$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/38b13889-d80f-38c2-bade-6634f5978a7c.roa File: 38b13889-d80f-38c2-bade-6634f5978a7c.roa (raw, json) Hash identifier: 7atgfbGpYfcw+VCarGLWK/x4Dv7lw7hMr4EijlenAOQ= Subject key identifier: 68:6D:AF:B6:4E:69:CC:B0:69:EB:2A:8C:D7:88:17:9E:05:2E:00:F2 Certificate issuer: /CN=1f4a5fa9-723d-410e-a75f-ffc7662c530a Certificate serial: 010D0C9F4328584D44FA3F99AB31B9D43F9038C0 Authority key identifier: 81:34:75:FE:DC:F5:F0:A4:06:EA:39:8E:4F:60:97:68:60:C5:3D:4F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/38b13889-d80f-38c2-bade-6634f5978a7c.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 16509 IP address blocks: 198.99.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/1f4a5fa9-723d-410e-a75f-ffc7662c530a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/1f4a5fa9-723d-410e-a75f-ffc7662c530a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:3f:99:ab:31:b9:d4:3f:90:38:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f4a5fa9-723d-410e-a75f-ffc7662c530a Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=0c9c5e05-f5e8-46ff-b3c8-41ec8c182442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:88:54:97:2b:26:04:7b:63:74:32:a2:a6:f3: 63:16:4f:21:a6:5d:ba:a9:4e:2c:85:77:fa:3f:31: 63:aa:53:30:ad:ec:74:28:99:84:17:ad:49:bc:03: 99:9f:08:10:4f:83:83:19:92:6f:31:bc:0a:94:28: 30:57:60:c0:6d:81:fc:37:e6:7e:ba:7b:7f:be:46: 23:67:b4:01:f7:05:e2:7f:18:5e:f3:e0:b5:f3:96: 0a:5c:04:21:6b:60:75:1d:6b:ca:7d:6f:f9:a4:c9: 38:17:9d:65:c9:27:e2:66:5b:d3:70:9b:be:45:9f: 64:c1:58:15:49:42:89:da:46:28:0d:5e:b6:0b:2a: 9f:9b:ce:9e:58:32:4b:e9:b4:82:c7:14:91:57:5d: 94:3f:8a:b6:4e:f8:37:8e:6e:97:e4:8e:6a:e1:e9: 83:4a:ef:db:db:44:36:d4:f3:ad:70:f3:78:80:86: a4:9d:44:75:84:fb:56:1c:f4:47:01:a9:d3:2a:55: 53:a9:0b:3f:89:eb:4b:32:7c:23:f9:fd:26:a9:2c: 65:79:0f:a5:ab:56:47:43:44:d2:ab:75:8b:32:8e: af:81:05:04:fd:88:63:ea:8a:32:d8:cf:5f:74:3a: d1:c7:e8:60:0c:b2:97:fb:39:88:da:e1:f0:38:db: 6e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:6D:AF:B6:4E:69:CC:B0:69:EB:2A:8C:D7:88:17:9E:05:2E:00:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/38b13889-d80f-38c2-bade-6634f5978a7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a/1f4a5fa9-723d-410e-a75f-ffc7662c530a.crl X509v3 Authority Key Identifier: keyid:81:34:75:FE:DC:F5:F0:A4:06:EA:39:8E:4F:60:97:68:60:C5:3D:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f4a5fa9-723d-410e-a75f-ffc7662c530a.cer sbgp-ipAddrBlock: critical IPv4: 198.99.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:9c:08:fe:47:d1:22:ac:31:b6:aa:36:6d:80:43:77:b4:24: 7c:c6:f7:25:1a:de:5a:8b:15:79:aa:37:82:e4:c1:64:b3:e3: bf:44:bf:d1:1b:b6:a2:0f:c6:25:05:c8:97:39:f4:df:8e:06: 85:98:7d:0b:87:81:22:9f:96:f3:31:a0:f6:2d:04:6f:49:5b: b1:c6:69:b9:59:36:4e:e5:38:3f:59:37:70:bd:08:ec:a4:c1: 01:19:95:c1:43:21:e9:d2:b6:4a:b6:4d:a9:e3:71:50:03:3b: c1:03:bd:2b:8c:7b:29:2c:1b:7c:fb:3d:a9:f1:4a:3a:39:b4: b0:45:73:47:69:27:ca:79:c9:f6:73:a7:97:58:ff:e7:9d:9e: cd:94:a8:fe:cc:cc:d0:4a:b7:13:c9:a1:3f:e7:af:ef:54:77: 07:60:a1:3f:7d:4e:7e:d0:10:d7:62:a3:9a:4f:5e:0f:6b:35: 7a:a4:8a:6a:07:3e:a0:f6:f2:71:9f:19:ce:b7:10:3a:e4:fa: ab:57:3b:55:68:fe:7c:fb:c1:9f:83:57:7a:63:90:35:5a:5a: e2:45:d5:5d:be:6d:90:d0:d1:13:9a:19:5f:97:8d:ec:29:0f: f6:60:86:d4:20:92:ee:7b:34:71:b4:b6:2d:38:97:13:44:a6: 33:4a:d1:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+j+ZqzG51D+QOMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY0YTVmYTktNzIzZC00MTBlLWE3NWYtZmZjNzY2MmM1 MzBhMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk MGM5YzVlMDUtZjVlOC00NmZmLWIzYzgtNDFlYzhjMTgyNDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYhUlysmBHtjdDKipvNjFk8hpl26qU4shXf6 PzFjqlMwrex0KJmEF61JvAOZnwgQT4ODGZJvMbwKlCgwV2DAbYH8N+Z+unt/vkYj Z7QB9wXifxhe8+C185YKXAQha2B1HWvKfW/5pMk4F51lySfiZlvTcJu+RZ9kwVgV SUKJ2kYoDV62Cyqfm86eWDJL6bSCxxSRV12UP4q2Tvg3jm6X5I5q4emDSu/b20Q2 1POtcPN4gIaknUR1hPtWHPRHAanTKlVTqQs/ietLMnwj+f0mqSxleQ+lq1ZHQ0TS q3WLMo6vgQUE/Yhj6ooy2M9fdDrRx+hgDLKX+zmI2uHwONtupwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhtr7ZOacywaesqjNeIF54FLgDyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZjRh NWZhOS03MjNkLTQxMGUtYTc1Zi1mZmM3NjYyYzUzMGEvMzhiMTM4ODktZDgwZi0z OGMyLWJhZGUtNjYzNGY1OTc4YTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWY0YTVmYTktNzIzZC00MTBlLWE3 NWYtZmZjNzY2MmM1MzBhLzFmNGE1ZmE5LTcyM2QtNDEwZS1hNzVmLWZmYzc2NjJj NTMwYS5jcmwwHwYDVR0jBBgwFoAUgTR1/tz18KQG6jmOT2CXaGDFPU8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZjRhNWZhOS03MjNkLTQxMGUtYTc1Zi1mZmM3 NjYyYzUzMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmOKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKGcCP5H0SKsMbaqNm2AQ3e0JHzG9yUa3lqLFXmqN4LkwWSz479Ev9Eb tqIPxiUFyJc59N+OBoWYfQuHgSKflvMxoPYtBG9JW7HGablZNk7lOD9ZN3C9COyk wQEZlcFDIenStkq2TanjcVADO8EDvSuMeyksG3z7PanxSjo5tLBFc0dpJ8p5yfZz p5dY/+edns2UqP7MzNBKtxPJoT/nr+9UdwdgoT99Tn7QENdio5pPXg9rNXqkimoH PqD28nGfGc63EDrk+qtXO1Vo/nz7wZ+DV3pjkDVaWuJF1V2+bZDQ0ROaGV+Xjewp D/ZghtQgku57NHG0ti04lxNEpjNK0as= -----END CERTIFICATE-----Generated at Thu Mar 26 05:22:53 2026 by rpki-client