$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/08b775a9-f16d-34fe-903b-47de515a919a.roa File: 08b775a9-f16d-34fe-903b-47de515a919a.roa (raw, json) Hash identifier: whgfQgLj4n5JawAAWboSGteJsMrHVp1dnfKSSYP0jxQ= Subject key identifier: 31:CC:0A:C5:37:7B:3D:38:2C:D0:27:A4:7E:B2:04:B5:98:12:5C:32 Certificate issuer: /CN=d57d789e-7c0e-4086-93e5-04d300453dae Certificate serial: 010D0C9F4328584D59EA7A91EDB4762E4CB7D900 Authority key identifier: 2D:7A:3D:DF:E4:E3:E7:29:8A:98:51:FF:DF:5F:09:7B:AC:21:51:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/08b775a9-f16d-34fe-903b-47de515a919a.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 14618 IP address blocks: 198.22.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/d57d789e-7c0e-4086-93e5-04d300453dae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/d57d789e-7c0e-4086-93e5-04d300453dae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:7a:91:ed:b4:76:2e:4c:b7:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d57d789e-7c0e-4086-93e5-04d300453dae Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=b1b7049b-d931-443e-bb3d-c663b79b66a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:bb:ad:78:7a:a6:78:eb:c0:a6:7f:ab:c5:1a: 95:d0:72:87:62:59:c7:ff:ee:3e:d2:aa:51:04:e5: 1a:8f:12:15:06:5c:3b:90:08:a2:64:70:6d:23:e2: 55:6d:6d:7e:a5:54:74:b5:0b:d4:bd:55:1e:3b:44: c7:ef:cb:bd:6d:71:02:b0:a5:cd:47:31:ce:60:9d: cf:e9:50:67:1f:8a:cb:4a:51:d7:95:80:b8:2c:fd: 7c:f2:f3:03:cb:96:95:c6:bf:92:a0:d2:ea:e9:93: 52:a3:63:7d:db:f9:06:68:c5:68:9f:43:d1:47:5b: 83:13:d0:91:1d:d9:ee:96:54:3b:a0:01:34:47:21: 12:9d:a2:9f:fb:d6:bb:8e:df:30:d3:e8:cc:89:5c: d4:e0:1a:cb:7a:f6:9a:98:a9:83:cb:9f:1a:e9:c8: e0:62:07:c0:1e:0e:43:53:f1:54:7a:b2:20:15:9f: c4:e4:97:2b:14:87:08:07:16:3b:5c:54:b6:62:43: ef:85:3c:f0:7a:aa:bf:4c:96:9c:21:a7:df:d0:66: ad:32:a3:69:62:38:31:03:a5:d6:23:87:06:53:0b: c0:54:45:da:e1:bd:fd:3f:70:78:f2:70:8f:8b:f8: ae:d6:dc:46:97:2a:5c:30:88:1a:9b:dd:db:5c:52: b6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:CC:0A:C5:37:7B:3D:38:2C:D0:27:A4:7E:B2:04:B5:98:12:5C:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/08b775a9-f16d-34fe-903b-47de515a919a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae/d57d789e-7c0e-4086-93e5-04d300453dae.crl X509v3 Authority Key Identifier: keyid:2D:7A:3D:DF:E4:E3:E7:29:8A:98:51:FF:DF:5F:09:7B:AC:21:51:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d57d789e-7c0e-4086-93e5-04d300453dae.cer sbgp-ipAddrBlock: critical IPv4: 198.22.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:08:fc:d5:e4:fe:76:4f:8d:26:72:fa:8f:88:dc:48:a9:41: 3b:e2:87:ed:ea:78:bb:fd:0e:8d:66:9d:f9:8f:08:c7:2f:d6: 0d:99:59:59:1d:65:87:b7:7f:52:8c:65:c8:86:a4:d0:40:aa: 3c:6f:1c:12:f1:7d:35:04:ec:7f:1d:64:e1:72:dc:39:61:07: 38:b1:76:67:2b:a7:87:f3:03:6a:4f:3b:e6:db:8f:93:2c:4d: 1f:83:1f:88:e5:c1:8b:db:cc:97:fb:ca:83:da:95:f4:e7:46: ac:7b:8c:e8:33:c6:c1:5c:92:b2:f4:f6:52:ad:ec:e7:40:98: 81:65:3a:8e:89:d9:50:c4:0c:ff:b7:56:1e:df:83:10:29:15: 36:31:bb:ab:a2:cb:15:7f:b8:4b:ce:1b:c3:ba:8b:a1:cf:26: 7c:fd:be:6f:fe:d4:76:1b:1d:76:13:bb:8d:a2:df:56:8e:17: 65:55:06:21:1b:b7:d9:9d:82:48:fe:89:b8:1e:96:b3:ed:81: 04:12:ef:03:8e:36:36:e5:70:37:c2:8e:74:96:fb:20:50:79: de:b8:d3:bf:e4:a6:39:97:cc:4d:b4:0a:c8:65:4f:c6:05:0c: b9:13:1e:f2:de:7c:eb:a3:d5:3c:2f:a4:6d:ec:da:9e:1c:6d: 66:08:e6:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6nqR7bR2Lky32QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU3ZDc4OWUtN2MwZS00MDg2LTkzZTUtMDRkMzAwNDUz ZGFlMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk YjFiNzA0OWItZDkzMS00NDNlLWJiM2QtYzY2M2I3OWI2NmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbuteHqmeOvApn+rxRqV0HKHYlnH/+4+0qpR BOUajxIVBlw7kAiiZHBtI+JVbW1+pVR0tQvUvVUeO0TH78u9bXECsKXNRzHOYJ3P 6VBnH4rLSlHXlYC4LP188vMDy5aVxr+SoNLq6ZNSo2N92/kGaMVon0PRR1uDE9CR HdnullQ7oAE0RyESnaKf+9a7jt8w0+jMiVzU4BrLevaamKmDy58a6cjgYgfAHg5D U/FUerIgFZ/E5JcrFIcIBxY7XFS2YkPvhTzweqq/TJacIaff0GatMqNpYjgxA6XW I4cGUwvAVEXa4b39P3B48nCPi/iu1txGlypcMIgam93bXFK2IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHMCsU3ez04LNAnpH6yBLWYElwyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kNTdk Nzg5ZS03YzBlLTQwODYtOTNlNS0wNGQzMDA0NTNkYWUvMDhiNzc1YTktZjE2ZC0z NGZlLTkwM2ItNDdkZTUxNWE5MTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDU3ZDc4OWUtN2MwZS00MDg2LTkz ZTUtMDRkMzAwNDUzZGFlL2Q1N2Q3ODllLTdjMGUtNDA4Ni05M2U1LTA0ZDMwMDQ1 M2RhZS5jcmwwHwYDVR0jBBgwFoAULXo93+Tj5ymKmFH/318Je6whUcQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9kNTdkNzg5ZS03YzBlLTQwODYtOTNlNS0wNGQz MDA0NTNkYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhbuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkI/NXk/nZPjSZy+o+I3EipQTvih+3qeLv9Do1mnfmPCMcv1g2ZWVkd ZYe3f1KMZciGpNBAqjxvHBLxfTUE7H8dZOFy3DlhBzixdmcrp4fzA2pPO+bbj5Ms TR+DH4jlwYvbzJf7yoPalfTnRqx7jOgzxsFckrL09lKt7OdAmIFlOo6J2VDEDP+3 Vh7fgxApFTYxu6uiyxV/uEvOG8O6i6HPJnz9vm/+1HYbHXYTu42i31aOF2VVBiEb t9mdgkj+ibgelrPtgQQS7wOONjblcDfCjnSW+yBQed6407/kpjmXzE20CshlT8YF DLkTHvLefOuj1TwvpG3s2p4cbWYI5q8= -----END CERTIFICATE-----Generated at Sat Apr 18 04:43:11 2026 by rpki-client