$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/29717f9a-0cc2-3151-8090-91e2ca542402.roa File: 29717f9a-0cc2-3151-8090-91e2ca542402.roa (raw, json) Hash identifier: wyBnuOkuvRb31z3EKJcCkTNMkSWHLEkSIA/BdDPMaVA= Subject key identifier: FF:E7:4F:11:2F:99:E5:54:88:BD:86:0C:DA:D8:C5:32:0E:93:2D:D8 Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584CD407686C03CED1AFE1911B00 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/29717f9a-0cc2-3151-8090-91e2ca542402.roa Signing time: Wed 11 Feb 2026 14:00:41 +0000 ROA not before: Wed 11 Feb 2026 14:00:41 +0000 ROA not after: Tue 12 May 2026 13:00:41 +0000 asID: 54179 IP address blocks: 198.188.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d4:07:68:6c:03:ce:d1:af:e1:91:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Feb 11 14:00:41 2026 GMT Not After : May 12 13:00:41 2026 GMT Subject: CN=703a5820-7486-441a-a482-2e700e7b75b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:91:74:ae:0a:33:39:9c:ed:3d:ef:9d:4b:b6: 13:ea:93:12:2f:56:7b:15:2a:35:62:11:d6:a5:c9: 80:77:06:35:f8:ab:19:da:d1:40:48:37:a6:a4:43: 2f:fc:22:86:c3:cb:4c:58:34:3f:a1:03:73:36:58: 21:94:15:e5:1d:40:d3:67:d2:3c:3b:7b:b4:08:17: 63:82:3f:60:98:81:06:c2:cf:3e:a8:81:56:74:81: 93:a2:e5:f7:cc:de:c2:60:8c:cb:b5:e5:d4:a0:ed: df:c1:cf:83:5b:6d:e5:d9:fa:e2:af:0e:91:ae:f6: 00:a3:6d:9a:c2:7c:e8:ef:14:41:11:75:6d:dc:cc: db:8a:20:bf:0a:78:59:d4:ea:4b:e6:c9:98:9f:b5: af:db:0f:b2:de:52:2d:c1:8c:a7:24:b1:0d:1c:0b: fc:82:88:b6:f8:02:b2:bc:49:bb:72:47:8b:33:15: e1:68:4f:5b:97:13:1a:b7:5c:85:08:3b:17:8a:92: 55:41:ce:07:8a:53:af:c6:1e:de:47:53:3c:04:84: 70:9b:f9:07:ad:7d:9d:52:4b:92:d4:23:b5:ad:b2: 8a:9a:2f:a8:9d:c6:c7:2f:bb:b5:19:53:2a:5a:8c: 19:9b:93:eb:82:d7:e2:67:2c:74:53:7e:83:9f:72: 76:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:E7:4F:11:2F:99:E5:54:88:BD:86:0C:DA:D8:C5:32:0E:93:2D:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/29717f9a-0cc2-3151-8090-91e2ca542402.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 198.188.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:52:ab:61:b6:58:9d:b9:35:9d:ec:b8:c4:47:fc:9d:43:62: bb:43:30:6d:3d:3a:bc:5e:b4:1e:f1:eb:b3:3d:1e:94:74:bd: 51:55:e2:12:82:30:73:50:a8:38:d6:2c:1b:ee:86:9a:c6:0d: ac:9b:e6:43:f0:c2:40:9e:87:06:9b:1b:69:4e:ed:73:82:9a: b1:d6:0c:e5:99:bb:d0:20:ad:aa:22:ad:04:b8:f0:72:dc:46: 50:2e:fa:77:6a:87:d8:70:ae:36:af:ff:59:a0:3f:4b:1c:b8: a1:41:fe:c0:ed:bd:a1:89:ba:4f:e7:77:a3:e6:77:88:0c:52: ad:75:ae:5e:3e:73:71:00:ec:4d:53:c1:a6:25:cb:17:2b:3a: dd:42:91:30:01:83:a1:ff:e7:b7:17:19:43:fc:4b:36:1c:32: d0:0f:e8:e2:d4:25:29:9b:f7:73:02:8c:02:54:9e:d8:a0:8a: 37:16:e7:11:55:6c:bd:d5:3a:f0:83:67:23:76:dc:36:2f:e2: 50:1e:92:2e:47:88:21:bd:26:75:29:1f:55:74:a9:50:2a:8f: 8d:d3:aa:f2:6c:1c:89:f1:76:ee:6b:2c:71:5c:67:fb:d3:bf: ec:20:88:8d:88:02:5f:c1:79:7f:cf:26:21:54:87:a3:41:13: 87:bf:93:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzUB2hsA87Rr+GRGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI2MDIxMTE0MDA0MVoXDTI2MDUxMjEzMDA0MVowLzEtMCsGA1UEAxMk NzAzYTU4MjAtNzQ4Ni00NDFhLWE0ODItMmU3MDBlN2I3NWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9JF0rgozOZztPe+dS7YT6pMSL1Z7FSo1YhHW pcmAdwY1+KsZ2tFASDempEMv/CKGw8tMWDQ/oQNzNlghlBXlHUDTZ9I8O3u0CBdj gj9gmIEGws8+qIFWdIGTouX3zN7CYIzLteXUoO3fwc+DW23l2frirw6RrvYAo22a wnzo7xRBEXVt3MzbiiC/CnhZ1OpL5smYn7Wv2w+y3lItwYynJLENHAv8goi2+AKy vEm7ckeLMxXhaE9blxMat1yFCDsXipJVQc4HilOvxh7eR1M8BIRwm/kHrX2dUkuS 1CO1rbKKmi+oncbHL7u1GVMqWowZm5PrgtfiZyx0U36Dn3J2TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/nTxEvmeVUiL2GDNrYxTIOky3YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvMjk3MTdmOWEtMGNjMi0z MTUxLTgwOTAtOTFlMmNhNTQyNDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrwcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJpSq2G2WJ25NZ3suMRH/J1DYrtDMG09OrxetB7x67M9HpR0vVFV4hKC MHNQqDjWLBvuhprGDayb5kPwwkCehwabG2lO7XOCmrHWDOWZu9AgraoirQS48HLc RlAu+ndqh9hwrjav/1mgP0scuKFB/sDtvaGJuk/nd6Pmd4gMUq11rl4+c3EA7E1T waYlyxcrOt1CkTABg6H/57cXGUP8SzYcMtAP6OLUJSmb93MCjAJUntigijcW5xFV bL3VOvCDZyN23DYv4lAeki5HiCG9JnUpH1V0qVAqj43TqvJsHInxdu5rLHFcZ/vT v+wgiI2IAl/BeX/PJiFUh6NBE4e/k+k= -----END CERTIFICATE-----Generated at Mon Mar 2 20:06:19 2026 by rpki-client