:12:f3:b0:06:a4:56:7b:0f:25:f6:d3:10:8c:79: af:82:17:3c:10:1a:a8:4c:7e:9b:80:67:21:ca:13: f8:1d:a7:62:ac:26:ed:67:6b:80:0c:f0:3f:36:1b: 14:55:7b:12:c6:5c:ad:73:c6:25:07:fc:67:c8:a1: c4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D5:A4:42:92:5D:66:B6:3B:F0:04:98:09:6A:09:E4:5F:E4:CC:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/5752af09-f786-323e-af94-12d414fd9780.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 198.13.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:04:57:38:f2:12:ce:98:5d:a9:5e:40:28:b2:2c:6f:8c:d7: b8:43:c4:37:96:c3:4c:3b:8e:f7:65:38:de:b9:5d:2f:a6:6b: 33:2f:cc:73:3d:d5:4c:c0:4d:2c:81:f4:71:0e:e5:8f:7e:e1: 67:40:4b:c5:d2:df:a7:12:b6:5e:e6:ee:ec:88:be:06:b4:08: 8f:c0:5a:b8:05:0d:c4:c8:41:51:1a:f6:82:36:6c:82:81:c4: 0a:91:59:27:52:36:aa:c1:ea:3c:1b:db:e3:8b:ca:14:5c:50: cf:29:96:32:2b:ea:20:64:2b:07:4e:66:9e:22:ec:70:ac:f8: e7:ca:99:54:c4:35:0c:34:b4:76:be:29:71:ff:69:a6:30:6b: 68:10:04:79:69:af:2e:b5:3b:f3:09:72:5f:2a:6c:a9:c5:c6: 25:13:97:d1:80:72:09:b6:7e:41:6d:fa:83:69:0b:31:5f:1b: 6f:a4:38:6e:62:9c:c9:d5:31:38:e9:fb:fb:e8:d5:a1:23:d2: 49:58:65:1c:a5:54:39:0e:52:c6:07:48:0f:ef:4d:80:07:02: 3c:aa:fb:5c:cd:79:cf:05:96:28:a9:ef:24:85:c2:b2:2a:1e: 24:3a:74:25:fc:65:25:06:1d:5d:a2:30:19:fd:e0:db:8f:36: 4f:01:94:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8zHRADR6+ipxz1D0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk MzUxNTQyZDQtOTI2ZS00OGQ1LWEwYWItYjQzMzZlMDNjODNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1elqw/VKHyPTCOSnwbyc0rmdAwLDjS9ZLlN7 /Gso8AwtTVB7eIZOrP3Lj0JwMfDBgObmJ2U//22nVHa31flIAj35/h8i2yptOTgs /bTPCgfKvIbT7q/D3W7yVVNyni8+GWYUwy+qfBTDdz7SumJJQiv+nAKpBKdV9zAY 6rDDhRJ8TAUBncThkGQwTvdgLCLPoDsPPZ1JmQPiliYG5AtS4agcNJd3Vh02pnHf /Bv0ukzqt/ao6ZCWyznWf/qhL1HsZyyNEvOwBqRWew8l9tMQjHmvghc8EBqoTH6b gGchyhP4HadirCbtZ2uADPA/NhsUVXsSxlytc8YlB/xnyKHELwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFDVpEKSXWa2O/AEmAlqCeRf5MyGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvNTc1MmFmMDktZjc4Ni0z MjNlLWFmOTQtMTJkNDE0ZmQ5NzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxg1YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgEVzjyEs6YXaleQCiyLG+M17hDxDeWw0w7jvdlON65XS+mazMvzHM9 1UzATSyB9HEO5Y9+4WdAS8XS36cStl7m7uyIvga0CI/AWrgFDcTIQVEa9oI2bIKB xAqRWSdSNqrB6jwb2+OLyhRcUM8pljIr6iBkKwdOZp4i7HCs+OfKmVTENQw0tHa+ KXH/aaYwa2gQBHlpry61O/MJcl8qbKnFxiUTl9GAcgm2fkFt+oNpCzFfG2+kOG5i nMnVMTjp+/vo1aEj0klYZRylVDkOUsYHSA/vTYAHAjyq+1zNec8Fliip7ySFwrIq HiQ6dCX8ZSUGHV2iMBn94NuPNk8BlJ0= -----END CERTIFICATE-----Generated at Sat Oct 10 14:17:37 2026 by rpki-client