$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0151d27a-876d-3f73-bd0f-d811297e3495.roa File: 0151d27a-876d-3f73-bd0f-d811297e3495.roa (raw, json) Hash identifier: hqXhgqatxvZdMbzcNfDOsx9xwzpc65ob49VKSAjc7tA= Subject key identifier: 4D:3D:33:5E:CC:29:70:E6:99:D5:AE:A2:6D:EE:5C:E5:AD:61:2D:75 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BB366E5C70CE0D4E923D00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0151d27a-876d-3f73-bd0f-d811297e3495.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 98.209.206.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:36:6e:5c:70:ce:0d:4e:92:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=24a88117-16c6-44c3-890b-0c5615351d5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:5e:85:1b:06:65:9e:99:61:c9:d7:d7:e5:ae: be:bc:5a:ac:8d:6a:c5:2d:5d:53:89:df:62:e9:7a: 25:dc:21:ff:c2:6d:ee:6e:29:1e:3d:38:a7:d4:be: b3:d4:56:43:3c:f9:ea:52:0f:97:46:7a:78:bd:98: b9:5d:04:d3:a7:56:33:ab:23:53:34:a2:61:96:2b: 14:4c:66:22:b9:c5:93:c2:3a:c9:6b:d6:18:12:be: e3:c2:e4:82:bd:ac:b7:a2:a8:b2:41:03:9f:bc:b1: 41:99:cf:39:b2:f0:3d:57:c9:e0:97:95:10:98:8f: d2:b5:ce:21:98:7f:3d:db:65:8b:a7:fc:a1:c0:58: 65:48:d5:bd:f3:74:ef:19:a0:19:f6:e2:48:ef:8d: c7:95:bc:ec:ca:4b:91:f8:f1:32:89:41:86:08:93: ec:f6:8b:99:a2:30:97:21:87:26:fc:41:cd:4c:d4: 11:77:0a:9a:bb:5e:5e:b8:45:19:00:8c:94:c8:83: eb:26:43:de:bf:b9:41:8f:e6:26:c9:b8:89:17:af: cd:14:93:ae:52:e6:d4:29:af:2a:a6:7e:32:40:3d: 79:d9:ec:86:f1:f8:08:3b:6f:63:43:8c:04:09:e1: c0:48:9c:f5:c4:7d:9e:ea:75:9f:96:fd:0b:b3:1e: 87:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:3D:33:5E:CC:29:70:E6:99:D5:AE:A2:6D:EE:5C:E5:AD:61:2D:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0151d27a-876d-3f73-bd0f-d811297e3495.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.209.206.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:e7:22:d7:07:07:6f:51:82:35:7c:97:77:bc:be:74:eb:ce: fb:a8:7b:46:64:5b:d1:ef:e4:29:bd:4a:a8:37:c7:f8:bf:cc: cb:f4:6c:d4:1a:70:28:2d:f9:c7:39:fc:3b:8d:7f:eb:3a:62: 92:6f:be:a8:2e:af:cf:88:21:9f:34:16:87:b4:2c:ac:49:d5: 37:b1:29:f4:df:ec:e3:05:3f:67:d0:e0:ed:df:9d:ce:26:b5: 19:9d:53:3d:13:1a:60:51:44:f2:1f:21:9c:94:7f:2e:16:29: 27:02:e6:d2:af:83:2c:01:25:09:f7:42:e2:fa:86:bd:e1:4a: 5d:42:96:a6:d8:d5:ab:dc:17:9f:ad:12:54:f1:78:83:82:21: 52:90:c5:f2:9e:5d:8c:c7:e9:0f:e8:f7:82:61:9c:75:70:6a: ce:e2:f9:08:91:8d:be:32:36:f9:0b:18:27:45:9f:0a:2c:ac: 38:b6:f4:d0:d0:33:6c:e6:2d:98:a5:41:7a:19:51:c4:50:bd: 89:2f:e2:e4:c8:c6:34:a1:88:f9:81:34:98:17:bb:ed:aa:5c: 7d:f7:b8:8f:7a:2b:ea:2c:0d:b9:1a:5c:f1:fa:5d:ff:c9:f6: 3a:db:11:ba:f2:98:0d:da:8c:ad:1e:3b:60:52:15:39:63:90: 5d:67:1f:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VuzZuXHDODU6SPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MjRhODgxMTctMTZjNi00NGMzLTg5MGItMGM1NjE1MzUxZDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhl6FGwZlnplhydfX5a6+vFqsjWrFLV1Tid9i 6Xol3CH/wm3ubikePTin1L6z1FZDPPnqUg+XRnp4vZi5XQTTp1YzqyNTNKJhlisU TGYiucWTwjrJa9YYEr7jwuSCvay3oqiyQQOfvLFBmc85svA9V8ngl5UQmI/Stc4h mH8922WLp/yhwFhlSNW983TvGaAZ9uJI743HlbzsykuR+PEyiUGGCJPs9ouZojCX IYcm/EHNTNQRdwqau15euEUZAIyUyIPrJkPev7lBj+YmybiJF6/NFJOuUubUKa8q pn4yQD152eyG8fgIO29jQ4wECeHASJz1xH2e6nWflv0Lsx6HUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE09M17MKXDmmdWuom3uXOWtYS11MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDE1MWQyN2EtODc2ZC0z ZjczLWJkMGYtZDgxMTI5N2UzNDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYtHOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDnItcHB29RgjV8l3e8vnTrzvuoe0ZkW9Hv5Cm9Sqg3x/i/zMv0bNQa cCgt+cc5/DuNf+s6YpJvvqgur8+IIZ80Foe0LKxJ1TexKfTf7OMFP2fQ4O3fnc4m tRmdUz0TGmBRRPIfIZyUfy4WKScC5tKvgywBJQn3QuL6hr3hSl1ClqbY1avcF5+t ElTxeIOCIVKQxfKeXYzH6Q/o94JhnHVwas7i+QiRjb4yNvkLGCdFnwosrDi29NDQ M2zmLZilQXoZUcRQvYkv4uTIxjShiPmBNJgXu+2qXH33uI96K+osDbkaXPH6Xf/J 9jrbEbrymA3ajK0eO2BSFTljkF1nH54= -----END CERTIFICATE-----Generated at Fri Apr 17 14:48:34 2026 by rpki-client