$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/952b4a77-3250-3fbe-971e-cfc5de52fc49.roa File: 952b4a77-3250-3fbe-971e-cfc5de52fc49.roa (raw, json) Hash identifier: nyz1UehnuXHlUZjZQs8Xor4mMpppWsVwCWQpZsLuxRE= Subject key identifier: 75:E2:A3:36:2E:1B:44:0C:5C:FB:3D:83:B3:C0:67:CF:47:06:C5:91 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BCAEB5ED3F8B3E85348080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/952b4a77-3250-3fbe-971e-cfc5de52fc49.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33662 IP address blocks: 98.40.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:ae:b5:ed:3f:8b:3e:85:34:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=bd672e34-624f-417e-b8fa-81351f701514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d5:ab:25:ed:6f:d0:05:8b:2e:16:a8:89:93: 76:fb:57:f6:e7:28:7d:17:f7:61:6d:73:47:25:6e: 00:62:f1:8c:d7:ec:61:41:5e:0d:9d:84:16:24:48: bc:d8:18:e9:05:1d:8c:c9:ec:92:85:fb:ee:35:6f: 37:46:29:1e:de:ea:68:25:bc:44:2b:4f:71:86:43: 0c:00:76:a6:a6:96:f6:46:2e:eb:b6:d8:5a:3f:95: 83:e8:db:31:72:40:4d:7e:bd:66:f4:81:3b:d7:47: 25:88:89:86:82:96:40:22:ce:5c:0d:a7:09:93:e0: 0a:b5:19:cb:0c:0b:81:b8:a6:14:7e:bb:a8:98:bc: a4:8e:3d:a4:fd:5a:86:fa:1f:b1:ac:6c:c5:38:87: 81:6b:25:f2:02:07:b0:80:46:97:af:a2:3d:63:61: 69:0d:71:4b:94:53:9c:e0:95:18:f6:b8:9f:b1:1f: 96:35:84:6a:44:79:77:ac:97:98:a7:ef:9b:d5:73: c4:09:41:02:e6:0f:f9:7d:4e:d9:cd:4c:2e:e8:2a: d8:2a:2c:90:09:4f:c9:4c:c8:4a:7f:55:c0:02:ce: cc:d1:20:76:1c:05:08:51:c6:91:5c:71:a8:fe:5f: ee:d7:88:f6:a8:27:cb:6c:4b:9f:34:b3:c8:4b:40: e7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:E2:A3:36:2E:1B:44:0C:5C:FB:3D:83:B3:C0:67:CF:47:06:C5:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/952b4a77-3250-3fbe-971e-cfc5de52fc49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.40.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:91:aa:6a:2f:85:1d:e2:10:f6:27:de:18:16:75:69:4e:f5: ce:30:e4:52:54:53:99:9b:57:3b:52:56:99:de:f9:07:79:e0: 75:8f:06:bd:d9:9f:22:d9:55:09:ad:4c:b7:76:9f:3a:58:ad: 42:34:22:00:ed:29:21:0c:cf:82:b3:f3:12:28:47:86:e1:c6: 21:26:85:bb:21:ff:85:76:64:44:58:e1:28:ed:dc:d1:9a:b3: 42:4f:cf:03:59:16:f4:21:5b:d3:4d:e1:8f:0a:f2:85:2a:1b: 50:a0:5e:50:b1:73:93:35:70:2c:02:fb:a3:05:c1:c0:b6:4d: a5:ec:e3:67:05:c0:d2:41:91:6d:6f:50:b1:78:78:d8:f9:f8: f9:3f:bd:49:e9:4d:16:d4:1b:84:75:d8:a3:3f:94:f4:1a:07: a9:90:da:0c:53:eb:70:19:f9:da:c2:a1:fc:93:17:c2:9a:80: 44:67:0e:90:99:22:9c:8c:de:68:0d:f7:ae:e7:cc:33:a9:65: e8:de:eb:8d:55:28:a6:d7:34:90:10:2d:91:50:c1:2e:db:89: f0:1a:82:f8:03:d9:bb:c9:3e:0b:c1:87:cf:55:84:24:dc:1a: 5f:bf:7e:33:44:64:61:e5:97:0f:7b:7a:18:b5:25:5d:4d:78: 57:25:1d:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvK617T+LPoU0gIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk YmQ2NzJlMzQtNjI0Zi00MTdlLWI4ZmEtODEzNTFmNzAxNTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39WrJe1v0AWLLhaoiZN2+1f25yh9F/dhbXNH JW4AYvGM1+xhQV4NnYQWJEi82BjpBR2MyeyShfvuNW83Rike3upoJbxEK09xhkMM AHamppb2Ri7rtthaP5WD6NsxckBNfr1m9IE710cliImGgpZAIs5cDacJk+AKtRnL DAuBuKYUfruomLykjj2k/VqG+h+xrGzFOIeBayXyAgewgEaXr6I9Y2FpDXFLlFOc 4JUY9rifsR+WNYRqRHl3rJeYp++b1XPECUEC5g/5fU7ZzUwu6CrYKiyQCU/JTMhK f1XAAs7M0SB2HAUIUcaRXHGo/l/u14j2qCfLbEufNLPIS0Dn3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHXiozYuG0QMXPs9g7PAZ89HBsWRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTUyYjRhNzctMzI1MC0z ZmJlLTk3MWUtY2ZjNWRlNTJmYzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYijrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKuRqmovhR3iEPYn3hgWdWlO9c4w5FJUU5mbVztSVpne+Qd54HWPBr3Z nyLZVQmtTLd2nzpYrUI0IgDtKSEMz4Kz8xIoR4bhxiEmhbsh/4V2ZERY4Sjt3NGa s0JPzwNZFvQhW9NN4Y8K8oUqG1CgXlCxc5M1cCwC+6MFwcC2TaXs42cFwNJBkW1v ULF4eNj5+Pk/vUnpTRbUG4R12KM/lPQaB6mQ2gxT63AZ+drCofyTF8KagERnDpCZ IpyM3mgN967nzDOpZeje641VKKbXNJAQLZFQwS7bifAagvgD2bvJPgvBh89VhCTc Gl+/fjNEZGHllw97ehi1JV1NeFclHYw= -----END CERTIFICATE-----Generated at Fri Apr 17 10:21:16 2026 by rpki-client