$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5c01ee74-e8b7-4457-94c3-87a79c9dfbf3/e852e173-443d-30d3-9e19-e8549b6b4ef3.roa File: e852e173-443d-30d3-9e19-e8549b6b4ef3.roa (raw, json) Hash identifier: Uz7UbEBvsXpfhAKpSjG35upVjJJvR9PAIpQKreubpvg= Subject key identifier: 16:CA:40:EB:B9:4D:8F:CE:1F:AE:0A:9C:7E:67:E0:99:C1:65:04:0C Certificate issuer: /CN=5c01ee74-e8b7-4457-94c3-87a79c9dfbf3 Certificate serial: 010D0C9F4328584D7CCFE08F596E187307574C00 Authority key identifier: 31:2C:01:67:14:5D:AD:FD:7B:CD:BB:D3:2D:23:FD:6E:61:91:78:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5c01ee74-e8b7-4457-94c3-87a79c9dfbf3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5c01ee74-e8b7-4457-94c3-87a79c9dfbf3/e852e173-443d-30d3-9e19-e8549b6b4ef3.roa Signing time: Mon 13 Apr 2026 01:00:24 +0000 ROA not before: Mon 13 Apr 2026 01:00:24 +0000 ROA not after: Sun 12 Jul 2026 01:00:24 +0000 asID: 54520 IP address blocks: 192.30.98.0/24 maxlen: 24 192.30.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5c01ee74-e8b7-4457-94c3-87a79c9dfbf3/5c01ee74-e8b7-4457-94c3-87a79c9dfbf3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5c01ee74-e8b7-4457-94c3-87a79c9dfbf3/5c01ee74-e8b7-4457-94c3-87a79c9dfbf3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5c01ee74-e8b7-4457-94c3-87a79c9dfbf3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7c:cf:e0:8f:59:6e:18:73:07:57:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c01ee74-e8b7-4457-94c3-87a79c9dfbf3 Validity Not Before: Apr 13 01:00:24 2026 GMT Not After : Jul 12 01:00:24 2026 GMT Subject: CN=8bfbf898-ab23-4234-8125-7342f316dd5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:83:9a:76:94:c7:f3:2f:4e:c7:f5:4d:74:dc: 03:25:94:60:22:36:ff:4c:c8:ea:81:3f:ae:d6:3b: f6:9f:1e:ff:75:cd:fe:29:54:ab:96:16:f4:ba:1f: 48:69:25:74:99:0b:b1:d0:26:46:93:5f:22:3a:c0: 81:61:7f:51:69:5c:66:23:48:5c:84:aa:76:91:fa: 8f:b3:1f:ae:40:b5:e7:4c:ee:97:99:db:1b:c9:c9: 08:79:b1:cc:90:72:bd:19:b9:8b:1a:a7:9c:21:a8: 63:82:8c:dc:ff:b2:d9:13:0c:f0:12:0d:f2:32:c9: 81:a2:00:bb:72:94:c8:16:44:c9:1e:a4:9b:19:58: ce:f7:15:dc:12:7e:85:d1:0d:a9:3b:42:18:9c:f5: 74:b4:cc:f1:cf:87:40:c8:23:c8:30:40:94:b5:6b: 85:4b:8c:de:bd:c2:36:c6:92:dc:4c:e7:29:74:42: 00:8f:1f:8c:fe:a7:83:8a:d8:c8:86:2c:3f:5b:e0: 52:1f:08:12:5c:b0:6e:cc:fe:d8:27:18:fb:51:7f: 70:08:0b:01:0b:7d:d7:44:b6:e6:c7:58:07:4e:86: 72:08:94:11:24:e7:eb:a9:b2:a1:a0:f4:da:84:0b: 82:b3:66:10:55:d2:08:67:86:97:85:69:19:22:98: db:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:CA:40:EB:B9:4D:8F:CE:1F:AE:0A:9C:7E:67:E0:99:C1:65:04:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5c01ee74-e8b7-4457-94c3-87a79c9dfbf3/e852e173-443d-30d3-9e19-e8549b6b4ef3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5c01ee74-e8b7-4457-94c3-87a79c9dfbf3/5c01ee74-e8b7-4457-94c3-87a79c9dfbf3.crl X509v3 Authority Key Identifier: keyid:31:2C:01:67:14:5D:AD:FD:7B:CD:BB:D3:2D:23:FD:6E:61:91:78:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5c01ee74-e8b7-4457-94c3-87a79c9dfbf3.cer sbgp-ipAddrBlock: critical IPv4: 192.30.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:fd:bf:a4:a0:05:eb:bd:d9:4b:fe:8c:d8:6e:da:43:28:74: a7:d2:9d:c9:21:4a:dd:7b:84:fb:d6:bd:57:4d:4b:5d:93:0e: 72:db:28:a4:ac:96:5d:22:91:2d:ea:a4:4b:67:07:ff:fc:bd: 22:d5:e5:99:8d:57:86:cb:98:83:45:ef:96:92:35:11:be:46: 31:8a:09:3d:fb:3f:f5:d0:f9:d0:a4:1b:06:b5:e1:28:c6:78: c4:05:31:9a:7b:60:a4:fe:3b:e1:d8:f0:d8:ce:e2:4e:d3:cb: ee:43:58:b1:43:2f:41:1c:4b:e6:c5:a5:f7:ea:92:e2:ca:b2: f0:35:d5:68:7f:df:7e:61:ae:de:32:68:f1:c3:d4:ca:ac:eb: 06:73:52:1d:9f:ed:ba:7f:b9:97:14:c9:71:65:58:93:6c:42: b9:bd:28:15:89:07:0e:a1:62:53:2d:aa:5a:78:bc:03:da:f2: f3:3e:9e:1f:de:5c:0a:c1:38:d1:40:90:4e:42:d0:f2:3b:4d: 51:70:3f:2f:c5:b3:9f:df:02:9b:3e:e3:19:de:7c:82:66:8f: ef:c4:33:48:ca:7c:34:2d:02:27:ec:f4:41:f8:82:f3:7d:e7: 7b:9d:08:2a:3d:68:bf:c2:9c:6f:5a:fd:ec:69:43:10:ae:ba: f8:2b:62:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE18z+CPWW4YcwdXTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMwMWVlNzQtZThiNy00NDU3LTk0YzMtODdhNzljOWRm YmYzMB4XDTI2MDQxMzAxMDAyNFoXDTI2MDcxMjAxMDAyNFowLzEtMCsGA1UEAxMk OGJmYmY4OTgtYWIyMy00MjM0LTgxMjUtNzM0MmYzMTZkZDViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24OadpTH8y9Ox/VNdNwDJZRgIjb/TMjqgT+u 1jv2nx7/dc3+KVSrlhb0uh9IaSV0mQux0CZGk18iOsCBYX9RaVxmI0hchKp2kfqP sx+uQLXnTO6XmdsbyckIebHMkHK9GbmLGqecIahjgozc/7LZEwzwEg3yMsmBogC7 cpTIFkTJHqSbGVjO9xXcEn6F0Q2pO0IYnPV0tMzxz4dAyCPIMECUtWuFS4zevcI2 xpLcTOcpdEIAjx+M/qeDitjIhiw/W+BSHwgSXLBuzP7YJxj7UX9wCAsBC33XRLbm x1gHToZyCJQRJOfrqbKhoPTahAuCs2YQVdIIZ4aXhWkZIpjbqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbKQOu5TY/OH64KnH5n4JnBZQQMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81YzAx ZWU3NC1lOGI3LTQ0NTctOTRjMy04N2E3OWM5ZGZiZjMvZTg1MmUxNzMtNDQzZC0z MGQzLTllMTktZTg1NDliNmI0ZWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWMwMWVlNzQtZThiNy00NDU3LTk0 YzMtODdhNzljOWRmYmYzLzVjMDFlZTc0LWU4YjctNDQ1Ny05NGMzLTg3YTc5Yzlk ZmJmMy5jcmwwHwYDVR0jBBgwFoAUMSwBZxRdrf17zbvTLSP9bmGReKIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81YzAxZWU3NC1lOGI3LTQ0NTctOTRjMy04N2E3 OWM5ZGZiZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwB5iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACn9v6SgBeu92Uv+jNhu2kModKfSnckhSt17hPvWvVdNS12TDnLbKKSs ll0ikS3qpEtnB//8vSLV5ZmNV4bLmINF75aSNRG+RjGKCT37P/XQ+dCkGwa14SjG eMQFMZp7YKT+O+HY8NjO4k7Ty+5DWLFDL0EcS+bFpffqkuLKsvA11Wh/335hrt4y aPHD1Mqs6wZzUh2f7bp/uZcUyXFlWJNsQrm9KBWJBw6hYlMtqlp4vAPa8vM+nh/e XArBONFAkE5C0PI7TVFwPy/Fs5/fAps+4xnefIJmj+/EM0jKfDQtAifs9EH4gvN9 53udCCo9aL/CnG9a/expQxCuuvgrYoI= -----END CERTIFICATE-----Generated at Fri Apr 17 16:34:23 2026 by rpki-client