$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/cdfc3f24-ec70-3d00-bc56-7dcfa79ec631.roa File: cdfc3f24-ec70-3d00-bc56-7dcfa79ec631.roa (raw, json) Hash identifier: rejIeSfyq3/mZr19xybZCrGjmR4zDIH/abq8hipRMwA= Subject key identifier: BB:D3:5B:CF:58:8E:72:9B:42:C3:4C:FE:54:5E:8B:8A:C1:C7:AC:95 Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584E0865E7854DA1487EA1832FC4 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/cdfc3f24-ec70-3d00-bc56-7dcfa79ec631.roa Signing time: Tue 02 Jun 2026 01:00:10 +0000 ROA not before: Tue 02 Jun 2026 01:00:10 +0000 ROA not after: Mon 31 Aug 2026 01:00:10 +0000 asID: 4229 IP address blocks: 98.98.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:08:65:e7:85:4d:a1:48:7e:a1:83:2f:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Jun 2 01:00:10 2026 GMT Not After : Aug 31 01:00:10 2026 GMT Subject: CN=f2161dc1-388a-451a-a925-e5460888b755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:73:93:f7:85:af:ac:b1:a7:1c:c2:ff:9f:cb: b6:7d:ec:ae:37:34:50:46:ec:82:26:3f:f0:d6:3a: d6:4a:c9:59:31:0e:d9:8c:63:96:75:a4:1c:fb:cb: 25:e9:fd:a6:89:22:58:60:eb:8a:32:dc:94:0e:4e: e6:1c:51:09:20:9a:04:26:ca:9c:0f:47:d6:6d:a1: 63:d0:ab:45:54:c3:37:08:08:1c:ad:93:f1:10:27: de:7f:49:c7:d4:81:89:2e:6d:52:5d:a0:f3:ac:13: e6:e0:79:ef:05:df:24:db:98:fa:bc:1a:a3:ca:a2: 70:d7:e7:d2:47:84:ed:a8:a0:5f:1a:19:66:55:f1: e4:82:cf:d2:ca:6b:e2:38:6e:48:f7:bb:13:69:85: b4:f8:9f:1f:18:73:85:0a:a6:08:10:d6:ee:8e:4e: 3e:ce:bb:29:5c:1a:8f:9d:e8:f3:ea:06:fb:90:dc: 68:55:f5:78:52:38:9d:b4:71:bf:09:38:08:53:1b: 61:26:9e:c9:c1:b8:ee:d0:3a:e7:a7:3d:bc:f3:8a: 71:df:72:95:cf:55:70:07:e5:e4:eb:8c:8c:c4:9e: 8b:dd:68:50:a3:a1:53:7d:19:c4:68:df:f4:d0:34: ea:85:9d:be:98:11:47:16:1e:f0:47:94:13:7d:56: 62:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D3:5B:CF:58:8E:72:9B:42:C3:4C:FE:54:5E:8B:8A:C1:C7:AC:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/cdfc3f24-ec70-3d00-bc56-7dcfa79ec631.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 98.98.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:78:5f:1a:20:45:e4:29:09:e9:a2:6b:90:15:ac:89:84:c1: dc:87:68:f4:1c:34:c8:34:2c:00:d2:93:f1:4d:59:19:d3:05: c3:40:9a:92:39:a5:ee:07:79:25:9c:b6:18:32:5a:5f:fb:db: f6:be:17:72:d1:33:f6:20:36:af:53:61:0f:42:f7:e6:d4:85: 51:fb:28:99:cb:e1:93:04:71:8e:16:6b:32:1b:0a:4a:b5:98: 26:71:00:4d:65:ab:7a:60:c9:ca:c5:64:9f:95:2f:b7:f9:b9: 05:e6:aa:29:08:37:92:66:50:6b:8d:ac:3d:f4:2f:36:08:2a: b4:5f:f3:61:1c:a4:e4:6c:5a:9f:cb:14:47:de:34:c4:30:c8: 8b:d3:16:fb:a6:b9:21:77:87:72:17:47:66:0d:b4:03:09:b4: 40:b2:68:8e:e3:03:37:59:b1:98:34:45:d7:84:3c:39:f2:8a: f1:be:1f:20:0b:0c:a7:b9:9d:ca:64:5a:3b:b3:ed:26:2b:91: 26:01:b0:0c:e1:c4:a4:fa:f6:b2:af:32:7e:59:b6:47:c0:2e: c5:aa:d2:46:cb:a0:6b:f6:e3:3c:dc:bf:ca:bc:dc:0c:70:ee: 3d:6a:45:3e:3f:a7:0d:ac:0c:09:16:65:5d:57:21:b0:04:58: 96:bf:1a:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4IZeeFTaFIfqGDL8QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk ZjIxNjFkYzEtMzg4YS00NTFhLWE5MjUtZTU0NjA4ODhiNzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXOT94WvrLGnHML/n8u2feyuNzRQRuyCJj/w 1jrWSslZMQ7ZjGOWdaQc+8sl6f2miSJYYOuKMtyUDk7mHFEJIJoEJsqcD0fWbaFj 0KtFVMM3CAgcrZPxECfef0nH1IGJLm1SXaDzrBPm4HnvBd8k25j6vBqjyqJw1+fS R4TtqKBfGhlmVfHkgs/SymviOG5I97sTaYW0+J8fGHOFCqYIENbujk4+zrspXBqP nejz6gb7kNxoVfV4UjidtHG/CTgIUxthJp7Jwbju0Drnpz2884px33KVz1VwB+Xk 64yMxJ6L3WhQo6FTfRnEaN/00DTqhZ2+mBFHFh7wR5QTfVZiJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLvTW89YjnKbQsNM/lRei4rBx6yVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvY2RmYzNmMjQtZWM3MC0z ZDAwLWJjNTYtN2RjZmE3OWVjNjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYmJiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIB4XxogReQpCemia5AVrImEwdyHaPQcNMg0LADSk/FNWRnTBcNAmpI5 pe4HeSWcthgyWl/72/a+F3LRM/YgNq9TYQ9C9+bUhVH7KJnL4ZMEcY4WazIbCkq1 mCZxAE1lq3pgycrFZJ+VL7f5uQXmqikIN5JmUGuNrD30LzYIKrRf82EcpORsWp/L FEfeNMQwyIvTFvumuSF3h3IXR2YNtAMJtECyaI7jAzdZsZg0RdeEPDnyivG+HyAL DKe5ncpkWjuz7SYrkSYBsAzhxKT69rKvMn5ZtkfALsWq0kbLoGv24zzcv8q83Axw 7j1qRT4/pw2sDAkWZV1XIbAEWJa/Guo= -----END CERTIFICATE-----Generated at Sat Jun 6 09:40:05 2026 by rpki-client