$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/294a7ce3-6363-3d76-8f9d-22e5df7bb7d7.roa File: 294a7ce3-6363-3d76-8f9d-22e5df7bb7d7.roa (raw, json) Hash identifier: tYcxIqGQnZsHPLSicC9p+jPjzBU7sCg0qoDsSwkr/HQ= Subject key identifier: 5D:D7:06:BE:AC:5A:BE:AA:F6:7E:29:1B:6D:81:85:17:26:F0:46:2D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BB6DBFAE5AC033A2C28100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/294a7ce3-6363-3d76-8f9d-22e5df7bb7d7.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33662 IP address blocks: 98.196.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:6d:bf:ae:5a:c0:33:a2:c2:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=58d94bd8-fb0c-482d-bf19-17188f3d0a31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:20:91:a1:1f:a9:c0:6a:77:fd:d6:b5:49:04: ff:a2:76:8c:fd:0a:33:0d:0c:f6:ca:50:69:90:94: 29:f8:29:f0:1f:08:67:84:8e:65:20:a1:96:8e:50: 3b:d7:e7:55:a5:b8:34:fe:84:8c:ee:68:12:5e:c0: 8c:82:f1:eb:cf:e3:e8:f5:99:b0:6e:5a:f8:0f:94: f0:2a:e0:a1:71:46:fc:80:ba:74:99:e6:68:d2:ae: 32:d7:93:c1:de:8a:c7:cf:7f:59:84:30:10:e6:59: 2e:5b:b0:1e:f6:21:55:0e:74:0c:7f:d5:f6:5c:26: f4:9f:16:4f:62:0f:14:db:95:fb:a9:c2:15:e8:47: 82:07:cd:91:db:8e:e1:49:3e:fe:67:c4:44:12:8b: 74:19:c9:c4:33:04:7c:ad:be:61:97:26:85:ec:25: 34:75:84:f7:94:4c:84:06:78:ca:16:f7:4e:65:35: 39:73:1d:f9:8f:5b:b5:b6:b9:0b:b1:4d:36:ba:a8: 0e:23:64:76:fd:63:1d:c1:c6:a9:b3:9e:a5:46:49: bb:04:c4:8f:e6:7f:2c:ad:7c:b5:94:0a:17:d9:3b: 69:65:f0:57:bf:7d:61:4e:d3:31:53:c7:62:31:c6: fa:64:a0:75:06:0c:1c:52:c5:5f:18:bf:0d:69:56: 36:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D7:06:BE:AC:5A:BE:AA:F6:7E:29:1B:6D:81:85:17:26:F0:46:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/294a7ce3-6363-3d76-8f9d-22e5df7bb7d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.196.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:2e:71:ba:95:5f:17:30:47:bd:e8:1e:8b:0b:26:12:cb:0d: 69:5b:15:8f:8b:14:b9:04:99:f8:ae:a5:4f:7b:7e:58:13:38: 48:14:a2:a2:53:2e:e0:25:d2:96:72:26:fe:25:21:00:aa:36: 2d:a1:ed:e0:c8:32:f3:59:f6:c5:e8:23:5f:f7:2a:72:63:42: 4d:20:a3:4a:e5:b1:83:ca:60:7e:a3:d9:8f:b6:9b:06:98:31: 00:33:d0:65:e8:9a:53:e9:5f:bc:10:36:9d:18:95:3c:cd:73: 52:25:e0:bd:f8:97:44:ef:a8:92:bf:4b:32:83:44:3f:24:f2: 91:9f:7a:b7:f6:f1:b7:ae:0d:4a:5c:15:d2:e4:62:9a:9d:43: 8f:9f:24:da:f3:9e:31:4b:4b:6a:3a:02:6d:48:c3:7c:ae:ff: 8f:ad:7c:c3:79:ef:f8:66:ec:ed:d9:11:6f:51:dc:df:15:1b: 66:87:64:53:2c:6e:ce:10:fe:40:b4:cc:30:65:36:3d:cd:21: 54:da:e4:02:92:fc:e2:23:06:d8:84:c2:ee:76:f2:40:e2:0a: ae:ae:0a:4c:2d:b7:32:e7:53:e2:60:6a:3c:1f:69:01:57:b8: 0c:a2:e8:4f:31:d2:1d:17:15:74:03:65:25:be:b2:60:bc:f6: 09:1e:fc:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vu22/rlrAM6LCgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk NThkOTRiZDgtZmIwYy00ODJkLWJmMTktMTcxODhmM2QwYTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiCRoR+pwGp3/da1SQT/onaM/QozDQz2ylBp kJQp+CnwHwhnhI5lIKGWjlA71+dVpbg0/oSM7mgSXsCMgvHrz+Po9Zmwblr4D5Tw KuChcUb8gLp0meZo0q4y15PB3orHz39ZhDAQ5lkuW7Ae9iFVDnQMf9X2XCb0nxZP Yg8U25X7qcIV6EeCB82R247hST7+Z8REEot0GcnEMwR8rb5hlyaF7CU0dYT3lEyE BnjKFvdOZTU5cx35j1u1trkLsU02uqgOI2R2/WMdwcaps56lRkm7BMSP5n8srXy1 lAoX2TtpZfBXv31hTtMxU8diMcb6ZKB1BgwcUsVfGL8NaVY2RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3XBr6sWr6q9n4pG22BhRcm8EYtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjk0YTdjZTMtNjM2My0z ZDc2LThmOWQtMjJlNWRmN2JiN2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYsQIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL4ucbqVXxcwR73oHosLJhLLDWlbFY+LFLkEmfiupU97flgTOEgUoqJT LuAl0pZyJv4lIQCqNi2h7eDIMvNZ9sXoI1/3KnJjQk0go0rlsYPKYH6j2Y+2mwaY MQAz0GXomlPpX7wQNp0YlTzNc1Il4L34l0TvqJK/SzKDRD8k8pGferf28beuDUpc FdLkYpqdQ4+fJNrznjFLS2o6Am1Iw3yu/4+tfMN57/hm7O3ZEW9R3N8VG2aHZFMs bs4Q/kC0zDBlNj3NIVTa5AKS/OIjBtiEwu528kDiCq6uCkwttzLnU+JgajwfaQFX uAyi6E8x0h0XFXQDZSW+smC89gke/Nk= -----END CERTIFICATE-----Generated at Fri Apr 17 01:32:09 2026 by rpki-client