$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/cc1a6945-937c-3135-b0c0-bb633dc10995.roa File: cc1a6945-937c-3135-b0c0-bb633dc10995.roa (raw, json) Hash identifier: DSpI0UpmcvE8+7gxLgJFTUboGFN2NDf5JI5nMDGjATI= Subject key identifier: 08:B7:8F:AF:85:CF:95:21:9C:4F:66:6A:AC:CF:5E:0B:05:11:63:3F Certificate issuer: /CN=8031642d-35b5-42ec-8bec-18b7bcfe2bd8 Certificate serial: 010D0C9F4328584DAAE033F75C8D0A2EF1844B80 Authority key identifier: A6:A5:1C:03:54:44:75:D8:E8:EF:92:A3:39:97:27:79:C5:07:0F:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/cc1a6945-937c-3135-b0c0-bb633dc10995.roa Signing time: Wed 29 Apr 2026 13:00:31 +0000 ROA not before: Wed 29 Apr 2026 13:00:31 +0000 ROA not after: Tue 28 Jul 2026 13:00:31 +0000 asID: 55101 IP address blocks: 198.97.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:aa:e0:33:f7:5c:8d:0a:2e:f1:84:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8031642d-35b5-42ec-8bec-18b7bcfe2bd8 Validity Not Before: Apr 29 13:00:31 2026 GMT Not After : Jul 28 13:00:31 2026 GMT Subject: CN=c0d9679a-d73f-4599-ad71-16b9d481cf37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:43:01:ed:91:8f:a7:e3:5b:6a:fe:bc:de:dc: ea:68:49:23:10:9e:00:8d:8e:a0:e9:38:5c:d0:98: 65:04:ba:93:d5:ed:33:51:4e:92:75:73:72:2a:85: 6e:ed:d7:67:db:8a:83:54:36:3b:c9:fe:52:70:96: 63:aa:c5:88:ee:94:f5:71:2f:0e:a5:64:51:1a:e8: 81:93:81:46:18:44:70:98:e0:2f:94:4f:4e:43:c8: c1:ed:45:3c:4c:55:3b:3a:69:b3:b4:ab:a0:be:b0: 7d:46:a1:14:13:75:f5:8f:8c:60:43:d7:21:1a:5d: 4d:c4:99:11:bc:56:81:e4:5e:bf:d0:52:92:8a:de: 23:b0:6a:af:5d:b9:9a:91:73:9e:ad:bb:eb:9f:6e: b7:01:dc:1a:0b:ff:52:af:a7:2e:07:e0:d3:99:08: f3:f4:e8:d5:3b:21:78:58:97:17:d6:92:64:86:49: 74:2c:60:f0:82:68:e9:0a:30:5a:f3:b5:fa:5d:67: 15:cb:74:a4:ee:03:15:e3:01:e6:c9:cb:46:82:65: 14:9a:9b:f1:47:eb:ae:a9:cf:da:df:41:7d:c3:3f: 07:c6:b5:ad:27:6d:06:e0:3c:42:35:88:c2:11:24: bd:f3:6c:f7:d8:47:7e:62:38:2b:f6:d7:bc:cc:7c: f2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:B7:8F:AF:85:CF:95:21:9C:4F:66:6A:AC:CF:5E:0B:05:11:63:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/cc1a6945-937c-3135-b0c0-bb633dc10995.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.crl X509v3 Authority Key Identifier: keyid:A6:A5:1C:03:54:44:75:D8:E8:EF:92:A3:39:97:27:79:C5:07:0F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer sbgp-ipAddrBlock: critical IPv4: 198.97.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:f6:ae:c8:93:09:5f:6f:63:17:4e:4b:53:0d:35:97:7b:21: 58:40:d6:86:d5:44:e9:c2:73:ee:cc:8c:de:ef:29:a4:8b:0a: 46:f0:4a:30:23:19:be:84:25:af:77:9d:f1:12:f6:2e:01:78: 4a:4a:d7:7d:ae:9f:de:53:6f:1a:ee:c3:2e:2f:49:c4:31:b5: ce:96:00:ed:a0:1a:00:9d:8e:31:48:33:71:4a:ca:4b:33:b9: 2d:f0:27:73:2f:00:82:d6:47:7e:53:51:eb:13:3f:c1:dd:9e: 07:29:d7:1a:74:e3:14:1f:ce:a4:a7:6e:84:e5:ae:4b:1f:6b: a9:85:1b:0e:7a:6e:b8:c7:67:01:81:5c:39:f5:72:2b:36:ca: 5c:f3:00:d3:68:a0:88:70:b0:30:12:6d:2b:cd:f5:f8:01:22: 63:44:cc:c2:82:d5:31:02:91:f2:db:f5:9f:70:f6:33:af:c0: 29:a5:2f:34:e4:48:ca:77:58:ba:f2:2d:f6:aa:45:30:fc:74: 9a:b0:17:bb:14:c7:22:d7:da:1e:92:b7:1b:ef:f6:88:0d:7c: a9:23:9f:1c:9e:0b:02:37:ba:fd:20:1c:e8:7f:9c:b8:0e:cf: b6:bf:de:99:8b:59:8a:d9:f1:2d:1d:68:4e:f6:c5:a6:c5:60: 35:ca:50:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2q4DP3XI0KLvGES4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODAzMTY0MmQtMzViNS00MmVjLThiZWMtMThiN2JjZmUy YmQ4MB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk YzBkOTY3OWEtZDczZi00NTk5LWFkNzEtMTZiOWQ0ODFjZjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0MB7ZGPp+Nbav683tzqaEkjEJ4AjY6g6Thc 0JhlBLqT1e0zUU6SdXNyKoVu7ddn24qDVDY7yf5ScJZjqsWI7pT1cS8OpWRRGuiB k4FGGERwmOAvlE9OQ8jB7UU8TFU7OmmztKugvrB9RqEUE3X1j4xgQ9chGl1NxJkR vFaB5F6/0FKSit4jsGqvXbmakXOerbvrn263AdwaC/9Sr6cuB+DTmQjz9OjVOyF4 WJcX1pJkhkl0LGDwgmjpCjBa87X6XWcVy3Sk7gMV4wHmyctGgmUUmpvxR+uuqc/a 30F9wz8HxrWtJ20G4DxCNYjCESS982z32Ed+Yjgr9te8zHzycwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAi3j6+Fz5UhnE9maqzPXgsFEWM/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84MDMx NjQyZC0zNWI1LTQyZWMtOGJlYy0xOGI3YmNmZTJiZDgvY2MxYTY5NDUtOTM3Yy0z MTM1LWIwYzAtYmI2MzNkYzEwOTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvODAzMTY0MmQtMzViNS00MmVjLThi ZWMtMThiN2JjZmUyYmQ4LzgwMzE2NDJkLTM1YjUtNDJlYy04YmVjLTE4YjdiY2Zl MmJkOC5jcmwwHwYDVR0jBBgwFoAUpqUcA1REddjo75KjOZcnecUHD1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84MDMxNjQyZC0zNWI1LTQyZWMtOGJlYy0xOGI3 YmNmZTJiZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmHUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGD2rsiTCV9vYxdOS1MNNZd7IVhA1obVROnCc+7MjN7vKaSLCkbwSjAj Gb6EJa93nfES9i4BeEpK132un95Tbxruwy4vScQxtc6WAO2gGgCdjjFIM3FKyksz uS3wJ3MvAILWR35TUesTP8Hdngcp1xp04xQfzqSnboTlrksfa6mFGw56brjHZwGB XDn1cis2ylzzANNooIhwsDASbSvN9fgBImNEzMKC1TECkfLb9Z9w9jOvwCmlLzTk SMp3WLryLfaqRTD8dJqwF7sUxyLX2h6Stxvv9ogNfKkjnxyeCwI3uv0gHOh/nLgO z7a/3pmLWYrZ8S0daE72xabFYDXKUJs= -----END CERTIFICATE-----Generated at Wed May 13 14:22:04 2026 by rpki-client