$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/ba49cb13-fa4c-3dbe-8a47-613574edcbb7.roa File: ba49cb13-fa4c-3dbe-8a47-613574edcbb7.roa (raw, json) Hash identifier: gqpRnKgAB7wBmmHL3gNrdV1aFYZr9W+/Hu60WZh7OPY= Subject key identifier: ED:E1:27:A5:67:18:E5:78:0A:BA:D9:1C:98:21:69:BF:E5:D4:B0:CA Certificate issuer: /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c Certificate serial: 010D0C9F4328584D7B6A9D0FC2DD5907F3CD7000 Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/ba49cb13-fa4c-3dbe-8a47-613574edcbb7.roa Signing time: Sun 12 Apr 2026 13:00:30 +0000 ROA not before: Sun 12 Apr 2026 13:00:30 +0000 ROA not after: Sat 11 Jul 2026 13:00:30 +0000 asID: 32133 IP address blocks: 98.124.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:6a:9d:0f:c2:dd:59:07:f3:cd:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c Validity Not Before: Apr 12 13:00:30 2026 GMT Not After : Jul 11 13:00:30 2026 GMT Subject: CN=cc57e60b-0efa-4e09-a306-9e6dada9af83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ca:ab:b7:67:e8:f2:1e:c0:d3:58:cf:7f:17: 71:43:ed:a1:b0:54:8b:1a:a8:d0:f3:84:4f:5e:06: f1:b5:7e:54:40:68:28:25:c1:25:ee:fc:f5:b3:41: f4:8a:a0:2d:75:c1:cb:c7:23:ff:73:15:2a:6c:db: ae:55:30:e7:87:09:72:89:3a:08:66:50:35:2d:97: a2:ff:45:8b:44:ac:74:a1:57:86:be:a6:82:6f:dc: 1f:f1:e3:4b:8e:05:ea:7b:a8:12:28:d8:c0:61:ff: f3:01:a9:be:25:87:a9:1e:1a:03:35:00:3e:2c:0d: 09:23:b3:e1:19:8b:18:0f:24:3b:1d:96:98:46:ae: d3:14:72:8e:2c:70:e7:61:44:a1:91:c3:1d:c8:c1: 32:6c:b7:db:02:5b:90:83:ba:e6:95:44:18:dd:6c: 1a:18:bf:36:a4:3a:6a:13:e2:56:a6:8f:1b:08:b8: e8:0a:a7:ac:e2:63:f6:ab:79:42:68:3b:24:34:6e: 97:39:d4:95:fe:6f:1b:24:b9:18:f6:80:0b:a7:f5: b8:0c:6a:87:45:0f:b2:34:48:8c:1f:83:ab:4e:c9: 95:75:0f:c4:2b:4a:1c:26:f8:a1:ee:9d:17:6c:3e: 82:ec:da:41:fe:21:1a:62:de:65:36:fd:c3:87:ee: dd:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:E1:27:A5:67:18:E5:78:0A:BA:D9:1C:98:21:69:BF:E5:D4:B0:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/ba49cb13-fa4c-3dbe-8a47-613574edcbb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl X509v3 Authority Key Identifier: keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer sbgp-ipAddrBlock: critical IPv4: 98.124.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:16:8e:df:a4:fb:bc:b2:97:22:39:5c:dd:99:e7:c2:b2:57: 50:7c:70:e3:58:09:6c:8a:c2:a4:8b:f3:6d:85:33:84:96:d0: 15:be:70:d5:42:1d:eb:d6:ac:ef:89:fd:38:72:1d:36:58:4e: 6e:4b:62:a4:01:08:03:25:d0:32:1a:64:6f:6d:77:00:3d:07: 24:db:0a:4f:71:92:54:f0:20:49:4f:64:64:65:89:99:ca:38: e6:79:5d:dd:60:d8:49:e1:9f:51:ee:d1:12:85:af:fa:96:a5: 2d:d1:cf:98:14:c3:c9:18:a1:55:d5:e4:cd:0a:f0:c4:5e:b0: 5d:19:a2:e7:3f:2e:6a:e7:4f:b7:c0:86:de:c2:e7:f9:64:38: 2a:88:9e:9d:d4:56:0c:1d:d4:a6:4a:e4:60:ae:50:c5:fc:16: 76:42:b4:76:77:3c:17:44:f2:12:36:cc:a3:88:39:cb:50:4f: ee:6c:7f:ad:c5:95:c1:84:9e:0d:2c:c7:03:28:d4:ad:f9:ac: 3a:82:1d:e2:aa:02:8a:3d:b0:46:af:1d:b8:f5:0b:61:3b:29: 25:22:77:6a:6a:cd:5d:c5:a2:39:4f:db:ce:cb:25:33:21:40: a3:0f:2f:44:9c:85:59:8d:1a:56:4e:db:40:90:5c:29:67:cb: 70:0c:ce:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE17ap0Pwt1ZB/PNcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA2Y2JjOTEtY2ZlOS00ZDE1LThhMTMtZTNkODI4YzA0 NjljMB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk Y2M1N2U2MGItMGVmYS00ZTA5LWEzMDYtOWU2ZGFkYTlhZjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMqrt2fo8h7A01jPfxdxQ+2hsFSLGqjQ84RP XgbxtX5UQGgoJcEl7vz1s0H0iqAtdcHLxyP/cxUqbNuuVTDnhwlyiToIZlA1LZei /0WLRKx0oVeGvqaCb9wf8eNLjgXqe6gSKNjAYf/zAam+JYepHhoDNQA+LA0JI7Ph GYsYDyQ7HZaYRq7TFHKOLHDnYUShkcMdyMEybLfbAluQg7rmlUQY3WwaGL82pDpq E+JWpo8bCLjoCqes4mP2q3lCaDskNG6XOdSV/m8bJLkY9oALp/W4DGqHRQ+yNEiM H4OrTsmVdQ/EK0ocJvih7p0XbD6C7NpB/iEaYt5lNv3Dh+7djQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO3hJ6VnGOV4CrrZHJghab/l1LDKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZj YmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4MjhjMDQ2OWMvYmE0OWNiMTMtZmE0Yy0z ZGJlLThhNDctNjEzNTc0ZWRjYmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTA2Y2JjOTEtY2ZlOS00ZDE1LThh MTMtZTNkODI4YzA0NjljLzkwNmNiYzkxLWNmZTktNGQxNS04YTEzLWUzZDgyOGMw NDY5Yy5jcmwwHwYDVR0jBBgwFoAUtM26EqXmV2vBKngoUh64xcKEYhUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZjYmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4 MjhjMDQ2OWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYnzoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcWjt+k+7yylyI5XN2Z58KyV1B8cONYCWyKwqSL822FM4SW0BW+cNVC HevWrO+J/ThyHTZYTm5LYqQBCAMl0DIaZG9tdwA9ByTbCk9xklTwIElPZGRliZnK OOZ5Xd1g2Enhn1Hu0RKFr/qWpS3Rz5gUw8kYoVXV5M0K8MResF0Zouc/LmrnT7fA ht7C5/lkOCqInp3UVgwd1KZK5GCuUMX8FnZCtHZ3PBdE8hI2zKOIOctQT+5sf63F lcGEng0sxwMo1K35rDqCHeKqAoo9sEavHbj1C2E7KSUid2pqzV3FojlP287LJTMh QKMPL0SchVmNGlZO20CQXClny3AMzmM= -----END CERTIFICATE-----Generated at Sun Apr 19 08:56:35 2026 by rpki-client