$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7836567c-926c-3a3b-b7f1-0e6bd4cb0d97.roa File: 7836567c-926c-3a3b-b7f1-0e6bd4cb0d97.roa (raw, json) Hash identifier: b4LWEpzMUOd2Vce4+tStYRAMjop9Ex3C2RQR5BiM+6o= Subject key identifier: 98:C6:AB:EF:7D:3D:D1:D9:4C:2B:F3:D1:08:A5:51:B8:69:BF:66:44 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BB7C4F2D1121A97939BF80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7836567c-926c-3a3b-b7f1-0e6bd4cb0d97.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33662 IP address blocks: 98.40.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:7c:4f:2d:11:21:a9:79:39:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=c14954c0-d11a-411a-a9ce-8f38d05ec03c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:32:6a:a1:85:d3:78:74:58:c1:cc:b8:c7:ba: 92:eb:54:20:bd:14:e8:01:af:6c:13:cf:58:b2:50: dc:6a:c1:7b:69:69:92:8c:f5:01:54:a1:a9:f0:46: 9f:2d:df:c9:f6:3d:9a:af:1c:5d:0e:05:dd:a2:90: 9b:62:03:b8:e6:15:c1:14:da:70:9e:c6:ab:0f:b7: 38:8a:90:b1:c5:a5:96:f4:ed:2f:b7:39:d6:19:a2: 02:07:9b:3f:e0:53:7b:8c:c0:41:60:fe:a3:a5:df: f2:4b:59:d7:72:ea:63:5c:56:fe:81:79:45:a7:c0: b7:79:4f:62:cd:51:82:da:23:91:6b:52:94:d8:47: a2:0e:07:da:d9:08:e6:3d:73:e9:7b:0a:d9:9a:4c: d2:2d:51:fb:18:c9:92:d7:b7:49:0c:53:2a:a9:d7: 55:b0:fc:f4:ce:e5:a8:db:80:2a:5a:f1:8e:43:90: 3f:c0:76:5e:01:41:4a:f4:e6:93:18:b1:97:b9:4e: e9:6b:6f:fe:10:bd:ca:6f:f2:7c:3a:ce:f8:51:24: 9f:e4:3a:7b:90:d2:a2:1d:d2:c6:ca:93:78:77:3d: 4b:c0:2b:ac:46:a9:38:ae:a5:ea:e9:3f:d4:6f:6b: 40:ae:56:b0:37:b8:52:10:a1:bc:3f:5a:f7:2c:9e: 93:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C6:AB:EF:7D:3D:D1:D9:4C:2B:F3:D1:08:A5:51:B8:69:BF:66:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7836567c-926c-3a3b-b7f1-0e6bd4cb0d97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.40.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dd:90:4e:5f:e2:44:7e:49:8e:af:e0:f7:dd:75:7f:a3:05:25: 1b:59:f0:8b:47:e4:7a:1a:f2:bb:87:61:36:60:32:db:96:27: 56:0e:2b:fb:16:9e:33:a4:bd:a1:5d:f2:2c:f0:3d:72:3a:d0: 85:b2:6b:7c:c8:bf:12:86:af:59:c5:de:d5:14:a6:f9:b5:e4: bd:08:03:bd:c2:14:19:e4:53:d2:74:5a:66:fb:7d:c8:d1:3a: c3:dc:44:f4:42:46:c2:4e:87:a2:14:79:c9:48:ce:bf:c5:b8: 66:1e:ae:1b:aa:91:4a:a1:d2:c9:3d:fb:1a:4d:29:29:35:7e: 62:ef:15:87:a7:bb:7e:48:a9:9c:56:91:37:aa:03:24:70:1b: 59:69:9f:97:f6:f0:c3:11:e8:38:b5:e3:2e:d6:3c:18:cc:ad: d6:b9:92:be:14:38:23:8e:c1:72:a8:51:94:28:aa:6b:77:76: 14:2a:cf:1e:c4:b9:57:1a:6d:17:a7:82:24:da:ce:3b:59:ec: ff:85:5b:52:67:83:4a:94:28:a1:f7:93:c0:c0:dd:0c:0f:b6: 1a:d8:f8:34:8f:e3:02:0a:f0:d7:f6:a0:29:29:1b:8c:40:ae: ad:dc:20:15:95:77:49:ac:82:28:d8:57:6e:3f:8e:ff:25:5d: e2:a4:2b:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vu3xPLREhqXk5v4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk YzE0OTU0YzAtZDExYS00MTFhLWE5Y2UtOGYzOGQwNWVjMDNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zJqoYXTeHRYwcy4x7qS61QgvRToAa9sE89Y slDcasF7aWmSjPUBVKGp8EafLd/J9j2arxxdDgXdopCbYgO45hXBFNpwnsarD7c4 ipCxxaWW9O0vtznWGaICB5s/4FN7jMBBYP6jpd/yS1nXcupjXFb+gXlFp8C3eU9i zVGC2iORa1KU2EeiDgfa2QjmPXPpewrZmkzSLVH7GMmS17dJDFMqqddVsPz0zuWo 24AqWvGOQ5A/wHZeAUFK9OaTGLGXuU7pa2/+EL3Kb/J8Os74USSf5Dp7kNKiHdLG ypN4dz1LwCusRqk4rqXq6T/Ub2tArlawN7hSEKG8P1r3LJ6TsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJjGq+99PdHZTCvz0QilUbhpv2ZEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzgzNjU2N2MtOTI2Yy0z YTNiLWI3ZjEtMGU2YmQ0Y2IwZDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYij6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAN2QTl/iRH5Jjq/g9911f6MFJRtZ8ItH5Hoa8ruHYTZgMtuWJ1YOK/sW njOkvaFd8izwPXI60IWya3zIvxKGr1nF3tUUpvm15L0IA73CFBnkU9J0Wmb7fcjR OsPcRPRCRsJOh6IUeclIzr/FuGYerhuqkUqh0sk9+xpNKSk1fmLvFYenu35IqZxW kTeqAyRwG1lpn5f28MMR6Di14y7WPBjMrda5kr4UOCOOwXKoUZQoqmt3dhQqzx7E uVcabRengiTazjtZ7P+FW1Jng0qUKKH3k8DA3QwPthrY+DSP4wIK8Nf2oCkpG4xA rq3cIBWVd0msgijYV24/jv8lXeKkK8A= -----END CERTIFICATE-----Generated at Fri Apr 17 13:16:42 2026 by rpki-client