$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a57170cc-e04b-3db4-9f46-f231666774f0.roa File: a57170cc-e04b-3db4-9f46-f231666774f0.roa (raw, json) Hash identifier: TCQHPHBuyEabtDnpUdEcccRXN03RGKat8PRClrZ2CEY= Subject key identifier: 0C:F6:8C:B5:5D:03:83:91:77:92:B3:A5:F3:92:0B:99:73:09:E6:BC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BB35E75B1D113F4FD5534E Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a57170cc-e04b-3db4-9f46-f231666774f0.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 98.209.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:35:e7:5b:1d:11:3f:4f:d5:53:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=603b7178-ccc0-4854-85fa-a507bedf3e19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ab:e6:85:0d:c7:1a:72:4f:48:a6:4f:d1:59: 49:8f:39:9b:8b:99:bf:c8:0f:c7:d3:47:3e:a4:cd: ad:2e:e8:37:18:64:b8:8d:26:2d:34:be:99:33:b0: a1:43:29:52:23:09:d0:64:b0:11:2a:7b:8d:ad:57: 0c:bb:a7:85:f2:05:8e:14:04:36:a8:91:88:5e:59: 67:9a:cf:71:7b:87:4e:2f:bb:32:1b:35:7b:49:f5: 59:bf:6f:f3:ce:7d:b5:ec:6d:a0:58:91:1c:31:55: 48:60:26:a3:83:dd:72:30:8d:55:57:7f:06:74:73: 9c:9f:30:b1:3c:3a:fb:b5:91:ad:4e:81:65:5f:15: 45:ae:a6:4c:44:40:3d:38:8b:a3:dc:16:f7:b8:e1: d1:4b:6e:53:45:90:da:ca:63:8a:de:cc:fc:d2:2b: a3:d5:c7:ce:66:ae:1a:d4:e7:53:f8:4a:63:54:df: 38:1d:3c:71:c1:a0:9c:cc:a7:04:73:61:ec:83:88: 6b:f4:0b:98:8c:c9:bd:9f:b6:fa:1a:f1:79:e2:8d: b5:f7:1b:b0:f1:18:20:10:2a:98:49:1b:b1:7a:c2: ae:4e:74:96:91:2f:4b:87:c1:f0:93:71:50:ed:ee: f7:8b:ad:0d:64:e9:d0:64:3e:8a:bd:5f:10:3a:b7: 96:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:F6:8C:B5:5D:03:83:91:77:92:B3:A5:F3:92:0B:99:73:09:E6:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a57170cc-e04b-3db4-9f46-f231666774f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.209.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:4a:5d:da:38:11:a4:70:62:7a:9f:53:9f:62:50:b3:d3:3e: 78:73:3d:61:c7:11:b6:36:44:31:06:aa:40:87:55:03:fd:49: 83:c3:bb:ad:bc:1a:c9:31:c3:07:8e:28:dc:7e:be:e8:20:4f: 7c:ba:9e:65:13:dc:68:9e:3f:e4:87:7c:e5:7a:93:50:4d:1f: bd:38:b1:ed:05:ad:c8:2a:7d:1f:38:30:0e:f1:f3:f5:ad:bc: 1c:b1:68:14:0d:31:04:c0:aa:c2:59:28:66:cf:5b:ef:2c:17: af:a7:5b:cd:7e:dd:01:1f:a6:ef:1d:e2:55:13:74:5d:68:9a: 84:4d:26:19:cb:7d:96:14:fa:98:31:52:e5:24:00:0e:3a:5b: 33:12:d5:c6:5c:f4:51:25:18:d2:da:63:06:ec:63:8f:aa:33: 85:03:fb:cb:93:79:91:a7:19:0e:1a:e2:af:d5:49:7c:3a:ff: 16:e8:a6:f5:1c:8a:10:06:b3:8e:8b:c3:66:1d:1b:38:5c:96: 6a:27:23:15:ff:61:d3:42:92:c7:d4:e8:78:5f:04:c1:32:3f: 55:ad:38:d8:ae:86:f4:e1:54:db:ea:82:2b:52:d7:48:4a:3a: 06:08:4a:d7:68:04:f3:46:ff:8d:62:1d:92:df:57:7f:db:c5: c4:51:74:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VuzXnWx0RP0/VU04wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk NjAzYjcxNzgtY2NjMC00ODU0LTg1ZmEtYTUwN2JlZGYzZTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkavmhQ3HGnJPSKZP0VlJjzmbi5m/yA/H00c+ pM2tLug3GGS4jSYtNL6ZM7ChQylSIwnQZLARKnuNrVcMu6eF8gWOFAQ2qJGIXlln ms9xe4dOL7syGzV7SfVZv2/zzn217G2gWJEcMVVIYCajg91yMI1VV38GdHOcnzCx PDr7tZGtToFlXxVFrqZMREA9OIuj3Bb3uOHRS25TRZDaymOK3sz80iuj1cfOZq4a 1OdT+EpjVN84HTxxwaCczKcEc2Hsg4hr9AuYjMm9n7b6GvF54o219xuw8RggECqY SRuxesKuTnSWkS9Lh8Hwk3FQ7e73i60NZOnQZD6KvV8QOreW+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAz2jLVdA4ORd5KzpfOSC5lzCea8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTU3MTcwY2MtZTA0Yi0z ZGI0LTlmNDYtZjIzMTY2Njc3NGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYtFyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtKXdo4EaRwYnqfU59iULPTPnhzPWHHEbY2RDEGqkCHVQP9SYPDu628 GskxwweOKNx+vuggT3y6nmUT3GieP+SHfOV6k1BNH704se0FrcgqfR84MA7x8/Wt vByxaBQNMQTAqsJZKGbPW+8sF6+nW81+3QEfpu8d4lUTdF1omoRNJhnLfZYU+pgx UuUkAA46WzMS1cZc9FElGNLaYwbsY4+qM4UD+8uTeZGnGQ4a4q/VSXw6/xbopvUc ihAGs46Lw2YdGzhclmonIxX/YdNCksfU6HhfBMEyP1WtONiuhvThVNvqgitS10hK OgYIStdoBPNG/41iHZLfV3/bxcRRdAk= -----END CERTIFICATE-----Generated at Fri Apr 17 15:04:43 2026 by rpki-client