$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c9d1a20-3de5-3a1b-adc7-cb0fff037249.roa File: 0c9d1a20-3de5-3a1b-adc7-cb0fff037249.roa (raw, json) Hash identifier: 88bVNaJ9mYSfmdLdykErqeh3/6Ycnjhlezk+ja7bJT0= Subject key identifier: 57:29:2C:98:F3:84:50:F5:19:EF:B1:CD:55:82:20:D8:AB:0C:A2:23 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BCAF1921D66989D5377640 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c9d1a20-3de5-3a1b-adc7-cb0fff037249.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33662 IP address blocks: 98.40.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:af:19:21:d6:69:89:d5:37:76:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=74069ea7-9de5-4f95-81ec-f12eafc6c11d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ed:d0:72:18:20:13:ed:34:cb:3e:1c:4e:6b: ec:cb:3c:a5:37:c2:e6:60:63:66:e5:79:58:a8:79: 4c:75:33:17:eb:11:17:7b:41:b6:18:7c:a1:64:7d: 20:78:68:d6:c0:a4:b9:12:cd:c0:15:6c:3d:31:35: 26:7f:67:26:5c:53:d2:ac:dd:8d:db:28:38:03:24: 33:bc:6c:89:93:e2:9c:12:ff:00:e9:04:73:1f:50: 1c:0f:ca:d7:f7:5f:9a:48:d9:1e:01:ab:49:e4:b0: d6:c6:13:20:d9:80:52:cd:fd:10:08:3e:0b:d8:9c: df:1f:90:30:91:96:e1:d1:a6:ed:68:cf:2e:2b:a2: c7:e6:37:83:2c:26:44:6e:51:9c:b0:cf:db:ee:02: 43:23:21:96:2d:24:dc:d1:92:e5:e8:a9:fd:52:f1: 69:7b:58:97:44:5a:47:2b:39:49:86:0f:10:56:08: 69:bc:2d:4e:6e:9c:6c:e6:a9:2e:02:af:ec:87:1e: ea:74:09:1f:39:e8:d0:37:c8:dc:87:53:93:77:ef: e1:0f:69:12:db:4b:de:d8:4d:67:32:40:d8:f0:5c: 71:c2:e0:fc:48:cd:59:e1:a8:1e:00:ef:8d:fc:93: a2:41:d4:35:b5:81:4a:3a:9c:d3:4d:bd:ba:39:e2: 14:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:29:2C:98:F3:84:50:F5:19:EF:B1:CD:55:82:20:D8:AB:0C:A2:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c9d1a20-3de5-3a1b-adc7-cb0fff037249.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.40.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:18:10:dd:ee:7c:ab:9b:ad:cc:31:be:22:cd:97:86:e2:56: e3:fa:98:51:4d:7e:45:87:ec:e2:6f:ec:64:3f:9d:3a:6e:76: 76:e5:3f:51:49:48:b0:c6:1f:73:ad:23:c9:21:79:a0:60:ad: bb:c9:b5:89:a6:c6:1c:46:8d:7e:6a:dd:f7:b6:6d:b2:a4:68: 06:96:6b:9a:20:91:f0:28:d4:ca:27:1d:30:54:2c:da:d0:f1: 6c:7e:05:87:04:44:f1:74:91:82:72:b9:ab:c5:4b:d8:59:6b: 11:50:c1:69:c9:c1:c6:62:8b:91:87:c1:e4:ba:79:9c:db:9f: 28:be:df:2b:b3:e0:d4:1c:37:60:ce:d8:e1:5f:20:b4:86:97: 8d:01:c8:36:de:87:90:ed:28:b8:f6:ff:11:8c:d5:39:c1:93: 8d:5b:4b:25:1f:21:66:0a:02:b3:fb:a1:b4:5f:59:27:ae:26: 0c:ba:90:9f:25:e2:80:f5:a9:3a:9b:c4:18:24:f6:b9:3d:bf: 21:7e:f5:e8:3c:09:97:34:4d:85:27:6c:73:8a:55:20:70:9e: be:03:9b:4a:62:e6:d3:f8:54:0a:86:d0:42:3c:67:72:f1:38: 8d:a3:52:52:71:85:bf:4e:ad:6d:cc:37:06:2e:00:d8:19:b7: 07:0b:b3:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvK8ZIdZpidU3dkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk NzQwNjllYTctOWRlNS00Zjk1LTgxZWMtZjEyZWFmYzZjMTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+3QchggE+00yz4cTmvsyzylN8LmYGNm5XlY qHlMdTMX6xEXe0G2GHyhZH0geGjWwKS5Es3AFWw9MTUmf2cmXFPSrN2N2yg4AyQz vGyJk+KcEv8A6QRzH1AcD8rX91+aSNkeAatJ5LDWxhMg2YBSzf0QCD4L2JzfH5Aw kZbh0abtaM8uK6LH5jeDLCZEblGcsM/b7gJDIyGWLSTc0ZLl6Kn9UvFpe1iXRFpH KzlJhg8QVghpvC1Obpxs5qkuAq/shx7qdAkfOejQN8jch1OTd+/hD2kS20ve2E1n MkDY8FxxwuD8SM1Z4ageAO+N/JOiQdQ1tYFKOpzTTb26OeIUDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFcpLJjzhFD1Ge+xzVWCINirDKIjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGM5ZDFhMjAtM2RlNS0z YTFiLWFkYzctY2IwZmZmMDM3MjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYij8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMYEN3ufKubrcwxviLNl4biVuP6mFFNfkWH7OJv7GQ/nTpudnblP1FJ SLDGH3OtI8kheaBgrbvJtYmmxhxGjX5q3fe2bbKkaAaWa5ogkfAo1MonHTBULNrQ 8Wx+BYcERPF0kYJyuavFS9hZaxFQwWnJwcZii5GHweS6eZzbnyi+3yuz4NQcN2DO 2OFfILSGl40ByDbeh5DtKLj2/xGM1TnBk41bSyUfIWYKArP7obRfWSeuJgy6kJ8l 4oD1qTqbxBgk9rk9vyF+9eg8CZc0TYUnbHOKVSBwnr4Dm0pi5tP4VAqG0EI8Z3Lx OI2jUlJxhb9OrW3MNwYuANgZtwcLs5w= -----END CERTIFICATE-----Generated at Fri Apr 17 19:36:41 2026 by rpki-client