$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/901c34bf-1b68-3e70-bb0f-3d27834e000e.roa File: 901c34bf-1b68-3e70-bb0f-3d27834e000e.roa (raw, json) Hash identifier: AAvvLCkBN485VmRZNw1X+rRH1dCTZRUAxy4WvfvGfYE= Subject key identifier: 97:0E:03:EB:66:8B:1A:13:82:05:87:1C:AB:38:D5:F8:A9:8A:02:DD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BC9C9AFC631BFCC93E9100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/901c34bf-1b68-3e70-bb0f-3d27834e000e.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33662 IP address blocks: 98.196.172.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:9c:9a:fc:63:1b:fc:c9:3e:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=986aa25b-06e1-4eba-8b4d-d5a77fde91df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ea:75:cc:2c:e9:41:ea:8d:a8:e8:03:18:0a: c7:b6:b0:1b:14:0d:49:d6:dc:94:fd:6b:b7:57:10: 4e:07:01:b2:03:af:0c:fd:e4:72:b4:97:e9:90:92: 68:00:ae:0e:85:d8:ae:f9:0c:4e:74:eb:bf:dc:fd: 8a:09:16:33:8a:fc:f3:b8:0a:cd:43:7f:45:3d:1c: 0e:c2:ce:19:33:86:78:2e:91:79:20:6f:aa:78:10: 62:f2:c0:49:0b:5e:35:66:d5:d3:ab:9a:25:5c:65: 6d:ae:e2:1a:6e:c1:d3:4c:9c:8c:a9:a2:9c:94:db: 06:13:2d:5d:eb:fd:14:9a:f4:7a:b6:b4:fa:02:ff: af:eb:1e:c9:28:b8:5e:51:76:35:32:af:8c:fb:5b: 91:16:86:c3:5e:a7:37:21:4b:0c:15:10:8a:75:e5: 30:56:d3:44:36:bb:c4:1d:e2:28:81:b5:e7:c9:ca: 95:11:0e:5e:d0:a2:ef:5f:2a:66:c2:b3:e2:c7:b4: 6f:0e:45:55:1e:3c:09:3a:7f:11:6a:ae:b1:d4:bb: 55:46:74:73:41:6d:ac:53:02:b4:71:0d:7b:0b:ba: a7:01:0d:f8:72:a3:29:64:80:cd:94:cf:a8:88:e3: 4b:5d:40:ad:ad:db:aa:ca:98:f9:2a:d1:3d:85:60: dc:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:0E:03:EB:66:8B:1A:13:82:05:87:1C:AB:38:D5:F8:A9:8A:02:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/901c34bf-1b68-3e70-bb0f-3d27834e000e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.196.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:49:52:2c:06:4f:a0:56:a5:4b:0b:66:70:a1:51:50:9d:4e: d5:27:54:9a:d8:f9:96:fb:ef:6c:15:e6:93:b1:b3:79:d9:63: 17:98:2c:cf:f6:4e:68:5e:c8:cc:72:54:10:4e:31:4d:73:9b: 66:e4:7f:ac:c1:ba:22:75:98:00:3b:9f:c1:29:f4:b1:d5:a2: c6:af:31:d3:46:b3:64:3e:93:db:49:24:5b:66:57:07:bd:f6: a0:03:c7:04:bd:61:88:a4:66:91:a9:66:cf:e0:21:e5:e7:93: 29:88:1e:87:f1:68:df:a8:64:2f:ea:9d:cd:38:f7:24:5a:56: 3b:7f:c5:ff:f4:8f:a1:83:91:69:a1:cb:df:37:5e:60:81:18: ad:2e:90:c4:67:55:67:38:cb:9c:03:24:3f:1b:c6:19:cd:2a: 2d:4a:7b:22:7e:cc:ea:9e:4c:47:17:f6:d2:09:27:dc:a8:66: 87:c6:54:f4:cf:e4:6f:1a:00:39:5a:50:fd:dd:9d:6c:9a:d9: f4:fd:b0:cb:6a:5a:f2:5e:ea:55:86:ce:d5:13:02:fc:18:13: 50:67:3f:33:44:a2:7d:3a:06:26:b7:ea:99:e7:c3:8b:22:08: 53:87:ef:85:c7:4f:fe:7c:45:b7:f1:55:13:e6:20:7a:dc:e4: 01:34:60:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvJya/GMb/Mk+kQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk OTg2YWEyNWItMDZlMS00ZWJhLThiNGQtZDVhNzdmZGU5MWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+p1zCzpQeqNqOgDGArHtrAbFA1J1tyU/Wu3 VxBOBwGyA68M/eRytJfpkJJoAK4Ohdiu+QxOdOu/3P2KCRYzivzzuArNQ39FPRwO ws4ZM4Z4LpF5IG+qeBBi8sBJC141ZtXTq5olXGVtruIabsHTTJyMqaKclNsGEy1d 6/0UmvR6trT6Av+v6x7JKLheUXY1Mq+M+1uRFobDXqc3IUsMFRCKdeUwVtNENrvE HeIogbXnycqVEQ5e0KLvXypmwrPix7RvDkVVHjwJOn8Raq6x1LtVRnRzQW2sUwK0 cQ17C7qnAQ34cqMpZIDNlM+oiONLXUCtrduqypj5KtE9hWDcuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJcOA+tmixoTggWHHKs41fipigLdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTAxYzM0YmYtMWI2OC0z ZTcwLWJiMGYtM2QyNzgzNGUwMDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYsSsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALJJUiwGT6BWpUsLZnChUVCdTtUnVJrY+Zb772wV5pOxs3nZYxeYLM/2 TmheyMxyVBBOMU1zm2bkf6zBuiJ1mAA7n8Ep9LHVosavMdNGs2Q+k9tJJFtmVwe9 9qADxwS9YYikZpGpZs/gIeXnkymIHofxaN+oZC/qnc049yRaVjt/xf/0j6GDkWmh y983XmCBGK0ukMRnVWc4y5wDJD8bxhnNKi1KeyJ+zOqeTEcX9tIJJ9yoZofGVPTP 5G8aADlaUP3dnWya2fT9sMtqWvJe6lWGztUTAvwYE1BnPzNEon06Bia36pnnw4si CFOH74XHT/58RbfxVRPmIHrc5AE0YHE= -----END CERTIFICATE-----Generated at Fri Apr 17 12:05:13 2026 by rpki-client