$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1df02028-06cf-3b21-b23f-2eef51525f41.roa File: 1df02028-06cf-3b21-b23f-2eef51525f41.roa (raw, json) Hash identifier: lEJ4y8+Izw7QqZJ/uzhF+KHIV4dFzB3CM11Hakmi6v8= Subject key identifier: 75:F6:25:C8:D6:14:5A:2B:72:65:4E:17:8F:FE:B3:BA:4E:20:E9:AC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BB37D289D7636773F22880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1df02028-06cf-3b21-b23f-2eef51525f41.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 98.224.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:37:d2:89:d7:63:67:73:f2:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=f1babde8-961a-47bf-a942-10b7c24ba0fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a1:21:a4:72:2d:43:af:ce:2a:7f:29:9d:ac: 4f:e7:ad:0f:a6:82:5e:85:86:b6:f0:82:e3:79:9a: 6c:23:f0:6e:f8:2b:5e:16:4f:18:f8:4b:25:25:71: 14:68:af:a5:21:c2:ea:48:86:4e:8e:91:d0:a6:49: 44:9c:84:41:bf:b1:45:9e:be:54:45:9d:b0:d4:7b: 56:0d:85:fe:f7:4b:31:32:22:f8:65:39:03:52:e4: 85:57:22:ad:df:36:4a:02:78:17:26:f8:5e:1a:24: 09:6e:2a:bf:f8:1b:90:92:65:fa:b4:b1:24:70:e7: c3:6a:95:c6:80:cd:99:0a:95:7c:00:01:a2:9a:a7: 5d:2b:e7:e1:ae:25:2d:e7:5d:c3:b6:8d:1c:0e:ec: 97:8c:f0:84:64:09:d2:74:b7:e8:8c:1e:66:0f:e6: 88:72:40:a8:ea:91:c1:c8:67:f1:07:d1:5d:82:7c: 94:f4:87:e2:d8:b3:0b:d2:84:ea:98:d1:82:5b:e1: b9:2c:30:ba:9a:1b:b0:6b:f9:a3:90:1d:52:b1:d5: ad:3c:de:cf:1d:bd:35:e5:b5:73:32:71:c3:75:da: 79:de:c9:91:7a:fb:81:b2:b3:a5:cf:24:58:4b:f4: 1f:76:e3:91:66:d2:c4:3f:39:94:bf:da:fd:16:32: 5a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:F6:25:C8:D6:14:5A:2B:72:65:4E:17:8F:FE:B3:BA:4E:20:E9:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1df02028-06cf-3b21-b23f-2eef51525f41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.224.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:26:f8:7d:57:d0:f0:2f:62:1a:c2:a3:55:68:6b:56:e7:3f: 08:80:20:21:c4:aa:33:29:50:c5:d1:00:df:ec:12:e6:43:8e: 7c:9b:27:81:0f:fd:44:07:e4:1f:be:76:73:21:9f:b3:99:08: 48:5a:87:f5:2b:88:67:da:f3:90:58:60:53:9a:24:63:16:f5: df:ef:75:ef:38:73:b5:f0:91:0f:72:bd:27:57:52:55:84:b9: ce:5a:ab:0d:9f:cd:67:5a:fd:81:49:ef:44:e9:75:0c:6e:91: 71:cc:52:5c:28:f3:01:22:96:85:99:6b:12:10:06:46:07:8a: 1e:89:52:9a:54:ea:3b:45:85:e8:42:ce:e1:cd:c0:78:3f:b3: b5:ba:c9:50:5e:05:49:3e:73:fd:2b:e8:23:bc:98:3b:d5:5f: c3:d9:86:23:ac:03:6c:0f:0b:66:23:04:12:12:0d:90:ca:a2: 6b:20:32:a2:56:c0:16:76:97:2a:0d:1a:27:30:2f:28:34:61: d5:bd:5b:a9:48:23:b7:ce:85:95:d6:58:eb:12:46:cd:d2:37: 3e:9e:f7:51:c3:cc:45:a9:70:9f:3f:f9:92:7a:9f:08:e9:da: 62:69:a8:ff:4f:3b:ef:f1:0e:0c:5e:f1:7b:cf:b1:5e:75:7d: f8:91:f4:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VuzfSiddjZ3PyKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk ZjFiYWJkZTgtOTYxYS00N2JmLWE5NDItMTBiN2MyNGJhMGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaEhpHItQ6/OKn8pnaxP560PpoJehYa28ILj eZpsI/Bu+CteFk8Y+EslJXEUaK+lIcLqSIZOjpHQpklEnIRBv7FFnr5URZ2w1HtW DYX+90sxMiL4ZTkDUuSFVyKt3zZKAngXJvheGiQJbiq/+BuQkmX6tLEkcOfDapXG gM2ZCpV8AAGimqddK+fhriUt513Dto0cDuyXjPCEZAnSdLfojB5mD+aIckCo6pHB yGfxB9FdgnyU9Ifi2LML0oTqmNGCW+G5LDC6mhuwa/mjkB1SsdWtPN7PHb015bVz MnHDddp53smRevuBsrOlzyRYS/QfduORZtLEPzmUv9r9FjJaxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHX2JcjWFForcmVOF4/+s7pOIOmsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWRmMDIwMjgtMDZjZi0z YjIxLWIyM2YtMmVlZjUxNTI1ZjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYuDAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACEm+H1X0PAvYhrCo1Voa1bnPwiAICHEqjMpUMXRAN/sEuZDjnybJ4EP /UQH5B++dnMhn7OZCEhah/UriGfa85BYYFOaJGMW9d/vde84c7XwkQ9yvSdXUlWE uc5aqw2fzWda/YFJ70TpdQxukXHMUlwo8wEiloWZaxIQBkYHih6JUppU6jtFhehC zuHNwHg/s7W6yVBeBUk+c/0r6CO8mDvVX8PZhiOsA2wPC2YjBBISDZDKomsgMqJW wBZ2lyoNGicwLyg0YdW9W6lII7fOhZXWWOsSRs3SNz6e91HDzEWpcJ8/+ZJ6nwjp 2mJpqP9PO+/xDgxe8XvPsV51ffiR9MY= -----END CERTIFICATE-----Generated at Fri Apr 17 11:30:33 2026 by rpki-client