$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/cdfc3f24-ec70-3d00-bc56-7dcfa79ec631.roa File: cdfc3f24-ec70-3d00-bc56-7dcfa79ec631.roa (raw, json) Hash identifier: dUE2SKexiHxK8pmuWcm6fddMCYjT7iF1eQCqYOhrsG0= Subject key identifier: B6:F3:46:EF:F6:C1:08:77:3E:18:B4:B8:AF:51:96:91:AC:D4:C3:7C Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584C4871322181B4B997DECF9580 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/cdfc3f24-ec70-3d00-bc56-7dcfa79ec631.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 4229 IP address blocks: 98.98.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:32:21:81:b4:b9:97:de:cf:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=b51779b0-7c0a-446a-b195-ad73182a3d01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:22:b3:aa:09:59:d0:56:b9:3e:da:e6:e0:14: c9:9b:1f:48:ab:d1:e4:8e:39:33:2c:0c:f0:52:25: fe:5b:c2:71:23:63:56:18:b1:8b:28:f7:00:2d:4d: 75:8d:81:87:8a:4c:ab:e3:9c:b9:33:89:dc:c2:fe: 1c:36:47:d2:a0:21:d0:40:58:45:2d:f0:0a:88:7f: a3:04:37:d8:3e:69:92:a1:09:73:fd:88:b5:34:71: 79:15:a7:b2:fc:49:bf:4b:56:02:9e:ec:e5:2f:5a: 9e:a7:9c:2a:f9:e4:04:b9:90:68:62:f5:3f:a0:45: 9f:9f:3e:c3:e2:2d:ab:36:d1:c8:7f:6f:7e:20:ee: be:24:39:15:f6:cb:96:81:1b:ad:18:69:1c:b7:d1: 4c:17:0c:bc:0b:b4:9c:3a:80:d0:9f:58:6b:9c:c6: 0c:73:86:64:6e:5d:5a:d6:75:7e:23:8f:6c:6b:87: 92:5d:fd:98:63:a7:b2:d7:43:49:85:6a:4e:ee:10: ef:e0:88:74:e6:80:11:88:52:1f:5b:1b:70:76:f1: 6f:d0:d8:be:c9:d6:95:13:f6:bd:32:40:c5:ef:90: 10:0b:fe:ba:ab:1d:76:f8:03:9d:2a:a5:8a:e9:3b: 39:e3:6a:91:12:a1:38:95:04:0b:b3:41:53:4c:59: 7e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:F3:46:EF:F6:C1:08:77:3E:18:B4:B8:AF:51:96:91:AC:D4:C3:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/cdfc3f24-ec70-3d00-bc56-7dcfa79ec631.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 98.98.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:6d:4b:60:4a:fc:18:c7:8e:2e:c7:46:60:e8:4b:43:08:2d: e2:66:f5:51:2c:cf:82:ea:12:7d:ca:85:05:0f:83:6d:e6:7a: c3:ad:11:dc:54:0b:08:8a:dd:f9:f7:33:0f:5e:5d:63:c9:ca: 94:a5:b6:5a:c7:a0:73:58:56:97:16:d5:94:e6:f3:d6:2a:2c: c2:91:30:c4:5d:dd:c4:75:e0:ef:ce:f8:79:33:23:9d:f3:ed: 95:22:e1:1e:8e:d5:fa:bf:48:29:8b:0c:92:82:02:a4:09:27: e7:3c:11:c2:65:3a:84:bf:e4:3e:a2:c0:5f:ff:e1:db:e6:74: a5:07:5b:29:48:81:55:30:8c:92:b5:a4:c9:7f:15:8b:04:0c: 5a:bc:44:49:05:c5:20:40:50:e3:f8:56:66:86:6a:b4:84:0b: 6f:4e:33:2c:58:21:d5:87:c6:90:c9:cf:53:b5:99:78:79:96: 8d:f2:97:f4:18:78:64:a8:b9:57:0d:88:9e:fd:8a:37:d0:00: 58:5c:1a:dd:e5:0e:e8:88:3d:5e:a3:ab:33:1e:76:da:a6:a7: 76:8e:c4:54:93:0b:13:80:41:86:c7:9a:88:cd:7c:78:a5:bf: 3b:b8:87:57:c9:02:a8:e6:a9:33:93:44:f9:7d:84:2b:e6:71: 55:26:8f:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExIcTIhgbS5l97PlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk YjUxNzc5YjAtN2MwYS00NDZhLWIxOTUtYWQ3MzE4MmEzZDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiKzqglZ0Fa5Ptrm4BTJmx9Iq9HkjjkzLAzw UiX+W8JxI2NWGLGLKPcALU11jYGHikyr45y5M4ncwv4cNkfSoCHQQFhFLfAKiH+j BDfYPmmSoQlz/Yi1NHF5Faey/Em/S1YCnuzlL1qep5wq+eQEuZBoYvU/oEWfnz7D 4i2rNtHIf29+IO6+JDkV9suWgRutGGkct9FMFwy8C7ScOoDQn1hrnMYMc4Zkbl1a 1nV+I49sa4eSXf2YY6ey10NJhWpO7hDv4Ih05oARiFIfWxtwdvFv0Ni+ydaVE/a9 MkDF75AQC/66qx12+AOdKqWK6Ts542qREqE4lQQLs0FTTFl+uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLbzRu/2wQh3Phi0uK9RlpGs1MN8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvY2RmYzNmMjQtZWM3MC0z ZDAwLWJjNTYtN2RjZmE3OWVjNjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYmJiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABptS2BK/BjHji7HRmDoS0MILeJm9VEsz4LqEn3KhQUPg23mesOtEdxU CwiK3fn3Mw9eXWPJypSltlrHoHNYVpcW1ZTm89YqLMKRMMRd3cR14O/O+HkzI53z 7ZUi4R6O1fq/SCmLDJKCAqQJJ+c8EcJlOoS/5D6iwF//4dvmdKUHWylIgVUwjJK1 pMl/FYsEDFq8REkFxSBAUOP4VmaGarSEC29OMyxYIdWHxpDJz1O1mXh5lo3yl/QY eGSouVcNiJ79ijfQAFhcGt3lDuiIPV6jqzMedtqmp3aOxFSTCxOAQYbHmojNfHil vzu4h1fJAqjmqTOTRPl9hCvmcVUmj8c= -----END CERTIFICATE-----Generated at Mon Mar 2 20:02:16 2026 by rpki-client