$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/a9f5020f-9be8-33fa-998b-3e466fc851ea.roa File: a9f5020f-9be8-33fa-998b-3e466fc851ea.roa (raw, json) Hash identifier: ZrQzTrdR5btcdIxxJl0L+o+vO4rUjpSNdhWvuO9NMhA= Subject key identifier: 52:C6:E9:82:EF:C0:54:90:82:A6:96:89:A1:4A:6B:17:24:F5:C6:BC Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584DE41B32C5FE1898BE87563780 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/a9f5020f-9be8-33fa-998b-3e466fc851ea.roa Signing time: Wed 20 May 2026 01:00:25 +0000 ROA not before: Wed 20 May 2026 01:00:25 +0000 ROA not after: Tue 18 Aug 2026 01:00:25 +0000 asID: 21859 IP address blocks: 98.98.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e4:1b:32:c5:fe:18:98:be:87:56:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: May 20 01:00:25 2026 GMT Not After : Aug 18 01:00:25 2026 GMT Subject: CN=297cd32c-0c6c-4772-8fc3-450935b9cd10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:34:52:23:62:a9:f4:57:22:34:a7:fa:f4:7d: 5a:01:f3:bd:ac:ea:9c:86:19:c7:e3:38:f4:96:43: f2:b9:be:74:b4:f2:e7:d4:cb:b0:d2:7e:ee:3a:1d: 65:0d:47:a3:ba:ad:1e:46:94:38:7a:e7:5f:a6:d8: 07:73:c0:01:81:c1:30:fb:17:57:26:61:cd:b3:1e: 19:df:4a:d2:81:37:ba:41:b4:2f:72:51:45:cd:98: 7a:65:43:99:c8:f0:e3:b1:de:c6:cd:74:3d:c4:f0: cf:ff:9d:99:1f:0b:a1:53:c6:7a:6d:14:af:42:51: 87:40:ed:2c:76:80:11:eb:7b:9d:49:49:d3:27:5a: 80:8b:d4:ad:64:53:01:8f:01:78:17:30:25:ba:cf: 4c:98:51:d9:d3:c3:33:0e:98:7e:a6:7d:93:9c:74: ec:72:71:f9:a9:ec:90:ad:58:3b:ab:d2:19:31:d4: 90:96:c3:df:41:ce:f1:a2:18:0e:e2:8b:42:90:81: 7a:f7:a8:d0:b9:32:c8:98:e6:05:3b:00:db:db:c4: 55:f3:25:96:9f:23:21:6b:60:c1:f1:4f:54:09:c2: c6:d8:8d:b1:09:3e:e4:5a:2b:af:bc:37:f7:42:f7: 7f:29:15:ce:23:43:d4:ec:1e:79:e5:19:5c:6f:1c: 1d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:C6:E9:82:EF:C0:54:90:82:A6:96:89:A1:4A:6B:17:24:F5:C6:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/a9f5020f-9be8-33fa-998b-3e466fc851ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 98.98.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:82:8d:11:b3:c4:54:0c:79:e9:08:a6:f8:02:54:d0:88:05: 09:4e:4f:1f:b1:97:1f:2f:ac:27:a8:57:cd:e2:19:1d:e8:0e: 37:d1:c0:6a:ad:9e:9e:5b:27:d7:27:d3:ab:0b:be:27:37:27: bc:fa:b7:aa:a9:f1:51:49:2f:ea:88:3f:a6:d9:17:28:5f:e9: eb:c5:e1:42:db:11:cf:9d:2b:9c:0f:8f:79:9c:21:52:91:17: 2e:48:48:3d:58:58:1e:7b:c0:35:57:9a:e7:eb:71:54:6e:67: e4:9c:92:95:aa:dc:87:ce:e5:5c:99:ea:75:b2:d7:70:16:6a: bd:8b:90:34:c6:08:e2:dc:e8:8e:df:2d:ad:a2:48:3d:25:2c: 22:a4:0f:f5:d9:b7:cc:46:f6:fc:5f:2b:9f:e9:b4:19:18:b9: 93:28:07:b1:9b:19:19:a6:a9:92:d8:22:81:d5:1a:43:03:39: 74:97:d0:db:26:c6:61:5e:8b:4d:09:f8:71:b7:00:38:bc:45: 11:f9:e7:aa:3f:b0:ca:4b:d1:75:36:1b:8b:5c:da:4f:5c:1b: e2:db:60:f2:9a:92:a0:19:16:1f:5e:44:56:65:76:3c:e6:25: e7:82:9e:be:2e:89:21:f9:ad:6a:65:d5:1f:0a:48:ca:04:10: b6:40:7b:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3kGzLF/hiYvodWN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI2MDUyMDAxMDAyNVoXDTI2MDgxODAxMDAyNVowLzEtMCsGA1UEAxMk Mjk3Y2QzMmMtMGM2Yy00NzcyLThmYzMtNDUwOTM1YjljZDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDRSI2Kp9FciNKf69H1aAfO9rOqchhnH4zj0 lkPyub50tPLn1Muw0n7uOh1lDUejuq0eRpQ4eudfptgHc8ABgcEw+xdXJmHNsx4Z 30rSgTe6QbQvclFFzZh6ZUOZyPDjsd7GzXQ9xPDP/52ZHwuhU8Z6bRSvQlGHQO0s doAR63udSUnTJ1qAi9StZFMBjwF4FzAlus9MmFHZ08MzDph+pn2TnHTscnH5qeyQ rVg7q9IZMdSQlsPfQc7xohgO4otCkIF696jQuTLImOYFOwDb28RV8yWWnyMha2DB 8U9UCcLG2I2xCT7kWiuvvDf3Qvd/KRXOI0PU7B555Rlcbxwd7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLG6YLvwFSQgqaWiaFKaxck9ca8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvYTlmNTAyMGYtOWJlOC0z M2ZhLTk5OGItM2U0NjZmYzg1MWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYmKoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWCjRGzxFQMeekIpvgCVNCIBQlOTx+xlx8vrCeoV83iGR3oDjfRwGqt np5bJ9cn06sLvic3J7z6t6qp8VFJL+qIP6bZFyhf6evF4ULbEc+dK5wPj3mcIVKR Fy5ISD1YWB57wDVXmufrcVRuZ+SckpWq3IfO5VyZ6nWy13AWar2LkDTGCOLc6I7f La2iSD0lLCKkD/XZt8xG9vxfK5/ptBkYuZMoB7GbGRmmqZLYIoHVGkMDOXSX0Nsm xmFei00J+HG3ADi8RRH556o/sMpL0XU2G4tc2k9cG+LbYPKakqAZFh9eRFZldjzm JeeCnr4uiSH5rWpl1R8KSMoEELZAew0= -----END CERTIFICATE-----Generated at Sat Jun 6 10:55:18 2026 by rpki-client