$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2fbe38d6-a08b-3015-96c8-7874246272e5.roa File: 2fbe38d6-a08b-3015-96c8-7874246272e5.roa (raw, json) Hash identifier: wzCddw2stUtV9M5fw5CwZuf9Yz4fPRnOpZoRrWfIt2k= Subject key identifier: FE:7A:BC:DE:B8:B5:80:06:65:32:1D:2B:72:CB:4D:32:58:71:37:F5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BB6F9FF4CFB684699823C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2fbe38d6-a08b-3015-96c8-7874246272e5.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33662 IP address blocks: 98.197.40.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:6f:9f:f4:cf:b6:84:69:98:23:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=a35f9cfb-0d05-44b8-b51d-a28cb9298936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:54:60:e9:2a:77:d5:7f:9a:4f:83:ef:eb:4d: 3f:82:e9:6e:db:2b:45:8d:f7:81:11:de:8f:f7:fd: 23:fa:5f:bd:d5:b8:f8:4d:eb:59:a4:ff:2b:08:1e: 09:c5:5c:3b:76:f4:b0:e4:94:e8:07:49:88:88:22: 8b:9d:49:21:d0:46:3f:d9:01:56:30:7b:9d:fc:0d: d2:5a:cb:fd:3b:57:3b:6b:75:fd:db:5f:e0:71:43: 1f:4e:ba:10:89:36:98:ac:86:0d:0e:51:ff:60:da: da:38:e6:ef:c4:e0:10:04:f1:92:66:cf:09:cc:d7: 97:79:eb:93:4e:93:65:17:24:d3:6b:91:3b:9c:7c: 86:32:77:64:f2:aa:d6:b7:ff:8f:8d:df:7f:9c:2f: b3:f6:72:c5:56:38:73:15:b7:05:e1:1c:e6:78:ed: 68:f1:84:0a:5e:1b:7e:f1:61:15:fb:d0:e9:42:5e: f7:e3:b4:98:54:78:46:aa:28:54:c0:a6:6a:37:4b: e1:1c:43:9e:23:ba:38:96:0e:d5:85:13:ef:69:c1: e3:2f:77:8a:b6:a9:00:e4:bc:d0:42:66:06:19:d0: dd:27:25:8f:9e:f4:e0:af:7f:d2:20:e8:50:0d:d1: c1:38:d6:41:ab:29:ba:55:cb:9f:34:67:b8:b3:50: 06:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:7A:BC:DE:B8:B5:80:06:65:32:1D:2B:72:CB:4D:32:58:71:37:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2fbe38d6-a08b-3015-96c8-7874246272e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.197.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:cc:68:e5:0c:f7:7a:3f:c5:d1:7c:95:2a:37:15:60:60:17: 54:4f:e4:62:49:2d:69:f3:4a:55:55:c6:b1:28:ee:15:e4:18: d1:bc:8e:a1:95:1a:5f:56:59:e1:0e:0e:ec:cb:ea:fc:7c:fd: bd:86:2d:4e:81:54:77:42:be:ae:86:fc:5b:45:51:2b:21:39: 25:07:98:3a:7b:ca:34:98:ef:44:10:ea:77:a1:4c:c5:86:41: 03:05:59:fe:fb:a8:ff:de:86:c4:67:5c:68:16:c6:84:e0:c1: 6e:e5:33:82:cd:1c:3c:2c:ab:b5:46:b3:ff:7d:f7:b1:22:01: ed:8d:14:2a:9e:b2:e4:1b:6d:cb:1d:c6:4a:67:98:29:c5:20: 83:be:a5:f1:5b:9b:13:a8:75:4b:76:17:5c:98:4d:94:25:ee: 59:a1:d6:da:7f:53:00:b2:8f:48:a1:38:a5:94:a5:8f:87:7c: e4:6f:51:84:da:87:a0:e5:91:2a:4f:68:17:3c:e8:d4:70:44: 97:79:af:9a:68:b9:ec:cc:b9:ae:81:f6:b2:44:0b:6f:75:51: b2:7b:50:a0:bc:35:7e:2d:20:c0:1c:5e:c6:67:d0:48:f3:f7: ec:8a:5a:81:d4:71:ee:18:b6:7a:a5:23:97:96:09:ac:3c:d2: b9:1f:5f:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vu2+f9M+2hGmYI8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk YTM1ZjljZmItMGQwNS00NGI4LWI1MWQtYTI4Y2I5Mjk4OTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1Rg6Sp31X+aT4Pv600/gulu2ytFjfeBEd6P 9/0j+l+91bj4TetZpP8rCB4JxVw7dvSw5JToB0mIiCKLnUkh0EY/2QFWMHud/A3S Wsv9O1c7a3X921/gcUMfTroQiTaYrIYNDlH/YNraOObvxOAQBPGSZs8JzNeXeeuT TpNlFyTTa5E7nHyGMndk8qrWt/+Pjd9/nC+z9nLFVjhzFbcF4RzmeO1o8YQKXht+ 8WEV+9DpQl7347SYVHhGqihUwKZqN0vhHEOeI7o4lg7VhRPvacHjL3eKtqkA5LzQ QmYGGdDdJyWPnvTgr3/SIOhQDdHBONZBqym6VcufNGe4s1AGcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP56vN64tYAGZTIdK3LLTTJYcTf1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmZiZTM4ZDYtYTA4Yi0z MDE1LTk2YzgtNzg3NDI0NjI3MmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYsUoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/MaOUM93o/xdF8lSo3FWBgF1RP5GJJLWnzSlVVxrEo7hXkGNG8jqGV Gl9WWeEODuzL6vx8/b2GLU6BVHdCvq6G/FtFUSshOSUHmDp7yjSY70QQ6nehTMWG QQMFWf77qP/ehsRnXGgWxoTgwW7lM4LNHDwsq7VGs/9997EiAe2NFCqesuQbbcsd xkpnmCnFIIO+pfFbmxOodUt2F1yYTZQl7lmh1tp/UwCyj0ihOKWUpY+HfORvUYTa h6DlkSpPaBc86NRwRJd5r5pouezMua6B9rJEC291UbJ7UKC8NX4tIMAcXsZn0Ejz 9+yKWoHUce4YtnqlI5eWCaw80rkfX60= -----END CERTIFICATE-----Generated at Fri Apr 17 11:47:28 2026 by rpki-client