$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/225c9203-07ab-32ce-986d-a2de1484a19b.roa File: 225c9203-07ab-32ce-986d-a2de1484a19b.roa (raw, json) Hash identifier: sYGBaF2vHzqXe0mRBAlaB2MIxx6DHEd9GS6mgfWnLN4= Subject key identifier: 3C:84:81:95:BA:59:F1:20:63:EF:37:0A:39:5D:80:55:5C:DA:88:37 Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F4328584D40CA8FBF0941F762822066E0 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/225c9203-07ab-32ce-986d-a2de1484a19b.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 16787 IP address blocks: 98.120.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:8f:bf:09:41:f7:62:82:20:66:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=787e5e19-a801-4317-a173-57e76143f384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:53:3c:fa:ab:b9:10:bb:26:11:58:7b:07:5d: 36:2d:c0:87:47:9f:fd:f7:ec:44:22:a1:79:b2:49: 32:5e:6e:73:84:5f:b8:a1:86:b8:49:17:f2:c8:9b: 55:b5:5d:73:2e:9a:63:67:90:ac:fa:c4:18:0f:9e: 5b:30:bb:cd:f6:f2:53:cf:cf:f0:0e:fe:a8:19:b4: fc:a4:f1:1a:d4:f8:bc:25:ef:9d:19:e5:0f:d7:80: ab:ff:46:36:54:57:04:d0:09:2f:27:b1:c1:b0:8e: 07:f3:d3:05:35:b0:e8:7c:99:0b:d7:88:78:e8:00: 11:ec:f6:cb:11:fb:c2:82:8f:79:11:0f:8b:eb:f4: 07:db:a4:c5:58:ad:de:99:0e:74:ae:6a:d1:be:8d: 96:3d:2f:45:50:a9:dc:e0:6d:ef:7b:15:33:44:e4: 2e:7c:aa:c7:13:18:03:19:92:c7:d5:e3:2a:d4:ec: ef:3e:59:a5:5b:b3:b3:20:f2:59:6f:90:1b:2d:df: 6e:8a:4f:fc:0f:e7:53:d1:6d:0b:b5:66:c1:73:0e: 56:f5:6d:1c:53:4f:15:81:1e:63:b8:f1:f1:c5:94: 2d:55:cc:4b:90:e1:10:82:c5:55:d6:ee:7d:93:c1: 38:46:a0:ae:75:60:36:0e:4b:5e:3c:7d:e0:0b:e3: 32:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:84:81:95:BA:59:F1:20:63:EF:37:0A:39:5D:80:55:5C:DA:88:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/225c9203-07ab-32ce-986d-a2de1484a19b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 98.120.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:74:a1:9d:a2:ce:86:32:30:0c:e0:18:05:d7:8c:38:15:cc: c2:1b:9b:75:fd:56:28:dc:68:fc:6e:32:40:c4:a1:bb:15:7c: fd:2c:51:96:72:c5:6c:99:a6:26:c2:fe:f1:15:b9:ad:0e:19: d3:c0:a9:38:3c:de:f2:b5:d3:dc:ee:b0:e6:e7:70:83:5f:7d: 59:27:34:ce:f9:d7:c5:44:e8:fd:d6:29:b3:12:7f:19:57:11: 71:f1:18:d3:36:a7:57:85:3a:1c:eb:cd:40:17:08:23:b4:c2: 1e:a7:c9:80:d4:9f:df:ca:7c:5b:4f:ed:66:8e:00:dd:b2:a2: 74:52:56:bc:63:e7:ba:3c:30:27:0f:b4:eb:98:61:f7:f1:0b: ba:7d:58:ed:0a:0a:b6:8c:4b:3b:e9:1d:9e:a5:e4:ee:eb:b5: 64:2a:f8:94:87:99:68:3b:71:1c:65:f9:20:25:60:9c:76:1e: 47:f6:f6:79:4e:f9:1a:44:74:7a:11:3d:4f:8d:68:f3:34:f3: c1:19:06:38:5f:7f:28:32:8f:65:ce:8e:60:f8:09:4d:55:2b: a7:59:f5:07:86:2a:00:99:24:03:3e:e0:26:2c:ec:77:7f:3b: 95:c6:02:82:07:68:c9:d7:17:62:65:aa:a3:1f:88:e5:d3:f3: f2:87:69:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ayo+/CUH3YoIgZuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk Nzg3ZTVlMTktYTgwMS00MzE3LWExNzMtNTdlNzYxNDNmMzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVM8+qu5ELsmEVh7B102LcCHR5/99+xEIqF5 skkyXm5zhF+4oYa4SRfyyJtVtV1zLppjZ5Cs+sQYD55bMLvN9vJTz8/wDv6oGbT8 pPEa1Pi8Je+dGeUP14Cr/0Y2VFcE0AkvJ7HBsI4H89MFNbDofJkL14h46AAR7PbL EfvCgo95EQ+L6/QH26TFWK3emQ50rmrRvo2WPS9FUKnc4G3vexUzROQufKrHExgD GZLH1eMq1OzvPlmlW7OzIPJZb5AbLd9uik/8D+dT0W0LtWbBcw5W9W0cU08VgR5j uPHxxZQtVcxLkOEQgsVV1u59k8E4RqCudWA2DktePH3gC+My1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDyEgZW6WfEgY+83CjldgFVc2og3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvMjI1YzkyMDMtMDdhYi0z MmNlLTk4NmQtYTJkZTE0ODRhMTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYnhoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJ0oZ2izoYyMAzgGAXXjDgVzMIbm3X9VijcaPxuMkDEobsVfP0sUZZy xWyZpibC/vEVua0OGdPAqTg83vK109zusObncINffVknNM7518VE6P3WKbMSfxlX EXHxGNM2p1eFOhzrzUAXCCO0wh6nyYDUn9/KfFtP7WaOAN2yonRSVrxj57o8MCcP tOuYYffxC7p9WO0KCraMSzvpHZ6l5O7rtWQq+JSHmWg7cRxl+SAlYJx2Hkf29nlO +RpEdHoRPU+NaPM088EZBjhffygyj2XOjmD4CU1VK6dZ9QeGKgCZJAM+4CYs7Hd/ O5XGAoIHaMnXF2JlqqMfiOXT8/KHaQg= -----END CERTIFICATE-----Generated at Thu Mar 26 22:12:57 2026 by rpki-client