$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/780cb3e9-7df2-3259-b7b4-f6a912fbdbba.roa File: 780cb3e9-7df2-3259-b7b4-f6a912fbdbba.roa (raw, json) Hash identifier: urv7lAS+cyYMFzJVEIwFevoW5NGwd7O+/q5zHVN3dCc= Subject key identifier: 65:86:62:54:49:86:BB:A9:93:D9:CA:87:E0:15:1C:D5:72:E2:80:C5 Certificate issuer: /CN=cd198da4-dbcc-4bec-a1a0-31d61d5ccc71 Certificate serial: 010D0C9F4328584D95EFE78E5B252D8604E5F480 Authority key identifier: 83:34:B9:70:BA:25:80:24:26:DF:15:AE:FB:C4:6C:D6:42:0B:68:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/780cb3e9-7df2-3259-b7b4-f6a912fbdbba.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 7029 IP address blocks: 208.99.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:ef:e7:8e:5b:25:2d:86:04:e5:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd198da4-dbcc-4bec-a1a0-31d61d5ccc71 Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=3b299ab3-f224-4a3d-9916-dd0b2a649e6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b0:9e:9b:2d:78:6b:ce:7a:bd:55:1a:23:20: 6b:e8:d7:bb:59:e2:b2:f0:7f:85:40:b9:93:91:36: 81:b8:9b:a5:00:56:dd:25:08:73:34:8f:23:0a:78: b9:df:b3:6e:01:a5:c3:a2:59:9c:54:3f:73:c2:81: 85:5d:b1:4c:12:49:e1:40:f9:8b:21:44:7c:e6:42: c4:87:c6:7f:88:ce:9c:b8:64:6f:47:3e:02:08:94: 9c:c7:e1:8f:4b:db:df:79:0f:45:57:01:88:15:a8: 73:cd:32:c1:59:04:96:34:d2:aa:dd:bd:3c:d6:43: df:46:20:c4:30:7a:d3:7b:11:20:27:12:e9:55:0d: 8d:d7:d5:34:6b:22:e3:14:e4:2c:4c:18:d4:47:eb: 61:6e:47:1a:36:84:66:7d:c4:3d:89:83:8f:f9:84: 55:ef:98:17:87:7d:27:e1:b3:90:cc:62:c9:80:06: 6b:66:04:95:cc:79:67:f4:05:e9:99:15:32:dc:35: fd:26:71:a0:75:b3:f5:2a:c7:9e:6a:54:a4:0e:47: 71:fa:02:52:0d:57:a6:e3:61:3e:3c:fa:be:26:ff: a3:2b:12:0d:18:f3:e1:f0:8e:ff:28:1d:9c:5a:90: 73:5e:59:79:97:59:9c:c8:47:79:55:20:78:58:47: 0b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:86:62:54:49:86:BB:A9:93:D9:CA:87:E0:15:1C:D5:72:E2:80:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/780cb3e9-7df2-3259-b7b4-f6a912fbdbba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.crl X509v3 Authority Key Identifier: keyid:83:34:B9:70:BA:25:80:24:26:DF:15:AE:FB:C4:6C:D6:42:0B:68:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer sbgp-ipAddrBlock: critical IPv4: 208.99.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:eb:3a:f4:ff:56:24:a5:56:72:8a:57:80:be:40:46:b8:7a: 00:38:da:47:00:62:36:8d:7e:94:c8:3d:37:7a:1b:be:eb:c6: 8b:6e:0a:01:62:41:ab:f3:01:2d:72:10:20:21:69:07:89:c3: 28:ea:f7:3b:7d:c3:fe:fe:c2:d0:bb:db:3e:24:62:60:f0:7b: 59:06:2f:98:04:1f:fa:4a:1a:d8:fc:6f:77:37:2b:93:f7:72: cc:2d:59:a1:f2:6f:d8:54:dc:39:4a:0f:11:ee:f3:78:4d:ee: 40:43:d9:a2:ad:ad:28:12:a9:ad:47:62:76:55:85:32:c0:a2: 4f:8f:c0:73:2a:31:e2:92:64:85:95:a0:6a:46:01:b7:f8:80: fa:81:39:b6:ce:0d:de:63:b2:ca:f3:27:5c:69:0a:4a:82:88: c6:57:d0:65:b0:de:34:21:67:ac:78:87:12:c8:d3:9d:86:29: 87:71:32:69:8f:24:f3:83:66:b0:55:c7:59:60:3b:ce:f8:8d: b1:9b:5d:7d:73:a8:6f:fb:f8:3f:ca:23:54:7e:7d:8d:3c:83: a7:21:eb:28:07:55:2e:52:9a:ac:b9:9b:e0:46:6f:f7:7b:b8: 26:6e:50:0f:fe:5d:db:56:b7:4a:0b:c7:9c:a9:78:32:a6:d9: 4d:e8:20:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V7+eOWyUthgTl9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QxOThkYTQtZGJjYy00YmVjLWExYTAtMzFkNjFkNWNj YzcxMB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk M2IyOTlhYjMtZjIyNC00YTNkLTk5MTYtZGQwYjJhNjQ5ZTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA57Cemy14a856vVUaIyBr6Ne7WeKy8H+FQLmT kTaBuJulAFbdJQhzNI8jCni537NuAaXDolmcVD9zwoGFXbFMEknhQPmLIUR85kLE h8Z/iM6cuGRvRz4CCJScx+GPS9vfeQ9FVwGIFahzzTLBWQSWNNKq3b081kPfRiDE MHrTexEgJxLpVQ2N19U0ayLjFOQsTBjUR+thbkcaNoRmfcQ9iYOP+YRV75gXh30n 4bOQzGLJgAZrZgSVzHln9AXpmRUy3DX9JnGgdbP1KseealSkDkdx+gJSDVem42E+ PPq+Jv+jKxINGPPh8I7/KB2cWpBzXll5l1mcyEd5VSB4WEcLJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGWGYlRJhrupk9nKh+AVHNVy4oDFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDE5 OGRhNC1kYmNjLTRiZWMtYTFhMC0zMWQ2MWQ1Y2NjNzEvNzgwY2IzZTktN2RmMi0z MjU5LWI3YjQtZjZhOTEyZmJkYmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxOThkYTQtZGJjYy00YmVjLWEx YTAtMzFkNjFkNWNjYzcxL2NkMTk4ZGE0LWRiY2MtNGJlYy1hMWEwLTMxZDYxZDVj Y2M3MS5jcmwwHwYDVR0jBBgwFoAUgzS5cLolgCQm3xWu+8Rs1kILaC4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDE5OGRhNC1kYmNjLTRiZWMtYTFhMC0zMWQ2 MWQ1Y2NjNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0GMmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPrOvT/ViSlVnKKV4C+QEa4egA42kcAYjaNfpTIPTd6G77rxotuCgFi QavzAS1yECAhaQeJwyjq9zt9w/7+wtC72z4kYmDwe1kGL5gEH/pKGtj8b3c3K5P3 cswtWaHyb9hU3DlKDxHu83hN7kBD2aKtrSgSqa1HYnZVhTLAok+PwHMqMeKSZIWV oGpGAbf4gPqBObbODd5jssrzJ1xpCkqCiMZX0GWw3jQhZ6x4hxLI052GKYdxMmmP JPODZrBVx1lgO874jbGbXX1zqG/7+D/KI1R+fY08g6ch6ygHVS5Smqy5m+BGb/d7 uCZuUA/+XdtWt0oLx5ypeDKm2U3oIJI= -----END CERTIFICATE-----Generated at Wed May 13 06:35:30 2026 by rpki-client