$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/7d504fa1-eb21-3521-9c74-4413e34563a4.roa File: 7d504fa1-eb21-3521-9c74-4413e34563a4.roa (raw, json) Hash identifier: UKD9hblvwdSBwVCCzapaX0+JPUprtDeexDjZHQryG2M= Subject key identifier: 74:8F:34:59:5D:69:45:C4:2C:9C:91:B1:B3:89:D5:05:DA:0F:BE:C9 Certificate issuer: /CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a Certificate serial: 010D0C9F4328584DC8305689263B7C11B3F23600 Authority key identifier: A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/7d504fa1-eb21-3521-9c74-4413e34563a4.roa Signing time: Sun 10 May 2026 01:00:24 +0000 ROA not before: Sun 10 May 2026 01:00:24 +0000 ROA not after: Sat 08 Aug 2026 01:00:24 +0000 asID: 400666 IP address blocks: 198.98.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c8:30:56:89:26:3b:7c:11:b3:f2:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a Validity Not Before: May 10 01:00:24 2026 GMT Not After : Aug 8 01:00:24 2026 GMT Subject: CN=f775f4a8-6807-4304-b2e3-1d31f3e184d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:6d:e5:62:8d:45:3b:a1:ab:7e:77:be:88:0a: ae:15:99:d5:bf:23:c5:3e:50:5e:b6:59:51:14:45: 6c:25:72:ba:5a:f5:d4:dc:bd:99:00:6b:eb:ec:24: 28:27:c9:f1:62:40:0f:3e:77:bd:dc:f7:e0:97:98: 35:94:b0:f2:94:27:17:81:ac:0e:83:85:e2:14:fb: 79:07:15:0d:57:ea:2f:60:d6:a6:26:58:e1:3b:cb: ae:68:21:97:61:54:52:e0:9c:2c:ab:e5:09:ef:df: 4e:05:75:d0:70:05:4a:b6:25:31:7f:31:ae:74:f9: 9a:63:1c:6b:16:82:79:e0:f4:1f:4b:21:57:cf:7e: 41:ed:42:41:7c:e2:5e:a9:fb:03:94:19:f5:cf:be: 66:d5:d7:48:13:45:c5:07:b0:d4:2d:3a:ca:9d:6d: 32:0b:5a:e1:10:13:8d:7b:6e:a0:15:b8:f3:76:a3: bd:b9:d3:c1:b3:78:6d:4e:98:73:12:81:6f:08:af: 6e:c0:df:76:75:50:00:b6:12:86:e2:9c:27:76:73: 90:f4:14:41:b1:a5:a2:be:71:1c:a9:b8:5a:40:fe: ac:a8:bd:74:67:84:2b:1c:a0:f0:72:b5:23:c5:ab: fd:98:27:09:54:2e:d9:71:6a:42:ee:c7:1a:1f:20: 28:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:8F:34:59:5D:69:45:C4:2C:9C:91:B1:B3:89:D5:05:DA:0F:BE:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/7d504fa1-eb21-3521-9c74-4413e34563a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl X509v3 Authority Key Identifier: keyid:A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer sbgp-ipAddrBlock: critical IPv4: 198.98.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:e2:ab:97:5e:4b:df:7e:6e:74:82:2e:0e:7f:4b:fe:e9:0d: 5b:ba:70:0a:a9:81:16:86:39:6d:3a:e7:76:89:9d:7f:61:29: 10:97:82:3d:6a:a8:4c:bb:b4:34:88:f1:52:7f:a9:c0:97:1a: f2:48:64:d4:1d:cb:f1:ba:5d:28:27:f1:fc:bb:a9:f5:28:8b: 7e:eb:da:dc:44:9f:0f:46:b7:b6:11:cf:c2:b2:92:4d:5e:51: 97:da:54:52:6c:3a:73:43:97:d4:37:6d:56:13:75:28:7e:78: 4f:72:a3:26:4e:89:da:bd:c2:08:7d:98:76:5d:32:c6:44:d5: fe:13:f7:90:92:68:cd:33:bd:aa:39:c6:68:3b:2c:53:43:5a: c0:ec:5c:04:39:0a:b3:46:0b:ff:dc:12:1b:fc:b4:3d:af:5b: 80:97:2a:b6:62:b7:63:77:f8:a6:77:b5:42:64:5f:35:bf:ae: 6e:f5:49:57:42:ed:b9:e6:92:77:4f:18:24:9b:15:5e:13:b9: 41:3c:6c:5d:f0:c3:c7:1f:cb:cf:b5:c9:d6:1f:b6:ff:14:82: 72:24:06:60:f6:b7:76:00:49:88:41:98:9d:84:b5:b7:f1:f1: 81:ed:a8:b7:ce:52:ff:96:23:1e:0d:f4:eb:1d:98:7e:a7:b5: 90:b2:38:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3IMFaJJjt8EbPyNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRhMWIzODMtZjk3NS00ZmIxLTljZTYtZTQzNjExZWFm YTFhMB4XDTI2MDUxMDAxMDAyNFoXDTI2MDgwODAxMDAyNFowLzEtMCsGA1UEAxMk Zjc3NWY0YTgtNjgwNy00MzA0LWIyZTMtMWQzMWYzZTE4NGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiG3lYo1FO6Grfne+iAquFZnVvyPFPlBetllR FEVsJXK6WvXU3L2ZAGvr7CQoJ8nxYkAPPne93Pfgl5g1lLDylCcXgawOg4XiFPt5 BxUNV+ovYNamJljhO8uuaCGXYVRS4Jwsq+UJ799OBXXQcAVKtiUxfzGudPmaYxxr FoJ54PQfSyFXz35B7UJBfOJeqfsDlBn1z75m1ddIE0XFB7DULTrKnW0yC1rhEBON e26gFbjzdqO9udPBs3htTphzEoFvCK9uwN92dVAAthKG4pwndnOQ9BRBsaWivnEc qbhaQP6sqL10Z4QrHKDwcrUjxav9mCcJVC7ZcWpC7scaHyAo7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHSPNFldaUXELJyRsbOJ1QXaD77JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81ZGEx YjM4My1mOTc1LTRmYjEtOWNlNi1lNDM2MTFlYWZhMWEvN2Q1MDRmYTEtZWIyMS0z NTIxLTljNzQtNDQxM2UzNDU2M2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWRhMWIzODMtZjk3NS00ZmIxLTlj ZTYtZTQzNjExZWFmYTFhLzVkYTFiMzgzLWY5NzUtNGZiMS05Y2U2LWU0MzYxMWVh ZmExYS5jcmwwHwYDVR0jBBgwFoAUomwcT7YhlG/6poaO5igrec40Hx8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81ZGExYjM4My1mOTc1LTRmYjEtOWNlNi1lNDM2 MTFlYWZhMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxmIYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADiq5deS99+bnSCLg5/S/7pDVu6cAqpgRaGOW0653aJnX9hKRCXgj1q qEy7tDSI8VJ/qcCXGvJIZNQdy/G6XSgn8fy7qfUoi37r2txEnw9Gt7YRz8Kykk1e UZfaVFJsOnNDl9Q3bVYTdSh+eE9yoyZOidq9wgh9mHZdMsZE1f4T95CSaM0zvao5 xmg7LFNDWsDsXAQ5CrNGC//cEhv8tD2vW4CXKrZit2N3+KZ3tUJkXzW/rm71SVdC 7bnmkndPGCSbFV4TuUE8bF3ww8cfy8+1ydYftv8UgnIkBmD2t3YASYhBmJ2Etbfx 8YHtqLfOUv+WIx4N9OsdmH6ntZCyOLI= -----END CERTIFICATE-----Generated at Wed May 13 19:04:54 2026 by rpki-client