$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/449296c4-bb67-374a-a3db-64fe2dfad72f.roa File: 449296c4-bb67-374a-a3db-64fe2dfad72f.roa (raw, json) Hash identifier: hhn1Vc14Oo2cUJjQTlznfhxXRn8d+wrONq3ZPUYH6as= Subject key identifier: 7F:42:25:A0:1E:8D:08:3A:91:7A:EC:73:AC:27:B9:82:A3:8F:3C:ED Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BC9C2ABF41900365C94180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/449296c4-bb67-374a-a3db-64fe2dfad72f.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33662 IP address blocks: 98.196.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:9c:2a:bf:41:90:03:65:c9:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=0224700e-a70d-4460-a7ca-6e793e2d156b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:31:49:2c:3c:d5:fb:7e:d9:ff:65:87:67:61: 1b:0a:02:7d:95:1b:14:28:8c:ed:b1:95:bc:19:1c: a0:3c:42:29:3b:33:ff:89:18:6e:16:84:d4:ed:00: 54:70:72:2f:08:e3:29:e9:ef:32:73:97:82:81:80: 96:80:0b:67:54:53:3a:5e:00:ed:75:e8:45:66:e6: f8:b6:8a:13:05:3b:75:63:77:ee:74:73:4f:70:cc: cf:ac:02:e9:7b:bc:a5:c6:bb:9a:d9:19:c7:ee:83: 4e:e5:52:d2:0c:81:b0:1f:38:81:f6:b1:38:37:6d: c9:88:ae:9c:2e:0c:79:f6:93:d5:4e:1f:6f:1d:35: 79:ca:10:81:df:ae:f5:b6:0d:57:a7:1c:ca:48:2e: 41:64:d9:75:da:d4:0d:01:37:cc:0f:69:5e:00:fa: 84:1b:f7:d2:a7:d4:63:ea:24:f1:2b:04:4f:87:63: 18:63:18:0e:77:90:37:6d:e2:fa:b0:93:ed:e0:7a: 8c:4f:91:63:c2:03:aa:8b:75:17:1d:a5:87:41:1a: aa:46:47:fb:33:2c:63:db:e6:1a:a4:0a:ad:d1:6d: 85:9d:a1:44:61:6f:f9:04:a0:ea:f0:d7:c3:9a:a7: d8:6a:5f:22:f2:6e:59:90:1a:71:cc:3b:68:bf:3d: f0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:42:25:A0:1E:8D:08:3A:91:7A:EC:73:AC:27:B9:82:A3:8F:3C:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/449296c4-bb67-374a-a3db-64fe2dfad72f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.196.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:b4:7a:e6:cb:e4:c2:0c:94:1f:b9:73:ed:80:1f:a5:e9:71: d2:21:98:84:66:32:54:2b:e0:1a:d2:2b:b9:68:1f:4a:04:5f: 37:02:8e:a5:d2:d9:bd:eb:46:e6:7e:d6:03:89:bf:5a:97:af: 33:86:03:ae:5d:2c:3e:61:f1:35:59:da:67:ed:52:c3:27:33: 0d:20:a5:49:2e:cb:c5:a9:ec:9f:65:00:88:d8:75:55:27:20: 49:5f:ae:22:d2:00:40:b4:27:7d:bb:0a:82:0d:d9:ef:d5:10: 00:0a:49:58:60:2d:bd:7a:b6:26:99:c1:7e:d8:f3:ca:46:59: 4e:ad:26:18:1b:65:8b:aa:34:57:5a:6b:06:f6:e1:55:29:7e: e3:2b:48:f7:82:26:0e:95:46:ff:29:e8:d5:01:99:a2:56:b6: 9e:55:5d:7a:b5:d5:4b:79:b0:78:87:66:3c:92:59:d2:56:b7: 35:c4:90:c6:60:ad:53:80:20:30:20:a9:04:81:ed:90:66:76: 9e:6d:32:aa:a8:e6:cc:09:73:b8:7a:75:14:f2:61:1e:3e:a4: 23:f2:34:ef:99:6d:b9:46:30:90:16:77:e1:40:29:0c:6e:e5: 86:63:02:17:c0:6b:7f:4e:50:76:0b:1b:58:31:8c:6a:24:e3: a4:9f:28:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvJwqv0GQA2XJQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MDIyNDcwMGUtYTcwZC00NDYwLWE3Y2EtNmU3OTNlMmQxNTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTFJLDzV+37Z/2WHZ2EbCgJ9lRsUKIztsZW8 GRygPEIpOzP/iRhuFoTU7QBUcHIvCOMp6e8yc5eCgYCWgAtnVFM6XgDtdehFZub4 tooTBTt1Y3fudHNPcMzPrALpe7ylxrua2RnH7oNO5VLSDIGwHziB9rE4N23JiK6c Lgx59pPVTh9vHTV5yhCB3671tg1XpxzKSC5BZNl12tQNATfMD2leAPqEG/fSp9Rj 6iTxKwRPh2MYYxgOd5A3beL6sJPt4HqMT5FjwgOqi3UXHaWHQRqqRkf7Myxj2+Ya pAqt0W2FnaFEYW/5BKDq8NfDmqfYal8i8m5ZkBpxzDtovz3wsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH9CJaAejQg6kXrsc6wnuYKjjzztMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDQ5Mjk2YzQtYmI2Ny0z NzRhLWEzZGItNjRmZTJkZmFkNzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYsR5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFm0eubL5MIMlB+5c+2AH6XpcdIhmIRmMlQr4BrSK7loH0oEXzcCjqXS 2b3rRuZ+1gOJv1qXrzOGA65dLD5h8TVZ2mftUsMnMw0gpUkuy8Wp7J9lAIjYdVUn IElfriLSAEC0J327CoIN2e/VEAAKSVhgLb16tiaZwX7Y88pGWU6tJhgbZYuqNFda awb24VUpfuMrSPeCJg6VRv8p6NUBmaJWtp5VXXq11Ut5sHiHZjySWdJWtzXEkMZg rVOAIDAgqQSB7ZBmdp5tMqqo5swJc7h6dRTyYR4+pCPyNO+ZbblGMJAWd+FAKQxu 5YZjAhfAa39OUHYLG1gxjGok46SfKC0= -----END CERTIFICATE-----Generated at Fri Apr 17 10:12:41 2026 by rpki-client