$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/1f9c3ae3-8a2e-3912-83e0-eebf48c92b33.roa File: 1f9c3ae3-8a2e-3912-83e0-eebf48c92b33.roa (raw, json) Hash identifier: 0taxra2qQ/im3v04L8/CJXi6/C3czEQRU/ujhXAt2SU= Subject key identifier: F4:8A:2C:75:68:4E:5F:60:8F:7B:8B:69:8A:1F:19:7F:38:A3:48:66 Certificate issuer: /CN=7607f87f-d9ec-4a0f-b611-d0eeadde6b42 Certificate serial: 010D0C9F4328584DE84B32E944D1264D6A34E4D0 Authority key identifier: 94:D9:6A:80:59:34:44:86:89:4A:48:DB:CB:87:19:37:9A:09:97:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/1f9c3ae3-8a2e-3912-83e0-eebf48c92b33.roa Signing time: Thu 21 May 2026 13:00:32 +0000 ROA not before: Thu 21 May 2026 13:00:32 +0000 ROA not after: Wed 19 Aug 2026 13:00:32 +0000 asID: 14230 IP address blocks: 198.204.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e8:4b:32:e9:44:d1:26:4d:6a:34:e4:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7607f87f-d9ec-4a0f-b611-d0eeadde6b42 Validity Not Before: May 21 13:00:32 2026 GMT Not After : Aug 19 13:00:32 2026 GMT Subject: CN=0e7a906d-46fe-4c91-b2ff-ca4c7206f61a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cd:26:ef:80:f2:27:52:42:a2:3b:97:f5:72: 51:b2:6a:89:b9:ca:69:56:92:ec:dc:86:79:cf:03: a4:e5:cd:c2:f1:c2:dc:77:81:40:05:d9:df:87:77: 81:d5:db:60:b8:84:a3:e7:54:ad:88:be:42:c2:ff: 0f:fb:1b:08:9b:4f:da:1a:e0:20:5a:53:c9:a8:d8: 01:29:98:4a:57:92:90:37:ac:6c:99:24:4c:cc:7f: 0a:ff:62:7f:27:4e:1c:20:34:98:b0:8a:01:da:e0: 60:0d:df:09:ad:1d:9f:f6:11:86:7e:ed:bb:c2:83: 13:9b:c2:68:9e:3b:67:b6:14:a7:61:01:d8:8a:65: b3:2b:af:d9:1a:9d:b3:68:08:c0:28:4d:bc:af:d3: 55:6b:35:af:e0:dd:14:c0:50:90:a1:b2:39:b0:72: 7e:71:8f:36:3f:1e:4c:b9:9e:06:8d:ee:0d:86:04: 5b:05:99:f7:10:50:91:ec:d9:31:fa:a6:39:04:77: 5c:fa:59:44:71:cb:b2:9c:42:18:74:1d:4d:52:02: e0:72:71:bc:a0:d6:03:36:d3:14:80:27:1b:e4:d2: 3e:9d:98:1a:21:e9:12:53:15:80:7f:5e:ae:7c:fa: d4:92:80:6c:8e:fa:05:f8:53:48:d0:da:8f:03:86: 3d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:8A:2C:75:68:4E:5F:60:8F:7B:8B:69:8A:1F:19:7F:38:A3:48:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/1f9c3ae3-8a2e-3912-83e0-eebf48c92b33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.crl X509v3 Authority Key Identifier: keyid:94:D9:6A:80:59:34:44:86:89:4A:48:DB:CB:87:19:37:9A:09:97:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.cer sbgp-ipAddrBlock: critical IPv4: 198.204.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:e6:de:5d:85:83:63:e0:c0:35:a3:d1:67:ae:13:16:8b:29: df:ec:6f:b0:d2:d2:3a:8c:50:e7:fa:35:6e:db:8c:77:eb:3e: 3d:92:a6:43:70:18:af:78:f2:23:1d:ce:40:51:5b:20:2c:d0: f9:de:48:9d:e0:be:23:25:2a:57:7d:d8:50:11:85:3d:4f:c6: 28:6e:37:58:75:a5:ab:2a:aa:da:7b:80:dc:01:9d:28:63:11: 41:7d:07:74:60:e5:6a:5f:d4:b5:96:e7:e6:39:ae:1b:d4:3f: 75:de:38:67:14:9c:31:2c:2c:38:1e:f4:50:c6:d6:0e:42:de: 92:3e:61:40:15:1d:4e:dd:42:34:e2:85:0a:4b:23:71:f1:7f: 24:4c:1f:45:94:f9:a4:26:6b:18:e0:cc:66:2e:30:5d:e2:6f: d4:1d:7b:28:36:07:e9:bc:31:85:37:e0:f2:92:21:f8:9f:08: 4c:13:4f:ea:4b:00:3a:7c:b1:e7:f5:32:f4:a5:04:53:00:fd: f3:d7:68:6a:96:a3:45:58:75:b8:8e:a0:1d:f8:0b:64:c1:02: d1:31:a3:90:2b:44:fe:58:fb:69:f7:36:72:07:0e:f2:8c:9d: e0:ed:74:34:01:f4:9a:45:02:40:39:f7:4a:80:b1:ce:b0:d0: 08:c6:5f:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3oSzLpRNEmTWo05NAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzYwN2Y4N2YtZDllYy00YTBmLWI2MTEtZDBlZWFkZGU2 YjQyMB4XDTI2MDUyMTEzMDAzMloXDTI2MDgxOTEzMDAzMlowLzEtMCsGA1UEAxMk MGU3YTkwNmQtNDZmZS00YzkxLWIyZmYtY2E0YzcyMDZmNjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr80m74DyJ1JCojuX9XJRsmqJucppVpLs3IZ5 zwOk5c3C8cLcd4FABdnfh3eB1dtguISj51StiL5Cwv8P+xsIm0/aGuAgWlPJqNgB KZhKV5KQN6xsmSRMzH8K/2J/J04cIDSYsIoB2uBgDd8JrR2f9hGGfu27woMTm8Jo njtnthSnYQHYimWzK6/ZGp2zaAjAKE28r9NVazWv4N0UwFCQobI5sHJ+cY82Px5M uZ4Gje4NhgRbBZn3EFCR7Nkx+qY5BHdc+llEccuynEIYdB1NUgLgcnG8oNYDNtMU gCcb5NI+nZgaIekSUxWAf16ufPrUkoBsjvoF+FNI0NqPA4Y9QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPSKLHVoTl9gj3uLaYofGX84o0hmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83NjA3 Zjg3Zi1kOWVjLTRhMGYtYjYxMS1kMGVlYWRkZTZiNDIvMWY5YzNhZTMtOGEyZS0z OTEyLTgzZTAtZWViZjQ4YzkyYjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzYwN2Y4N2YtZDllYy00YTBmLWI2 MTEtZDBlZWFkZGU2YjQyLzc2MDdmODdmLWQ5ZWMtNGEwZi1iNjExLWQwZWVhZGRl NmI0Mi5jcmwwHwYDVR0jBBgwFoAUlNlqgFk0RIaJSkjby4cZN5oJl6AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83NjA3Zjg3Zi1kOWVjLTRhMGYtYjYxMS1kMGVl YWRkZTZiNDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxswKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL3m3l2Fg2PgwDWj0WeuExaLKd/sb7DS0jqMUOf6NW7bjHfrPj2SpkNw GK948iMdzkBRWyAs0PneSJ3gviMlKld92FARhT1PxihuN1h1pasqqtp7gNwBnShj EUF9B3Rg5Wpf1LWW5+Y5rhvUP3XeOGcUnDEsLDge9FDG1g5C3pI+YUAVHU7dQjTi hQpLI3HxfyRMH0WU+aQmaxjgzGYuMF3ib9Qdeyg2B+m8MYU34PKSIfifCEwTT+pL ADp8sef1MvSlBFMA/fPXaGqWo0VYdbiOoB34C2TBAtExo5ArRP5Y+2n3NnIHDvKM neDtdDQB9JpFAkA590qAsc6w0AjGX5U= -----END CERTIFICATE-----Generated at Sat Jun 13 13:48:59 2026 by rpki-client