$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43977b96-a77a-3396-b281-73392ffd815f.roa File: 43977b96-a77a-3396-b281-73392ffd815f.roa (raw, json) Hash identifier: JqTSai92GNL9VnlGpBYelFBbdFknVCGiRLwbqaRehlQ= Subject key identifier: 8D:6F:4B:89:80:42:7E:FC:30:CD:1A:8B:CF:AA:88:B7:8A:4E:6D:B5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BCA26C1BAE8B65FAA26E00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43977b96-a77a-3396-b281-73392ffd815f.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33662 IP address blocks: 98.198.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:a2:6c:1b:ae:8b:65:fa:a2:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=89382cae-5d37-4ce9-902c-29de90ffad97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:eb:a9:ee:3e:1e:29:5c:26:29:d5:0b:22:dc: 9b:1d:ac:0b:e4:76:b0:45:ce:c4:73:ab:0a:49:37: d8:30:9e:27:f7:aa:fe:db:9a:8a:2f:9c:a1:a8:5d: c3:84:d9:41:84:10:5a:dd:be:49:a5:52:97:3d:8b: c7:39:2e:16:9f:8d:ad:c6:36:a0:c2:e5:07:2b:c4: 34:27:4b:42:fa:ac:2b:89:34:37:08:d9:42:10:71: dd:91:cb:b6:4b:d8:7a:84:39:bd:83:97:c7:8e:94: ea:64:da:54:02:f6:ae:3b:71:e6:16:79:c1:c4:76: 0e:34:13:7c:33:bb:7c:d8:65:00:04:ac:ec:34:7d: 82:8e:fe:a8:82:60:72:e5:9c:8e:8d:a0:d6:88:ae: 26:9d:4b:79:6d:42:8b:1a:e5:cf:12:42:f8:47:1e: 98:59:27:26:04:5e:fa:5b:50:ca:dc:05:83:01:e8: d4:40:32:49:78:4a:3d:be:11:47:93:3b:85:33:c9: fc:74:db:22:d1:84:f1:68:b8:f9:52:7a:9d:a9:91: ef:e7:62:68:c4:ab:25:bd:2b:d0:f2:bd:b7:f4:8a: 2e:06:fe:1c:27:e3:2a:59:bd:0d:7f:85:02:53:fd: 53:4c:b7:81:d1:b7:88:14:69:b8:5d:cf:62:8f:54: 21:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:6F:4B:89:80:42:7E:FC:30:CD:1A:8B:CF:AA:88:B7:8A:4E:6D:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43977b96-a77a-3396-b281-73392ffd815f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.198.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:64:de:6d:96:04:a8:6f:f9:b0:34:81:2a:69:e0:23:3d:12: 9f:35:82:5f:7f:84:e5:67:df:be:b0:c5:fb:88:81:9f:9b:96: 43:43:cd:d1:70:d9:ca:90:9a:6f:5f:c4:dd:cb:9a:26:98:87: cb:65:e9:ef:4a:f1:dc:1d:ed:cc:a3:b6:42:fc:12:6c:1f:00: a7:de:c9:ad:7a:a2:d2:5f:ab:94:16:ad:21:00:34:50:8c:4f: d9:ca:06:8c:5d:9a:00:ca:4e:36:12:ed:26:43:5f:01:ef:a6: 34:4a:6f:53:50:47:07:e4:50:91:08:25:9b:2b:a3:d0:e3:f8: c7:7b:79:9c:2c:85:a4:85:09:5c:a7:68:93:e1:a7:54:79:8c: 3d:83:e8:11:fa:00:fa:58:8e:cd:58:64:24:32:e9:9b:91:fe: 99:c7:75:90:2c:0c:cf:77:e8:d3:7f:1f:b5:6d:18:fe:bc:5a: 0e:7a:6f:9d:11:47:93:4c:c0:d7:fe:3c:80:29:c5:6c:0b:ce: 2c:6f:54:7a:1c:e3:19:54:a9:a5:b6:fe:d3:07:0d:fa:92:9e: 10:23:3c:36:50:96:ed:b5:20:17:5b:f2:95:da:a5:ac:cc:49: 8c:fd:52:4c:f9:59:7e:46:4c:33:69:15:9d:30:7e:8c:22:8e: ef:34:4a:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvKJsG66LZfqibgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk ODkzODJjYWUtNWQzNy00Y2U5LTkwMmMtMjlkZTkwZmZhZDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uup7j4eKVwmKdULItybHawL5HawRc7Ec6sK STfYMJ4n96r+25qKL5yhqF3DhNlBhBBa3b5JpVKXPYvHOS4Wn42txjagwuUHK8Q0 J0tC+qwriTQ3CNlCEHHdkcu2S9h6hDm9g5fHjpTqZNpUAvauO3HmFnnBxHYONBN8 M7t82GUABKzsNH2Cjv6ogmBy5ZyOjaDWiK4mnUt5bUKLGuXPEkL4Rx6YWScmBF76 W1DK3AWDAejUQDJJeEo9vhFHkzuFM8n8dNsi0YTxaLj5UnqdqZHv52JoxKslvSvQ 8r239IouBv4cJ+MqWb0Nf4UCU/1TTLeB0beIFGm4Xc9ij1QhOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1vS4mAQn78MM0ai8+qiLeKTm21MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDM5NzdiOTYtYTc3YS0z Mzk2LWIyODEtNzMzOTJmZmQ4MTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYsbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtk3m2WBKhv+bA0gSpp4CM9Ep81gl9/hOVn376wxfuIgZ+blkNDzdFw 2cqQmm9fxN3LmiaYh8tl6e9K8dwd7cyjtkL8EmwfAKfeya16otJfq5QWrSEANFCM T9nKBoxdmgDKTjYS7SZDXwHvpjRKb1NQRwfkUJEIJZsro9Dj+Md7eZwshaSFCVyn aJPhp1R5jD2D6BH6APpYjs1YZCQy6ZuR/pnHdZAsDM936NN/H7VtGP68Wg56b50R R5NMwNf+PIApxWwLzixvVHoc4xlUqaW2/tMHDfqSnhAjPDZQlu21IBdb8pXapazM SYz9Ukz5WX5GTDNpFZ0wfowiju80Sig= -----END CERTIFICATE-----Generated at Fri Apr 17 12:07:27 2026 by rpki-client