$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/c7ec8882-d567-38d8-b18d-49b39b44c840.roa File: c7ec8882-d567-38d8-b18d-49b39b44c840.roa (raw, json) Hash identifier: Qa4+M1kvb0ox0q0qKZS4H8Z4NOM6uRySKb5SWTgWT9E= Subject key identifier: C2:40:1B:5C:0F:F3:86:37:A5:2C:40:33:F8:11:26:6B:2A:50:4B:1D Certificate issuer: /CN=cd198da4-dbcc-4bec-a1a0-31d61d5ccc71 Certificate serial: 010D0C9F4328584D571FB4C039FAD75BEAE0CD00 Authority key identifier: 83:34:B9:70:BA:25:80:24:26:DF:15:AE:FB:C4:6C:D6:42:0B:68:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/c7ec8882-d567-38d8-b18d-49b39b44c840.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 7018 IP address blocks: 208.99.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:b4:c0:39:fa:d7:5b:ea:e0:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd198da4-dbcc-4bec-a1a0-31d61d5ccc71 Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=a0085f38-5cf0-4c3d-8f63-eb9d6b1055bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:02:ef:59:75:e7:49:ad:b8:5e:ed:67:3c:64: e6:4e:e4:44:0e:94:76:fd:86:a9:ce:df:64:4e:7c: 0b:ae:62:92:f3:dd:a9:cc:bd:31:36:6e:ef:5a:1e: fa:8b:fc:88:2e:3c:da:d1:bb:1b:ea:9e:51:7a:53: e4:02:41:f6:e1:88:03:c7:fa:58:d8:76:13:ab:2c: 37:ba:9e:17:9f:8e:4b:11:3f:bf:5d:a5:ae:53:f6: 8c:55:ca:c8:6e:63:a9:69:8d:c9:ec:2b:75:22:b0: 23:de:7b:32:a2:fb:78:e3:b7:a1:a9:3e:2b:88:5c: 2c:5f:b9:c2:d0:63:11:23:0b:53:a6:89:ac:ba:c0: b8:fc:fe:36:6a:bf:7e:07:76:b8:47:8b:72:0a:5b: d9:3a:d1:e6:09:cc:44:54:70:a1:24:47:72:e8:d8: 91:bb:20:83:e0:c5:54:24:fe:62:80:ca:b7:f3:c5: 2a:cd:f1:85:37:1a:be:b3:f9:92:43:eb:25:bb:7b: e0:e1:de:58:d6:2a:39:49:1e:80:b5:bd:74:7b:10: 9f:33:62:8e:6d:ad:67:f0:9c:09:74:b0:54:21:34: e8:75:cc:60:6c:e1:95:64:1e:d3:ea:3d:86:e0:2e: 8a:f9:92:51:98:1c:db:4d:14:0a:85:86:b7:0f:28: 46:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:40:1B:5C:0F:F3:86:37:A5:2C:40:33:F8:11:26:6B:2A:50:4B:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/c7ec8882-d567-38d8-b18d-49b39b44c840.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.crl X509v3 Authority Key Identifier: keyid:83:34:B9:70:BA:25:80:24:26:DF:15:AE:FB:C4:6C:D6:42:0B:68:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer sbgp-ipAddrBlock: critical IPv4: 208.99.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:62:c8:bc:61:75:99:76:f2:59:80:4a:72:d4:bf:02:ce:e0: 14:a6:f1:da:c8:3a:57:61:31:82:ed:7c:af:69:21:d5:ed:f1: 1c:09:26:e9:0d:71:85:d7:ea:5b:c3:e0:96:d9:e1:6d:63:5f: bc:a0:70:8d:16:42:49:dc:76:9a:73:b7:d5:e0:e8:66:1f:49: 88:43:70:fc:90:e5:f8:1c:7f:91:ca:c7:3c:32:8a:de:39:3d: e3:37:a7:1e:47:55:e4:c4:eb:83:bc:94:9c:72:52:a1:67:9f: ec:61:15:62:ba:0c:68:10:8a:9e:1c:c3:3e:fd:77:e7:bb:e7: 3f:61:74:07:30:47:2c:a7:5c:76:77:5d:67:1a:47:de:69:15: 52:e2:b5:90:fc:6e:51:8a:8b:4f:e4:c2:e8:fb:2d:cf:b5:17: 2e:08:5b:55:59:62:05:1f:03:47:9d:88:77:54:d0:49:29:22: 79:a8:d8:1d:60:f8:fb:bb:fe:3d:4d:8b:07:64:2c:e0:95:d4: 15:fe:9b:75:9c:f6:31:bd:47:dd:49:79:d9:2e:61:02:fe:78: 9e:de:02:9d:f2:42:5a:61:50:15:16:27:50:1f:a4:d7:02:d9: 58:64:04:e1:e3:51:53:96:57:84:62:1e:0d:fb:4b:40:ca:55: 06:54:b1:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH7TAOfrXW+rgzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QxOThkYTQtZGJjYy00YmVjLWExYTAtMzFkNjFkNWNj YzcxMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk YTAwODVmMzgtNWNmMC00YzNkLThmNjMtZWI5ZDZiMTA1NWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnALvWXXnSa24Xu1nPGTmTuREDpR2/Yapzt9k TnwLrmKS892pzL0xNm7vWh76i/yILjza0bsb6p5RelPkAkH24YgDx/pY2HYTqyw3 up4Xn45LET+/XaWuU/aMVcrIbmOpaY3J7Ct1IrAj3nsyovt447ehqT4riFwsX7nC 0GMRIwtTpomsusC4/P42ar9+B3a4R4tyClvZOtHmCcxEVHChJEdy6NiRuyCD4MVU JP5igMq388UqzfGFNxq+s/mSQ+slu3vg4d5Y1io5SR6Atb10exCfM2KOba1n8JwJ dLBUITTodcxgbOGVZB7T6j2G4C6K+ZJRmBzbTRQKhYa3DyhGVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJAG1wP84Y3pSxAM/gRJmsqUEsdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDE5 OGRhNC1kYmNjLTRiZWMtYTFhMC0zMWQ2MWQ1Y2NjNzEvYzdlYzg4ODItZDU2Ny0z OGQ4LWIxOGQtNDliMzliNDRjODQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxOThkYTQtZGJjYy00YmVjLWEx YTAtMzFkNjFkNWNjYzcxL2NkMTk4ZGE0LWRiY2MtNGJlYy1hMWEwLTMxZDYxZDVj Y2M3MS5jcmwwHwYDVR0jBBgwFoAUgzS5cLolgCQm3xWu+8Rs1kILaC4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDE5OGRhNC1kYmNjLTRiZWMtYTFhMC0zMWQ2 MWQ1Y2NjNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0GMmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRiyLxhdZl28lmASnLUvwLO4BSm8drIOldhMYLtfK9pIdXt8RwJJukN cYXX6lvD4JbZ4W1jX7ygcI0WQkncdppzt9Xg6GYfSYhDcPyQ5fgcf5HKxzwyit45 PeM3px5HVeTE64O8lJxyUqFnn+xhFWK6DGgQip4cwz79d+e75z9hdAcwRyynXHZ3 XWcaR95pFVLitZD8blGKi0/kwuj7Lc+1Fy4IW1VZYgUfA0ediHdU0EkpInmo2B1g +Pu7/j1NiwdkLOCV1BX+m3Wc9jG9R91JedkuYQL+eJ7eAp3yQlphUBUWJ1AfpNcC 2VhkBOHjUVOWV4RiHg37S0DKVQZUsc4= -----END CERTIFICATE-----Generated at Fri Apr 17 10:45:59 2026 by rpki-client