$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5afc74d5-bd90-3262-99c1-264ee819ce2a.roa File: 5afc74d5-bd90-3262-99c1-264ee819ce2a.roa (raw, json) Hash identifier: ZeR6eCWCuDkVBBKTHrZFVQTB4D0D+8mnNcShvY1/vLY= Subject key identifier: 7F:77:EB:A0:1C:26:69:76:A0:75:5B:C1:8A:DF:70:83:B3:BD:6E:53 Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16 Certificate serial: 010D0C9F4328584E8C8A4F4D5F1F508A102168C0 Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5afc74d5-bd90-3262-99c1-264ee819ce2a.roa Signing time: Sun 19 Jul 2026 09:00:11 +0000 ROA not before: Sun 19 Jul 2026 09:00:11 +0000 ROA not after: Sat 17 Oct 2026 09:00:11 +0000 asID: 13332 IP address blocks: 198.89.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8c:8a:4f:4d:5f:1f:50:8a:10:21:68:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16 Validity Not Before: Jul 19 09:00:11 2026 GMT Not After : Oct 17 09:00:11 2026 GMT Subject: CN=3b3e8dc2-fe3b-41c5-aca8-151b028c4a96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:46:3a:8b:1b:04:ec:6c:f9:d3:2b:c4:56:7e: bd:00:ed:a3:fd:d4:f4:10:cb:99:e4:34:1e:64:6e: 98:7c:38:5a:48:7e:fb:8f:f7:b9:60:c8:85:0b:53: 03:54:ee:71:2d:51:17:ba:8d:c0:4b:21:2d:63:e1: e1:10:a5:1c:14:af:27:03:33:cd:0b:0b:c0:c6:72: 50:14:43:4f:29:1a:dd:0c:d2:85:ac:15:51:f0:a2: c2:93:a7:51:e3:40:d5:2b:98:28:69:30:d1:26:1d: f1:94:c9:c3:a6:85:c3:75:d5:51:2e:b9:7c:08:4d: 44:26:fc:f9:2a:0e:37:96:5f:35:11:99:09:96:5f: 1b:a6:27:c5:f9:e7:0b:ce:c3:a4:5c:2e:83:fe:dd: 69:bb:6a:cd:67:de:aa:48:d5:52:b3:18:50:1f:29: 83:b1:fa:e8:f6:15:eb:68:24:c5:90:f4:8a:7a:04: 92:73:d7:25:ce:5a:bc:38:51:91:1b:ba:7c:eb:f7: ef:40:48:3e:1f:4a:80:22:34:31:9f:2c:2f:34:0b: b0:60:78:fc:37:19:7b:de:63:80:e3:1d:b5:38:39: 2d:33:8d:0b:dc:1e:64:47:21:8a:3e:05:f5:bb:e6: d5:ed:f9:25:c9:6a:bf:24:d3:96:b4:b0:de:98:75: 71:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:77:EB:A0:1C:26:69:76:A0:75:5B:C1:8A:DF:70:83:B3:BD:6E:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5afc74d5-bd90-3262-99c1-264ee819ce2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl X509v3 Authority Key Identifier: keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer sbgp-ipAddrBlock: critical IPv4: 198.89.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e3:27:8d:9b:ec:33:1d:7b:09:fd:ef:80:cd:2e:29:06:1e:51: dd:56:87:30:a1:dd:e4:9e:cb:e9:6f:2d:0e:0a:5f:b1:21:b1: d1:da:a1:c8:69:84:e2:84:52:a6:97:87:f5:41:56:0d:4f:37: c8:64:80:4c:85:b7:06:e0:79:31:67:ba:dd:1b:00:75:7b:97: 63:ab:8a:fd:ca:40:f4:a3:4a:00:49:7f:71:50:4f:ff:e9:dd: c2:8d:f0:55:98:1d:57:3e:b0:8a:73:04:d6:68:8f:30:d6:d0: eb:b9:6f:0b:6b:d8:90:61:2a:15:8d:a5:25:c1:f3:a7:4d:72: ff:13:bf:51:1a:ea:30:bc:0f:57:88:c1:d6:ab:d1:3c:dd:f2: 71:28:e1:60:ac:a3:fb:29:e9:47:0c:30:93:68:12:33:72:10: 4c:b1:f1:ad:28:bd:b8:c4:63:73:04:c4:14:85:70:e6:da:d1: 9f:31:f5:0c:1c:d8:4d:3c:a0:95:a0:ba:16:33:f4:64:03:db: 04:b4:15:7c:89:a5:dd:1b:00:84:54:85:86:ee:4a:e1:2d:d2: 41:f0:64:49:b9:96:a1:1f:b3:40:66:ae:c9:92:84:bd:e6:01: 67:ba:ab:49:bd:10:93:91:05:d8:de:f1:5c:ee:20:54:77:dd: 04:dc:3d:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6Mik9NXx9QihAhaMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw ZTE2MB4XDTI2MDcxOTA5MDAxMVoXDTI2MTAxNzA5MDAxMVowLzEtMCsGA1UEAxMk M2IzZThkYzItZmUzYi00MWM1LWFjYTgtMTUxYjAyOGM0YTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEY6ixsE7Gz50yvEVn69AO2j/dT0EMuZ5DQe ZG6YfDhaSH77j/e5YMiFC1MDVO5xLVEXuo3ASyEtY+HhEKUcFK8nAzPNCwvAxnJQ FENPKRrdDNKFrBVR8KLCk6dR40DVK5goaTDRJh3xlMnDpoXDddVRLrl8CE1EJvz5 Kg43ll81EZkJll8bpifF+ecLzsOkXC6D/t1pu2rNZ96qSNVSsxhQHymDsfro9hXr aCTFkPSKegSSc9clzlq8OFGRG7p86/fvQEg+H0qAIjQxnywvNAuwYHj8Nxl73mOA 4x21ODktM40L3B5kRyGKPgX1u+bV7fklyWq/JNOWtLDemHVx8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH9366AcJml2oHVbwYrfcIOzvW5TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvNWFmYzc0ZDUtYmQ5MC0z MjYyLTk5YzEtMjY0ZWU4MTljZTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0 OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxll4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOMnjZvsMx17Cf3vgM0uKQYeUd1WhzCh3eSey+lvLQ4KX7EhsdHaochp hOKEUqaXh/VBVg1PN8hkgEyFtwbgeTFnut0bAHV7l2Oriv3KQPSjSgBJf3FQT//p 3cKN8FWYHVc+sIpzBNZojzDW0Ou5bwtr2JBhKhWNpSXB86dNcv8Tv1Ea6jC8D1eI wdar0Tzd8nEo4WCso/sp6UcMMJNoEjNyEEyx8a0ovbjEY3MExBSFcOba0Z8x9Qwc 2E08oJWguhYz9GQD2wS0FXyJpd0bAIRUhYbuSuEt0kHwZEm5lqEfs0BmrsmShL3m AWe6q0m9EJORBdje8VzuIFR33QTcPZ8= -----END CERTIFICATE-----Generated at Fri Jul 24 13:36:36 2026 by rpki-client