$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c92057e-1c02-3ef7-81aa-cfdc926d6193.roa File: 3c92057e-1c02-3ef7-81aa-cfdc926d6193.roa (raw, json) Hash identifier: lHouUmO0RW8uZjDVHZHcS0VwAT+0BLBKVeG+ca1lmcQ= Subject key identifier: CD:23:A4:65:E5:40:E8:17:9C:64:AB:8C:DA:16:12:FE:D0:AB:A7:CA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BAF4D5294CCDC9C5DBB980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c92057e-1c02-3ef7-81aa-cfdc926d6193.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7015 IP address blocks: 98.216.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:f4:d5:29:4c:cd:c9:c5:db:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=a640bab3-104e-49eb-864c-7dc54309e9fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c3:13:6f:e8:25:61:ae:2d:6f:c9:d4:26:6b: 63:76:61:0b:78:19:6a:10:71:74:44:54:ed:42:e1: 67:66:dd:f2:8c:b2:b2:1d:e7:a9:c9:ee:97:e7:f1: d1:98:cd:ac:81:02:f7:af:40:eb:a7:f9:04:ab:63: 41:76:70:71:cd:c7:97:0c:7e:37:6a:72:99:af:a9: 24:48:f3:88:7e:3b:9f:3e:ca:2b:35:8f:58:56:9c: 46:1b:93:23:6f:13:73:d5:e4:15:e7:43:48:8f:2a: 05:61:2e:89:5a:ef:ac:93:0e:7d:c3:e7:c9:a0:be: 85:1f:7c:ea:f0:17:53:cb:b2:eb:79:75:30:4b:4a: 4c:64:68:b7:e7:0f:9b:1a:46:02:45:70:4a:e8:eb: 19:64:0c:65:d3:36:29:9d:32:ed:15:16:14:cb:35: 2e:d3:77:83:f9:51:8a:72:c4:2d:8c:b8:31:0e:22: ba:44:b3:45:81:96:04:68:03:2f:58:be:b5:9f:8c: 8f:de:29:f3:0a:41:ca:56:7c:02:3c:85:d8:1d:47: 88:5b:c6:e9:d4:42:13:e9:42:14:4e:4e:ed:3b:e5: ad:16:c4:24:1f:f4:ec:de:fa:fe:59:6e:3c:b4:cd: 13:f3:80:91:76:2c:bc:19:84:03:17:c0:ae:71:c3: f3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:23:A4:65:E5:40:E8:17:9C:64:AB:8C:DA:16:12:FE:D0:AB:A7:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c92057e-1c02-3ef7-81aa-cfdc926d6193.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.216.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:24:78:5a:e5:0c:ab:7d:67:b9:0f:0c:59:a5:90:ee:04:b1: 11:56:aa:2c:81:20:0b:d5:fd:c4:8b:32:51:9c:76:58:30:b8: 1b:ba:45:43:8d:b0:00:be:9f:39:eb:7c:a3:9b:c3:05:ca:fd: 67:63:f9:f0:41:73:24:98:bc:a1:52:74:85:50:64:cb:b6:fa: 6e:3f:f5:e0:6f:0b:84:dc:98:69:68:e5:94:6b:10:05:88:89: 11:7b:95:e6:f2:3f:59:4f:45:cd:00:2e:f9:bc:a2:ee:81:e8: 55:09:ce:b5:34:d6:d4:ee:12:a3:b6:40:38:24:58:2f:a9:dd: 78:fe:5e:54:8b:fc:3c:ac:58:f5:49:ed:3b:9e:97:44:e0:e5: 30:6e:74:e6:f6:d9:0f:43:23:84:72:06:e0:af:c0:cb:4c:c7: ac:21:65:74:a9:fe:3e:a2:10:76:d1:c5:b3:bd:64:26:b9:3d: 8c:7d:57:6f:5c:c6:fd:d3:6b:cc:ab:4b:68:78:a1:82:e0:fb: b4:74:32:bf:12:1c:d3:cb:2b:34:f2:3f:2c:40:96:8d:fc:71: fc:8b:87:a0:13:67:4f:c4:79:29:c9:b7:e8:ee:71:f5:93:a0: e1:cb:6a:56:c2:1c:88:31:3a:13:75:9b:56:d9:26:fc:ba:3a: fd:39:82:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VuvTVKUzNycXbuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk YTY0MGJhYjMtMTA0ZS00OWViLTg2NGMtN2RjNTQzMDllOWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMMTb+glYa4tb8nUJmtjdmELeBlqEHF0RFTt QuFnZt3yjLKyHeepye6X5/HRmM2sgQL3r0Drp/kEq2NBdnBxzceXDH43anKZr6kk SPOIfjufPsorNY9YVpxGG5MjbxNz1eQV50NIjyoFYS6JWu+skw59w+fJoL6FH3zq 8BdTy7LreXUwS0pMZGi35w+bGkYCRXBK6OsZZAxl0zYpnTLtFRYUyzUu03eD+VGK csQtjLgxDiK6RLNFgZYEaAMvWL61n4yP3inzCkHKVnwCPIXYHUeIW8bp1EIT6UIU Tk7tO+WtFsQkH/Ts3vr+WW48tM0T84CRdiy8GYQDF8CuccPz6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM0jpGXlQOgXnGSrjNoWEv7Qq6fKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2M5MjA1N2UtMWMwMi0z ZWY3LTgxYWEtY2ZkYzkyNmQ2MTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYtj8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALEkeFrlDKt9Z7kPDFmlkO4EsRFWqiyBIAvV/cSLMlGcdlgwuBu6RUON sAC+nznrfKObwwXK/Wdj+fBBcySYvKFSdIVQZMu2+m4/9eBvC4TcmGlo5ZRrEAWI iRF7lebyP1lPRc0ALvm8ou6B6FUJzrU01tTuEqO2QDgkWC+p3Xj+XlSL/DysWPVJ 7Tuel0Tg5TBudOb22Q9DI4RyBuCvwMtMx6whZXSp/j6iEHbRxbO9ZCa5PYx9V29c xv3Ta8yrS2h4oYLg+7R0Mr8SHNPLKzTyPyxAlo38cfyLh6ATZ0/EeSnJt+jucfWT oOHLalbCHIgxOhN1m1bZJvy6Ov05gtE= -----END CERTIFICATE-----Generated at Fri Apr 17 11:24:29 2026 by rpki-client