$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca63f656-6be5-42a9-ad64-85773747152a/483d1de4-9ec0-336b-a09e-53bda41f9515.roa File: 483d1de4-9ec0-336b-a09e-53bda41f9515.roa (raw, json) Hash identifier: 2HZ0ezJx98bFXSGf1sn8YeUGRonbIZ76NFDnZHo81zs= Subject key identifier: A4:7B:42:B0:12:AC:5E:72:76:5D:BE:79:76:BE:58:A8:A9:2A:89:F5 Certificate issuer: /CN=ca63f656-6be5-42a9-ad64-85773747152a Certificate serial: 010D0C9F4328584CD4075BA9440BB103537BAC10 Authority key identifier: B2:1F:E7:5E:89:C9:76:4C:C7:3B:2A:14:69:29:54:3C:2B:EE:24:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca63f656-6be5-42a9-ad64-85773747152a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca63f656-6be5-42a9-ad64-85773747152a/483d1de4-9ec0-336b-a09e-53bda41f9515.roa Signing time: Wed 11 Feb 2026 14:00:41 +0000 ROA not before: Wed 11 Feb 2026 14:00:41 +0000 ROA not after: Tue 12 May 2026 13:00:41 +0000 asID: 14041 IP address blocks: 161.98.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca63f656-6be5-42a9-ad64-85773747152a/ca63f656-6be5-42a9-ad64-85773747152a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca63f656-6be5-42a9-ad64-85773747152a/ca63f656-6be5-42a9-ad64-85773747152a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca63f656-6be5-42a9-ad64-85773747152a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d4:07:5b:a9:44:0b:b1:03:53:7b:ac:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca63f656-6be5-42a9-ad64-85773747152a Validity Not Before: Feb 11 14:00:41 2026 GMT Not After : May 12 13:00:41 2026 GMT Subject: CN=e44ccd87-3466-4d06-b5ea-c924ccd54cd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:41:6a:ff:2e:d2:e2:72:ea:3c:0f:8a:55:6a: 95:81:a4:f4:2f:7c:83:af:54:5d:a9:09:70:e4:2c: 58:7a:3e:30:ea:83:db:27:1e:59:39:86:8a:23:a3: 3c:ca:49:47:98:30:13:77:f3:2a:71:a5:35:37:44: a9:9e:48:0d:1b:e8:a5:25:ec:24:35:82:9c:db:fd: aa:20:47:ee:b8:82:bd:40:ff:2f:36:a1:b0:37:b8: cb:22:dd:ab:ff:5a:1a:0f:ed:80:c9:ce:63:de:7a: 8a:dc:7e:75:aa:96:92:00:db:4c:74:45:eb:1a:6d: 28:5c:e6:01:ee:6c:60:d5:a4:db:2d:ab:46:8e:b2: 40:8e:b5:4b:21:b2:63:9b:75:ca:fa:9c:83:d2:c6: bd:db:fd:cd:58:39:31:83:39:8c:a7:02:be:a6:80: c8:54:a6:5a:3b:43:c7:f8:cd:73:a3:90:53:c7:cb: 53:a3:2f:e8:37:70:d2:91:18:d2:80:a2:72:ee:64: a3:74:8a:f7:f6:f3:e1:c0:55:59:bc:c5:ed:82:ab: 4c:1e:69:f8:61:6e:df:43:2d:a7:95:60:b8:c7:f3: 35:72:4c:5a:02:23:d7:06:48:94:e8:b5:40:fa:25: c8:24:30:3a:3c:fe:88:f6:f3:b7:6b:6f:b2:ca:b5: b1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:7B:42:B0:12:AC:5E:72:76:5D:BE:79:76:BE:58:A8:A9:2A:89:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca63f656-6be5-42a9-ad64-85773747152a/483d1de4-9ec0-336b-a09e-53bda41f9515.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca63f656-6be5-42a9-ad64-85773747152a/ca63f656-6be5-42a9-ad64-85773747152a.crl X509v3 Authority Key Identifier: keyid:B2:1F:E7:5E:89:C9:76:4C:C7:3B:2A:14:69:29:54:3C:2B:EE:24:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca63f656-6be5-42a9-ad64-85773747152a.cer sbgp-ipAddrBlock: critical IPv4: 161.98.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:89:aa:5d:8d:0e:83:3f:29:29:a6:77:84:ad:bd:c9:21:fe: 82:5c:a3:55:6e:5b:6d:f5:4c:e7:2c:7d:b7:1e:dd:f0:4b:08: a3:b4:d4:75:80:93:b4:06:17:88:b5:64:38:b1:86:f7:a6:a9: 0f:9e:36:90:28:fc:7f:dc:dd:24:24:3e:59:0c:7d:c9:98:dd: 56:e5:b1:db:16:10:ea:6e:57:3d:65:51:b6:ba:56:22:84:34: b5:b2:fc:b2:b0:06:5b:b8:3e:0b:5a:ba:13:89:55:5a:a0:d7: 2e:2d:7c:f5:c0:e6:1d:ab:5b:bb:ca:68:cf:66:55:00:d4:a8: 7f:60:44:df:d5:4c:50:87:17:24:80:b1:a3:cd:ad:d8:c4:fa: 9f:10:76:0f:22:bf:a3:3e:cb:74:c1:fa:61:1e:82:58:87:ab: f4:1f:f6:64:74:65:53:c2:7d:88:8a:a8:02:da:f8:4c:8f:b2: 1b:c0:9b:0b:e7:72:14:7e:25:69:40:8a:0a:23:b9:d1:60:a4: 25:0c:5c:20:e4:df:d4:63:57:c1:e0:5a:86:8b:1b:96:2d:98: dd:a0:56:1a:0e:01:38:62:d0:33:bf:31:f5:68:42:d9:44:85: 1f:03:ee:95:f7:94:84:42:72:45:d7:32:82:76:e8:98:9e:8b: 8e:2f:48:c0 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEzUB1upRAuxA1N7rBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2E2M2Y2NTYtNmJlNS00MmE5LWFkNjQtODU3NzM3NDcx NTJhMB4XDTI2MDIxMTE0MDA0MVoXDTI2MDUxMjEzMDA0MVowLzEtMCsGA1UEAxMk ZTQ0Y2NkODctMzQ2Ni00ZDA2LWI1ZWEtYzkyNGNjZDU0Y2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUFq/y7S4nLqPA+KVWqVgaT0L3yDr1RdqQlw 5CxYej4w6oPbJx5ZOYaKI6M8yklHmDATd/MqcaU1N0SpnkgNG+ilJewkNYKc2/2q IEfuuIK9QP8vNqGwN7jLIt2r/1oaD+2Ayc5j3nqK3H51qpaSANtMdEXrGm0oXOYB 7mxg1aTbLatGjrJAjrVLIbJjm3XK+pyD0sa92/3NWDkxgzmMpwK+poDIVKZaO0PH +M1zo5BTx8tToy/oN3DSkRjSgKJy7mSjdIr39vPhwFVZvMXtgqtMHmn4YW7fQy2n lWC4x/M1ckxaAiPXBkiU6LVA+iXIJDA6PP6I9vO3a2+yyrWxlQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFKR7QrASrF5ydl2+eXa+WKipKon1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jYTYz ZjY1Ni02YmU1LTQyYTktYWQ2NC04NTc3Mzc0NzE1MmEvNDgzZDFkZTQtOWVjMC0z MzZiLWEwOWUtNTNiZGE0MWY5NTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2E2M2Y2NTYtNmJlNS00MmE5LWFk NjQtODU3NzM3NDcxNTJhL2NhNjNmNjU2LTZiZTUtNDJhOS1hZDY0LTg1NzczNzQ3 MTUyYS5jcmwwHwYDVR0jBBgwFoAUsh/nXonJdkzHOyoUaSlUPCvuJEYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jYTYzZjY1Ni02YmU1LTQyYTktYWQ2NC04NTc3 Mzc0NzE1MmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAoWIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAK4mqXY0Ogz8pKaZ3hK29ySH+glyjVW5bbfVM5yx9tx7d8EsIo7TUdYCT tAYXiLVkOLGG96apD542kCj8f9zdJCQ+WQx9yZjdVuWx2xYQ6m5XPWVRtrpWIoQ0 tbL8srAGW7g+C1q6E4lVWqDXLi189cDmHatbu8poz2ZVANSof2BE39VMUIcXJICx o82t2MT6nxB2DyK/oz7LdMH6YR6CWIer9B/2ZHRlU8J9iIqoAtr4TI+yG8CbC+dy FH4laUCKCiO50WCkJQxcIOTf1GNXweBahosbli2Y3aBWGg4BOGLQM78x9WhC2USF HwPulfeUhEJyRdcygnbomJ6Lji9IwA== -----END CERTIFICATE-----Generated at Mon Mar 2 21:57:04 2026 by rpki-client