$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/7472b443-d26f-3d8f-8d89-c2b8dc1dd60c.roa File: 7472b443-d26f-3d8f-8d89-c2b8dc1dd60c.roa (raw, json) Hash identifier: UTY/y5lnBK9fnHF0z/e+CrP/KcJQ9I+jloqbgh0Gf0I= Subject key identifier: 73:DF:F2:21:76:60:29:F3:87:2D:E4:FD:45:21:E5:49:52:13:59:D4 Certificate issuer: /CN=3228caa5-d014-404b-9e3d-61cdea1ff493 Certificate serial: 010D0C9F4328584DC6CB07CF49208039FFFA52A8 Authority key identifier: 61:7B:A8:DA:17:40:9F:50:04:2B:D0:DE:79:D3:FF:7B:29:D2:7D:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/7472b443-d26f-3d8f-8d89-c2b8dc1dd60c.roa Signing time: Sat 09 May 2026 13:00:31 +0000 ROA not before: Sat 09 May 2026 13:00:31 +0000 ROA not after: Fri 07 Aug 2026 13:00:31 +0000 asID: 401438 IP address blocks: 198.200.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/3228caa5-d014-404b-9e3d-61cdea1ff493.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/3228caa5-d014-404b-9e3d-61cdea1ff493.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c6:cb:07:cf:49:20:80:39:ff:fa:52:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3228caa5-d014-404b-9e3d-61cdea1ff493 Validity Not Before: May 9 13:00:31 2026 GMT Not After : Aug 7 13:00:31 2026 GMT Subject: CN=910dc882-b8e9-42e6-a7ed-16c2c00878db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:9c:9f:32:0f:26:3b:ab:0a:f0:2d:0f:bc:cf: 78:f7:c4:a0:10:51:2d:e8:b5:20:58:d3:80:a2:e0: 7d:9d:26:a1:47:69:ec:d8:b3:43:ff:50:46:b5:91: 07:26:c9:bf:c6:f1:d1:4f:0a:be:68:c0:35:ed:5a: a7:43:0c:2c:1e:8f:4d:ff:b3:5a:49:08:43:58:5c: 3c:21:3a:14:8d:ac:bf:03:d3:76:8a:b7:3a:88:3d: 80:0e:6a:cb:bb:71:a4:8b:b3:31:5e:1f:bd:27:6c: be:41:a1:85:3d:1a:61:b8:3d:ae:cb:e9:34:68:8f: fc:c3:d9:c7:ce:b4:e7:3d:4c:20:8f:17:f4:0d:59: 05:8a:2e:61:88:c2:9f:03:2d:68:61:76:24:80:8e: d7:f5:c7:54:a2:a5:34:27:95:26:30:62:f2:62:bd: 60:97:34:b1:ed:49:40:8f:51:d1:f7:37:54:30:af: a2:54:7e:8b:2a:40:8c:36:6b:87:4b:a6:7e:55:39: 77:dc:6e:de:55:50:f9:e8:29:34:33:da:80:f5:1d: f0:6f:5b:cf:9c:f7:5c:10:c9:95:c6:2f:d5:32:39: 1d:18:43:a5:e9:91:ef:54:56:6b:ce:b2:b6:29:ed: de:f2:71:b9:2e:38:9f:8d:0c:be:7b:1e:48:35:6f: 3d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:DF:F2:21:76:60:29:F3:87:2D:E4:FD:45:21:E5:49:52:13:59:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/7472b443-d26f-3d8f-8d89-c2b8dc1dd60c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/3228caa5-d014-404b-9e3d-61cdea1ff493.crl X509v3 Authority Key Identifier: keyid:61:7B:A8:DA:17:40:9F:50:04:2B:D0:DE:79:D3:FF:7B:29:D2:7D:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493.cer sbgp-ipAddrBlock: critical IPv4: 198.200.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:ec:d8:9d:93:ab:cc:83:60:dc:dd:23:a2:23:81:b0:99:94: b3:96:82:f8:ad:16:18:65:dc:ab:80:eb:92:7d:71:b5:80:e1: 63:2a:99:06:24:48:70:dc:57:c5:5d:d8:88:17:8d:06:53:a5: 80:0d:4c:99:fe:91:a1:7c:1f:09:99:5a:04:c6:8e:c6:2e:3a: 8f:0a:de:67:df:bc:c3:00:e0:b8:61:64:ab:40:23:e3:95:b4: 11:41:51:45:64:a0:8c:9e:9c:52:92:c9:df:df:02:51:32:d4: 7e:88:bf:b2:8f:ec:31:14:5b:10:16:d7:ad:cd:df:da:5e:61: ad:ef:4c:8b:56:2e:fd:51:1f:01:03:9d:0d:35:14:7d:44:51: 14:88:54:c6:e4:f9:6f:60:05:10:b0:53:a1:11:f6:cb:d3:e5: a1:0b:4d:6c:fa:4d:56:38:fc:dd:45:40:10:dc:44:8b:7e:17: cb:74:74:1c:c5:41:59:13:bf:6a:af:33:f0:55:1e:cb:73:78: 8f:1b:67:d2:2c:e2:05:5b:7f:65:f9:0e:3f:ae:64:a0:c2:ad: 06:32:d4:86:82:5d:fa:61:be:de:ac:a6:30:71:d3:c8:7d:94: c2:00:f1:60:72:60:c5:3e:7e:2a:1e:52:6d:1c:65:89:e2:36: 7b:58:37:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3GywfPSSCAOf/6UqgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzIyOGNhYTUtZDAxNC00MDRiLTllM2QtNjFjZGVhMWZm NDkzMB4XDTI2MDUwOTEzMDAzMVoXDTI2MDgwNzEzMDAzMVowLzEtMCsGA1UEAxMk OTEwZGM4ODItYjhlOS00MmU2LWE3ZWQtMTZjMmMwMDg3OGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5yfMg8mO6sK8C0PvM9498SgEFEt6LUgWNOA ouB9nSahR2ns2LND/1BGtZEHJsm/xvHRTwq+aMA17VqnQwwsHo9N/7NaSQhDWFw8 IToUjay/A9N2irc6iD2ADmrLu3Gki7MxXh+9J2y+QaGFPRphuD2uy+k0aI/8w9nH zrTnPUwgjxf0DVkFii5hiMKfAy1oYXYkgI7X9cdUoqU0J5UmMGLyYr1glzSx7UlA j1HR9zdUMK+iVH6LKkCMNmuHS6Z+VTl33G7eVVD56Ck0M9qA9R3wb1vPnPdcEMmV xi/VMjkdGEOl6ZHvVFZrzrK2Ke3e8nG5LjifjQy+ex5INW89OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHPf8iF2YCnzhy3k/UUh5UlSE1nUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zMjI4 Y2FhNS1kMDE0LTQwNGItOWUzZC02MWNkZWExZmY0OTMvNzQ3MmI0NDMtZDI2Zi0z ZDhmLThkODktYzJiOGRjMWRkNjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzIyOGNhYTUtZDAxNC00MDRiLTll M2QtNjFjZGVhMWZmNDkzLzMyMjhjYWE1LWQwMTQtNDA0Yi05ZTNkLTYxY2RlYTFm ZjQ5My5jcmwwHwYDVR0jBBgwFoAUYXuo2hdAn1AEK9DeedP/eynSfV4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zMjI4Y2FhNS1kMDE0LTQwNGItOWUzZC02MWNk ZWExZmY0OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxsjyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbs2J2Tq8yDYNzdI6IjgbCZlLOWgvitFhhl3KuA65J9cbWA4WMqmQYk SHDcV8Vd2IgXjQZTpYANTJn+kaF8HwmZWgTGjsYuOo8K3mffvMMA4LhhZKtAI+OV tBFBUUVkoIyenFKSyd/fAlEy1H6Iv7KP7DEUWxAW163N39peYa3vTItWLv1RHwED nQ01FH1EURSIVMbk+W9gBRCwU6ER9svT5aELTWz6TVY4/N1FQBDcRIt+F8t0dBzF QVkTv2qvM/BVHstzeI8bZ9Is4gVbf2X5Dj+uZKDCrQYy1IaCXfphvt6spjBx08h9 lMIA8WByYMU+fioeUm0cZYniNntYN1A= -----END CERTIFICATE-----Generated at Wed May 13 07:26:00 2026 by rpki-client