$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/19aa8e02-b9d8-353f-b661-4dbf4e73c897.roa File: 19aa8e02-b9d8-353f-b661-4dbf4e73c897.roa (raw, json) Hash identifier: jjoYcCIs/tKdFS7zI8MuzH+v2qljilAH5SiIh538ymA= Subject key identifier: 2B:94:BB:18:49:12:BD:D8:4B:D0:CC:4B:FC:1B:A0:DE:17:DD:62:93 Certificate issuer: /CN=a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd Certificate serial: 010D0C9F4328584D95F0054378F7A1D4CC85BD40 Authority key identifier: DC:32:B3:93:D6:64:94:2D:8F:61:5D:79:FD:DD:54:FF:18:57:5E:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/19aa8e02-b9d8-353f-b661-4dbf4e73c897.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 8987 IP address blocks: 198.38.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:f0:05:43:78:f7:a1:d4:cc:85:bd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=ee2880a4-5ee2-45ac-9e70-9604ac819e85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:7b:d9:63:1e:f0:ed:99:0a:ba:9e:d2:13:79: 66:3e:20:a4:d6:4e:9c:52:9a:05:b0:be:41:1a:c1: 4c:23:55:0f:99:4a:32:f7:cd:ab:05:8e:ae:53:3f: 7b:f6:ac:cd:55:0e:9b:a8:f3:b2:64:19:20:3c:13: 2f:50:93:42:3d:cf:9e:f6:87:3f:dc:fb:ce:b3:a0: 6f:41:2e:84:00:98:21:6d:22:8f:be:22:b0:a1:b2: e0:81:9a:98:8d:fe:a9:4d:2c:f1:6a:41:51:a3:b1: 84:b3:47:33:a9:66:92:74:0c:2b:c9:95:92:78:46: eb:9a:16:08:12:6e:89:53:2d:fc:3c:8a:86:23:20: a7:cf:9d:29:1b:19:74:8b:30:7e:53:a8:76:c0:dd: ef:c2:5f:76:5c:e9:83:e1:33:bb:03:10:02:3b:54: e4:a3:e5:0c:99:38:d2:46:ed:bb:2e:a3:e9:42:44: 63:60:8d:5b:d8:fd:8d:d5:79:d4:9f:60:3b:9a:ca: 81:4f:42:92:0e:e7:a5:54:8a:4d:b5:a9:64:45:40: b5:14:a7:3c:17:18:98:de:d6:d3:8e:48:f4:85:bb: 4a:af:80:d1:c7:6e:7a:4a:ea:cc:09:5b:0f:1b:86: 8a:e7:e5:a0:c2:bd:dc:e5:0d:7d:61:ca:68:80:61: a0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:94:BB:18:49:12:BD:D8:4B:D0:CC:4B:FC:1B:A0:DE:17:DD:62:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/19aa8e02-b9d8-353f-b661-4dbf4e73c897.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.crl X509v3 Authority Key Identifier: keyid:DC:32:B3:93:D6:64:94:2D:8F:61:5D:79:FD:DD:54:FF:18:57:5E:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.cer sbgp-ipAddrBlock: critical IPv4: 198.38.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:47:c1:a2:27:1e:5f:65:70:dc:b4:3a:3a:af:a3:2c:79:81: c2:b8:9c:2b:43:d6:1c:58:15:e7:dd:1a:cc:4b:8b:3f:45:a6: a0:94:b0:46:23:f8:8d:58:56:8d:15:e2:4d:4b:20:56:9a:09: 50:69:62:ed:a9:cd:7a:23:a3:33:ce:29:dd:28:98:6b:8a:0c: 7c:cc:5d:9e:be:58:37:d4:3c:15:68:9f:93:d4:ba:5e:9d:4c: 1e:ba:ac:8e:f9:9a:e0:22:ce:a2:da:14:e2:24:50:63:30:55: 39:ec:1e:4b:8b:15:c3:9c:b8:d4:58:33:ed:89:aa:7c:c6:59: f8:0b:35:29:d7:16:6b:53:93:49:aa:d8:49:a0:20:b4:4d:f5: 0b:df:15:cd:67:f1:f1:60:5c:85:c4:5a:7a:5d:3c:47:ee:75: f7:fc:a7:df:1c:28:b1:d5:11:e9:ff:5b:e6:f0:1e:2b:fe:54: 93:59:b4:36:8a:c3:60:dd:4f:95:2a:6f:d3:82:3a:37:5e:ca: 33:ea:b2:8d:a1:25:66:bf:bd:70:f6:79:1e:21:9c:4a:d2:b4: 79:a7:94:79:4f:73:47:b6:28:39:60:b4:3f:73:9e:97:50:aa: 59:3d:65:b7:26:d9:52:91:fa:32:b1:22:9e:92:29:30:b3:ab: 4b:8e:57:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V8AVDePeh1MyFvUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTk0MzVhMzgtYmI4OS00ZmNmLTllNWYtN2E2ZTUzYjJk M2JkMB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk ZWUyODgwYTQtNWVlMi00NWFjLTllNzAtOTYwNGFjODE5ZTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnvZYx7w7ZkKup7SE3lmPiCk1k6cUpoFsL5B GsFMI1UPmUoy982rBY6uUz979qzNVQ6bqPOyZBkgPBMvUJNCPc+e9oc/3PvOs6Bv QS6EAJghbSKPviKwobLggZqYjf6pTSzxakFRo7GEs0czqWaSdAwryZWSeEbrmhYI Em6JUy38PIqGIyCnz50pGxl0izB+U6h2wN3vwl92XOmD4TO7AxACO1Tko+UMmTjS Ru27LqPpQkRjYI1b2P2N1XnUn2A7msqBT0KSDuelVIpNtalkRUC1FKc8FxiY3tbT jkj0hbtKr4DRx256SurMCVsPG4aK5+Wgwr3c5Q19YcpogGGgNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCuUuxhJEr3YS9DMS/wboN4X3WKTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTQz NWEzOC1iYjg5LTRmY2YtOWU1Zi03YTZlNTNiMmQzYmQvMTlhYThlMDItYjlkOC0z NTNmLWI2NjEtNGRiZjRlNzNjODk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTk0MzVhMzgtYmI4OS00ZmNmLTll NWYtN2E2ZTUzYjJkM2JkL2E5NDM1YTM4LWJiODktNGZjZi05ZTVmLTdhNmU1M2Iy ZDNiZC5jcmwwHwYDVR0jBBgwFoAU3DKzk9ZklC2PYV15/d1U/xhXXlYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTQzNWEzOC1iYjg5LTRmY2YtOWU1Zi03YTZl NTNiMmQzYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxiZKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZHwaInHl9lcNy0Ojqvoyx5gcK4nCtD1hxYFefdGsxLiz9FpqCUsEYj +I1YVo0V4k1LIFaaCVBpYu2pzXojozPOKd0omGuKDHzMXZ6+WDfUPBVon5PUul6d TB66rI75muAizqLaFOIkUGMwVTnsHkuLFcOcuNRYM+2JqnzGWfgLNSnXFmtTk0mq 2EmgILRN9QvfFc1n8fFgXIXEWnpdPEfudff8p98cKLHVEen/W+bwHiv+VJNZtDaK w2DdT5Uqb9OCOjdeyjPqso2hJWa/vXD2eR4hnErStHmnlHlPc0e2KDlgtD9znpdQ qlk9Zbcm2VKR+jKxIp6SKTCzq0uOVyk= -----END CERTIFICATE-----Generated at Wed May 13 06:36:18 2026 by rpki-client