$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/5ff297e9-0b93-336f-a807-5fd81fc10453.roa File: 5ff297e9-0b93-336f-a807-5fd81fc10453.roa (raw, json) Hash identifier: 3wUgTco1xsM5B0i3egNtnl3QawXuTRQMZCp0Eh0Rmdg= Subject key identifier: 2C:61:29:77:EC:42:E0:86:9D:73:92:E1:DB:6E:43:D6:20:DC:F2:C4 Certificate issuer: /CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059 Certificate serial: 010D0C9F4328584DBBA0501F6C4E2C2E427BFFC0 Authority key identifier: B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/5ff297e9-0b93-336f-a807-5fd81fc10453.roa Signing time: Tue 05 May 2026 13:00:31 +0000 ROA not before: Tue 05 May 2026 13:00:31 +0000 ROA not after: Mon 03 Aug 2026 13:00:31 +0000 asID: 40788 IP address blocks: 198.2.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bb:a0:50:1f:6c:4e:2c:2e:42:7b:ff:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059 Validity Not Before: May 5 13:00:31 2026 GMT Not After : Aug 3 13:00:31 2026 GMT Subject: CN=bd604328-5567-4aaa-b263-9fbccf8c7bef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ae:6a:20:1c:53:d1:18:0e:23:5c:83:8d:67: 2f:be:f9:dd:75:be:20:3a:92:13:9e:11:11:04:56: 1d:ec:25:44:a0:92:c6:ab:a5:5a:0a:80:13:a1:5a: bb:a1:12:1e:3f:bb:2e:69:10:8c:12:87:ac:6b:3d: f5:42:8f:d5:bd:e9:d8:f2:6f:13:f4:67:6f:bd:eb: 4b:96:98:5c:ec:36:dd:be:92:2f:05:bc:c7:ca:7e: ea:80:9f:9d:d6:6a:95:44:f2:36:39:f6:2c:fd:87: 71:90:84:70:1c:8a:dc:fb:e4:c7:e7:a4:b8:71:9c: 4f:cd:03:21:14:41:29:d8:47:23:92:ff:15:71:f9: 23:b0:71:30:59:27:00:01:a8:f1:87:76:34:cb:19: 4b:6a:79:91:61:d8:7a:2b:03:37:9c:5f:ac:20:05: db:92:f9:6e:87:f7:81:36:e0:b6:b0:e1:63:fe:27: 9f:75:5f:90:3c:1b:5b:a3:16:04:37:22:eb:36:17: 82:7f:98:ce:1c:92:03:f5:b6:80:0d:e0:c2:62:f8: aa:01:c3:c2:0c:c0:a8:c9:94:c1:2f:8e:3a:f9:61: 24:b6:d5:83:ee:55:62:56:ec:26:c1:c7:f6:14:c9: 99:5e:5a:a0:b3:3a:2a:84:6a:b0:9f:ff:b1:25:01: e8:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:61:29:77:EC:42:E0:86:9D:73:92:E1:DB:6E:43:D6:20:DC:F2:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/5ff297e9-0b93-336f-a807-5fd81fc10453.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl X509v3 Authority Key Identifier: keyid:B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer sbgp-ipAddrBlock: critical IPv4: 198.2.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:d5:7e:49:82:a1:79:89:89:de:c3:a5:34:8b:20:68:ca:ab: 43:bc:66:7e:b1:69:c8:f8:11:36:85:58:6b:b6:01:d0:0f:84: 0f:12:43:f4:4c:6e:d8:6e:9c:bb:3e:ca:6c:ac:ad:dc:c8:51: 56:dd:2f:9b:d1:8a:b8:2d:dc:0f:8d:91:9a:a8:27:97:68:c8: a8:fa:58:44:04:84:82:ed:eb:97:bc:74:9a:74:82:21:bd:af: 0a:78:f3:14:3f:82:b9:9c:20:48:a9:5d:09:f8:ff:59:34:5e: 4a:55:b2:7a:6e:50:95:db:35:17:d1:cf:ca:e0:65:7e:14:ca: b8:25:84:09:cf:d5:72:2d:7c:65:5e:75:9b:f9:f7:c0:23:98: 1d:b1:06:2e:e5:fc:5a:9b:e4:05:b5:04:01:07:28:b3:b7:9e: c0:9e:ff:4e:ef:d0:5a:90:3d:4e:0f:bd:06:cd:4a:70:9a:a1: 2e:1b:84:fe:d6:62:84:ae:bd:3f:58:5b:5b:e3:20:70:83:33: 59:e2:81:de:fe:1c:5f:ad:f8:48:28:53:a9:a6:5b:38:72:48: 10:8a:7b:1d:b2:3c:24:8d:cd:fd:6d:ac:3b:62:27:91:c1:9b: cb:65:5d:5b:3f:2c:e1:9b:85:bd:f9:d4:ef:96:15:f6:9b:da: 4f:b6:d6:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE27oFAfbE4sLkJ7/8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWMyOWEwYmUtNzJhOC00ODk0LThjMGMtZjRkMjZlM2Fl MDU5MB4XDTI2MDUwNTEzMDAzMVoXDTI2MDgwMzEzMDAzMVowLzEtMCsGA1UEAxMk YmQ2MDQzMjgtNTU2Ny00YWFhLWIyNjMtOWZiY2NmOGM3YmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArK5qIBxT0RgOI1yDjWcvvvnddb4gOpITnhER BFYd7CVEoJLGq6VaCoAToVq7oRIeP7suaRCMEoesaz31Qo/VvenY8m8T9GdvvetL lphc7DbdvpIvBbzHyn7qgJ+d1mqVRPI2OfYs/YdxkIRwHIrc++TH56S4cZxPzQMh FEEp2Ecjkv8VcfkjsHEwWScAAajxh3Y0yxlLanmRYdh6KwM3nF+sIAXbkvluh/eB NuC2sOFj/iefdV+QPBtboxYENyLrNheCf5jOHJID9baADeDCYviqAcPCDMCoyZTB L446+WEkttWD7lViVuwmwcf2FMmZXlqgszoqhGqwn/+xJQHoYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCxhKXfsQuCGnXOS4dtuQ9Yg3PLEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xYzI5 YTBiZS03MmE4LTQ4OTQtOGMwYy1mNGQyNmUzYWUwNTkvNWZmMjk3ZTktMGI5My0z MzZmLWE4MDctNWZkODFmYzEwNDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWMyOWEwYmUtNzJhOC00ODk0LThj MGMtZjRkMjZlM2FlMDU5LzFjMjlhMGJlLTcyYTgtNDg5NC04YzBjLWY0ZDI2ZTNh ZTA1OS5jcmwwHwYDVR0jBBgwFoAUt+lHh3Pe7UatcsY/Em0QrrFWmR4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xYzI5YTBiZS03MmE4LTQ4OTQtOGMwYy1mNGQy NmUzYWUwNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGxgJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrVfkmCoXmJid7DpTSLIGjKq0O8Zn6xacj4ETaFWGu2AdAPhA8SQ/RM bthunLs+ymysrdzIUVbdL5vRirgt3A+NkZqoJ5doyKj6WEQEhILt65e8dJp0giG9 rwp48xQ/grmcIEipXQn4/1k0XkpVsnpuUJXbNRfRz8rgZX4UyrglhAnP1XItfGVe dZv598AjmB2xBi7l/Fqb5AW1BAEHKLO3nsCe/07v0FqQPU4PvQbNSnCaoS4bhP7W YoSuvT9YW1vjIHCDM1nigd7+HF+t+EgoU6mmWzhySBCKex2yPCSNzf1trDtiJ5HB m8tlXVs/LOGbhb351O+WFfab2k+21jU= -----END CERTIFICATE-----Generated at Wed May 13 12:16:15 2026 by rpki-client