$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fac12d2c-2521-38d4-bef4-9e86d6693e3e.roa File: fac12d2c-2521-38d4-bef4-9e86d6693e3e.roa (raw, json) Hash identifier: q2YIWL4nzzeQXU4nLVosbYOtNLP9rYcczzRkc/e+8Ig= Subject key identifier: 2C:57:D8:BD:F2:40:2A:87:C5:A2:7F:C3:2F:EE:85:A4:98:CB:7D:37 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BC28D4B06A28B4A96FAC00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fac12d2c-2521-38d4-bef4-9e86d6693e3e.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7015 IP address blocks: 98.216.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:28:d4:b0:6a:28:b4:a9:6f:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=cd4a01a7-1e39-45c9-8f56-924976c792b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:16:a8:02:3b:10:4e:13:09:5e:69:f5:92:25: 0b:89:dd:bb:f6:99:be:ae:95:55:fb:b0:d1:c3:ed: d6:dc:a9:a4:0a:44:52:35:9b:5d:a8:90:8a:7c:f9: a9:8c:22:88:68:1b:57:92:26:a7:c6:dc:cc:36:0b: b0:25:c0:8c:9c:43:8d:84:e9:bd:54:cd:6b:29:be: 4b:63:d6:77:16:81:49:66:78:1d:d6:cb:84:c6:4e: 7a:2a:e3:ae:56:3a:d5:0e:14:33:5a:86:4b:cb:43: 52:6e:fa:b1:5b:fc:61:b1:5f:0d:b1:ee:8a:fe:cd: cb:70:36:d1:34:80:d4:ea:9c:ce:80:b8:f9:bc:bf: 2f:fa:8a:b7:81:d4:72:6f:2f:09:7e:13:f1:d1:c6: c3:df:20:83:04:30:3b:4b:23:26:06:5d:e9:48:39: bb:8a:e3:a9:86:3a:08:17:20:c8:ab:21:5d:ab:c2: 60:36:05:06:db:a6:fb:b0:46:37:2d:af:80:e3:f5: f7:89:51:73:d5:e5:98:05:57:67:40:85:2e:45:ee: 99:42:b0:3c:f8:ad:d5:c4:4a:17:76:ef:b1:72:28: f8:72:4d:a6:8f:de:8b:90:9c:e9:28:6e:57:2d:cd: c2:18:7e:77:89:4a:41:8e:29:3f:6b:2a:5c:86:4b: fd:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:57:D8:BD:F2:40:2A:87:C5:A2:7F:C3:2F:EE:85:A4:98:CB:7D:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fac12d2c-2521-38d4-bef4-9e86d6693e3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.216.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d9:53:89:e1:6c:de:ce:57:c9:b8:8a:77:44:76:ef:0f:d6:81: c9:43:20:30:9a:44:f2:27:60:d9:af:9c:50:18:43:16:eb:07: 4f:3a:4e:5d:68:a8:09:3e:fb:ce:fc:69:59:6f:bf:35:47:eb: 77:50:d9:77:e9:7e:c8:a8:b7:19:2f:f1:be:a3:6e:55:ea:df: 56:15:f2:87:17:66:15:4e:e0:56:ec:1e:87:b3:b8:2a:bc:7a: 0b:9b:80:84:b3:83:aa:a9:c6:21:c3:49:46:bc:ac:b0:2b:9d: 06:e2:47:0a:b8:1f:7f:48:d3:27:de:40:a8:84:5d:2f:ff:b5: 45:99:33:76:88:77:59:db:9a:e6:fe:3f:f7:cd:60:41:bb:c0: 56:ea:4e:b1:56:2a:5e:0c:17:c9:53:a8:c3:7b:a4:f5:3e:aa: 8e:c1:a6:c3:75:9f:9d:13:04:a5:e9:41:54:ab:10:e6:e7:cc: 2f:2a:18:db:f0:35:7d:23:81:69:84:d4:8f:ad:eb:07:0b:4b: be:f1:aa:aa:91:92:16:a5:b3:99:30:e1:fb:f3:4e:e2:e0:18: a3:12:51:dd:51:1a:22:25:61:6c:7f:5a:52:76:97:ef:ca:d2: a3:65:bf:0d:47:79:6f:a1:07:ed:1f:f9:bd:ec:5f:50:af:3a: cb:05:c0:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvCjUsGootKlvrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk Y2Q0YTAxYTctMWUzOS00NWM5LThmNTYtOTI0OTc2Yzc5MmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxaoAjsQThMJXmn1kiULid279pm+rpVV+7DR w+3W3KmkCkRSNZtdqJCKfPmpjCKIaBtXkianxtzMNguwJcCMnEONhOm9VM1rKb5L Y9Z3FoFJZngd1suExk56KuOuVjrVDhQzWoZLy0NSbvqxW/xhsV8Nse6K/s3LcDbR NIDU6pzOgLj5vL8v+oq3gdRyby8JfhPx0cbD3yCDBDA7SyMmBl3pSDm7iuOphjoI FyDIqyFdq8JgNgUG26b7sEY3La+A4/X3iVFz1eWYBVdnQIUuRe6ZQrA8+K3VxEoX du+xcij4ck2mj96LkJzpKG5XLc3CGH53iUpBjik/aypchkv9owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCxX2L3yQCqHxaJ/wy/uhaSYy303MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmFjMTJkMmMtMjUyMS0z OGQ0LWJlZjQtOWU4NmQ2NjkzZTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYtjuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANlTieFs3s5XybiKd0R27w/WgclDIDCaRPInYNmvnFAYQxbrB086Tl1o qAk++878aVlvvzVH63dQ2Xfpfsiotxkv8b6jblXq31YV8ocXZhVO4FbsHoezuCq8 egubgISzg6qpxiHDSUa8rLArnQbiRwq4H39I0yfeQKiEXS//tUWZM3aId1nbmub+ P/fNYEG7wFbqTrFWKl4MF8lTqMN7pPU+qo7BpsN1n50TBKXpQVSrEObnzC8qGNvw NX0jgWmE1I+t6wcLS77xqqqRkhals5kw4fvzTuLgGKMSUd1RGiIlYWx/WlJ2l+/K 0qNlvw1HeW+hB+0f+b3sX1CvOssFwAo= -----END CERTIFICATE-----Generated at Fri Apr 17 11:38:47 2026 by rpki-client