$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/d98a63f5-e0de-35bf-ac2d-d4c829125068.roa File: d98a63f5-e0de-35bf-ac2d-d4c829125068.roa (raw, json) Hash identifier: cawIEpHHyl/EVf38i6EAD3ykgRGlH+OVNhxBI4GxXnc= Subject key identifier: A9:44:75:AE:4D:4D:06:C3:7D:27:AA:F5:07:E2:14:B6:EB:7B:97:DE Certificate issuer: /CN=7334a22a-f222-4457-889f-5478966ecf96 Certificate serial: 010D0C9F4328584DBA3AE3CD2D0B575DEDFE79F0 Authority key identifier: C4:3E:A5:1C:D6:FA:F5:2F:16:D6:43:A2:C3:7D:EC:33:8F:FF:48:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/d98a63f5-e0de-35bf-ac2d-d4c829125068.roa Signing time: Tue 05 May 2026 01:00:23 +0000 ROA not before: Tue 05 May 2026 01:00:23 +0000 ROA not after: Mon 03 Aug 2026 01:00:23 +0000 asID: 397085 IP address blocks: 208.91.102.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/7334a22a-f222-4457-889f-5478966ecf96.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/7334a22a-f222-4457-889f-5478966ecf96.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ba:3a:e3:cd:2d:0b:57:5d:ed:fe:79:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7334a22a-f222-4457-889f-5478966ecf96 Validity Not Before: May 5 01:00:23 2026 GMT Not After : Aug 3 01:00:23 2026 GMT Subject: CN=41312a42-57ac-4ce6-8858-6d5b1d30060d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:5c:75:5a:bf:06:76:31:de:26:ab:d0:a4:33: 0e:c4:95:af:67:9d:ec:a1:6c:af:99:02:58:c6:76: b4:64:74:d3:3a:1e:a8:b6:54:c9:86:f9:81:9f:e3: 45:0f:9b:43:46:10:ea:30:d5:d1:48:2e:6d:cc:bc: c9:db:e4:7f:4a:88:ce:3f:ad:38:4f:d4:9e:11:f7: 11:05:08:db:fa:2b:73:76:d1:4a:3f:3b:94:cd:4f: 01:bb:97:cb:8a:ee:19:11:29:7f:2a:f1:d4:0e:f0: dd:68:96:01:f9:d8:5e:7f:a8:24:86:71:1c:34:7b: 99:d4:fb:59:11:6d:5f:bc:06:9f:f3:58:43:5f:f4: ff:ed:a1:87:cf:6c:44:7f:b2:82:3d:06:22:70:06: 36:e7:5a:7f:98:1a:50:9a:b4:fd:8a:cf:d4:ab:c8: 92:de:3a:e8:a8:99:57:6e:16:0d:3b:94:a2:a0:b0: 33:d4:d7:4d:7a:6d:a1:48:b5:6c:4f:ed:27:74:3a: 42:40:95:51:5d:f6:3a:2a:8d:63:b8:1c:ee:90:bf: a0:e0:43:ab:bc:f0:c4:2f:3a:4f:b2:53:57:9c:f3: b7:6e:fd:75:a1:c9:45:33:86:4b:d6:60:69:3b:3a: e7:fc:6a:b1:cf:c8:c6:d3:ae:bf:98:13:9b:95:0b: dd:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:44:75:AE:4D:4D:06:C3:7D:27:AA:F5:07:E2:14:B6:EB:7B:97:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/d98a63f5-e0de-35bf-ac2d-d4c829125068.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/7334a22a-f222-4457-889f-5478966ecf96.crl X509v3 Authority Key Identifier: keyid:C4:3E:A5:1C:D6:FA:F5:2F:16:D6:43:A2:C3:7D:EC:33:8F:FF:48:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96.cer sbgp-ipAddrBlock: critical IPv4: 208.91.102.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:63:e1:fd:f0:86:1f:a6:43:72:3c:da:df:1f:c8:a7:5e:df: e8:84:ba:f9:48:8b:64:27:72:89:43:71:ab:04:3b:de:b9:db: 14:f9:92:97:45:30:1e:06:4a:33:6e:eb:2c:02:05:f6:95:d2: 57:00:d8:6b:c4:10:d8:2a:35:60:f8:9a:b4:29:a7:fc:ad:03: c7:d8:88:ac:ee:4a:e1:f9:03:c2:35:88:45:9f:fb:43:b4:73: 63:29:bc:13:80:cf:60:cb:27:c4:34:27:6d:8a:b3:20:85:a0: f3:1d:f9:55:a6:07:4e:e5:73:46:0d:8a:ce:e5:de:80:fa:d6: 18:c9:b6:40:4a:95:98:aa:b3:24:45:1c:6c:bd:f5:1b:6c:09: f2:ad:3e:0e:90:a8:df:2d:1f:9f:0f:c3:44:d5:1a:39:a0:6b: 8e:0f:3c:2d:6f:ee:16:c1:ab:91:dd:ba:d5:0a:27:15:7c:20: 7e:b3:cf:6c:81:40:cd:40:47:7f:6b:d5:05:c3:c8:c1:c8:51: 11:aa:25:f3:13:55:e5:01:c3:6d:28:bb:b2:eb:f1:ca:63:ec: b6:72:f0:e3:42:db:32:21:12:68:e5:98:9b:d4:16:a6:8d:37: 6a:cb:e1:c1:32:63:40:2c:36:b2:5f:16:ec:b7:ea:7c:53:79: a2:59:4e:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE26OuPNLQtXXe3+efAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzNGEyMmEtZjIyMi00NDU3LTg4OWYtNTQ3ODk2NmVj Zjk2MB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk NDEzMTJhNDItNTdhYy00Y2U2LTg4NTgtNmQ1YjFkMzAwNjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1x1Wr8GdjHeJqvQpDMOxJWvZ53soWyvmQJY xna0ZHTTOh6otlTJhvmBn+NFD5tDRhDqMNXRSC5tzLzJ2+R/SojOP604T9SeEfcR BQjb+itzdtFKPzuUzU8Bu5fLiu4ZESl/KvHUDvDdaJYB+dhef6gkhnEcNHuZ1PtZ EW1fvAaf81hDX/T/7aGHz2xEf7KCPQYicAY251p/mBpQmrT9is/Uq8iS3jroqJlX bhYNO5SioLAz1NdNem2hSLVsT+0ndDpCQJVRXfY6Ko1juBzukL+g4EOrvPDELzpP slNXnPO3bv11oclFM4ZL1mBpOzrn/Gqxz8jG066/mBOblQvdpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKlEda5NTQbDfSeq9QfiFLbre5feMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzM0 YTIyYS1mMjIyLTQ0NTctODg5Zi01NDc4OTY2ZWNmOTYvZDk4YTYzZjUtZTBkZS0z NWJmLWFjMmQtZDRjODI5MTI1MDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMzNGEyMmEtZjIyMi00NDU3LTg4 OWYtNTQ3ODk2NmVjZjk2LzczMzRhMjJhLWYyMjItNDQ1Ny04ODlmLTU0Nzg5NjZl Y2Y5Ni5jcmwwHwYDVR0jBBgwFoAUxD6lHNb69S8W1kOiw33sM4//SG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzM0YTIyYS1mMjIyLTQ0NTctODg5Zi01NDc4 OTY2ZWNmOTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0FtmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5j4f3whh+mQ3I82t8fyKde3+iEuvlIi2QncolDcasEO9652xT5kpdF MB4GSjNu6ywCBfaV0lcA2GvEENgqNWD4mrQpp/ytA8fYiKzuSuH5A8I1iEWf+0O0 c2MpvBOAz2DLJ8Q0J22KsyCFoPMd+VWmB07lc0YNis7l3oD61hjJtkBKlZiqsyRF HGy99RtsCfKtPg6QqN8tH58Pw0TVGjmga44PPC1v7hbBq5HdutUKJxV8IH6zz2yB QM1AR39r1QXDyMHIURGqJfMTVeUBw20ou7Lr8cpj7LZy8ONC2zIhEmjlmJvUFqaN N2rL4cEyY0AsNrJfFuy36nxTeaJZTrA= -----END CERTIFICATE-----Generated at Wed May 13 18:23:05 2026 by rpki-client