$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/d1a4fb6e-c3fe-322d-8b89-00a178cfe557.roa File: d1a4fb6e-c3fe-322d-8b89-00a178cfe557.roa (raw, json) Hash identifier: dPnCvWJ3iAEcC0UMu6Kbr/SBE3no5W9WnPy131XVXlU= Subject key identifier: 74:BF:CD:C7:F6:49:E5:75:61:75:A8:89:65:72:76:0E:F0:F4:8B:28 Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584DA11AC15EC077AD0FEA3FA580 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/d1a4fb6e-c3fe-322d-8b89-00a178cfe557.roa Signing time: Sun 26 Apr 2026 01:00:25 +0000 ROA not before: Sun 26 Apr 2026 01:00:25 +0000 ROA not after: Sat 25 Jul 2026 01:00:25 +0000 asID: 2152 IP address blocks: 198.189.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a1:1a:c1:5e:c0:77:ad:0f:ea:3f:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Apr 26 01:00:25 2026 GMT Not After : Jul 25 01:00:25 2026 GMT Subject: CN=f2ea09cc-e86c-47bf-b03f-03a5a937e1d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a0:98:43:41:20:aa:2d:27:59:9c:b2:96:f2: ec:1d:57:55:6e:e3:76:82:dd:0a:a3:40:cd:fc:e9: 01:9d:b2:7d:c5:3d:02:e6:fb:ae:8a:e0:b1:19:5c: 19:ba:f0:ac:6e:29:51:16:b9:4f:30:8b:86:93:f5: 4c:70:ad:46:5c:4f:9a:31:76:c4:bb:4c:d7:49:5e: 43:18:fb:2d:59:10:a1:f3:69:c6:02:67:75:48:6c: 43:53:4c:67:4f:38:5b:43:6a:de:c3:e8:fe:28:7f: 97:34:49:af:6e:4d:91:b6:50:26:6f:dc:64:31:48: ab:f4:99:df:7a:8c:a6:f1:e3:e2:9b:f5:a0:30:c1: d4:d5:ab:bb:f9:cd:05:81:e0:f1:7c:69:1f:8e:3b: d0:fe:15:67:29:c1:23:18:21:dd:7b:e7:86:e2:b4: 65:f2:d1:7c:9f:87:b8:fb:e5:95:4e:92:13:8a:e8: 91:72:54:65:16:b6:fd:90:ce:b0:67:d2:bd:40:a5: fd:39:8a:f9:fd:e8:d1:9a:ec:78:96:66:db:69:38: 70:4c:d1:16:9d:0f:cc:37:77:25:b3:0b:95:7e:f9: 3e:bc:29:66:12:35:54:eb:2d:de:0b:a4:7f:a3:71: 14:ab:d4:89:79:8c:41:62:da:59:b1:aa:6a:4a:1b: 57:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:BF:CD:C7:F6:49:E5:75:61:75:A8:89:65:72:76:0E:F0:F4:8B:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/d1a4fb6e-c3fe-322d-8b89-00a178cfe557.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 198.189.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:b7:83:8b:a2:6e:9e:07:ed:c3:69:f7:ab:68:00:b5:59:5d: bd:7a:4d:84:f5:1d:f5:03:ff:bc:51:17:86:5a:e1:2c:54:5d: 06:14:3d:cc:e7:ce:d7:81:64:8f:ed:36:b3:9f:7c:d1:48:06: eb:94:cd:18:c0:7a:42:c0:61:25:02:78:de:18:ee:21:42:54: 1b:ae:75:54:81:49:f7:af:b5:41:b5:bd:85:ea:af:45:86:ea: e4:aa:5d:84:73:17:a3:1d:9e:46:8c:7d:eb:cf:3d:30:51:a6: 18:66:a4:b4:af:ec:53:48:0d:81:c8:89:34:a8:7a:bc:45:ee: eb:b8:2c:a7:99:74:93:18:68:81:a8:b7:e1:a2:dd:d2:0c:31: 67:c1:f6:6b:b3:8d:97:ba:ee:74:0b:ee:31:0e:95:35:5d:5f: 89:d0:8d:67:74:9a:04:19:e4:cd:83:90:77:69:96:70:b6:d3: da:06:bc:48:1e:f1:8c:5f:87:23:61:bd:37:aa:1a:16:dc:0e: 3a:c3:03:39:3c:34:d8:fc:13:c7:1a:d4:43:61:83:fc:15:9e: db:2a:ce:01:60:1d:ac:d3:8e:68:5c:a6:22:90:46:34:77:1d: 83:48:3a:c8:38:14:f2:f8:f5:77:4a:b7:b9:fa:90:9f:d3:cc: 96:bb:19:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2hGsFewHetD+o/pYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk ZjJlYTA5Y2MtZTg2Yy00N2JmLWIwM2YtMDNhNWE5MzdlMWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaCYQ0Egqi0nWZyylvLsHVdVbuN2gt0Ko0DN /OkBnbJ9xT0C5vuuiuCxGVwZuvCsbilRFrlPMIuGk/VMcK1GXE+aMXbEu0zXSV5D GPstWRCh82nGAmd1SGxDU0xnTzhbQ2rew+j+KH+XNEmvbk2RtlAmb9xkMUir9Jnf eoym8ePim/WgMMHU1au7+c0FgeDxfGkfjjvQ/hVnKcEjGCHde+eG4rRl8tF8n4e4 ++WVTpITiuiRclRlFrb9kM6wZ9K9QKX9OYr5/ejRmux4lmbbaThwTNEWnQ/MN3cl swuVfvk+vClmEjVU6y3eC6R/o3EUq9SJeYxBYtpZsapqShtX9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHS/zcf2SeV1YXWoiWVydg7w9IsoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvZDFhNGZiNmUtYzNmZS0z MjJkLThiODktMDBhMTc4Y2ZlNTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxr1JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHe3g4uibp4H7cNp96toALVZXb16TYT1HfUD/7xRF4Za4SxUXQYUPczn zteBZI/tNrOffNFIBuuUzRjAekLAYSUCeN4Y7iFCVBuudVSBSfevtUG1vYXqr0WG 6uSqXYRzF6MdnkaMfevPPTBRphhmpLSv7FNIDYHIiTSoerxF7uu4LKeZdJMYaIGo t+Gi3dIMMWfB9muzjZe67nQL7jEOlTVdX4nQjWd0mgQZ5M2DkHdplnC209oGvEge 8YxfhyNhvTeqGhbcDjrDAzk8NNj8E8ca1ENhg/wVntsqzgFgHazTjmhcpiKQRjR3 HYNIOsg4FPL49XdKt7n6kJ/TzJa7GZk= -----END CERTIFICATE-----Generated at Wed May 13 04:34:54 2026 by rpki-client