$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/e92c285d-42ac-326f-a5f3-5d7542fc90ae.roa File: e92c285d-42ac-326f-a5f3-5d7542fc90ae.roa (raw, json) Hash identifier: qsiXw7kuKQm0o1KkZdRIURq9EsxeVrFglEqSeB57W4A= Subject key identifier: 0A:F2:79:0D:3E:B7:89:41:A4:58:5C:1E:75:D9:6D:5A:BD:B1:DB:31 Certificate issuer: /CN=dc598c19-9d8e-4650-abce-c34c5146591f Certificate serial: 010D0C9F4328584D95F0093D0458252DBAE74580 Authority key identifier: 64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/e92c285d-42ac-326f-a5f3-5d7542fc90ae.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 9009 IP address blocks: 172.85.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:f0:09:3d:04:58:25:2d:ba:e7:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc598c19-9d8e-4650-abce-c34c5146591f Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=aa4b0de8-62a8-44f3-a5ac-5fbe599bee41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:80:45:ca:d3:19:49:d7:71:46:b6:15:7f:6e: 88:f7:a7:ed:41:29:1a:1c:59:83:a8:bf:ab:e6:dd: e9:44:c6:b7:46:af:48:9e:c8:a0:ec:0e:70:fb:bf: a4:68:67:78:7c:01:f9:3f:8c:21:cc:e2:70:c0:e5: 84:8c:ec:f4:26:55:45:52:eb:e5:44:da:0b:7a:51: dd:36:29:da:85:1f:dd:33:65:e7:fe:f5:a3:97:27: d3:a1:a6:71:93:6f:22:bb:fd:96:70:0b:7a:ab:6b: 00:d5:62:f0:d1:ae:0b:82:fc:b0:9e:5c:66:34:a7: 7a:c5:0a:b8:e6:29:9e:ef:0d:6f:b8:16:fd:92:d5: cf:60:47:fa:c2:80:47:8c:52:42:04:f5:e4:45:df: c8:c8:55:0d:ae:fb:c0:58:03:9e:2d:11:98:e9:42: 48:ed:5c:2a:c5:fa:d9:7b:0c:2a:64:8b:fd:47:89: fc:53:de:fd:3c:8d:65:2a:0b:f5:4e:d8:bf:99:9d: 0e:ba:d9:af:6a:09:69:2d:64:38:eb:77:96:b2:26: 4c:26:9f:fe:47:a9:05:e4:7d:48:cd:ca:06:6c:31: 14:f2:22:f4:7e:d0:a9:c0:b0:5e:12:88:4c:1f:36: cc:7f:76:4e:02:99:32:19:9d:35:cf:72:97:04:7f: a1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:F2:79:0D:3E:B7:89:41:A4:58:5C:1E:75:D9:6D:5A:BD:B1:DB:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/e92c285d-42ac-326f-a5f3-5d7542fc90ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl X509v3 Authority Key Identifier: keyid:64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer sbgp-ipAddrBlock: critical IPv4: 172.85.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:05:76:9c:b9:22:e5:64:b6:e5:2a:a3:7f:f3:e5:24:61:73: 3f:e7:ab:c4:64:fd:e7:57:e7:d2:71:e0:c2:bb:b7:9c:39:00: 28:e8:87:28:eb:ff:14:2a:16:b4:79:61:fc:18:e2:cb:72:85: 77:d5:ba:54:6f:ac:90:56:d3:76:5d:ba:2c:83:5a:bb:5c:9a: 8c:4a:64:9c:1b:b5:b9:19:be:cc:00:b9:b7:c7:44:83:65:c3: c0:0a:4c:fd:06:7e:5f:01:00:45:a9:cc:39:5d:18:41:aa:6a: 46:bc:db:4b:54:aa:56:92:f4:1d:86:76:da:c1:0b:29:75:3a: 8d:9a:b0:ad:61:87:bd:21:99:58:e3:17:5e:f6:0c:53:7a:37: 8f:fa:ef:dd:92:00:f1:5d:d4:7e:51:c0:b7:f8:a4:19:cd:1e: 3e:25:6d:b5:34:46:7e:ee:03:1e:8d:77:4d:b1:0b:3c:d8:2c: 79:31:36:5c:94:ff:41:85:ad:69:5c:10:3e:59:2c:04:a8:bc: 22:fb:3f:c3:39:97:38:a4:d1:b3:2c:b9:fd:b1:b8:99:83:54: 10:8d:e7:80:ae:86:11:21:55:f6:7f:90:d4:2b:61:ab:41:41: 26:4c:56:d0:d2:11:6d:23:fc:98:f7:99:e6:e3:1a:a8:ce:49: b3:b9:4e:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V8Ak9BFglLbrnRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM1OThjMTktOWQ4ZS00NjUwLWFiY2UtYzM0YzUxNDY1 OTFmMB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk YWE0YjBkZTgtNjJhOC00NGYzLWE1YWMtNWZiZTU5OWJlZTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oBFytMZSddxRrYVf26I96ftQSkaHFmDqL+r 5t3pRMa3Rq9Insig7A5w+7+kaGd4fAH5P4whzOJwwOWEjOz0JlVFUuvlRNoLelHd NinahR/dM2Xn/vWjlyfToaZxk28iu/2WcAt6q2sA1WLw0a4LgvywnlxmNKd6xQq4 5ime7w1vuBb9ktXPYEf6woBHjFJCBPXkRd/IyFUNrvvAWAOeLRGY6UJI7VwqxfrZ ewwqZIv9R4n8U979PI1lKgv1Tti/mZ0OutmvaglpLWQ463eWsiZMJp/+R6kF5H1I zcoGbDEU8iL0ftCpwLBeEohMHzbMf3ZOApkyGZ01z3KXBH+hwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAryeQ0+t4lBpFhcHnXZbVq9sdsxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kYzU5 OGMxOS05ZDhlLTQ2NTAtYWJjZS1jMzRjNTE0NjU5MWYvZTkyYzI4NWQtNDJhYy0z MjZmLWE1ZjMtNWQ3NTQyZmM5MGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZGM1OThjMTktOWQ4ZS00NjUwLWFi Y2UtYzM0YzUxNDY1OTFmL2RjNTk4YzE5LTlkOGUtNDY1MC1hYmNlLWMzNGM1MTQ2 NTkxZi5jcmwwHwYDVR0jBBgwFoAUZJxII/ggNcM5/fDGWr3QRs2B+owwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kYzU5OGMxOS05ZDhlLTQ2NTAtYWJjZS1jMzRj NTE0NjU5MWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFVsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkFdpy5IuVktuUqo3/z5SRhcz/nq8Rk/edX59Jx4MK7t5w5ACjohyjr /xQqFrR5YfwY4styhXfVulRvrJBW03ZduiyDWrtcmoxKZJwbtbkZvswAubfHRINl w8AKTP0Gfl8BAEWpzDldGEGqaka820tUqlaS9B2GdtrBCyl1Oo2asK1hh70hmVjj F172DFN6N4/6792SAPFd1H5RwLf4pBnNHj4lbbU0Rn7uAx6Nd02xCzzYLHkxNlyU /0GFrWlcED5ZLASovCL7P8M5lzik0bMsuf2xuJmDVBCN54CuhhEhVfZ/kNQrYatB QSZMVtDSEW0j/Jj3mebjGqjOSbO5TgE= -----END CERTIFICATE-----Generated at Wed May 13 02:52:50 2026 by rpki-client