$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98ba8361-2ba5-4f99-8d20-428c3755f1ca/4c19ee5b-ca69-3c8c-9e11-afad335b29cc.roa File: 4c19ee5b-ca69-3c8c-9e11-afad335b29cc.roa (raw, json) Hash identifier: 9ex2GPzWb9aNFnWSdEU7NHqDbCwkx784+Htbd22m58g= Subject key identifier: 51:47:29:F4:1A:21:18:84:F5:6B:38:E3:20:8D:EB:5D:3A:8D:AF:9C Certificate issuer: /CN=98ba8361-2ba5-4f99-8d20-428c3755f1ca Certificate serial: 010D0C9F4328584D6EDA682DA56D0B6E566AAC80 Authority key identifier: 33:D1:19:34:A5:EC:21:4F:88:CD:4C:02:55:98:5E:76:A5:1E:92:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98ba8361-2ba5-4f99-8d20-428c3755f1ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98ba8361-2ba5-4f99-8d20-428c3755f1ca/4c19ee5b-ca69-3c8c-9e11-afad335b29cc.roa Signing time: Wed 08 Apr 2026 01:00:24 +0000 ROA not before: Wed 08 Apr 2026 01:00:24 +0000 ROA not after: Tue 07 Jul 2026 01:00:24 +0000 asID: 30001 IP address blocks: 208.64.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98ba8361-2ba5-4f99-8d20-428c3755f1ca/98ba8361-2ba5-4f99-8d20-428c3755f1ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98ba8361-2ba5-4f99-8d20-428c3755f1ca/98ba8361-2ba5-4f99-8d20-428c3755f1ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98ba8361-2ba5-4f99-8d20-428c3755f1ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6e:da:68:2d:a5:6d:0b:6e:56:6a:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98ba8361-2ba5-4f99-8d20-428c3755f1ca Validity Not Before: Apr 8 01:00:24 2026 GMT Not After : Jul 7 01:00:24 2026 GMT Subject: CN=3f0991d8-f07c-4484-8322-aca9dc4fbad5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:13:65:5f:45:bd:7d:6c:ab:5f:de:fe:44:b0: 44:67:1c:13:3b:cf:f2:f0:92:96:ab:9f:04:a1:fb: 75:58:5b:9f:2f:3c:91:f8:ee:a0:44:4d:e0:93:47: bb:f0:a2:fd:ad:08:52:43:ed:34:84:a3:a1:eb:d1: 6a:c8:e4:c1:c2:34:32:c2:a0:ed:8d:04:72:e9:67: c6:de:3a:02:36:2e:75:f9:c8:1e:41:89:e3:3a:ab: 74:5b:31:bb:8f:82:fb:1f:cb:9e:4a:10:56:6c:53: 3b:5c:29:9f:ea:f9:b2:5b:02:6b:83:b7:a4:cd:54: 48:c5:36:43:9e:4f:55:7f:29:c1:64:78:8f:93:7b: 30:f7:db:ef:d2:ee:7f:e3:ed:3f:c8:f5:45:35:ce: 35:4b:9b:62:ed:7a:77:38:c3:5a:40:2d:e7:6c:ce: f6:8f:51:22:d1:f7:fe:50:5a:39:fc:fa:41:79:79: 89:dc:7d:8e:da:48:86:4d:77:2a:0f:12:d8:69:7c: 62:7e:7e:d4:84:ca:f9:df:c8:71:2c:92:cd:a2:78: 16:6e:79:fe:58:bd:c4:41:1d:11:e8:b5:88:e0:18: bd:f0:56:4a:7d:b9:2d:ff:d9:56:41:10:c2:cd:33: 44:21:6f:96:8f:94:e1:bf:5c:5c:a6:1d:bf:c2:47: 14:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:47:29:F4:1A:21:18:84:F5:6B:38:E3:20:8D:EB:5D:3A:8D:AF:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98ba8361-2ba5-4f99-8d20-428c3755f1ca/4c19ee5b-ca69-3c8c-9e11-afad335b29cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98ba8361-2ba5-4f99-8d20-428c3755f1ca/98ba8361-2ba5-4f99-8d20-428c3755f1ca.crl X509v3 Authority Key Identifier: keyid:33:D1:19:34:A5:EC:21:4F:88:CD:4C:02:55:98:5E:76:A5:1E:92:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98ba8361-2ba5-4f99-8d20-428c3755f1ca.cer sbgp-ipAddrBlock: critical IPv4: 208.64.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:cb:6c:dc:45:d1:f5:46:c7:e6:5c:7e:af:1d:9c:47:f7:7b: 00:28:29:59:6b:74:de:9a:15:6c:9a:1a:d1:da:3b:55:13:27: 42:75:22:cf:b3:12:7c:29:01:13:a4:39:42:58:d8:3e:aa:ef: 20:25:4f:62:86:38:1c:6b:a3:8d:5d:a7:60:1f:9c:23:77:6c: d0:8f:b0:cd:b8:17:00:97:ad:38:62:f8:f9:d9:fb:f2:c6:fb: 5c:08:b6:83:51:06:46:86:16:31:6c:aa:af:ea:f0:2d:3b:00: 62:4e:9c:5f:11:7f:cd:2d:b3:94:17:6c:58:f0:d3:53:b4:4e: 28:5d:1f:1a:01:6e:90:21:8f:a1:09:fa:07:bf:d3:e4:8a:53: 5c:4f:b5:22:91:40:99:c0:82:63:c8:dd:56:b1:14:34:67:b3: fa:21:0d:bd:de:9c:8c:53:e5:13:2d:4f:04:4c:45:52:6e:e2: 39:1a:d5:68:6b:1f:87:6a:36:15:72:97:60:7f:65:d1:4e:10: 84:ee:c5:3f:9a:63:18:d2:44:3e:57:c1:ea:12:f5:0c:89:35: 68:53:db:4b:e5:97:cd:30:65:70:ac:dd:dd:9e:d4:ab:69:b0: f4:ba:e1:f9:fc:b2:5c:7a:0d:f1:13:f5:69:88:70:67:cc:5f: 50:b7:e3:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1u2mgtpW0LblZqrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOThiYTgzNjEtMmJhNS00Zjk5LThkMjAtNDI4YzM3NTVm MWNhMB4XDTI2MDQwODAxMDAyNFoXDTI2MDcwNzAxMDAyNFowLzEtMCsGA1UEAxMk M2YwOTkxZDgtZjA3Yy00NDg0LTgzMjItYWNhOWRjNGZiYWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRNlX0W9fWyrX97+RLBEZxwTO8/y8JKWq58E oft1WFufLzyR+O6gRE3gk0e78KL9rQhSQ+00hKOh69FqyOTBwjQywqDtjQRy6WfG 3joCNi51+cgeQYnjOqt0WzG7j4L7H8ueShBWbFM7XCmf6vmyWwJrg7ekzVRIxTZD nk9VfynBZHiPk3sw99vv0u5/4+0/yPVFNc41S5ti7Xp3OMNaQC3nbM72j1Ei0ff+ UFo5/PpBeXmJ3H2O2kiGTXcqDxLYaXxifn7UhMr538hxLJLNongWbnn+WL3EQR0R 6LWI4Bi98FZKfbkt/9lWQRDCzTNEIW+Wj5Thv1xcph2/wkcUfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFFHKfQaIRiE9Ws44yCN6106ja+cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85OGJh ODM2MS0yYmE1LTRmOTktOGQyMC00MjhjMzc1NWYxY2EvNGMxOWVlNWItY2E2OS0z YzhjLTllMTEtYWZhZDMzNWIyOWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOThiYTgzNjEtMmJhNS00Zjk5LThk MjAtNDI4YzM3NTVmMWNhLzk4YmE4MzYxLTJiYTUtNGY5OS04ZDIwLTQyOGMzNzU1 ZjFjYS5jcmwwHwYDVR0jBBgwFoAUM9EZNKXsIU+IzUwCVZhedqUeklwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85OGJhODM2MS0yYmE1LTRmOTktOGQyMC00Mjhj Mzc1NWYxY2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0ECgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL7LbNxF0fVGx+Zcfq8dnEf3ewAoKVlrdN6aFWyaGtHaO1UTJ0J1Is+z EnwpAROkOUJY2D6q7yAlT2KGOBxro41dp2AfnCN3bNCPsM24FwCXrThi+PnZ+/LG +1wItoNRBkaGFjFsqq/q8C07AGJOnF8Rf80ts5QXbFjw01O0TihdHxoBbpAhj6EJ +ge/0+SKU1xPtSKRQJnAgmPI3VaxFDRns/ohDb3enIxT5RMtTwRMRVJu4jka1Whr H4dqNhVyl2B/ZdFOEITuxT+aYxjSRD5XweoS9QyJNWhT20vll80wZXCs3d2e1Ktp sPS64fn8slx6DfET9WmIcGfMX1C343o= -----END CERTIFICATE-----Generated at Fri Apr 17 12:19:04 2026 by rpki-client