$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1af51cd4-a9fd-397e-ab24-847ded47d620.roa File: 1af51cd4-a9fd-397e-ab24-847ded47d620.roa (raw, json) Hash identifier: nRNv5psZ1SEgSiTg7VNr/bPDWlTIbPOzQk8AxlFZIl0= Subject key identifier: 5A:CC:A0:BE:7D:B4:F0:79:C5:AA:99:D3:D4:24:01:FC:B1:6B:67:53 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BB3A100DE41949D4D2AF00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1af51cd4-a9fd-397e-ab24-847ded47d620.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 98.243.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:3a:10:0d:e4:19:49:d4:d2:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=3713f5ab-f727-40db-bf42-014a638ccc68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:38:0c:a0:d5:52:88:0e:ce:93:88:7e:96:13: 78:64:7c:c3:db:ef:b7:de:57:ae:6d:d9:64:72:9f: f1:1d:bc:99:63:4f:3c:fb:88:51:6a:5d:11:0f:78: 17:98:dc:e5:8d:79:55:cf:5a:10:d0:46:db:cf:6b: 8d:20:be:6d:6d:a4:8c:00:3a:a6:e6:0a:d4:fd:ad: 32:52:d8:e0:af:e8:f2:55:b4:b3:3a:4f:9e:6b:26: 29:c9:b7:ee:15:bc:1b:d1:06:6a:e1:27:ea:ad:e3: 95:f7:ea:4c:20:15:be:92:7e:03:d5:6f:5f:08:72: 78:36:da:ee:d6:8e:e4:f2:44:8b:31:5e:94:b8:8b: 87:e8:7e:3b:c8:c4:fe:ce:00:e8:05:9d:35:c4:9f: fc:48:62:ec:32:0f:9d:be:9a:e3:22:1d:99:9a:fa: 73:7b:e4:c9:e6:1c:81:bb:71:19:7b:b7:eb:ef:c9: 63:fa:24:3e:fe:fc:09:a7:85:ef:9e:c1:45:9a:59: 03:1a:bb:89:87:e0:76:bb:92:bc:e9:e6:4c:ed:2c: 66:6d:a2:9f:54:ec:d7:3d:32:68:1f:17:2d:98:cb: ae:ea:db:95:93:9a:4b:a8:13:56:fe:5b:71:b6:de: 4e:3d:f8:ea:01:5a:b7:f8:5b:4d:a0:e2:34:1b:e9: 8b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:CC:A0:BE:7D:B4:F0:79:C5:AA:99:D3:D4:24:01:FC:B1:6B:67:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1af51cd4-a9fd-397e-ab24-847ded47d620.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.243.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:1a:dd:83:57:01:b1:10:91:6a:ff:fb:7c:16:23:e5:41:f9: 9b:35:98:12:b8:7e:84:8b:5b:c4:05:63:6c:cd:4a:d3:65:9d: e3:5e:6a:7b:99:ae:16:b3:98:f9:b3:06:ae:83:92:38:06:08: 3b:30:90:a8:d3:3d:2b:4c:90:d1:88:4f:e4:5f:21:2d:60:71: e5:2d:ff:67:f1:be:38:06:c1:7c:89:ba:58:a4:37:d1:7a:78: 5e:23:7b:c2:93:04:6d:90:78:cb:66:8d:3c:77:e8:53:cc:5e: 17:ad:31:9e:42:c1:53:23:12:a2:5e:92:10:e0:f6:23:ab:77: b9:db:bb:76:7b:bf:55:bc:9c:af:47:f4:28:fb:4b:cb:be:6f: 81:12:ba:7b:07:45:5f:35:69:2a:82:b9:97:2f:99:b4:bb:c6: 91:0e:95:8e:b0:c7:75:12:59:16:89:85:36:a2:48:88:ea:26: 7c:c8:69:19:b3:72:3f:ed:8d:4d:41:47:f0:5f:37:5f:4c:3f: 6a:77:d3:b1:60:e8:b3:76:e2:c3:98:ba:24:7e:33:7d:98:70: 23:d4:c0:6e:a6:c4:9f:38:5b:c0:1a:d3:af:8d:5b:e4:7f:42: 77:9f:0d:06:93:44:8c:f0:01:9a:65:c5:12:e6:6d:6f:0b:9e: fe:0f:70:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VuzoQDeQZSdTSrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MzcxM2Y1YWItZjcyNy00MGRiLWJmNDItMDE0YTYzOGNjYzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDgMoNVSiA7Ok4h+lhN4ZHzD2++33leubdlk cp/xHbyZY088+4hRal0RD3gXmNzljXlVz1oQ0Ebbz2uNIL5tbaSMADqm5grU/a0y Utjgr+jyVbSzOk+eayYpybfuFbwb0QZq4SfqreOV9+pMIBW+kn4D1W9fCHJ4Ntru 1o7k8kSLMV6UuIuH6H47yMT+zgDoBZ01xJ/8SGLsMg+dvprjIh2Zmvpze+TJ5hyB u3EZe7fr78lj+iQ+/vwJp4XvnsFFmlkDGruJh+B2u5K86eZM7SxmbaKfVOzXPTJo HxctmMuu6tuVk5pLqBNW/ltxtt5OPfjqAVq3+FtNoOI0G+mL1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFrMoL59tPB5xaqZ09QkAfyxa2dTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWFmNTFjZDQtYTlmZC0z OTdlLWFiMjQtODQ3ZGVkNDdkNjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYvPgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABga3YNXAbEQkWr/+3wWI+VB+Zs1mBK4foSLW8QFY2zNStNlneNeanuZ rhazmPmzBq6DkjgGCDswkKjTPStMkNGIT+RfIS1gceUt/2fxvjgGwXyJulikN9F6 eF4je8KTBG2QeMtmjTx36FPMXhetMZ5CwVMjEqJekhDg9iOrd7nbu3Z7v1W8nK9H 9Cj7S8u+b4ESunsHRV81aSqCuZcvmbS7xpEOlY6wx3USWRaJhTaiSIjqJnzIaRmz cj/tjU1BR/BfN19MP2p307Fg6LN24sOYuiR+M32YcCPUwG6mxJ84W8Aa06+NW+R/ QnefDQaTRIzwAZplxRLmbW8Lnv4PcA4= -----END CERTIFICATE-----Generated at Fri Apr 17 14:17:31 2026 by rpki-client