$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/b3b03f47-6547-310e-ba40-c2f46479d934.roa File: b3b03f47-6547-310e-ba40-c2f46479d934.roa (raw, json) Hash identifier: e7pWjn1GQv/7jxRmBtnevM+RlVzYO7XjOoG8L39X1Ug= Subject key identifier: A7:DC:94:63:7A:8D:F3:FA:5D:38:82:55:C3:97:CF:53:72:5A:CF:B1 Certificate issuer: /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c Certificate serial: 010D0C9F4328584D75D52916427EE36AFB2EC8C0 Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/b3b03f47-6547-310e-ba40-c2f46479d934.roa Signing time: Fri 10 Apr 2026 13:00:31 +0000 ROA not before: Fri 10 Apr 2026 13:00:31 +0000 ROA not after: Thu 09 Jul 2026 13:00:31 +0000 asID: 32133 IP address blocks: 98.124.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:75:d5:29:16:42:7e:e3:6a:fb:2e:c8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c Validity Not Before: Apr 10 13:00:31 2026 GMT Not After : Jul 9 13:00:31 2026 GMT Subject: CN=87b58cac-fcdb-44b0-874e-96f12b44e6b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ed:f2:e7:a8:7a:b4:29:eb:f0:7b:06:50:f8: f3:69:44:f0:a1:f8:1c:1f:ed:a5:87:fb:48:13:ef: ae:16:e9:12:6f:1c:d1:41:8a:8f:fc:e9:8a:f1:4b: 0f:71:ee:fd:93:8b:f0:d8:10:5e:7f:ae:00:6c:39: ed:75:b0:23:6a:00:1f:c1:39:cf:d6:5f:7e:9f:50: 45:c6:24:40:ef:7f:f4:10:f5:c5:f9:02:e3:6b:26: 8f:b1:94:e0:a5:67:61:5c:98:90:75:d0:46:1f:14: 61:b6:25:00:fb:c8:19:e3:e2:7f:59:5a:34:61:58: 2d:c0:b1:c6:92:6b:c2:08:15:ca:d0:0f:54:2b:0a: 89:c4:8a:47:16:39:e9:93:45:b4:a3:14:7b:87:c8: 03:43:5e:20:d3:50:df:0a:47:8f:19:34:1a:88:62: 0e:5b:5f:ec:5c:4d:e1:21:ed:c6:d0:9c:10:fd:2f: 69:54:d3:2d:bb:38:00:48:13:f3:3a:3c:f0:54:6e: 60:52:c8:83:74:ea:d0:c1:39:5a:9f:f9:fd:ee:c7: cc:70:38:bd:7e:b2:25:8f:d7:8b:6c:ba:b4:d9:c4: 83:0f:d2:ad:8c:fe:a3:cd:41:87:c5:0e:e8:67:3d: 57:97:3b:1c:da:e8:98:6e:75:1e:df:d2:49:73:47: c7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:DC:94:63:7A:8D:F3:FA:5D:38:82:55:C3:97:CF:53:72:5A:CF:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/b3b03f47-6547-310e-ba40-c2f46479d934.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl X509v3 Authority Key Identifier: keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer sbgp-ipAddrBlock: critical IPv4: 98.124.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:9d:f9:1f:19:c8:c9:ad:97:2c:6e:62:a8:d9:4f:4a:69:37: ef:e6:df:fb:b4:db:fd:15:07:6b:bb:fb:92:bb:63:3c:3f:97: eb:26:43:fc:95:17:89:1e:64:c4:39:5d:f8:f9:bd:ca:bc:56: 7c:73:5d:dd:70:d7:c5:a6:f9:f6:73:ad:bf:be:3e:ca:48:fc: a4:7c:ac:63:a9:9b:78:97:a3:2b:67:11:64:b6:72:03:ca:dc: af:65:2b:a7:b0:8e:51:50:b7:89:a1:f6:75:2c:85:cc:6c:b2: 14:7f:20:69:4c:9a:17:5d:3c:b4:9f:40:51:b7:9f:72:43:9f: 39:94:ed:d0:18:0e:e6:73:e2:14:1d:7d:a4:eb:65:71:80:22: be:84:30:8c:e2:e1:e0:34:a9:d2:0d:a9:63:03:2d:83:1a:80: b6:62:92:d2:41:7a:f1:ed:f6:6b:ee:c2:9a:72:49:36:a0:f1: 4a:a8:bf:d3:53:17:ac:2f:5a:20:27:57:7f:50:0d:41:6e:b9: f0:a2:9c:b6:00:bc:1c:f3:60:45:81:cf:80:1d:2d:f9:85:b1: f7:66:da:b9:2f:d0:36:82:25:fd:f3:8c:a4:23:f1:d6:73:fd: 04:0a:39:90:da:6f:7a:e8:e7:32:d4:cb:e1:0a:32:ff:6b:27: ac:55:04:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE111SkWQn7javsuyMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA2Y2JjOTEtY2ZlOS00ZDE1LThhMTMtZTNkODI4YzA0 NjljMB4XDTI2MDQxMDEzMDAzMVoXDTI2MDcwOTEzMDAzMVowLzEtMCsGA1UEAxMk ODdiNThjYWMtZmNkYi00NGIwLTg3NGUtOTZmMTJiNDRlNmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+3y56h6tCnr8HsGUPjzaUTwofgcH+2lh/tI E++uFukSbxzRQYqP/OmK8UsPce79k4vw2BBef64AbDntdbAjagAfwTnP1l9+n1BF xiRA73/0EPXF+QLjayaPsZTgpWdhXJiQddBGHxRhtiUA+8gZ4+J/WVo0YVgtwLHG kmvCCBXK0A9UKwqJxIpHFjnpk0W0oxR7h8gDQ14g01DfCkePGTQaiGIOW1/sXE3h Ie3G0JwQ/S9pVNMtuzgASBPzOjzwVG5gUsiDdOrQwTlan/n97sfMcDi9frIlj9eL bLq02cSDD9KtjP6jzUGHxQ7oZz1Xlzsc2uiYbnUe39JJc0fHuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKfclGN6jfP6XTiCVcOXz1NyWs+xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZj YmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4MjhjMDQ2OWMvYjNiMDNmNDctNjU0Ny0z MTBlLWJhNDAtYzJmNDY0NzlkOTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTA2Y2JjOTEtY2ZlOS00ZDE1LThh MTMtZTNkODI4YzA0NjljLzkwNmNiYzkxLWNmZTktNGQxNS04YTEzLWUzZDgyOGMw NDY5Yy5jcmwwHwYDVR0jBBgwFoAUtM26EqXmV2vBKngoUh64xcKEYhUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZjYmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4 MjhjMDQ2OWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYnzgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEyd+R8ZyMmtlyxuYqjZT0ppN+/m3/u02/0VB2u7+5K7Yzw/l+smQ/yV F4keZMQ5Xfj5vcq8VnxzXd1w18Wm+fZzrb++PspI/KR8rGOpm3iXoytnEWS2cgPK 3K9lK6ewjlFQt4mh9nUshcxsshR/IGlMmhddPLSfQFG3n3JDnzmU7dAYDuZz4hQd faTrZXGAIr6EMIzi4eA0qdINqWMDLYMagLZiktJBevHt9mvuwppySTag8Uqov9NT F6wvWiAnV39QDUFuufCinLYAvBzzYEWBz4AdLfmFsfdm2rkv0DaCJf3zjKQj8dZz /QQKOZDab3ro5zLUy+EKMv9rJ6xVBKQ= -----END CERTIFICATE-----Generated at Fri Apr 17 14:11:00 2026 by rpki-client