$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af4037e7-f338-32da-b3f6-c67b4b47fcd6.roa File: af4037e7-f338-32da-b3f6-c67b4b47fcd6.roa (raw, json) Hash identifier: Yc69c1OHSC0YnM3PJbtpQgT5WpmUkB5eeApxBM9mkGU= Subject key identifier: EE:7C:C6:62:DF:0A:0B:C8:2C:CD:0F:F7:70:7C:58:B3:B8:2C:F2:45 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BCAE2533FF666FA56C3680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af4037e7-f338-32da-b3f6-c67b4b47fcd6.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33662 IP address blocks: 98.40.212.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:ae:25:33:ff:66:6f:a5:6c:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=48c56d89-9b2c-4da8-89f6-ed6200aebd35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d8:60:2c:d8:71:dd:ff:20:7f:b1:57:f8:b8: 3c:7f:c4:34:e1:26:88:cb:cf:3b:ce:ff:13:87:fe: 36:4c:7d:ce:18:da:2e:fd:8f:f3:9e:6b:92:6b:0e: 29:44:7a:5b:81:e7:e0:a2:65:85:a2:95:3c:d6:59: 9d:f7:7a:ed:5d:c5:79:8a:49:01:7b:94:bd:8d:5c: 63:34:03:99:f3:2a:17:69:66:11:99:32:51:e5:c3: 13:73:2d:fc:31:7d:79:76:04:c4:82:01:bf:28:13: 16:26:ae:1e:63:91:d7:60:b9:f3:51:50:70:ef:b6: 23:d9:2b:0a:54:02:1a:a9:7e:22:06:33:1d:14:43: 42:8e:f1:73:62:f7:5a:1b:87:59:c6:08:b6:9f:f3: f4:99:83:82:d5:6c:71:1e:88:da:0e:7d:91:e6:6a: 04:0b:34:2a:0a:8f:3a:cd:c5:82:db:1f:4f:20:c5: 7c:35:29:21:e1:ae:0c:e9:72:8e:3e:ff:14:bf:16: 96:c5:22:d4:04:12:b7:94:fc:10:78:f3:a7:8f:b0: ec:7a:2b:eb:3e:f6:7e:6a:4b:2d:74:a5:5c:e0:43: 5f:06:90:f9:49:6b:53:99:a1:7c:9b:67:97:ee:8f: 6b:4d:67:b2:da:f6:e6:fe:42:ce:e2:83:b3:4f:15: 10:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:7C:C6:62:DF:0A:0B:C8:2C:CD:0F:F7:70:7C:58:B3:B8:2C:F2:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af4037e7-f338-32da-b3f6-c67b4b47fcd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.40.212.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:f8:14:f4:07:06:33:ec:09:bb:2f:3f:03:58:99:53:d8:c2: 58:a9:b4:7f:43:d9:b8:91:72:4e:39:c5:6d:cc:d4:41:ec:62: c3:f3:f0:6f:63:8e:28:da:d7:a1:a8:12:7a:a8:43:c0:7d:d3: ad:15:3d:23:f0:9a:21:85:b1:12:a1:91:33:fd:b0:50:5c:de: 2a:cf:99:1a:e8:af:93:ce:45:cb:84:5f:26:5b:29:e9:d4:16: d6:eb:de:78:96:f6:20:75:96:3d:8a:db:a3:76:78:12:d3:fd: 16:6d:ed:b9:c0:3e:9c:4d:cb:d3:77:a0:17:12:b5:84:e3:f1: c3:69:85:41:6f:f5:84:fe:a0:0c:1b:60:28:d8:fe:5f:62:01: 10:89:3c:e7:d8:b1:2c:7a:f1:80:56:31:ff:cd:ab:40:8b:2c: 0b:b5:60:9c:2b:35:77:c2:a7:ac:ea:68:38:91:18:42:e2:ee: 21:83:15:0f:3c:82:80:76:97:29:6e:14:b5:51:31:97:67:d7: 06:4a:7a:72:c5:c7:47:1d:49:f8:06:67:89:99:ea:1a:ce:9d: cb:70:74:03:d6:4d:19:4e:27:68:03:6f:84:a0:29:72:d2:9b: 60:63:1f:98:a4:8f:c3:9b:27:97:e7:4a:9a:8a:77:c3:2b:ec: 8b:a6:60:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvK4lM/9mb6VsNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk NDhjNTZkODktOWIyYy00ZGE4LTg5ZjYtZWQ2MjAwYWViZDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9hgLNhx3f8gf7FX+Lg8f8Q04SaIy887zv8T h/42TH3OGNou/Y/znmuSaw4pRHpbgefgomWFopU81lmd93rtXcV5ikkBe5S9jVxj NAOZ8yoXaWYRmTJR5cMTcy38MX15dgTEggG/KBMWJq4eY5HXYLnzUVBw77Yj2SsK VAIaqX4iBjMdFENCjvFzYvdaG4dZxgi2n/P0mYOC1WxxHojaDn2R5moECzQqCo86 zcWC2x9PIMV8NSkh4a4M6XKOPv8UvxaWxSLUBBK3lPwQePOnj7DseivrPvZ+akst dKVc4ENfBpD5SWtTmaF8m2eX7o9rTWey2vbm/kLO4oOzTxUQmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO58xmLfCgvILM0P93B8WLO4LPJFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWY0MDM3ZTctZjMzOC0z MmRhLWIzZjYtYzY3YjRiNDdmY2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYijUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIP4FPQHBjPsCbsvPwNYmVPYwliptH9D2biRck45xW3M1EHsYsPz8G9j jija16GoEnqoQ8B9060VPSPwmiGFsRKhkTP9sFBc3irPmRror5PORcuEXyZbKenU Ftbr3niW9iB1lj2K26N2eBLT/RZt7bnAPpxNy9N3oBcStYTj8cNphUFv9YT+oAwb YCjY/l9iARCJPOfYsSx68YBWMf/Nq0CLLAu1YJwrNXfCp6zqaDiRGELi7iGDFQ88 goB2lyluFLVRMZdn1wZKenLFx0cdSfgGZ4mZ6hrOnctwdAPWTRlOJ2gDb4SgKXLS m2BjH5ikj8ObJ5fnSpqKd8Mr7IumYKw= -----END CERTIFICATE-----Generated at Fri Apr 17 15:36:34 2026 by rpki-client