$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/ce89f34d-3850-3cf3-b6f0-b3c075e1850d.roa File: ce89f34d-3850-3cf3-b6f0-b3c075e1850d.roa (raw, json) Hash identifier: DNmlRTxNL1DUganGWKaVrz0Fuw0WZu0XYBCdSgO8vOY= Subject key identifier: 9D:57:4A:00:06:35:11:0D:3A:60:C0:3A:42:4F:9D:05:E8:22:CF:C2 Certificate issuer: /CN=7f6f21d4-30bb-4323-bd07-2383bae60aac Certificate serial: 010D0C9F4328584E9D4A71DDD3E71B49CF562F14 Authority key identifier: CB:76:9E:6D:40:34:B9:7F:A9:F4:17:2B:D3:79:9E:10:8A:BC:C1:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/ce89f34d-3850-3cf3-b6f0-b3c075e1850d.roa Signing time: Sat 25 Jul 2026 09:00:11 +0000 ROA not before: Sat 25 Jul 2026 09:00:11 +0000 ROA not after: Fri 23 Oct 2026 09:00:11 +0000 asID: 14860 IP address blocks: 198.36.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/7f6f21d4-30bb-4323-bd07-2383bae60aac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/7f6f21d4-30bb-4323-bd07-2383bae60aac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9d:4a:71:dd:d3:e7:1b:49:cf:56:2f:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f6f21d4-30bb-4323-bd07-2383bae60aac Validity Not Before: Jul 25 09:00:11 2026 GMT Not After : Oct 23 09:00:11 2026 GMT Subject: CN=753b5404-7e10-4735-aa5d-bb3f6b76924b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e9:a3:9f:7c:75:75:cb:e3:0a:e6:81:6d:a6: 72:cc:6a:3b:fd:1e:74:04:cd:ad:74:ce:b5:89:2a: 5f:0d:9b:84:f8:9c:fd:88:ba:ec:97:b1:a9:88:52: 31:8e:4d:26:aa:88:69:f4:cf:71:40:52:89:14:5b: 12:07:87:91:4b:50:81:8c:d6:a1:e1:b0:ae:85:ee: 47:bf:2c:85:bc:cd:a2:82:2b:b1:21:21:97:0f:04: 83:72:68:49:e7:23:ad:87:3e:0e:01:65:6a:2a:4f: 72:66:94:3c:74:bf:a8:9d:06:04:72:7b:89:5e:96: 37:88:2d:0d:ba:1e:27:76:25:67:63:f8:38:65:61: 39:7e:b4:2f:61:7c:19:c4:be:af:f6:8d:f9:19:51: 3d:e1:a4:43:97:46:a5:d6:e3:77:c3:86:3c:dc:4d: 10:fc:82:0e:02:a6:89:54:44:cd:cb:2a:4f:87:75: 04:9c:91:ae:85:fe:12:8b:2d:51:49:8c:fd:42:f2: 6f:ee:a8:e8:3e:ff:1b:d4:0a:95:e1:b1:f8:a6:3e: 09:97:16:3f:04:fa:74:be:c6:d1:e1:0b:b1:fe:0d: 42:72:57:a7:3b:f1:16:3a:d6:77:0a:38:a4:4b:50: 79:ed:c0:24:71:c7:6d:fa:78:c8:31:21:e9:11:9c: bb:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:57:4A:00:06:35:11:0D:3A:60:C0:3A:42:4F:9D:05:E8:22:CF:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/ce89f34d-3850-3cf3-b6f0-b3c075e1850d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/7f6f21d4-30bb-4323-bd07-2383bae60aac.crl X509v3 Authority Key Identifier: keyid:CB:76:9E:6D:40:34:B9:7F:A9:F4:17:2B:D3:79:9E:10:8A:BC:C1:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac.cer sbgp-ipAddrBlock: critical IPv4: 198.36.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:64:a2:89:5a:d0:68:30:98:91:85:3a:95:f8:76:1a:91:7d: a2:b5:ca:18:2b:04:b2:46:84:9a:c5:19:62:bd:fd:63:7e:cc: 07:01:6e:6b:e6:a7:84:b3:ec:02:db:91:6a:2a:ae:cc:d7:2a: 1d:d9:6c:6f:85:5d:8a:a9:7d:fe:f6:93:86:d3:58:c8:9e:a1: d5:82:6b:a6:1d:80:32:db:8f:dd:7e:eb:1f:24:e9:11:c7:14: ad:46:95:83:ae:41:c9:e8:89:e3:3e:63:38:2b:69:26:ec:8c: 6b:58:4d:45:90:6c:74:37:34:eb:0b:69:c5:11:fa:45:03:78: 92:44:2c:2c:f5:3c:10:75:17:65:8a:1e:77:9a:2d:36:87:cb: e5:b4:b3:aa:f2:d1:a4:e1:aa:61:15:82:2c:10:99:65:e7:1b: 92:3f:b7:fd:af:73:4f:dc:71:e3:c3:21:f6:1a:f6:a3:61:44: a7:8a:9f:0b:2f:5e:31:f1:cd:2c:74:7a:9b:6f:ed:e9:71:e4: 1b:da:de:6b:9b:0d:b0:65:97:df:93:ea:dc:42:ea:0f:b1:7c: 4f:34:e1:ec:35:3f:da:6b:b1:d0:6b:a5:fb:bd:c8:38:0a:1f: 8d:9c:28:6d:20:70:44:ea:bb:2f:c3:26:67:a8:f4:d0:08:a8: 23:de:3c:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSnHd0+cbSc9WLxQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Y2ZjIxZDQtMzBiYi00MzIzLWJkMDctMjM4M2JhZTYw YWFjMB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk NzUzYjU0MDQtN2UxMC00NzM1LWFhNWQtYmIzZjZiNzY5MjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxemjn3x1dcvjCuaBbaZyzGo7/R50BM2tdM61 iSpfDZuE+Jz9iLrsl7GpiFIxjk0mqohp9M9xQFKJFFsSB4eRS1CBjNah4bCuhe5H vyyFvM2igiuxISGXDwSDcmhJ5yOthz4OAWVqKk9yZpQ8dL+onQYEcnuJXpY3iC0N uh4ndiVnY/g4ZWE5frQvYXwZxL6v9o35GVE94aRDl0al1uN3w4Y83E0Q/IIOAqaJ VETNyypPh3UEnJGuhf4Siy1RSYz9QvJv7qjoPv8b1AqV4bH4pj4JlxY/BPp0vsbR 4Qux/g1CclenO/EWOtZ3CjikS1B57cAkccdt+njIMSHpEZy7EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1XSgAGNRENOmDAOkJPnQXoIs/CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ZjZm MjFkNC0zMGJiLTQzMjMtYmQwNy0yMzgzYmFlNjBhYWMvY2U4OWYzNGQtMzg1MC0z Y2YzLWI2ZjAtYjNjMDc1ZTE4NTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2Y2ZjIxZDQtMzBiYi00MzIzLWJk MDctMjM4M2JhZTYwYWFjLzdmNmYyMWQ0LTMwYmItNDMyMy1iZDA3LTIzODNiYWU2 MGFhYy5jcmwwHwYDVR0jBBgwFoAUy3aebUA0uX+p9Bcr03meEIq8wRowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ZjZmMjFkNC0zMGJiLTQzMjMtYmQwNy0yMzgz YmFlNjBhYWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExiQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElkoola0GgwmJGFOpX4dhqRfaK1yhgrBLJGhJrFGWK9/WN+zAcBbmvm p4Sz7ALbkWoqrszXKh3ZbG+FXYqpff72k4bTWMieodWCa6YdgDLbj91+6x8k6RHH FK1GlYOuQcnoieM+YzgraSbsjGtYTUWQbHQ3NOsLacUR+kUDeJJELCz1PBB1F2WK HneaLTaHy+W0s6ry0aThqmEVgiwQmWXnG5I/t/2vc0/ccePDIfYa9qNhRKeKnwsv XjHxzSx0eptv7elx5Bva3mubDbBll9+T6txC6g+xfE804ew1P9prsdBrpfu9yDgK H42cKG0gcETquy/DJmeo9NAIqCPePM8= -----END CERTIFICATE-----Generated at Wed Jul 29 05:07:48 2026 by rpki-client