$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/19aa8e02-b9d8-353f-b661-4dbf4e73c897.roa File: 19aa8e02-b9d8-353f-b661-4dbf4e73c897.roa (raw, json) Hash identifier: sdcmr3euYD1DEqMunB83+m8k0iqpZ11rU/U1CCaLrfQ= Subject key identifier: CA:8B:50:7A:F7:91:93:AD:EE:A9:29:2E:C2:A0:AA:83:BB:35:CE:D1 Certificate issuer: /CN=a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd Certificate serial: 010D0C9F4328584CB551EE021CAD009C50465400 Authority key identifier: DC:32:B3:93:D6:64:94:2D:8F:61:5D:79:FD:DD:54:FF:18:57:5E:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/19aa8e02-b9d8-353f-b661-4dbf4e73c897.roa Signing time: Sat 31 Jan 2026 14:00:39 +0000 ROA not before: Sat 31 Jan 2026 14:00:39 +0000 ROA not after: Fri 01 May 2026 13:00:39 +0000 asID: 8987 IP address blocks: 198.38.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b5:51:ee:02:1c:ad:00:9c:50:46:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd Validity Not Before: Jan 31 14:00:39 2026 GMT Not After : May 1 13:00:39 2026 GMT Subject: CN=6dc5668a-b5c4-4268-bc3b-3b3560328a16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a1:f4:3b:34:3f:c1:6c:00:02:e4:78:90:ca: ad:ed:a7:dd:53:a5:33:ba:dd:e8:6a:80:e5:0a:de: 84:9f:b4:7d:2e:56:db:ba:f9:0a:a8:63:2f:d1:e5: 73:34:50:a0:e0:13:74:23:3a:47:9f:97:d6:8c:24: 93:72:c5:81:a2:7e:71:ee:5b:d4:a7:63:2c:74:9e: b8:8a:81:86:da:24:1b:ab:3b:42:f1:68:0a:c7:80: 27:e2:73:d7:b1:5d:1b:d2:0b:24:4f:1e:d1:37:ce: fa:96:3f:73:69:b0:bb:50:ec:16:42:9b:d6:a8:ac: 09:66:ef:97:d7:ed:55:e2:6e:10:b5:fa:fa:cc:4a: 0e:11:27:ad:58:e0:bb:fa:97:ee:c4:6d:76:a2:21: 03:7d:59:b2:d3:02:8d:46:90:7e:55:15:d4:ca:a6: 4f:70:e5:a0:bc:75:73:11:97:8e:5a:98:05:d8:9e: b6:88:fc:75:10:c9:af:c6:57:1b:e0:12:09:13:d8: 85:6d:e8:39:d4:d5:e1:e5:b6:d7:fb:6d:75:16:aa: 2b:b2:b9:7c:78:11:ce:23:6b:08:8c:36:18:02:95: 02:0c:16:f2:af:84:24:5f:e5:83:57:14:4b:f8:a5: e6:14:50:8f:ee:5c:45:56:fb:10:f6:d9:3d:8a:fc: 51:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:8B:50:7A:F7:91:93:AD:EE:A9:29:2E:C2:A0:AA:83:BB:35:CE:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/19aa8e02-b9d8-353f-b661-4dbf4e73c897.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.crl X509v3 Authority Key Identifier: keyid:DC:32:B3:93:D6:64:94:2D:8F:61:5D:79:FD:DD:54:FF:18:57:5E:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.cer sbgp-ipAddrBlock: critical IPv4: 198.38.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:8f:0a:8a:51:4c:d4:5f:1b:13:91:02:00:34:a6:35:27:a4: 9d:8e:8f:29:5d:f8:2c:ee:2b:57:61:a5:70:e9:84:0d:4d:ff: 7b:39:49:3c:d7:bc:03:23:81:0e:f4:19:1a:61:33:45:56:fc: ff:b8:7a:49:23:d2:f8:4b:36:64:e5:55:5b:1f:ee:c6:52:44: 7c:96:a5:2e:93:35:47:53:d5:0f:b1:2f:03:bf:8f:d1:a5:8d: 6d:30:db:d4:99:42:fa:2f:ab:0a:42:25:d0:be:3c:8d:5d:db: ac:42:65:37:9a:57:b1:25:39:ef:0b:9b:88:4b:79:8d:59:9d: dc:90:21:df:2a:37:61:bd:8d:b5:29:54:9c:68:e8:69:11:06: 3a:29:45:41:09:8b:d7:01:8a:a1:20:fd:36:68:4c:ea:51:ba: 71:49:ba:70:74:53:71:09:92:41:98:31:42:82:79:50:57:d4: d3:2b:96:c0:b3:bd:69:2d:13:32:3d:e8:e5:b4:f1:33:f3:3b: fe:3a:ed:3f:45:1e:96:57:d7:df:37:12:9b:d0:36:5c:08:f6: 5b:a9:ca:77:94:c5:9f:a3:1c:0d:b2:d5:34:a7:08:1e:bd:6c: a1:31:0b:30:4c:2b:2f:63:83:23:2b:a5:87:87:79:f5:51:c6: 37:e6:f9:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy1Ue4CHK0AnFBGVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTk0MzVhMzgtYmI4OS00ZmNmLTllNWYtN2E2ZTUzYjJk M2JkMB4XDTI2MDEzMTE0MDAzOVoXDTI2MDUwMTEzMDAzOVowLzEtMCsGA1UEAxMk NmRjNTY2OGEtYjVjNC00MjY4LWJjM2ItM2IzNTYwMzI4YTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKH0OzQ/wWwAAuR4kMqt7afdU6Uzut3oaoDl Ct6En7R9LlbbuvkKqGMv0eVzNFCg4BN0IzpHn5fWjCSTcsWBon5x7lvUp2MsdJ64 ioGG2iQbqztC8WgKx4An4nPXsV0b0gskTx7RN876lj9zabC7UOwWQpvWqKwJZu+X 1+1V4m4Qtfr6zEoOESetWOC7+pfuxG12oiEDfVmy0wKNRpB+VRXUyqZPcOWgvHVz EZeOWpgF2J62iPx1EMmvxlcb4BIJE9iFbeg51NXh5bbX+211Fqorsrl8eBHOI2sI jDYYApUCDBbyr4QkX+WDVxRL+KXmFFCP7lxFVvsQ9tk9ivxRTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqLUHr3kZOt7qkpLsKgqoO7Nc7RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTQz NWEzOC1iYjg5LTRmY2YtOWU1Zi03YTZlNTNiMmQzYmQvMTlhYThlMDItYjlkOC0z NTNmLWI2NjEtNGRiZjRlNzNjODk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTk0MzVhMzgtYmI4OS00ZmNmLTll NWYtN2E2ZTUzYjJkM2JkL2E5NDM1YTM4LWJiODktNGZjZi05ZTVmLTdhNmU1M2Iy ZDNiZC5jcmwwHwYDVR0jBBgwFoAU3DKzk9ZklC2PYV15/d1U/xhXXlYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTQzNWEzOC1iYjg5LTRmY2YtOWU1Zi03YTZl NTNiMmQzYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxiZKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6PCopRTNRfGxORAgA0pjUnpJ2Ojyld+CzuK1dhpXDphA1N/3s5STzX vAMjgQ70GRphM0VW/P+4ekkj0vhLNmTlVVsf7sZSRHyWpS6TNUdT1Q+xLwO/j9Gl jW0w29SZQvovqwpCJdC+PI1d26xCZTeaV7ElOe8Lm4hLeY1ZndyQId8qN2G9jbUp VJxo6GkRBjopRUEJi9cBiqEg/TZoTOpRunFJunB0U3EJkkGYMUKCeVBX1NMrlsCz vWktEzI96OW08TPzO/467T9FHpZX1983EpvQNlwI9lupyneUxZ+jHA2y1TSnCB69 bKExCzBMKy9jgyMrpYeHefVRxjfm+fA= -----END CERTIFICATE-----Generated at Sun Mar 1 22:38:23 2026 by rpki-client