$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf0e0f49-f4a7-3861-80de-735c8c4d0f8b.roa File: cf0e0f49-f4a7-3861-80de-735c8c4d0f8b.roa (raw, json) Hash identifier: r05YQb3F3bl9NXJoi6dWkG/9qxEY29icM5Hd+Chxuog= Subject key identifier: 6B:B2:02:4D:EB:6B:C7:F6:AE:83:7C:DE:79:09:4E:67:45:C6:29:93 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BC9A81BC9507C1EE35B880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf0e0f49-f4a7-3861-80de-735c8c4d0f8b.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33662 IP address blocks: 98.195.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:9a:81:bc:95:07:c1:ee:35:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=6db16dd0-9ca6-4d0a-8024-fd3d2f2d6a45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ff:d6:89:dc:fa:d1:1e:dc:5d:1c:ab:dd:91: 70:00:1b:3d:b8:ec:d1:57:9a:21:32:86:4c:81:e2: 28:df:6e:78:ea:90:35:b1:e3:7c:25:0b:7f:95:fa: b2:d3:df:d9:23:78:bd:9d:60:66:84:e6:23:0b:90: 24:0c:14:71:07:5b:d9:e8:2b:6c:bf:52:6d:63:e7: 1f:41:0d:9c:88:2f:2e:32:e8:f4:9e:45:18:a1:5a: 4b:95:ff:1a:2a:6b:a2:22:57:9c:9b:95:95:d5:66: 47:80:02:56:c1:48:ff:dd:20:49:b2:eb:58:69:4e: 4b:f8:b8:22:5e:8f:59:04:f1:17:6b:66:22:f7:60: 6e:1d:6d:16:31:a7:c5:e7:e7:76:d0:76:b3:3b:00: 18:19:81:42:e1:5b:fc:9e:8e:86:4b:30:ec:bb:56: 7e:5c:9a:25:74:15:30:fa:2d:83:fc:c8:0d:70:c5: b6:82:ef:a5:25:0d:91:8c:4b:f0:0d:18:51:25:6a: fb:e2:68:50:f1:c0:d4:07:7d:cd:6d:6d:b1:20:3f: 69:22:e6:e8:5a:eb:92:5c:fa:9a:a7:1f:00:e8:b7: d5:60:2b:d5:72:2a:f3:42:7f:50:dc:31:52:f7:03: 32:62:49:b3:55:32:c2:91:c2:54:1e:e1:47:cf:b2: bc:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:B2:02:4D:EB:6B:C7:F6:AE:83:7C:DE:79:09:4E:67:45:C6:29:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf0e0f49-f4a7-3861-80de-735c8c4d0f8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.195.18.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:a4:55:30:ce:0a:c0:c8:b3:49:0c:28:0b:1d:92:c3:6a:0d: ce:f4:d8:b5:02:0f:b1:54:73:17:99:81:e5:0c:4d:76:62:d9: 9f:dc:df:df:6d:47:3f:26:b9:52:c3:17:31:6e:19:fe:76:f1: 91:d2:cf:50:39:f7:e2:e6:87:40:38:60:51:16:d7:d8:2a:54: d0:a7:5e:a2:16:09:df:0a:8b:c9:d4:54:62:ff:8b:4d:09:18: 44:a9:75:67:1a:dc:44:91:46:76:c2:98:7f:a4:da:2f:85:30: 77:7a:3f:c5:60:0f:b2:6f:82:01:1d:27:4e:19:48:56:5f:ca: ea:e9:7d:64:e5:98:57:62:44:d6:f8:54:aa:df:8a:78:38:ee: b1:87:3c:ec:8e:0d:27:98:3e:e4:ef:99:ac:b5:06:1b:27:55: d2:55:0c:47:6f:06:d2:e2:57:74:1e:dd:05:20:cc:cc:9c:39: b7:95:32:6d:c7:e4:94:ee:f1:ab:22:cf:b2:6c:58:92:36:3e: a2:bb:3b:27:39:48:6e:31:16:9e:1a:d8:a4:ca:ff:41:cf:b5: a7:fe:ee:4e:b6:4f:df:59:cd:2a:39:b3:a2:c3:fc:28:2d:75: 83:68:01:93:f6:d6:ef:7d:fa:17:2a:23:ea:9b:15:88:ac:4b: 65:c2:70:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvJqBvJUHwe41uIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk NmRiMTZkZDAtOWNhNi00ZDBhLTgwMjQtZmQzZDJmMmQ2YTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwP/Widz60R7cXRyr3ZFwABs9uOzRV5ohMoZM geIo32546pA1seN8JQt/lfqy09/ZI3i9nWBmhOYjC5AkDBRxB1vZ6Ctsv1JtY+cf QQ2ciC8uMuj0nkUYoVpLlf8aKmuiIlecm5WV1WZHgAJWwUj/3SBJsutYaU5L+Lgi Xo9ZBPEXa2Yi92BuHW0WMafF5+d20HazOwAYGYFC4Vv8no6GSzDsu1Z+XJoldBUw +i2D/MgNcMW2gu+lJQ2RjEvwDRhRJWr74mhQ8cDUB33NbW2xID9pIuboWuuSXPqa px8A6LfVYCvVcirzQn9Q3DFS9wMyYkmzVTLCkcJUHuFHz7K8AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGuyAk3ra8f2roN83nkJTmdFximTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2YwZTBmNDktZjRhNy0z ODYxLTgwZGUtNzM1YzhjNGQwZjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYsMSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+kVTDOCsDIs0kMKAsdksNqDc702LUCD7FUcxeZgeUMTXZi2Z/c399t Rz8muVLDFzFuGf528ZHSz1A59+Lmh0A4YFEW19gqVNCnXqIWCd8Ki8nUVGL/i00J GESpdWca3ESRRnbCmH+k2i+FMHd6P8VgD7JvggEdJ04ZSFZfyurpfWTlmFdiRNb4 VKrfing47rGHPOyODSeYPuTvmay1BhsnVdJVDEdvBtLiV3Qe3QUgzMycObeVMm3H 5JTu8asiz7JsWJI2PqK7Oyc5SG4xFp4a2KTK/0HPtaf+7k62T99ZzSo5s6LD/Cgt dYNoAZP21u99+hcqI+qbFYisS2XCcEM= -----END CERTIFICATE-----Generated at Fri Apr 17 12:18:15 2026 by rpki-client