$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7/838643d5-7ffe-38bf-b51f-5afdcd2a55fe.roa File: 838643d5-7ffe-38bf-b51f-5afdcd2a55fe.roa (raw, json) Hash identifier: sxv1TNAyMfwGGMQfF7rIYmssLBpPopt9HI1FgzYO67Q= Subject key identifier: E4:03:70:5C:E4:EF:91:F5:52:50:68:DC:E3:AC:99:E1:E1:83:F0:31 Certificate issuer: /CN=df94af30-a8e8-42b4-9e43-649437c0cac7 Certificate serial: 010D0C9F4328584D8EF5556B18742F0B62696380 Authority key identifier: 4A:55:61:BC:24:00:53:15:DC:9F:48:CF:55:4F:D6:D8:8A:E2:FC:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7/838643d5-7ffe-38bf-b51f-5afdcd2a55fe.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 397681 IP address blocks: 192.219.99.0/24 maxlen: 24 198.168.2.0/24 maxlen: 24 199.202.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7/df94af30-a8e8-42b4-9e43-649437c0cac7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7/df94af30-a8e8-42b4-9e43-649437c0cac7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:55:6b:18:74:2f:0b:62:69:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df94af30-a8e8-42b4-9e43-649437c0cac7 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=01c074b2-3a8f-47b0-8bf4-7a367df739f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a9:cb:a4:fe:d2:05:e3:0e:d1:d5:77:78:0e: 01:d6:3f:e5:5e:fd:c3:e7:b5:af:89:1b:4a:b2:c6: 0a:0e:98:12:48:f8:d1:ce:71:84:55:c9:e5:79:a6: 43:dc:b4:2d:42:64:bc:1c:3c:e3:e8:03:00:ca:d1: ce:7c:7d:83:5b:ed:a8:36:ce:ac:e7:e2:de:28:3f: 55:3a:b3:e8:dd:2a:29:22:51:a0:11:b0:d9:26:7d: 5a:df:0c:67:b9:36:d2:db:0e:9e:e1:8a:f4:45:cc: be:97:ea:f6:ea:0f:a3:59:c2:73:70:2e:19:da:76: 9a:cb:38:13:37:1d:ed:ba:98:4d:5c:8b:32:ca:c6: 4b:f2:64:2b:25:24:21:c2:33:0a:d0:0b:59:bf:7f: aa:97:bf:b5:ad:72:6a:b5:8c:55:2b:9f:2a:d6:6f: be:6e:21:4d:ef:50:0c:ae:c7:c1:d5:b6:4e:59:d1: 7f:5d:ae:1e:d6:23:6b:9f:b8:86:2c:4a:48:4e:cc: d2:ea:fc:2a:40:93:c1:54:12:24:67:63:fa:f0:cc: 07:f1:92:c0:64:ac:99:e6:b4:1d:ea:4d:3e:5c:2b: 6d:85:e7:df:00:5e:7a:36:bc:4d:d7:a3:73:10:de: 81:f9:12:b7:46:1e:71:1d:c9:60:02:e1:40:ac:24: bc:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:03:70:5C:E4:EF:91:F5:52:50:68:DC:E3:AC:99:E1:E1:83:F0:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7/838643d5-7ffe-38bf-b51f-5afdcd2a55fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7/df94af30-a8e8-42b4-9e43-649437c0cac7.crl X509v3 Authority Key Identifier: keyid:4A:55:61:BC:24:00:53:15:DC:9F:48:CF:55:4F:D6:D8:8A:E2:FC:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7.cer sbgp-ipAddrBlock: critical IPv4: 192.219.99.0/24 198.168.2.0/24 199.202.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:a0:78:3f:71:a1:47:37:41:a5:25:fc:6d:41:2b:7a:d2:02: 96:17:a8:cf:ee:2f:38:3e:44:2f:7a:dc:d7:ac:a4:a1:90:20: 45:df:cb:7a:00:22:2e:13:56:c3:f5:b1:89:98:44:d1:b2:b6: 2a:09:7f:4a:83:c2:eb:a8:cc:cf:a4:19:40:7e:67:ac:1a:39: cf:6a:7d:61:5b:31:02:ba:20:82:69:1c:b3:f1:28:a3:b6:51: e5:15:a1:57:11:1d:25:8c:18:40:ff:70:dc:7e:9a:fd:f5:b2: 7a:01:09:85:f9:fc:f0:d6:34:20:4f:b6:06:74:16:09:88:ed: 31:9a:ba:d9:d3:f5:87:ff:e8:fa:25:7d:35:c0:5f:ba:66:e6: 45:c5:0b:d8:43:00:74:d2:6e:a4:43:7b:15:de:e5:f4:87:9f: 9e:4f:57:10:18:5d:ff:7c:32:ba:c4:67:59:a8:16:cf:83:0c: 47:0b:29:60:01:0b:66:64:3c:81:3c:5d:c8:5f:d1:83:5e:56: c4:cf:98:12:f4:ca:1e:4c:72:20:1a:2e:f4:26:52:00:6f:bf: 29:df:69:8a:e0:62:a5:e9:ea:57:ec:84:18:ce:d1:43:db:ac: 37:2c:a6:e1:15:de:52:05:90:cd:3b:9d:a1:b0:99:cf:27:cf: 77:b6:8f:89 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE2O9VVrGHQvC2JpY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY5NGFmMzAtYThlOC00MmI0LTllNDMtNjQ5NDM3YzBj YWM3MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MDFjMDc0YjItM2E4Zi00N2IwLThiZjQtN2EzNjdkZjczOWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6nLpP7SBeMO0dV3eA4B1j/lXv3D57WviRtK ssYKDpgSSPjRznGEVcnleaZD3LQtQmS8HDzj6AMAytHOfH2DW+2oNs6s5+LeKD9V OrPo3SopIlGgEbDZJn1a3wxnuTbS2w6e4Yr0Rcy+l+r26g+jWcJzcC4Z2naayzgT Nx3tuphNXIsyysZL8mQrJSQhwjMK0AtZv3+ql7+1rXJqtYxVK58q1m++biFN71AM rsfB1bZOWdF/Xa4e1iNrn7iGLEpITszS6vwqQJPBVBIkZ2P68MwH8ZLAZKyZ5rQd 6k0+XCttheffAF56NrxN16NzEN6B+RK3Rh5xHclgAuFArCS8uQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFOQDcFzk75H1UlBo3OOsmeHhg/AxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kZjk0 YWYzMC1hOGU4LTQyYjQtOWU0My02NDk0MzdjMGNhYzcvODM4NjQzZDUtN2ZmZS0z OGJmLWI1MWYtNWFmZGNkMmE1NWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGY5NGFmMzAtYThlOC00MmI0LTll NDMtNjQ5NDM3YzBjYWM3L2RmOTRhZjMwLWE4ZTgtNDJiNC05ZTQzLTY0OTQzN2Mw Y2FjNy5jcmwwHwYDVR0jBBgwFoAUSlVhvCQAUxXcn0jPVU/W2Iri/LswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kZjk0YWYzMC1hOGU4LTQyYjQtOWU0My02NDk0 MzdjMGNhYzcuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwNtjAwQA xqgCAwQAx8pbMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBADCgeD9xoUc3QaUl/G1BK3rSApYXqM/uLzg+RC96 3NespKGQIEXfy3oAIi4TVsP1sYmYRNGytioJf0qDwuuozM+kGUB+Z6waOc9qfWFb MQK6IIJpHLPxKKO2UeUVoVcRHSWMGED/cNx+mv31snoBCYX5/PDWNCBPtgZ0FgmI 7TGautnT9Yf/6PolfTXAX7pm5kXFC9hDAHTSbqRDexXe5fSHn55PVxAYXf98MrrE Z1moFs+DDEcLKWABC2ZkPIE8Xchf0YNeVsTPmBL0yh5MciAaLvQmUgBvvynfaYrg YqXp6lfshBjO0UPbrDcspuEV3lIFkM07naGwmc8nz3e2j4k= -----END CERTIFICATE-----Generated at Wed May 13 10:47:20 2026 by rpki-client