$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e99068-492b-4b53-9e32-828f20955f8d/3df5c989-5d1e-3810-980c-0ab3219805da.roa File: 3df5c989-5d1e-3810-980c-0ab3219805da.roa (raw, json) Hash identifier: xE/uTiWLDR5qgM2D5+AOKMwkg1kmhDsjIc9P42QLS3A= Subject key identifier: 98:3D:2D:87:65:05:72:2F:11:8D:4F:49:B3:DD:8C:3F:44:91:57:4C Certificate issuer: /CN=19e99068-492b-4b53-9e32-828f20955f8d Certificate serial: 010D0C9F4328584CAA271701A09D6D04E6021140 Authority key identifier: 58:EA:AD:7F:15:96:06:89:00:D3:5E:81:EC:41:53:08:86:F8:25:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e99068-492b-4b53-9e32-828f20955f8d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e99068-492b-4b53-9e32-828f20955f8d/3df5c989-5d1e-3810-980c-0ab3219805da.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 27275 IP address blocks: 198.161.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e99068-492b-4b53-9e32-828f20955f8d/19e99068-492b-4b53-9e32-828f20955f8d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e99068-492b-4b53-9e32-828f20955f8d/19e99068-492b-4b53-9e32-828f20955f8d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e99068-492b-4b53-9e32-828f20955f8d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:17:01:a0:9d:6d:04:e6:02:11:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19e99068-492b-4b53-9e32-828f20955f8d Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=794b5aaf-a68c-4079-a2a2-c34f8ba33f63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:92:26:f8:70:80:1c:a8:79:94:ff:6d:ce:bd: 18:9d:67:81:e5:55:aa:ef:50:6e:fa:7c:98:88:c1: 87:f4:f2:0c:72:ed:79:7b:39:97:48:dc:88:9d:fe: 1b:c7:3d:bc:d5:51:85:64:18:19:45:2d:2f:7d:c4: 86:29:11:8a:70:61:71:5e:53:46:d1:e2:14:45:a7: 10:21:8e:b8:ea:1c:9e:87:45:a7:de:e3:4a:49:7a: fe:3c:bb:74:a4:11:f7:71:43:6e:8b:5d:76:4d:64: f0:1e:2a:ca:8d:3b:a2:c7:17:0c:59:fb:e2:68:a7: 52:5b:12:d1:62:12:f3:eb:1b:b5:bc:ad:f7:c2:2a: 43:2b:67:ea:9a:c7:e8:d9:35:b7:76:62:c1:de:44: 8d:79:42:84:f6:45:da:4f:45:de:a7:1e:a6:e8:2a: c7:2b:da:fd:8e:10:80:02:98:1b:bc:cf:47:52:2e: 54:0e:d0:a1:bc:0e:da:69:02:a4:31:02:7f:43:a7: 1b:be:9c:e4:16:c1:9a:35:b3:67:8f:2f:1b:8c:db: 47:41:19:fa:e4:4f:7f:55:b5:0b:b5:47:16:e6:90: 60:a5:c7:00:3f:3c:eb:8b:f0:8f:72:23:b1:35:bd: 41:03:78:a3:fa:6b:e0:96:e1:3e:78:af:46:29:36: 32:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:3D:2D:87:65:05:72:2F:11:8D:4F:49:B3:DD:8C:3F:44:91:57:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e99068-492b-4b53-9e32-828f20955f8d/3df5c989-5d1e-3810-980c-0ab3219805da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e99068-492b-4b53-9e32-828f20955f8d/19e99068-492b-4b53-9e32-828f20955f8d.crl X509v3 Authority Key Identifier: keyid:58:EA:AD:7F:15:96:06:89:00:D3:5E:81:EC:41:53:08:86:F8:25:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e99068-492b-4b53-9e32-828f20955f8d.cer sbgp-ipAddrBlock: critical IPv4: 198.161.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:85:4c:34:23:79:8d:35:d1:47:4a:f1:ce:0e:77:dc:60:7b: ed:38:92:67:53:1e:dd:9e:72:7f:79:30:a1:f7:7c:06:dc:93: 5d:53:0b:ed:a0:d7:46:8c:73:66:67:3e:22:b4:4e:09:f3:5f: 92:cb:9a:29:23:1d:a8:82:7c:f9:8c:28:1d:69:4d:d4:8a:5d: bf:15:77:96:3c:28:fc:fe:a2:3b:e8:c6:ed:92:0b:e3:dc:cc: 90:d3:59:f8:1a:5a:8d:57:8d:6b:af:31:6e:47:ca:8f:5f:9e: d4:49:94:2a:99:b2:a9:01:da:93:d6:8e:d9:4d:02:6d:75:89: 37:78:2a:90:e4:30:ee:aa:1d:1f:d5:20:c7:3f:04:56:6e:10: 24:55:a0:ca:f1:7f:81:f2:11:5f:c2:34:91:30:c3:28:54:48: dc:60:6f:b0:2d:51:59:bb:a5:aa:dc:c0:dd:e5:2c:51:3f:5c: 3d:d5:ce:e9:8c:81:b8:cb:5b:36:00:76:d0:a3:61:8e:81:9f: e8:c3:7d:80:5e:66:a1:05:d9:83:4e:f0:2a:e1:2a:2e:d6:f2: 08:b0:32:c7:38:ab:e2:66:7c:77:42:b0:75:a2:58:94:71:18: bf:c7:02:ae:cc:4c:49:d0:61:f9:a0:15:2a:6b:80:37:a3:00: 6a:49:e1:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJxcBoJ1tBOYCEUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTllOTkwNjgtNDkyYi00YjUzLTllMzItODI4ZjIwOTU1 ZjhkMB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk Nzk0YjVhYWYtYTY4Yy00MDc5LWEyYTItYzM0ZjhiYTMzZjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZIm+HCAHKh5lP9tzr0YnWeB5VWq71Bu+nyY iMGH9PIMcu15ezmXSNyInf4bxz281VGFZBgZRS0vfcSGKRGKcGFxXlNG0eIURacQ IY646hyeh0Wn3uNKSXr+PLt0pBH3cUNui112TWTwHirKjTuixxcMWfviaKdSWxLR YhLz6xu1vK33wipDK2fqmsfo2TW3dmLB3kSNeUKE9kXaT0Xepx6m6CrHK9r9jhCA ApgbvM9HUi5UDtChvA7aaQKkMQJ/Q6cbvpzkFsGaNbNnjy8bjNtHQRn65E9/VbUL tUcW5pBgpccAPzzri/CPciOxNb1BA3ij+mvgluE+eK9GKTYySwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJg9LYdlBXIvEY1PSbPdjD9EkVdMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xOWU5 OTA2OC00OTJiLTRiNTMtOWUzMi04MjhmMjA5NTVmOGQvM2RmNWM5ODktNWQxZS0z ODEwLTk4MGMtMGFiMzIxOTgwNWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMTllOTkwNjgtNDkyYi00YjUzLTll MzItODI4ZjIwOTU1ZjhkLzE5ZTk5MDY4LTQ5MmItNGI1My05ZTMyLTgyOGYyMDk1 NWY4ZC5jcmwwHwYDVR0jBBgwFoAUWOqtfxWWBokA016B7EFTCIb4JYYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xOWU5OTA2OC00OTJiLTRiNTMtOWUzMi04Mjhm MjA5NTVmOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxqEcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGFTDQjeY010UdK8c4Od9xge+04kmdTHt2ecn95MKH3fAbck11TC+2g 10aMc2ZnPiK0TgnzX5LLmikjHaiCfPmMKB1pTdSKXb8Vd5Y8KPz+ojvoxu2SC+Pc zJDTWfgaWo1XjWuvMW5Hyo9fntRJlCqZsqkB2pPWjtlNAm11iTd4KpDkMO6qHR/V IMc/BFZuECRVoMrxf4HyEV/CNJEwwyhUSNxgb7AtUVm7parcwN3lLFE/XD3VzumM gbjLWzYAdtCjYY6Bn+jDfYBeZqEF2YNO8CrhKi7W8giwMsc4q+JmfHdCsHWiWJRx GL/HAq7MTEnQYfmgFSprgDejAGpJ4bo= -----END CERTIFICATE-----Generated at Mon Mar 2 06:41:39 2026 by rpki-client