$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778/c58a5059-a306-36b1-a8f6-4a7c911810fe.roa File: c58a5059-a306-36b1-a8f6-4a7c911810fe.roa (raw, json) Hash identifier: 5fca/qeJZzZwkl2GZ+MSRo8cYgqCI+KfHcwfGuCaDV0= Subject key identifier: FE:95:98:55:7F:D5:45:1B:0A:F1:34:9E:F1:C0:8B:30:E8:BE:1D:6F Certificate issuer: /CN=e470eb4e-d214-41dc-8f0d-9a1936ecc778 Certificate serial: 010D0C9F4328584D2BDA0F056FB83DF0CBC30080 Authority key identifier: E4:B0:A1:F8:61:B4:92:CD:93:0E:AB:E2:65:AF:BE:A5:B5:67:B6:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778/c58a5059-a306-36b1-a8f6-4a7c911810fe.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 20473 IP address blocks: 172.98.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778/e470eb4e-d214-41dc-8f0d-9a1936ecc778.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778/e470eb4e-d214-41dc-8f0d-9a1936ecc778.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:0f:05:6f:b8:3d:f0:cb:c3:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e470eb4e-d214-41dc-8f0d-9a1936ecc778 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=352878b8-c2c4-4c4b-9109-04f733dd7b1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c7:ce:74:8b:81:f1:c0:64:20:3d:65:de:d3: 68:ce:4d:56:0e:e8:0d:fd:87:4f:a9:6f:07:be:80: 42:92:28:92:60:41:86:c2:83:63:72:73:87:f5:b7: a2:09:5d:f7:db:0c:0f:bd:ac:4e:8a:51:c6:58:7e: 85:5a:68:7b:9d:50:25:a0:72:c3:ad:90:98:57:e5: 41:a0:d6:e0:5c:3a:e1:62:31:5d:02:51:50:03:dc: d9:08:2a:63:dd:94:16:e6:e3:a2:10:bd:3c:46:d0: 43:fc:b7:8a:97:fe:76:1a:05:74:b7:7f:be:eb:3f: 12:7f:55:f7:a8:f8:e2:24:ea:90:39:d2:3a:b5:80: 2a:de:7e:95:36:57:fe:31:4a:00:b1:c7:13:a8:19: 88:d1:94:ee:ec:66:db:dc:9b:cd:87:4f:74:fd:60: 52:17:57:ef:dc:97:08:0e:16:79:1e:41:4b:25:d3: ee:48:08:a8:b3:5b:98:e6:0d:de:41:ce:12:cd:02: 03:a3:8c:3b:ee:01:cf:4d:43:5c:80:6f:74:d1:83: f9:5a:a5:24:05:1a:2f:19:15:0f:38:14:2b:88:24: 36:62:2f:40:fe:bf:0a:9d:29:f8:4e:b8:cb:d6:c6: 4e:1c:fb:38:fa:70:01:83:66:5d:04:46:de:76:35: c7:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:95:98:55:7F:D5:45:1B:0A:F1:34:9E:F1:C0:8B:30:E8:BE:1D:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778/c58a5059-a306-36b1-a8f6-4a7c911810fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778/e470eb4e-d214-41dc-8f0d-9a1936ecc778.crl X509v3 Authority Key Identifier: keyid:E4:B0:A1:F8:61:B4:92:CD:93:0E:AB:E2:65:AF:BE:A5:B5:67:B6:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778.cer sbgp-ipAddrBlock: critical IPv4: 172.98.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:17:cc:5b:a9:e1:55:25:b3:f8:ce:66:78:b7:2e:bd:ac:73: b7:ba:c3:89:a2:6d:02:87:ac:2e:8f:b4:51:9b:d9:31:41:80: 29:cd:61:30:cc:cd:36:9d:53:b3:a6:2d:85:dc:68:5c:a0:6e: 9b:08:9c:74:23:b7:32:83:2c:54:ee:bb:8b:a3:08:49:1f:f7: 0a:6c:1d:3e:65:cb:89:23:b7:05:81:50:21:7c:b6:f9:84:92: 7e:da:85:ef:e9:ab:ce:ab:00:9b:e1:4e:70:40:8e:e9:fb:14: 8d:97:ac:29:54:64:12:a9:40:22:e0:c2:d3:0b:62:d9:08:27: f5:e0:cb:11:e8:f9:2a:bd:67:d0:f5:2d:01:ab:d8:c5:f9:6e: e3:b4:85:94:9b:85:ac:ce:26:af:97:ef:71:81:86:f7:db:56: 29:27:fc:ab:b5:87:d4:a2:0a:d6:bf:f6:fd:40:44:98:4a:3e: 29:ea:ad:1e:6d:f4:08:c8:8b:cc:e0:0a:19:67:d6:97:24:e3: 87:49:f8:37:a0:43:88:ee:a0:66:aa:a5:60:64:3a:5b:8e:2a: 3e:01:53:83:a7:22:05:1d:ec:e6:8f:63:a0:a9:06:c0:e2:61: 00:cc:b5:8d:d8:64:83:52:07:ad:cb:ef:fb:9b:49:99:63:c4: da:66:3b:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2g8Fb7g98MvDAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTQ3MGViNGUtZDIxNC00MWRjLThmMGQtOWExOTM2ZWNj Nzc4MB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk MzUyODc4YjgtYzJjNC00YzRiLTkxMDktMDRmNzMzZGQ3YjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksfOdIuB8cBkID1l3tNozk1WDugN/YdPqW8H voBCkiiSYEGGwoNjcnOH9beiCV332wwPvaxOilHGWH6FWmh7nVAloHLDrZCYV+VB oNbgXDrhYjFdAlFQA9zZCCpj3ZQW5uOiEL08RtBD/LeKl/52GgV0t3++6z8Sf1X3 qPjiJOqQOdI6tYAq3n6VNlf+MUoAsccTqBmI0ZTu7Gbb3JvNh090/WBSF1fv3JcI DhZ5HkFLJdPuSAios1uY5g3eQc4SzQIDo4w77gHPTUNcgG900YP5WqUkBRovGRUP OBQriCQ2Yi9A/r8KnSn4TrjL1sZOHPs4+nABg2ZdBEbedjXHYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP6VmFV/1UUbCvE0nvHAizDovh1vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lNDcw ZWI0ZS1kMjE0LTQxZGMtOGYwZC05YTE5MzZlY2M3NzgvYzU4YTUwNTktYTMwNi0z NmIxLWE4ZjYtNGE3YzkxMTgxMGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTQ3MGViNGUtZDIxNC00MWRjLThm MGQtOWExOTM2ZWNjNzc4L2U0NzBlYjRlLWQyMTQtNDFkYy04ZjBkLTlhMTkzNmVj Yzc3OC5jcmwwHwYDVR0jBBgwFoAU5LCh+GG0ks2TDqviZa++pbVntvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lNDcwZWI0ZS1kMjE0LTQxZGMtOGYwZC05YTE5 MzZlY2M3NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGIdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYXzFup4VUls/jOZni3Lr2sc7e6w4mibQKHrC6PtFGb2TFBgCnNYTDM zTadU7OmLYXcaFygbpsInHQjtzKDLFTuu4ujCEkf9wpsHT5ly4kjtwWBUCF8tvmE kn7ahe/pq86rAJvhTnBAjun7FI2XrClUZBKpQCLgwtMLYtkIJ/XgyxHo+Sq9Z9D1 LQGr2MX5buO0hZSbhazOJq+X73GBhvfbVikn/Ku1h9SiCta/9v1ARJhKPinqrR5t 9AjIi8zgChln1pck44dJ+DegQ4juoGaqpWBkOluOKj4BU4OnIgUd7OaPY6CpBsDi YQDMtY3YZINSB63L7/ubSZljxNpmO4o= -----END CERTIFICATE-----Generated at Sun Mar 15 23:14:40 2026 by rpki-client