$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/89a846c9-5a33-333a-a489-267263a98c98.roa File: 89a846c9-5a33-333a-a489-267263a98c98.roa (raw, json) Hash identifier: sRyvM21RaDErBoCaTlkuAHe6agcPQeePcnT4MmB4Q6I= Subject key identifier: 5B:A6:85:51:DB:FB:76:0B:BB:88:49:4A:BC:39:A1:DF:0C:B0:73:5B Certificate issuer: /CN=1e268aaa-6306-4988-99f7-d5802a67b577 Certificate serial: 010D0C9F4328584E4AEF33B6EFB4A66F91D23280 Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/89a846c9-5a33-333a-a489-267263a98c98.roa Signing time: Thu 25 Jun 2026 21:00:12 +0000 ROA not before: Thu 25 Jun 2026 21:00:12 +0000 ROA not after: Wed 23 Sep 2026 21:00:12 +0000 asID: 14593 IP address blocks: 198.54.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:ef:33:b6:ef:b4:a6:6f:91:d2:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577 Validity Not Before: Jun 25 21:00:12 2026 GMT Not After : Sep 23 21:00:12 2026 GMT Subject: CN=28d4a95c-e417-45d8-b098-6e10d15c7b8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3e:2a:09:24:d0:8b:15:98:17:c6:61:51:b4: c5:de:6a:d1:91:47:47:16:af:b4:30:04:63:b2:a0: 35:2c:c7:e5:4d:e6:fe:40:32:dd:3e:33:d0:26:a0: 24:ce:ab:d6:7e:34:e9:92:ac:9e:2e:53:3e:e5:2a: 7b:41:a4:67:f1:a1:ff:ca:a5:3b:8e:e2:83:62:65: f3:fe:9a:2b:cc:9f:f5:ff:12:10:fa:2a:86:ee:95: 76:7a:37:7b:c8:29:bc:60:4b:84:b7:75:b0:bb:dc: 70:ae:ce:ac:a6:1f:2e:6b:83:55:4c:96:c4:6e:ac: d1:e6:0d:df:67:4b:ba:09:03:d7:0f:6b:a3:24:d5: 9f:65:de:89:53:d4:dc:f7:45:3c:75:c9:d6:f4:14: db:e1:f3:5f:e0:4d:07:89:29:ca:dd:88:b1:71:3f: fd:c0:15:e3:bb:25:60:75:b6:3b:96:f3:08:e5:cf: 49:65:55:69:f7:f3:9d:fa:f5:9c:cf:56:b4:f8:27: 0f:68:c5:ec:d8:a5:e5:24:aa:fd:de:29:2c:df:7c: 8d:53:40:e7:ee:f0:9b:35:67:39:28:1b:82:b0:d3: 40:5b:f5:da:0f:75:20:d2:92:37:21:43:a7:8a:bd: 32:d5:ef:4b:d4:f8:88:c0:2b:d7:8e:50:6e:7a:81: 00:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:A6:85:51:DB:FB:76:0B:BB:88:49:4A:BC:39:A1:DF:0C:B0:73:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/89a846c9-5a33-333a-a489-267263a98c98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl X509v3 Authority Key Identifier: keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer sbgp-ipAddrBlock: critical IPv4: 198.54.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:a9:c7:ab:69:cd:fd:4c:b0:12:0b:b6:0d:98:3a:34:be:42: 63:17:2c:59:09:ae:d5:0b:b7:01:49:f6:9e:97:c8:76:90:d2: e5:44:3f:56:df:8d:58:55:29:39:63:26:69:79:c1:78:32:84: ff:17:58:62:0d:80:7d:3c:b3:9b:f5:68:d3:db:ce:4a:90:a6: b4:b5:ee:46:e3:d6:ae:f6:8c:b1:6e:ac:90:d9:16:06:f7:0c: 11:8d:d7:6d:f2:17:31:c7:77:72:b2:32:04:d9:7c:09:7e:04: 6a:1b:31:ed:26:12:84:b0:c1:4b:79:cc:85:ef:64:19:db:7b: 52:40:fb:e3:a2:5b:5a:96:ef:f8:77:5b:35:c1:94:ba:6b:79: ae:f7:17:bd:b3:26:4f:9a:08:f1:9b:ee:52:dc:22:d0:d2:f7: e4:23:9c:3c:9b:b3:da:c7:25:38:b1:28:0b:44:f4:d0:c0:db: f3:21:81:3c:01:65:d0:54:ac:ac:89:06:88:84:72:43:45:2f: 51:2e:35:86:70:d8:46:26:9a:fb:0d:38:96:d2:91:db:e6:a4: 2d:8a:9d:d2:99:b5:f8:e2:6a:bc:ff:e8:23:6d:8e:84:e7:24: 8a:10:52:44:9a:1c:74:22:9d:fe:ff:0f:33:23:04:d4:33:1f: 8d:30:76:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K7zO277Smb5HSMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWUyNjhhYWEtNjMwNi00OTg4LTk5ZjctZDU4MDJhNjdi NTc3MB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk MjhkNGE5NWMtZTQxNy00NWQ4LWIwOTgtNmUxMGQxNWM3YjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuz4qCSTQixWYF8ZhUbTF3mrRkUdHFq+0MARj sqA1LMflTeb+QDLdPjPQJqAkzqvWfjTpkqyeLlM+5Sp7QaRn8aH/yqU7juKDYmXz /porzJ/1/xIQ+iqG7pV2ejd7yCm8YEuEt3Wwu9xwrs6sph8ua4NVTJbEbqzR5g3f Z0u6CQPXD2ujJNWfZd6JU9Tc90U8dcnW9BTb4fNf4E0HiSnK3YixcT/9wBXjuyVg dbY7lvMI5c9JZVVp9/Od+vWcz1a0+CcPaMXs2KXlJKr93iks33yNU0Dn7vCbNWc5 KBuCsNNAW/XaD3Ug0pI3IUOnir0y1e9L1PiIwCvXjlBueoEADQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFumhVHb+3YLu4hJSrw5od8MsHNbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTI2 OGFhYS02MzA2LTQ5ODgtOTlmNy1kNTgwMmE2N2I1NzcvODlhODQ2YzktNWEzMy0z MzNhLWE0ODktMjY3MjYzYTk4Yzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWUyNjhhYWEtNjMwNi00OTg4LTk5 ZjctZDU4MDJhNjdiNTc3LzFlMjY4YWFhLTYzMDYtNDk4OC05OWY3LWQ1ODAyYTY3 YjU3Ny5jcmwwHwYDVR0jBBgwFoAUburdt4goigGRbqOJq8lh/SB9c8wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTI2OGFhYS02MzA2LTQ5ODgtOTlmNy1kNTgw MmE2N2I1NzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxjZkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmpx6tpzf1MsBILtg2YOjS+QmMXLFkJrtULtwFJ9p6XyHaQ0uVEP1bf jVhVKTljJml5wXgyhP8XWGINgH08s5v1aNPbzkqQprS17kbj1q72jLFurJDZFgb3 DBGN123yFzHHd3KyMgTZfAl+BGobMe0mEoSwwUt5zIXvZBnbe1JA++OiW1qW7/h3 WzXBlLprea73F72zJk+aCPGb7lLcItDS9+QjnDybs9rHJTixKAtE9NDA2/MhgTwB ZdBUrKyJBoiEckNFL1EuNYZw2EYmmvsNOJbSkdvmpC2KndKZtfjiarz/6CNtjoTn JIoQUkSaHHQinf7/DzMjBNQzH40wdhs= -----END CERTIFICATE-----Generated at Fri Jul 24 14:33:35 2026 by rpki-client