$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/713f7fe4-1360-3741-81c0-1955ea5f6688.roa File: 713f7fe4-1360-3741-81c0-1955ea5f6688.roa (raw, json) Hash identifier: /RZTD9L4Dm08e2JdY270JxS06JxkQnp0BWreJJqtUWg= Subject key identifier: 3F:71:0C:9E:FB:A5:28:F8:A7:B5:E0:2C:13:12:34:D5:32:E4:E1:FF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BB768F6012D6AD71A0F700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/713f7fe4-1360-3741-81c0-1955ea5f6688.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33662 IP address blocks: 98.201.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:76:8f:60:12:d6:ad:71:a0:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=0d4ded9c-3fbf-4a7c-8506-cc07536a9ec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:cf:fa:eb:07:87:23:21:86:6c:2a:81:9b:16: 10:28:54:c9:b6:42:eb:1b:ee:14:25:bd:07:4f:f5: 7a:78:0d:ab:a7:3e:11:53:fc:dc:54:fc:24:5c:16: 1e:95:c3:1d:80:a6:18:37:84:aa:12:96:3e:83:9b: 58:ce:0f:e1:32:fb:22:48:0f:7c:f0:ea:22:f3:c6: 0c:dd:7f:0e:21:b0:ef:e0:cb:ba:99:84:48:9b:f3: d6:3b:12:c7:14:bd:a9:9b:5c:5d:e5:ee:2d:a8:1a: 87:82:22:66:4c:f2:f3:9f:27:b4:24:82:4c:9f:51: ab:6f:48:8c:1b:a1:8b:82:ac:6d:26:ce:26:b4:94: 88:40:80:dd:23:47:08:0b:bd:ce:25:b1:bd:a6:79: cf:04:d0:2f:1b:ff:0f:aa:da:21:37:04:bb:d0:da: be:71:cb:d8:5a:5b:9e:d1:ff:3f:af:1d:3f:79:1e: 7e:80:d2:fc:e4:00:e6:1f:0b:9c:b6:44:0a:3a:78: 72:cf:b9:f3:a1:de:9e:2e:6e:b8:64:41:04:46:92: 43:be:0a:da:7b:3c:e7:4d:13:19:b1:1b:55:3c:a6: f0:82:30:4d:07:07:3b:73:d2:ed:bd:9a:70:b3:21: 1c:f8:5c:34:b2:5d:4a:79:0c:4f:1b:e8:f1:58:56: 81:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:71:0C:9E:FB:A5:28:F8:A7:B5:E0:2C:13:12:34:D5:32:E4:E1:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/713f7fe4-1360-3741-81c0-1955ea5f6688.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.201.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:69:9a:da:64:4b:81:0a:74:a2:f6:5f:09:45:00:c5:15:bf: 65:17:93:81:53:b6:a1:68:91:55:f2:8e:ef:80:2f:30:31:3d: c4:87:53:cf:e0:71:b1:c7:7e:70:ac:7e:33:7a:c3:2f:dd:8b: 85:89:d9:60:1d:cf:29:35:78:64:bf:f7:09:a7:f3:40:3b:9a: c6:64:ad:97:8e:5b:e1:ae:72:31:61:9a:d0:3d:a2:1b:9e:5f: e2:1f:da:be:6a:1a:b1:ff:63:54:20:d6:01:f3:e8:ce:47:da: 49:ce:1c:79:c2:7d:00:e4:3d:48:ab:39:4e:31:15:6e:72:47: 86:5e:a8:20:e3:40:d4:ce:97:7e:41:3a:73:b6:ad:b5:63:96: 16:20:58:eb:dc:9f:86:46:70:60:1e:be:cd:36:62:f0:a8:8d: 14:41:bc:ce:28:a2:da:de:b6:5a:22:30:3b:f9:1c:e4:48:3d: 36:45:cf:9c:b9:c8:1d:5a:d2:1d:55:9b:3a:38:a8:59:0b:f4: 67:79:9f:e7:c5:d1:5c:bb:00:ad:95:fe:f2:dd:39:ad:46:7f: 51:a2:11:fe:e0:22:f7:fa:7b:bc:10:13:63:a9:78:58:3f:53: 7f:2e:39:07:88:86:7b:f7:72:d5:64:8c:3b:5c:5c:55:47:bc: 36:f6:a9:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vu3aPYBLWrXGg9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MGQ0ZGVkOWMtM2ZiZi00YTdjLTg1MDYtY2MwNzUzNmE5ZWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAis/66weHIyGGbCqBmxYQKFTJtkLrG+4UJb0H T/V6eA2rpz4RU/zcVPwkXBYelcMdgKYYN4SqEpY+g5tYzg/hMvsiSA988Ooi88YM 3X8OIbDv4Mu6mYRIm/PWOxLHFL2pm1xd5e4tqBqHgiJmTPLznye0JIJMn1Grb0iM G6GLgqxtJs4mtJSIQIDdI0cIC73OJbG9pnnPBNAvG/8PqtohNwS70Nq+ccvYWlue 0f8/rx0/eR5+gNL85ADmHwuctkQKOnhyz7nzod6eLm64ZEEERpJDvgraezznTRMZ sRtVPKbwgjBNBwc7c9LtvZpwsyEc+Fw0sl1KeQxPG+jxWFaBrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD9xDJ77pSj4p7XgLBMSNNUy5OH/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzEzZjdmZTQtMTM2MC0z NzQxLTgxYzAtMTk1NWVhNWY2Njg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYsm/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJpmtpkS4EKdKL2XwlFAMUVv2UXk4FTtqFokVXyju+ALzAxPcSHU8/g cbHHfnCsfjN6wy/di4WJ2WAdzyk1eGS/9wmn80A7msZkrZeOW+GucjFhmtA9ohue X+If2r5qGrH/Y1Qg1gHz6M5H2knOHHnCfQDkPUirOU4xFW5yR4ZeqCDjQNTOl35B OnO2rbVjlhYgWOvcn4ZGcGAevs02YvCojRRBvM4ootretloiMDv5HORIPTZFz5y5 yB1a0h1Vmzo4qFkL9Gd5n+fF0Vy7AK2V/vLdOa1Gf1GiEf7gIvf6e7wQE2OpeFg/ U38uOQeIhnv3ctVkjDtcXFVHvDb2qWI= -----END CERTIFICATE-----Generated at Fri Apr 17 18:33:52 2026 by rpki-client