$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a57e32b9-41ea-3561-94d9-4a1ef36c975a.roa File: a57e32b9-41ea-3561-94d9-4a1ef36c975a.roa (raw, json) Hash identifier: Fd3KxodsbrZoWk52m9CfKtNcWzvKCw3L/2TGLCR0iSg= Subject key identifier: 1F:43:AC:79:1C:02:09:E8:87:D5:A1:FA:14:F4:31:D1:A7:FB:62:93 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BCA6CC19D23219990603C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a57e32b9-41ea-3561-94d9-4a1ef36c975a.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33662 IP address blocks: 98.200.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:a6:cc:19:d2:32:19:99:06:03:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=6b1b1420-dedb-4d5d-a44e-a7df2915d665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:72:da:a9:4c:71:dc:3e:4f:8b:24:99:d8:67: 22:50:f2:65:01:d8:08:4c:02:ab:f7:0e:14:41:84: 97:3e:f5:a1:bf:2d:8d:b6:2e:18:22:0a:80:60:e2: c4:63:0e:01:7f:f0:a8:9e:07:65:bd:dd:1d:b2:fa: 5a:7c:30:59:6d:80:35:19:c7:4e:98:af:96:5b:0f: a5:a9:03:67:b9:a2:99:39:ca:a4:6c:73:57:f6:b5: da:41:4f:5e:8f:79:d3:0d:63:eb:b1:59:51:59:f4: b9:ad:ee:2e:12:a6:19:37:fd:65:54:10:02:05:86: fb:47:96:1f:dd:16:ee:a0:b2:10:c0:07:7a:3a:b9: 7c:a8:a6:29:b7:16:3d:eb:62:ad:ad:95:37:2f:af: 13:fe:de:5b:5b:2c:9a:f2:f7:22:03:6f:b4:ed:2e: 35:ae:ba:87:c3:6e:47:04:69:df:98:3e:cc:72:b4: 03:bd:10:08:e4:59:91:4c:e5:52:8a:ee:2f:55:5a: 7b:ef:76:e6:67:d4:83:eb:e8:a5:19:52:98:5d:5a: 9d:cf:e6:d9:b9:22:b2:fb:40:95:67:a4:54:89:f0: ad:a6:81:70:10:53:ba:ea:f1:0c:70:1f:bc:86:20: 0c:22:8e:a0:4b:cf:be:0a:ca:25:92:1a:63:bf:fa: 6d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:43:AC:79:1C:02:09:E8:87:D5:A1:FA:14:F4:31:D1:A7:FB:62:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a57e32b9-41ea-3561-94d9-4a1ef36c975a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.200.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:96:d7:14:95:35:dc:90:3e:5f:95:d9:58:f1:ab:df:ee:30: 89:35:b6:2c:63:92:10:da:ff:e3:42:ce:86:95:35:aa:c3:4d: f2:69:1c:b2:a6:de:bf:d3:c5:c1:42:ff:87:51:c1:20:24:65: 54:ec:bd:b1:b3:cc:34:1f:8c:6d:81:da:fc:49:41:a7:6c:dc: fd:44:fa:07:a8:61:a2:d1:4a:be:af:9f:82:3e:f8:5a:85:40: a6:d0:dd:38:85:45:42:31:21:4f:de:70:b0:6a:70:09:37:19: 36:39:8c:b1:c8:aa:a8:4d:f5:b1:e4:f0:55:70:7f:09:a0:60: 6f:c6:b7:bc:bf:ea:69:8a:f7:6a:b3:d1:71:a6:07:5c:ac:9e: 4c:6f:44:af:a1:89:a3:e7:fb:7a:67:81:b8:39:17:fc:ad:0f: b4:17:07:11:37:53:d8:47:2b:83:87:c7:44:1d:f3:3c:79:cd: b7:c7:6d:14:1e:0d:6a:03:d0:6d:3c:0a:2d:04:34:b6:f2:af: ba:b7:b8:0f:63:38:8d:7e:96:33:0e:59:9a:9c:de:c4:3c:0e: 02:c7:6a:31:f4:0d:de:ef:9a:67:b3:72:c2:2e:cf:eb:7c:38: c9:b3:7c:f7:0a:c4:bd:43:02:a8:bc:2c:03:55:d4:be:92:fb: 69:16:0d:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvKbMGdIyGZkGA8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk NmIxYjE0MjAtZGVkYi00ZDVkLWE0NGUtYTdkZjI5MTVkNjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknLaqUxx3D5PiySZ2GciUPJlAdgITAKr9w4U QYSXPvWhvy2Nti4YIgqAYOLEYw4Bf/Congdlvd0dsvpafDBZbYA1GcdOmK+WWw+l qQNnuaKZOcqkbHNX9rXaQU9ej3nTDWPrsVlRWfS5re4uEqYZN/1lVBACBYb7R5Yf 3RbuoLIQwAd6Orl8qKYptxY962KtrZU3L68T/t5bWyya8vciA2+07S41rrqHw25H BGnfmD7McrQDvRAI5FmRTOVSiu4vVVp773bmZ9SD6+ilGVKYXVqdz+bZuSKy+0CV Z6RUifCtpoFwEFO66vEMcB+8hiAMIo6gS8++Csolkhpjv/ptzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9DrHkcAgnoh9Wh+hT0MdGn+2KTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTU3ZTMyYjktNDFlYS0z NTYxLTk0ZDktNGExZWYzNmM5NzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYsj7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADeW1xSVNdyQPl+V2Vjxq9/uMIk1tixjkhDa/+NCzoaVNarDTfJpHLKm 3r/TxcFC/4dRwSAkZVTsvbGzzDQfjG2B2vxJQads3P1E+geoYaLRSr6vn4I++FqF QKbQ3TiFRUIxIU/ecLBqcAk3GTY5jLHIqqhN9bHk8FVwfwmgYG/Gt7y/6mmK92qz 0XGmB1ysnkxvRK+hiaPn+3pngbg5F/ytD7QXBxE3U9hHK4OHx0Qd8zx5zbfHbRQe DWoD0G08Ci0ENLbyr7q3uA9jOI1+ljMOWZqc3sQ8DgLHajH0Dd7vmmezcsIuz+t8 OMmzfPcKxL1DAqi8LANV1L6S+2kWDTg= -----END CERTIFICATE-----Generated at Fri Apr 17 15:32:57 2026 by rpki-client