$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/af72ac96-389c-3eb8-a84c-7f22db7a7533.roa File: af72ac96-389c-3eb8-a84c-7f22db7a7533.roa (raw, json) Hash identifier: tg3bmBuDoI9Hcg3ZcxNYUNOeN0C+LxErwltR3DDA5Wc= Subject key identifier: DE:E7:AB:A5:72:64:3D:5D:9C:C9:D7:64:9B:38:F4:EC:01:4F:E0:7C Certificate issuer: /CN=d65fef8f-4cd2-4778-9158-f56f30242812 Certificate serial: 010D0C9F4328584D4A8FB2687300D879B5270C00 Authority key identifier: 7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/af72ac96-389c-3eb8-a84c-7f22db7a7533.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 2734 IP address blocks: 98.158.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:b2:68:73:00:d8:79:b5:27:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d65fef8f-4cd2-4778-9158-f56f30242812 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=c7149406-243a-4e90-9254-817a2049b113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:75:a5:f1:9b:8c:d3:6d:0f:24:55:eb:ad:39: 5d:e2:4c:d7:71:46:0c:8c:df:1c:07:5f:98:45:4e: d5:ea:9a:32:96:81:67:19:2e:90:73:68:40:e1:ed: 0c:03:5f:fd:ac:26:58:16:0b:32:73:b4:dd:3e:7a: c3:76:de:e3:9e:43:7e:76:8f:bc:7c:ec:49:85:35: e1:0c:52:8d:e1:22:a2:c7:5b:7e:59:d1:af:02:6b: f8:c6:52:1e:d3:a9:dd:97:82:6c:94:62:f7:24:02: 7a:6f:6f:5a:fc:b5:69:57:60:22:45:7d:ec:fb:52: 83:ae:1d:34:b5:ef:38:f6:5f:0e:63:68:67:75:9a: ce:6d:c0:76:f2:0a:d8:b0:83:91:67:aa:11:1e:ed: ae:32:9e:57:99:ae:b9:9b:99:6f:73:cd:22:6b:1c: 9c:f8:40:89:53:fb:7f:1a:50:cf:be:d9:08:55:d5: cc:db:76:10:b3:5e:e8:68:5f:3d:50:a4:4e:1f:6a: b4:c1:92:78:6d:0a:13:41:80:bc:b5:d7:6e:4c:c9: 31:a9:ea:37:ee:31:0d:a9:96:13:49:b1:03:4f:cc: 7b:b8:c1:e7:e9:ef:cb:cc:51:43:d8:17:bc:42:47: e1:e1:61:4d:69:e1:bc:34:65:8f:be:f4:00:d2:3f: b2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E7:AB:A5:72:64:3D:5D:9C:C9:D7:64:9B:38:F4:EC:01:4F:E0:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/af72ac96-389c-3eb8-a84c-7f22db7a7533.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl X509v3 Authority Key Identifier: keyid:7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer sbgp-ipAddrBlock: critical IPv4: 98.158.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:bf:b8:3a:cd:b3:24:3c:29:0b:00:49:78:74:89:be:3d:cb: 86:cf:8c:ae:5e:20:18:0b:23:83:68:a2:2e:e3:9b:15:de:e9: e3:fb:7e:b2:3b:f4:05:e6:30:2d:dc:94:ed:c7:f1:f7:4b:81: 76:36:08:82:e6:da:48:f4:f8:d2:07:ee:e6:be:1f:07:71:ee: 2b:aa:b7:cf:27:2c:d3:5d:f0:62:94:95:62:5d:0a:d1:48:d5: 37:62:88:0e:9a:08:8c:81:02:4d:c0:19:e3:6e:23:07:b3:c0: 03:97:17:92:38:ec:2a:54:d1:bc:aa:88:53:3b:2b:be:2b:12: 6b:89:90:7e:d6:4f:8d:50:f4:2a:e8:e4:9d:ba:d0:01:43:29: ed:68:d8:83:43:dc:69:6a:9e:8c:47:ac:d2:44:26:33:93:77: 02:4b:5f:49:3c:90:51:c8:a5:4e:9f:b1:3a:be:5f:c7:23:4e: 2f:f5:8a:3d:b3:e8:89:9b:1d:8a:68:a4:93:fc:61:d3:23:a0: b6:70:4e:27:3c:9e:68:c3:fa:3b:6e:9f:a5:d8:31:70:ea:36: c7:a2:e8:b0:d3:79:2b:7a:66:ec:9a:7d:bc:d5:3a:e0:1d:8f: 63:c2:ae:6a:3d:fb:c3:cf:2a:5d:eb:68:db:f2:08:a6:5c:10: 85:6a:80:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj7JocwDYebUnDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY1ZmVmOGYtNGNkMi00Nzc4LTkxNTgtZjU2ZjMwMjQy ODEyMB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk YzcxNDk0MDYtMjQzYS00ZTkwLTkyNTQtODE3YTIwNDliMTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHWl8ZuM020PJFXrrTld4kzXcUYMjN8cB1+Y RU7V6poyloFnGS6Qc2hA4e0MA1/9rCZYFgsyc7TdPnrDdt7jnkN+do+8fOxJhTXh DFKN4SKix1t+WdGvAmv4xlIe06ndl4JslGL3JAJ6b29a/LVpV2AiRX3s+1KDrh00 te849l8OY2hndZrObcB28grYsIORZ6oRHu2uMp5Xma65m5lvc80iaxyc+ECJU/t/ GlDPvtkIVdXM23YQs17oaF89UKROH2q0wZJ4bQoTQYC8tdduTMkxqeo37jENqZYT SbEDT8x7uMHn6e/LzFFD2Be8Qkfh4WFNaeG8NGWPvvQA0j+yjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN7nq6VyZD1dnMnXZJs49OwBT+B8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVm ZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZmMzAyNDI4MTIvYWY3MmFjOTYtMzg5Yy0z ZWI4LWE4NGMtN2YyMmRiN2E3NTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDY1ZmVmOGYtNGNkMi00Nzc4LTkx NTgtZjU2ZjMwMjQyODEyL2Q2NWZlZjhmLTRjZDItNDc3OC05MTU4LWY1NmYzMDI0 MjgxMi5jcmwwHwYDVR0jBBgwFoAUf5hQBZBb45yWyzsCUOY3tAKzSTgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVmZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZm MzAyNDI4MTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYp6QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALG/uDrNsyQ8KQsASXh0ib49y4bPjK5eIBgLI4Nooi7jmxXe6eP7frI7 9AXmMC3clO3H8fdLgXY2CILm2kj0+NIH7ua+Hwdx7iuqt88nLNNd8GKUlWJdCtFI 1TdiiA6aCIyBAk3AGeNuIwezwAOXF5I47CpU0byqiFM7K74rEmuJkH7WT41Q9Cro 5J260AFDKe1o2IND3GlqnoxHrNJEJjOTdwJLX0k8kFHIpU6fsTq+X8cjTi/1ij2z 6ImbHYpopJP8YdMjoLZwTic8nmjD+jtun6XYMXDqNsei6LDTeSt6ZuyafbzVOuAd j2PCrmo9+8PPKl3raNvyCKZcEIVqgFQ= -----END CERTIFICATE-----Generated at Fri Mar 27 00:36:49 2026 by rpki-client