$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/bd9188e8-ffee-390e-87df-a36c96325cad.roa File: bd9188e8-ffee-390e-87df-a36c96325cad.roa (raw, json) Hash identifier: 1ZV2WeN4Wsil4gaOgvB16D6iln5gAz9+7GXX5yfPaFA= Subject key identifier: D7:AA:58:46:E5:05:2D:BB:53:7A:AA:3B:F2:85:6C:3C:14:3E:18:20 Certificate issuer: /CN=7b840891-ef20-464d-970d-ffec736f7949 Certificate serial: 010D0C9F4328584D80FFE6AC7B8168B2B0550000 Authority key identifier: 54:9A:D3:3B:0F:06:4C:81:99:0C:C8:07:FA:8D:24:13:C3:9F:F6:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/bd9188e8-ffee-390e-87df-a36c96325cad.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 398872 IP address blocks: 198.134.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/7b840891-ef20-464d-970d-ffec736f7949.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/7b840891-ef20-464d-970d-ffec736f7949.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:80:ff:e6:ac:7b:81:68:b2:b0:55:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b840891-ef20-464d-970d-ffec736f7949 Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=bd5508ea-4b8e-4e40-a5c5-68f3e92e6559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5a:92:22:39:d0:f6:e9:8b:f0:54:3a:89:30: 16:be:51:2f:18:8a:1e:58:4d:91:1d:be:20:29:4e: b4:33:9b:61:d6:89:bb:32:73:83:0e:66:7f:80:c1: e8:9e:86:87:71:dd:f0:9a:1c:dc:60:81:39:6f:55: 73:40:11:de:cb:78:e2:7e:9f:13:6e:43:fc:77:2e: 8d:82:4b:b3:1e:80:47:11:2d:63:57:2c:d7:5c:0d: 4b:f7:b8:43:2f:9d:d5:61:76:b3:b5:c0:83:a7:43: cd:81:24:75:bd:5b:62:e1:d1:43:37:3b:af:8e:78: 1d:50:c0:ff:91:f9:d4:07:80:80:08:09:3f:fa:6a: 46:e1:4b:95:a9:33:41:d7:55:e2:00:85:e6:2c:ae: 2a:ab:1b:5d:eb:5e:b9:3b:5d:6c:bc:58:78:22:5d: e2:c5:82:6d:67:78:2d:23:fc:50:1a:82:af:21:c9: a0:a7:3d:df:b9:b0:89:ea:02:d5:2c:54:27:15:90: d2:d1:05:8e:af:06:fa:e6:01:5a:cd:b5:34:23:85: 72:5d:ec:8a:e7:b7:a4:32:d4:a3:54:50:91:9b:d9: 33:ef:38:b6:19:90:6f:c1:3b:17:35:f5:99:a9:5d: e8:f2:0e:bf:ce:e7:b1:c6:6b:fa:11:69:7b:cb:90: 81:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:AA:58:46:E5:05:2D:BB:53:7A:AA:3B:F2:85:6C:3C:14:3E:18:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/bd9188e8-ffee-390e-87df-a36c96325cad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949/7b840891-ef20-464d-970d-ffec736f7949.crl X509v3 Authority Key Identifier: keyid:54:9A:D3:3B:0F:06:4C:81:99:0C:C8:07:FA:8D:24:13:C3:9F:F6:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7b840891-ef20-464d-970d-ffec736f7949.cer sbgp-ipAddrBlock: critical IPv4: 198.134.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:c7:b8:f8:af:d6:18:15:5f:29:83:c1:a1:56:43:7f:2a:14: 62:7a:48:55:f3:e0:af:6a:6b:4c:62:c9:16:fe:d8:fa:ee:47: ab:90:14:67:5f:37:79:04:b8:2d:38:c6:ce:76:4c:49:74:f9: b6:a5:39:f6:6f:09:27:a6:09:d1:9e:00:0e:c1:3f:a0:f8:ae: 67:ae:58:99:fa:82:a1:7d:7b:c8:2a:a1:c3:d3:3f:97:78:2a: 98:b5:77:35:56:82:ad:16:2f:4f:cc:74:c8:09:77:fd:ec:30: 06:f5:fa:50:36:20:96:fb:d5:e6:5c:20:c2:0a:97:4d:48:1f: 91:81:a5:3b:5a:b4:dc:2f:aa:5c:b4:b6:36:f2:d9:b4:01:d8: dc:ad:d1:eb:41:eb:97:6a:19:eb:e4:a3:d7:5f:2b:4a:40:16: 62:e2:cf:84:2d:7d:83:dc:18:ad:b4:a9:0d:68:92:99:09:a5: 5d:ed:b8:bb:54:e1:6b:fb:86:be:2c:64:e1:0f:a4:7d:0b:34: 8e:e9:ce:46:a7:c9:60:b1:04:bf:a9:26:af:61:37:17:12:20: 0a:92:88:f0:a2:5f:36:6f:ed:59:e4:aa:ce:b0:10:f1:cf:2a: 3a:75:26:c1:2c:46:36:21:bc:b1:cb:df:26:bd:13:5a:5c:b5: 0e:cc:7e:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2A/+ase4FosrBVAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2I4NDA4OTEtZWYyMC00NjRkLTk3MGQtZmZlYzczNmY3 OTQ5MB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk YmQ1NTA4ZWEtNGI4ZS00ZTQwLWE1YzUtNjhmM2U5MmU2NTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVqSIjnQ9umL8FQ6iTAWvlEvGIoeWE2RHb4g KU60M5th1om7MnODDmZ/gMHonoaHcd3wmhzcYIE5b1VzQBHey3jifp8TbkP8dy6N gkuzHoBHES1jVyzXXA1L97hDL53VYXaztcCDp0PNgSR1vVti4dFDNzuvjngdUMD/ kfnUB4CACAk/+mpG4UuVqTNB11XiAIXmLK4qqxtd6165O11svFh4Il3ixYJtZ3gt I/xQGoKvIcmgpz3fubCJ6gLVLFQnFZDS0QWOrwb65gFazbU0I4VyXeyK57ekMtSj VFCRm9kz7zi2GZBvwTsXNfWZqV3o8g6/zuexxmv6EWl7y5CB1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNeqWEblBS27U3qqO/KFbDwUPhggMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83Yjg0 MDg5MS1lZjIwLTQ2NGQtOTcwZC1mZmVjNzM2Zjc5NDkvYmQ5MTg4ZTgtZmZlZS0z OTBlLTg3ZGYtYTM2Yzk2MzI1Y2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2I4NDA4OTEtZWYyMC00NjRkLTk3 MGQtZmZlYzczNmY3OTQ5LzdiODQwODkxLWVmMjAtNDY0ZC05NzBkLWZmZWM3MzZm Nzk0OS5jcmwwHwYDVR0jBBgwFoAUVJrTOw8GTIGZDMgH+o0kE8Of9tAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83Yjg0MDg5MS1lZjIwLTQ2NGQtOTcwZC1mZmVj NzM2Zjc5NDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxoYdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELHuPiv1hgVXymDwaFWQ38qFGJ6SFXz4K9qa0xiyRb+2PruR6uQFGdf N3kEuC04xs52TEl0+balOfZvCSemCdGeAA7BP6D4rmeuWJn6gqF9e8gqocPTP5d4 Kpi1dzVWgq0WL0/MdMgJd/3sMAb1+lA2IJb71eZcIMIKl01IH5GBpTtatNwvqly0 tjby2bQB2Nyt0etB65dqGevko9dfK0pAFmLiz4QtfYPcGK20qQ1okpkJpV3tuLtU 4Wv7hr4sZOEPpH0LNI7pzkanyWCxBL+pJq9hNxcSIAqSiPCiXzZv7Vnkqs6wEPHP Kjp1JsEsRjYhvLHL3ya9E1pctQ7MfmE= -----END CERTIFICATE-----Generated at Sat Apr 18 01:40:45 2026 by rpki-client