$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/932cb49c-91b5-36d2-8b55-3b15a5601fa0.roa File: 932cb49c-91b5-36d2-8b55-3b15a5601fa0.roa (raw, json) Hash identifier: 51tc9rQycaxWcaVHkL8k4ob2oGEUupXuI01A0xmc+lI= Subject key identifier: 8D:40:6E:0F:EB:0B:17:EF:BD:81:D3:5A:A6:B8:EB:DD:3C:B6:66:2D Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D91018B7C8B01556B439C1F32 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/932cb49c-91b5-36d2-8b55-3b15a5601fa0.roa Signing time: Mon 20 Apr 2026 06:36:54 +0000 ROA not before: Mon 20 Apr 2026 06:36:54 +0000 ROA not after: Sun 19 Jul 2026 06:36:54 +0000 asID: 33469 IP address blocks: 198.47.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:01:8b:7c:8b:01:55:6b:43:9c:1f:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 20 06:36:54 2026 GMT Not After : Jul 19 06:36:54 2026 GMT Subject: CN=6395fb14-b4dc-475e-a207-541c6a93d80c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:27:8b:1f:93:44:d7:ca:38:9a:4c:73:51:17: 8c:72:76:b8:0b:6f:f9:0d:49:e5:be:59:01:14:c1: d3:90:fd:1c:e1:69:56:55:76:b8:e5:fa:d7:e2:88: d4:42:5a:24:19:22:82:27:7d:5a:92:3f:b8:e0:7a: 64:68:2a:8b:70:2e:e8:ea:0b:91:bc:8d:a1:b5:79: f0:46:34:46:06:c0:50:68:a8:0e:39:c3:7c:ec:e5: 86:d0:77:fd:38:0a:b9:7d:61:c8:fe:fe:4a:a8:2f: 37:22:07:95:58:3b:dd:fd:63:fd:af:b5:80:49:88: cc:61:30:9e:e2:53:d2:89:06:4c:64:cb:85:50:b7: 0b:6f:74:cf:3d:df:d6:9c:72:e4:ce:21:97:8a:c2: d3:21:1d:fa:35:c1:f5:a8:b8:52:c8:3c:58:8e:66: bc:66:cf:b3:19:1f:f4:e7:bc:de:2f:33:c5:fe:bd: 07:cc:dc:73:a8:b6:a6:44:2f:dc:39:fd:bc:f3:25: 0f:e9:62:01:71:70:43:ab:05:98:68:fa:d9:72:74: 96:b5:ef:bf:f6:d7:d5:64:22:0e:01:d6:09:b3:09: 0a:31:59:19:90:cc:9c:50:14:44:95:32:79:82:49: 4e:a9:e0:e7:81:3a:b8:24:29:c8:66:88:62:b2:60: 6f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:40:6E:0F:EB:0B:17:EF:BD:81:D3:5A:A6:B8:EB:DD:3C:B6:66:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/932cb49c-91b5-36d2-8b55-3b15a5601fa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 198.47.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:d1:c1:7e:6d:f3:3d:7a:14:46:64:61:8c:dc:99:78:fa:d7: 50:ae:e3:53:cd:7e:d5:4d:26:2d:bd:99:dd:58:7c:53:99:e7: 5c:8f:46:14:31:7a:29:47:85:48:ae:c9:55:10:e6:c9:ed:e9: 4b:29:c4:4a:94:cb:ff:8e:21:80:59:ff:7d:11:74:e0:d8:ee: 30:ee:9b:a3:43:d1:c8:64:7d:e2:f6:77:0d:3d:af:ba:db:b8: 4a:3a:10:0c:4a:eb:39:04:40:82:ee:23:0f:d4:ea:e5:0e:41: f2:c1:72:9a:6e:0d:dc:36:cc:58:59:7e:b6:f3:27:a4:bd:2c: 86:a8:f9:40:51:9c:0f:68:80:8b:66:38:c3:7b:4f:11:18:90: e6:e9:dd:3f:ba:d0:da:92:02:66:14:2f:48:b7:45:62:c5:d2: aa:14:9f:d9:31:78:a1:3e:c9:7c:92:6f:13:67:94:6c:61:9b: cd:a5:e2:66:48:c8:63:c8:aa:79:98:d7:e4:33:06:60:ea:b0: 6b:3b:72:79:11:ce:97:14:79:09:43:1b:51:24:8c:94:25:f3: 4a:98:0e:26:6d:3e:8c:91:08:d3:36:2b:94:6a:07:38:70:55: b1:39:11:22:14:a2:1b:fb:bc:e9:ec:45:75:33:6e:6f:d0:26: 2e:66:99:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2RAYt8iwFVa0OcHzIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQyMDA2MzY1NFoXDTI2MDcxOTA2MzY1NFowLzEtMCsGA1UEAxMk NjM5NWZiMTQtYjRkYy00NzVlLWEyMDctNTQxYzZhOTNkODBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyeLH5NE18o4mkxzUReMcna4C2/5DUnlvlkB FMHTkP0c4WlWVXa45frX4ojUQlokGSKCJ31akj+44HpkaCqLcC7o6guRvI2htXnw RjRGBsBQaKgOOcN87OWG0Hf9OAq5fWHI/v5KqC83IgeVWDvd/WP9r7WASYjMYTCe 4lPSiQZMZMuFULcLb3TPPd/WnHLkziGXisLTIR36NcH1qLhSyDxYjma8Zs+zGR/0 57zeLzPF/r0HzNxzqLamRC/cOf288yUP6WIBcXBDqwWYaPrZcnSWte+/9tfVZCIO AdYJswkKMVkZkMycUBRElTJ5gklOqeDngTq4JCnIZohismBv9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1Abg/rCxfvvYHTWqa46908tmYtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOTMyY2I0OWMtOTFiNS0z NmQyLThiNTUtM2IxNWE1NjAxZmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi9lMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPRwX5t8z16FEZkYYzcmXj611Cu41PNftVNJi29md1YfFOZ51yPRhQx eilHhUiuyVUQ5snt6UspxEqUy/+OIYBZ/30RdODY7jDum6ND0chkfeL2dw09r7rb uEo6EAxK6zkEQILuIw/U6uUOQfLBcppuDdw2zFhZfrbzJ6S9LIao+UBRnA9ogItm OMN7TxEYkObp3T+60NqSAmYUL0i3RWLF0qoUn9kxeKE+yXySbxNnlGxhm82l4mZI yGPIqnmY1+QzBmDqsGs7cnkRzpcUeQlDG1EkjJQl80qYDiZtPoyRCNM2K5RqBzhw VbE5ESIUohv7vOnsRXUzbm/QJi5mmYY= -----END CERTIFICATE-----Generated at Wed May 13 16:42:40 2026 by rpki-client