$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df24d32a-3285-3346-9249-a62ec8f163e8.roa File: df24d32a-3285-3346-9249-a62ec8f163e8.roa (raw, json) Hash identifier: 90s4Oa+BdN7IxvRF5UB3IhgSEoHeVtsg9CGNcZ0jaY8= Subject key identifier: E4:D2:12:8E:3F:99:84:A9:E3:10:B4:23:68:72:D0:7E:E2:E4:00:E2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D143D599C6319A87850760F80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df24d32a-3285-3346-9249-a62ec8f163e8.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 33491 IP address blocks: 98.223.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Mar 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:59:9c:63:19:a8:78:50:76:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=100c8dad-78c8-4bce-9bda-5cc4edd1e02b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ef:13:bf:5e:85:f5:00:c5:2a:4d:62:6f:ca: 33:23:21:ab:84:55:83:ef:7e:c5:82:a1:fb:7a:81: 59:5f:06:4e:07:26:b6:6a:08:f5:f5:5b:25:1d:db: e1:09:21:b1:12:e9:91:4a:c9:61:f0:e0:6c:c2:a3: 8d:11:12:87:3b:f3:31:94:58:2a:73:de:56:d9:80: 74:cb:df:5e:ba:7e:95:77:81:fa:26:86:f4:10:2d: 74:69:7b:48:b3:dc:17:12:f3:3f:d5:3e:b4:75:2f: cb:2c:f1:c4:cd:c4:46:d7:79:60:18:af:14:17:28: 59:38:57:71:82:4b:49:50:33:be:6c:ff:47:69:77: 89:73:1e:e6:20:cc:d2:3a:49:18:bf:aa:25:fa:d4: 0a:47:2f:69:0a:06:a9:e4:4f:37:88:aa:0e:da:1f: c1:2c:c8:e4:ca:4e:14:a2:bb:c0:cb:9e:ac:4c:9d: c0:df:ee:fe:54:6b:50:f0:ff:95:ea:79:94:00:fb: 62:a3:9a:77:af:92:f9:5d:b5:46:ef:86:8c:08:a7: 8c:72:b1:d0:51:d1:5f:c9:1e:1a:05:75:34:39:25: be:10:4b:f7:e6:be:52:b8:1a:75:96:8d:4f:cd:e5: 58:01:81:40:bc:56:e1:90:a3:a6:51:83:e5:da:71: 09:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D2:12:8E:3F:99:84:A9:E3:10:B4:23:68:72:D0:7E:E2:E4:00:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df24d32a-3285-3346-9249-a62ec8f163e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.223.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:f5:5b:bc:f2:81:14:f0:9b:2a:6d:f1:b2:20:f1:5d:0e:7a: 58:7b:d4:aa:27:1d:ba:8d:09:cc:d0:66:47:14:da:18:4f:54: ed:26:1d:8c:cf:2c:f7:f8:0b:14:fc:e1:8f:94:70:c5:c6:c0: fa:1a:bf:fa:32:47:42:44:5a:51:18:00:b4:57:69:04:21:17: 72:65:ba:44:27:56:0b:8f:12:5a:e5:62:ac:dc:72:bf:19:39: 20:5c:69:11:6a:8c:bc:df:67:08:5d:5b:07:c3:4a:68:41:b4: 46:92:32:08:78:05:73:8d:4b:cb:45:b0:71:80:6c:4c:4c:20: 73:d7:7e:03:b4:4d:63:3e:c6:47:44:a9:d1:54:16:92:d8:6e: 3e:6c:d3:5e:fd:40:f6:55:ab:dc:63:bb:f2:08:72:b5:08:af: 40:6f:d7:47:36:ee:fc:92:17:86:13:d0:3b:a0:37:8b:25:b0: ec:11:76:cf:3c:11:2a:74:ac:bc:59:33:3e:f0:69:c2:4d:da: 25:85:9b:fd:a8:fd:bc:0b:ce:4c:d1:aa:29:1d:e4:c4:4f:df: df:b5:dd:5b:36:4b:f4:a9:4f:79:ef:6a:ab:a6:ea:c8:bf:b3: 71:fa:92:c7:75:7c:21:88:82:56:72:3c:5e:58:05:c3:a2:81: 31:03:9a:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPVmcYxmoeFB2D4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk MTAwYzhkYWQtNzhjOC00YmNlLTliZGEtNWNjNGVkZDFlMDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3u8Tv16F9QDFKk1ib8ozIyGrhFWD737FgqH7 eoFZXwZOBya2agj19VslHdvhCSGxEumRSslh8OBswqONERKHO/MxlFgqc95W2YB0 y99eun6Vd4H6Job0EC10aXtIs9wXEvM/1T60dS/LLPHEzcRG13lgGK8UFyhZOFdx gktJUDO+bP9HaXeJcx7mIMzSOkkYv6ol+tQKRy9pCgap5E83iKoO2h/BLMjkyk4U orvAy56sTJ3A3+7+VGtQ8P+V6nmUAPtio5p3r5L5XbVG74aMCKeMcrHQUdFfyR4a BXU0OSW+EEv35r5SuBp1lo1PzeVYAYFAvFbhkKOmUYPl2nEJfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOTSEo4/mYSp4xC0I2hy0H7i5ADiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGYyNGQzMmEtMzI4NS0z MzQ2LTkyNDktYTYyZWM4ZjE2M2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYt/FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABD1W7zygRTwmypt8bIg8V0Oelh71KonHbqNCczQZkcU2hhPVO0mHYzP LPf4CxT84Y+UcMXGwPoav/oyR0JEWlEYALRXaQQhF3JlukQnVguPElrlYqzccr8Z OSBcaRFqjLzfZwhdWwfDSmhBtEaSMgh4BXONS8tFsHGAbExMIHPXfgO0TWM+xkdE qdFUFpLYbj5s0179QPZVq9xju/IIcrUIr0Bv10c27vySF4YT0DugN4slsOwRds88 ESp0rLxZMz7wacJN2iWFm/2o/bwLzkzRqikd5MRP39+13Vs2S/SpT3nvaqum6si/ s3H6ksd1fCGIglZyPF5YBcOigTEDmng= -----END CERTIFICATE-----Generated at Sat Mar 7 10:30:33 2026 by rpki-client