$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34a28d2b-8680-3935-be3e-1ee0f4765f96.roa File: 34a28d2b-8680-3935-be3e-1ee0f4765f96.roa (raw, json) Hash identifier: a33OQxC2bUkRhj8fa+APujgyb96ZfweiFxDOz/1ZbOk= Subject key identifier: CD:31:21:A0:C4:B6:44:C6:3A:A7:E1:BC:2A:8D:57:13:B7:C0:7A:3D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BCA6AA79853CE09AA8A480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34a28d2b-8680-3935-be3e-1ee0f4765f96.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33662 IP address blocks: 98.200.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:a6:aa:79:85:3c:e0:9a:a8:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=b922d621-3c5a-44b0-9901-423bffb845de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:6e:fa:03:09:5e:ef:b6:4b:20:4c:bf:f9:64: 00:5c:f4:4f:05:57:24:32:f3:94:86:35:f2:0e:d5: f5:1c:7c:f0:e2:ca:54:24:9e:7d:ba:c9:f0:58:1b: 4f:3d:b0:d4:bf:6e:de:ca:01:f1:3d:4b:ff:77:0e: ab:d8:a5:f1:24:03:1c:a4:79:94:c5:64:75:86:03: 21:ed:c0:9e:90:b4:47:76:e2:c0:57:5d:3a:56:e5: 48:21:89:ef:b6:9d:3d:b2:da:e1:da:34:3d:46:12: 0e:01:24:9d:58:b6:41:8d:bf:3e:94:b9:2e:19:15: 8f:06:65:df:eb:2a:c2:cb:6d:0a:2c:e1:ed:6a:94: c4:91:10:6e:9a:7f:97:96:f5:9b:aa:89:d9:0c:f6: fa:f5:eb:c0:9b:c2:6e:51:80:c9:59:ac:91:29:2f: 3d:56:91:e5:ae:11:49:1d:d9:01:d2:35:83:53:ef: 67:a7:64:ae:e5:c8:19:6f:07:20:b5:7a:ce:9c:61: b4:85:b4:a5:62:61:4e:91:d9:0f:87:51:27:a3:8d: 78:d7:68:85:7f:82:fb:05:52:a4:06:83:1b:5a:30: 83:dc:69:2b:45:e6:59:6d:50:71:8c:c7:28:90:13: ed:b5:59:64:8d:4f:e0:97:3b:e8:f0:1b:c3:43:be: 5c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:31:21:A0:C4:B6:44:C6:3A:A7:E1:BC:2A:8D:57:13:B7:C0:7A:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34a28d2b-8680-3935-be3e-1ee0f4765f96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.200.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:8c:e7:76:9b:0b:d9:9a:86:1f:f3:23:b2:aa:77:92:3a:22: a8:cd:36:d3:3e:51:8a:4c:65:ad:b4:0f:57:dd:12:14:0b:38: d1:6c:68:b5:71:d5:25:a4:42:a0:04:6b:32:89:f6:71:e2:36: 60:56:f8:d4:a6:db:54:c7:b9:46:df:de:1c:f4:46:98:99:55: 9a:15:60:13:1d:64:98:e7:b0:1f:ed:f1:71:d4:a5:ba:ed:35: 10:cc:54:df:72:c9:d9:38:ad:65:82:e8:46:3a:37:8b:a4:9d: fb:db:9c:33:9d:4d:51:8a:80:e6:00:5d:e9:39:4f:94:7f:bf: ef:9d:9b:eb:c7:c8:ac:5f:cd:63:c7:ac:bd:d8:c0:44:13:e4: 1d:27:17:d2:49:97:63:1f:90:66:c0:7a:84:df:3a:ed:76:62: a4:fd:29:6f:03:00:97:c6:6f:6d:b9:73:e6:51:49:2f:40:29: f0:22:f0:a5:20:e5:94:dc:c9:c8:2f:f2:0b:1f:98:d7:aa:0a: 19:f2:3b:59:40:5c:4f:6d:1c:68:16:61:61:4d:3d:c1:84:30: af:07:8c:69:62:77:91:0b:3e:24:a7:cd:78:00:09:e0:8c:2e: ef:c1:31:82:ea:e8:10:4f:d4:1f:dd:aa:f1:ae:97:40:d0:f5: 28:a8:0f:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvKaqeYU84JqopIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk YjkyMmQ2MjEtM2M1YS00NGIwLTk5MDEtNDIzYmZmYjg0NWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjW76Awle77ZLIEy/+WQAXPRPBVckMvOUhjXy DtX1HHzw4spUJJ59usnwWBtPPbDUv27eygHxPUv/dw6r2KXxJAMcpHmUxWR1hgMh 7cCekLRHduLAV106VuVIIYnvtp09strh2jQ9RhIOASSdWLZBjb8+lLkuGRWPBmXf 6yrCy20KLOHtapTEkRBumn+XlvWbqonZDPb69evAm8JuUYDJWayRKS89VpHlrhFJ HdkB0jWDU+9np2Su5cgZbwcgtXrOnGG0hbSlYmFOkdkPh1Eno41412iFf4L7BVKk BoMbWjCD3GkrReZZbVBxjMcokBPttVlkjU/glzvo8BvDQ75ccwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM0xIaDEtkTGOqfhvCqNVxO3wHo9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzRhMjhkMmItODY4MC0z OTM1LWJlM2UtMWVlMGY0NzY1Zjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYsgXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALiM53abC9mahh/zI7Kqd5I6IqjNNtM+UYpMZa20D1fdEhQLONFsaLVx 1SWkQqAEazKJ9nHiNmBW+NSm21THuUbf3hz0RpiZVZoVYBMdZJjnsB/t8XHUpbrt NRDMVN9yydk4rWWC6EY6N4uknfvbnDOdTVGKgOYAXek5T5R/v++dm+vHyKxfzWPH rL3YwEQT5B0nF9JJl2MfkGbAeoTfOu12YqT9KW8DAJfGb225c+ZRSS9AKfAi8KUg 5ZTcycgv8gsfmNeqChnyO1lAXE9tHGgWYWFNPcGEMK8HjGlid5ELPiSnzXgACeCM Lu/BMYLq6BBP1B/dqvGul0DQ9SioD5s= -----END CERTIFICATE-----Generated at Fri Apr 17 03:57:37 2026 by rpki-client