$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/cfd4cf14-79ac-3cda-8b4c-952fd2f1406b.roa File: cfd4cf14-79ac-3cda-8b4c-952fd2f1406b.roa (raw, json) Hash identifier: Fu4jvxvAKRk9fFLRMmSYjQAiGmzR/MbWr/ZZM/8iFsg= Subject key identifier: B6:65:C4:06:0F:97:3A:B9:F0:6A:D1:68:7F:69:41:21:6D:36:E1:85 Certificate issuer: /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c Certificate serial: 010D0C9F4328584D7A051B3BEE91413A2BBE2940 Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/cfd4cf14-79ac-3cda-8b4c-952fd2f1406b.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 32133 IP address blocks: 98.124.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:1b:3b:ee:91:41:3a:2b:be:29:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=ae4f0696-2a17-43be-bec0-56e05dae6341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:08:54:58:fe:41:0b:ce:ab:92:a9:66:06:ca: c3:93:bc:94:12:bc:df:94:bf:1c:77:93:dd:21:72: 5b:97:9b:ab:03:f2:b0:b9:31:18:7f:9b:47:1d:7a: 06:15:43:1d:5c:61:5e:03:1e:f2:4e:c3:f5:16:4f: c3:ad:0f:d8:97:14:b8:f5:b0:ab:d0:b1:ca:3a:e2: f4:e0:44:85:bf:e9:74:93:82:c4:35:b1:f2:06:6c: 9d:ba:b6:d2:d0:99:82:78:4c:71:dd:a8:b2:09:4b: 8d:e0:fd:73:69:f8:6a:46:61:cb:01:4d:33:1e:6a: d4:4b:9c:fa:b6:2a:a6:ee:c5:b6:dd:b1:eb:9a:68: b7:02:ba:04:24:e5:dc:3b:65:fa:6c:87:3e:e9:73: bd:1a:e1:8a:c3:8d:21:1c:ea:a0:02:db:d8:c5:88: 88:22:a4:39:d2:ae:d7:25:40:0e:7b:eb:53:3d:8f: bc:f1:97:6f:67:41:1f:c0:77:81:8a:51:40:cf:59: 25:90:ee:0d:f1:a8:3d:d4:46:65:41:90:cc:27:3e: b0:42:7a:12:bf:d7:af:af:df:c7:e2:9b:86:88:8e: 1b:8f:e2:35:aa:c4:07:21:c0:e6:34:79:cb:af:ba: 99:19:4a:34:8c:85:e3:88:32:79:be:55:0f:c4:25: 2c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:65:C4:06:0F:97:3A:B9:F0:6A:D1:68:7F:69:41:21:6D:36:E1:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/cfd4cf14-79ac-3cda-8b4c-952fd2f1406b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl X509v3 Authority Key Identifier: keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer sbgp-ipAddrBlock: critical IPv4: 98.124.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:6d:6f:ab:b8:c3:c5:81:ed:02:2c:9d:cc:12:ef:5f:ff:5c: 3f:20:4e:d5:a2:69:da:05:76:a1:62:12:d7:1f:39:b1:70:88: f1:3e:92:ac:55:28:84:9c:83:6f:35:99:02:ce:ed:97:e5:3c: 3c:98:29:9b:ad:76:8d:1c:98:80:41:ed:c9:c5:68:c1:cf:d3: 5b:db:33:e7:e6:f0:13:c2:2b:ad:a9:65:66:d9:2a:33:95:fe: 81:04:7d:0c:3e:dd:95:0f:32:32:ba:b2:d3:26:6f:c1:4f:fa: b0:cf:18:88:16:22:0c:0f:a0:f8:e8:55:a3:74:b2:87:bd:4e: 76:36:f3:a6:17:57:2c:7b:19:46:e0:d9:a4:f5:60:c4:75:9e: 00:13:19:ce:e6:70:20:35:9d:0f:ba:35:b1:0f:f9:05:85:ca: e3:63:86:f8:a6:e5:fa:22:9a:9a:d8:9a:c1:43:56:5b:16:5a: 59:5a:c5:56:80:cd:81:77:08:bc:b1:de:ee:a7:b7:bf:84:08: e6:6b:8e:58:00:71:2a:07:a8:fc:1e:4a:2e:05:96:82:5d:e0: fd:6c:46:eb:2a:e2:2d:bd:aa:22:0a:a0:f6:89:4d:66:52:7c: dc:da:28:ef:9f:ea:77:e5:cf:ff:fc:db:70:ff:80:d0:ac:25: 88:fd:c8:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BRs77pFBOiu+KUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA2Y2JjOTEtY2ZlOS00ZDE1LThhMTMtZTNkODI4YzA0 NjljMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk YWU0ZjA2OTYtMmExNy00M2JlLWJlYzAtNTZlMDVkYWU2MzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7AhUWP5BC86rkqlmBsrDk7yUErzflL8cd5Pd IXJbl5urA/KwuTEYf5tHHXoGFUMdXGFeAx7yTsP1Fk/DrQ/YlxS49bCr0LHKOuL0 4ESFv+l0k4LENbHyBmydurbS0JmCeExx3aiyCUuN4P1zafhqRmHLAU0zHmrUS5z6 tiqm7sW23bHrmmi3AroEJOXcO2X6bIc+6XO9GuGKw40hHOqgAtvYxYiIIqQ50q7X JUAOe+tTPY+88ZdvZ0EfwHeBilFAz1klkO4N8ag91EZlQZDMJz6wQnoSv9evr9/H 4puGiI4bj+I1qsQHIcDmNHnLr7qZGUo0jIXjiDJ5vlUPxCUsVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLZlxAYPlzq58GrRaH9pQSFtNuGFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZj YmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4MjhjMDQ2OWMvY2ZkNGNmMTQtNzlhYy0z Y2RhLThiNGMtOTUyZmQyZjE0MDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTA2Y2JjOTEtY2ZlOS00ZDE1LThh MTMtZTNkODI4YzA0NjljLzkwNmNiYzkxLWNmZTktNGQxNS04YTEzLWUzZDgyOGMw NDY5Yy5jcmwwHwYDVR0jBBgwFoAUtM26EqXmV2vBKngoUh64xcKEYhUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZjYmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4 MjhjMDQ2OWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYnzsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGttb6u4w8WB7QIsncwS71//XD8gTtWiadoFdqFiEtcfObFwiPE+kqxV KIScg281mQLO7ZflPDyYKZutdo0cmIBB7cnFaMHP01vbM+fm8BPCK62pZWbZKjOV /oEEfQw+3ZUPMjK6stMmb8FP+rDPGIgWIgwPoPjoVaN0soe9TnY286YXVyx7GUbg 2aT1YMR1ngATGc7mcCA1nQ+6NbEP+QWFyuNjhvim5foimprYmsFDVlsWWllaxVaA zYF3CLyx3u6nt7+ECOZrjlgAcSoHqPweSi4FloJd4P1sRusq4i29qiIKoPaJTWZS fNzaKO+f6nflz//823D/gNCsJYj9yBI= -----END CERTIFICATE-----Generated at Sun Apr 19 09:45:34 2026 by rpki-client