$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/98856bda-5be1-31b8-a55f-ce163d5571f9.roa File: 98856bda-5be1-31b8-a55f-ce163d5571f9.roa (raw, json) Hash identifier: z+aKYm9BMNxrWfwHUSY6uBLLhC+oEEj0xSFW4NBzKQg= Subject key identifier: 8E:04:4E:71:4F:4C:7C:03:4F:DB:D9:18:53:52:84:9E:49:79:67:3D Certificate issuer: /CN=3c1b9e2d-457a-403f-9256-27f272ed993d Certificate serial: 010D0C9F4328584D59EA5C12121B7E25DE4F7F00 Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/98856bda-5be1-31b8-a55f-ce163d5571f9.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 16509 IP address blocks: 208.95.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:5c:12:12:1b:7e:25:de:4f:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=269fac5b-bb4c-4948-85a8-530f3ebfa491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fd:93:ae:84:29:91:cb:d9:ae:e8:6f:69:86: 6f:5e:5f:1f:fb:8a:85:f3:04:ed:aa:e5:73:99:d4: 6b:3d:67:9a:41:4f:b8:54:6a:ca:40:dd:db:96:16: 84:a1:75:8b:03:e9:d7:14:fa:40:71:93:75:49:50: 2d:b5:ef:99:cd:b5:15:41:6a:d8:99:16:f6:1c:9d: 23:fd:21:5f:97:c9:fc:21:89:d8:64:5a:48:9a:69: 82:73:7e:7e:ec:45:8b:78:65:6d:1c:39:a9:cb:c1: 57:58:85:8d:d2:9c:9b:c6:9b:d3:9d:8d:7d:a4:1d: 61:a1:21:29:76:13:d3:56:a1:ed:ee:c9:40:af:fb: 47:4c:40:ba:f0:80:bf:3d:b2:e2:29:3e:14:bd:2d: c5:38:f0:66:eb:d7:54:c2:e5:bf:74:72:83:5d:8e: 51:1e:1c:83:d9:f5:07:a9:e1:52:08:11:d5:08:33: 24:72:a5:07:56:a4:1c:34:05:f9:c8:c6:40:d6:41: 2e:7e:04:c3:a8:cd:4f:04:2d:d5:88:42:1e:4f:87: 45:12:03:fb:3d:2e:b0:1d:5c:af:db:c2:d5:08:c2: bb:50:60:49:9b:e0:db:86:10:f3:2d:76:34:d6:3c: 89:74:9b:bf:49:b1:c4:3e:22:7c:03:f2:b7:fe:8d: 14:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:04:4E:71:4F:4C:7C:03:4F:DB:D9:18:53:52:84:9E:49:79:67:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/98856bda-5be1-31b8-a55f-ce163d5571f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl X509v3 Authority Key Identifier: keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer sbgp-ipAddrBlock: critical IPv4: 208.95.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:ab:f2:32:83:f6:28:7a:ea:b1:2e:11:1d:e0:c3:90:4d:fd: a7:b7:32:5b:ff:b3:34:34:ce:39:bc:89:a3:a3:fd:63:32:27: 0d:6d:53:cc:d0:d0:66:43:08:90:b8:cd:de:08:9f:1f:a8:33: 28:73:70:e8:59:18:63:cb:19:3c:e8:12:c5:cd:17:62:51:e4: 78:a5:5a:92:c2:d5:5b:e9:1b:c1:d9:3c:f6:9f:15:8a:76:fb: a7:27:5a:02:0f:a8:3d:42:54:4c:23:03:81:5b:b2:78:46:19: 66:ef:c0:b9:72:42:10:a5:de:22:82:59:94:e2:5c:0d:b9:e5: 9e:44:65:79:0d:75:b9:e0:e6:9b:8a:91:ca:7a:7d:20:8f:5d: 92:0d:9c:35:42:16:55:14:7f:87:87:85:cd:25:59:68:fc:45: af:5a:b8:39:82:2d:25:38:de:04:ef:ae:ab:3c:ab:b2:44:a1: 6f:e9:c9:8b:c1:6b:1d:15:c5:e6:3a:40:9d:d0:68:a0:7f:1e: 6a:44:81:bd:85:c1:5c:b1:d2:ea:43:98:8a:7b:33:3c:e2:c0: 4c:c0:0a:c4:13:b0:2a:ec:7b:5a:db:ae:f9:33:ee:d6:11:5d: 9d:19:e0:f5:6e:a3:80:b6:47:ad:21:5d:66:87:48:ec:3d:cb: d2:f6:03:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6lwSEht+Jd5PfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2MxYjllMmQtNDU3YS00MDNmLTkyNTYtMjdmMjcyZWQ5 OTNkMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk MjY5ZmFjNWItYmI0Yy00OTQ4LTg1YTgtNTMwZjNlYmZhNDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyf2TroQpkcvZruhvaYZvXl8f+4qF8wTtquVz mdRrPWeaQU+4VGrKQN3blhaEoXWLA+nXFPpAcZN1SVAtte+ZzbUVQWrYmRb2HJ0j /SFfl8n8IYnYZFpImmmCc35+7EWLeGVtHDmpy8FXWIWN0pybxpvTnY19pB1hoSEp dhPTVqHt7slAr/tHTEC68IC/PbLiKT4UvS3FOPBm69dUwuW/dHKDXY5RHhyD2fUH qeFSCBHVCDMkcqUHVqQcNAX5yMZA1kEufgTDqM1PBC3ViEIeT4dFEgP7PS6wHVyv 28LVCMK7UGBJm+DbhhDzLXY01jyJdJu/SbHEPiJ8A/K3/o0UQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI4ETnFPTHwDT9vZGFNShJ5JeWc9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFi OWUyZC00NTdhLTQwM2YtOTI1Ni0yN2YyNzJlZDk5M2QvOTg4NTZiZGEtNWJlMS0z MWI4LWE1NWYtY2UxNjNkNTU3MWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2MxYjllMmQtNDU3YS00MDNmLTky NTYtMjdmMjcyZWQ5OTNkLzNjMWI5ZTJkLTQ1N2EtNDAzZi05MjU2LTI3ZjI3MmVk OTkzZC5jcmwwHwYDVR0jBBgwFoAU7t8l0kJMmR/VBLPQ02SetbVqcsMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFiOWUyZC00NTdhLTQwM2YtOTI1Ni0yN2Yy NzJlZDk5M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F81MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyr8jKD9ih66rEuER3gw5BN/ae3Mlv/szQ0zjm8iaOj/WMyJw1tU8zQ 0GZDCJC4zd4Inx+oMyhzcOhZGGPLGTzoEsXNF2JR5HilWpLC1VvpG8HZPPafFYp2 +6cnWgIPqD1CVEwjA4FbsnhGGWbvwLlyQhCl3iKCWZTiXA255Z5EZXkNdbng5puK kcp6fSCPXZINnDVCFlUUf4eHhc0lWWj8Ra9auDmCLSU43gTvrqs8q7JEoW/pyYvB ax0VxeY6QJ3QaKB/HmpEgb2FwVyx0upDmIp7MzziwEzACsQTsCrse1rbrvkz7tYR XZ0Z4PVuo4C2R60hXWaHSOw9y9L2A24= -----END CERTIFICATE-----Generated at Fri Apr 17 16:47:03 2026 by rpki-client