$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/a85f78ed-9cc4-3b33-9011-eba0d3cd59d0.roa File: a85f78ed-9cc4-3b33-9011-eba0d3cd59d0.roa (raw, json) Hash identifier: pB6nqM8WXFK2i7+WzOKqOYiDzzsjEfrJt0C3KBuXhXo= Subject key identifier: A3:9F:DA:D8:C4:18:09:C0:B9:C2:40:89:E8:54:08:E7:9B:11:55:9B Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584D3DFFA9954D9EA6CF8362D800 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/a85f78ed-9cc4-3b33-9011-eba0d3cd59d0.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 21859 IP address blocks: 98.98.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:a9:95:4d:9e:a6:cf:83:62:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=9f623e65-8b28-4aa1-965c-c83a77b09921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e1:66:89:04:6b:1a:eb:75:83:e8:b4:f3:84: 98:b5:e7:0c:28:49:56:cd:7e:00:05:dd:82:e4:76: 1a:d5:3e:1d:7b:f1:7b:a4:4b:a9:4f:ec:f3:92:44: c6:f2:d0:85:9e:35:99:36:bd:19:ae:ac:cc:27:ca: 19:4f:a0:01:ae:25:5e:31:ba:56:2d:75:94:7f:70: 30:7f:1d:dc:1e:8f:5d:a8:f9:10:2e:12:e6:0b:d2: 51:29:11:37:a1:9a:31:a0:1f:e6:e9:60:df:a6:ff: 28:49:9b:35:20:84:1e:ae:65:a0:d5:c7:24:69:c5: 25:cb:41:9a:93:ac:2e:34:c4:6c:ca:f2:e7:02:4a: 72:f2:a9:24:a4:58:0b:de:29:0a:c7:31:ba:17:89: ff:78:f1:34:4a:22:44:c3:96:5e:0a:89:d3:96:d8: 3c:d5:25:e2:22:c4:d5:50:4f:b9:f5:1e:5b:f1:45: fe:9c:28:c9:6a:96:fa:1e:6f:62:12:8c:74:5f:e1: 57:be:0f:bb:73:e0:1c:69:fc:d7:9b:8e:0d:c4:22: c6:91:06:a9:62:3b:8b:92:a8:0e:da:14:aa:e1:0c: 1f:69:1d:fc:69:b2:d3:71:bd:16:a4:20:1a:83:1b: d2:a7:4d:be:7d:6c:06:34:44:65:84:23:b6:13:73: 9d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:9F:DA:D8:C4:18:09:C0:B9:C2:40:89:E8:54:08:E7:9B:11:55:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/a85f78ed-9cc4-3b33-9011-eba0d3cd59d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 98.98.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:68:87:78:0f:fb:2b:36:77:41:37:f4:6a:ad:05:01:ee:15: 91:e6:a7:e1:40:26:42:1f:27:fd:d6:d8:e0:ca:a1:47:89:16: 7f:4d:53:04:1e:1a:72:bd:f9:c0:92:7e:c8:8c:b0:55:23:8f: a5:1b:f5:46:71:dc:2a:ae:f1:4f:ec:19:7b:df:45:5c:a2:ca: 0c:83:af:c2:1f:b9:63:ea:61:59:f1:74:8a:34:86:1e:49:0f: a7:90:55:6e:87:b6:90:30:fe:c8:13:b1:55:9c:08:a8:a9:47: 4e:2d:1e:97:b1:93:3c:46:a2:3e:ee:46:66:a1:23:c9:6b:38: f2:77:82:6a:99:d6:2c:7c:e8:3c:6d:61:93:2e:22:59:8b:9d: b2:04:ed:5a:6d:ba:b0:3f:1e:3e:c0:92:cf:e2:48:d3:6a:7d: e5:a8:e5:c3:c5:2f:1e:4a:68:66:a4:7d:99:a2:2b:11:e1:ce: 3c:60:b7:d8:43:e3:cc:77:16:e0:75:10:12:c8:f0:03:54:5f: 66:c2:95:ac:ae:d4:9c:20:03:44:f9:f4:0e:75:31:a9:e0:3b: 19:e5:cf:7e:29:7d:74:e1:d2:50:40:69:72:32:8f:9b:3a:ac: cc:de:d2:cd:ca:ff:eb:f0:f7:3a:c0:06:02:9f:a4:7d:b7:5e: b4:bc:2f:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/6mVTZ6mz4Ni2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk OWY2MjNlNjUtOGIyOC00YWExLTk2NWMtYzgzYTc3YjA5OTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eFmiQRrGut1g+i084SYtecMKElWzX4ABd2C 5HYa1T4de/F7pEupT+zzkkTG8tCFnjWZNr0ZrqzMJ8oZT6ABriVeMbpWLXWUf3Aw fx3cHo9dqPkQLhLmC9JRKRE3oZoxoB/m6WDfpv8oSZs1IIQermWg1cckacUly0Ga k6wuNMRsyvLnAkpy8qkkpFgL3ikKxzG6F4n/ePE0SiJEw5ZeConTltg81SXiIsTV UE+59R5b8UX+nCjJapb6Hm9iEox0X+FXvg+7c+AcafzXm44NxCLGkQapYjuLkqgO 2hSq4QwfaR38abLTcb0WpCAagxvSp02+fWwGNERlhCO2E3OdYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOf2tjEGAnAucJAiehUCOebEVWbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvYTg1Zjc4ZWQtOWNjNC0z YjMzLTkwMTEtZWJhMGQzY2Q1OWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYmLoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtoh3gP+ys2d0E39GqtBQHuFZHmp+FAJkIfJ/3W2ODKoUeJFn9NUwQe GnK9+cCSfsiMsFUjj6Ub9UZx3Cqu8U/sGXvfRVyiygyDr8IfuWPqYVnxdIo0hh5J D6eQVW6HtpAw/sgTsVWcCKipR04tHpexkzxGoj7uRmahI8lrOPJ3gmqZ1ix86Dxt YZMuIlmLnbIE7VpturA/Hj7Aks/iSNNqfeWo5cPFLx5KaGakfZmiKxHhzjxgt9hD 48x3FuB1EBLI8ANUX2bClayu1JwgA0T59A51MangOxnlz34pfXTh0lBAaXIyj5s6 rMze0s3K/+vw9zrABgKfpH23XrS8L7I= -----END CERTIFICATE-----Generated at Thu Mar 26 07:42:11 2026 by rpki-client