$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/289678b3-f21f-3e98-9287-47183cecd522.roa File: 289678b3-f21f-3e98-9287-47183cecd522.roa (raw, json) Hash identifier: QLcniELB9Jzu60qrgKCV56QhqJdA/8p4kt7m6sCZpNI= Subject key identifier: 96:BF:57:74:77:44:67:43:5A:BD:67:B2:66:BC:63:BA:05:9B:D4:A5 Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F4328584D40CB362789D26AB0D8A14C80 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/289678b3-f21f-3e98-9287-47183cecd522.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 20001 IP address blocks: 98.148.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:cb:36:27:89:d2:6a:b0:d8:a1:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=00844b77-87e5-46fd-af7e-1a11ce2ce85b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1f:6b:d9:90:02:02:bc:81:93:22:eb:5f:c9: b0:23:8d:f1:c1:7a:d4:88:48:5a:7d:49:01:8d:e6: 8a:11:a7:a8:de:22:11:c7:ac:fa:6f:0a:d3:ba:10: 53:01:91:f2:6c:91:15:69:74:83:c7:f8:70:cf:ad: c1:88:09:64:32:e7:f8:a0:e3:2b:f5:11:6d:a2:c0: 30:bf:12:73:ad:9b:c3:79:9e:28:25:95:e6:e8:26: f9:2d:ba:bb:06:f5:c7:0f:b4:6a:c1:47:f3:7b:1e: e2:4e:5b:06:1b:47:85:65:45:35:27:a3:bb:b9:92: 87:23:8a:cb:09:d6:8c:62:81:15:aa:20:f9:d5:b1: eb:20:f1:2f:70:96:88:55:fb:8b:48:fa:ee:aa:18: d3:60:ca:cd:e8:b3:c3:f5:ec:38:81:3c:bf:34:ee: 9f:f5:1d:f5:36:9c:39:14:a2:af:ec:a3:c3:8c:be: 4e:e4:97:73:27:f0:a1:7c:84:e2:c7:48:cb:47:9a: 08:aa:a3:87:41:e9:2f:dc:cd:f8:2f:fe:8d:6a:37: 43:e3:e3:67:e5:e7:17:3f:4d:84:c8:56:87:66:13: 63:56:9d:7f:20:61:e2:0e:7c:5b:49:65:4b:33:24: 80:5f:9a:f0:77:55:33:df:9e:3d:34:6d:17:4f:97: ef:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:BF:57:74:77:44:67:43:5A:BD:67:B2:66:BC:63:BA:05:9B:D4:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/289678b3-f21f-3e98-9287-47183cecd522.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 98.148.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:c0:a1:55:a5:55:9a:ce:23:85:98:03:41:b4:2a:ab:12:97: 9c:4a:5f:6b:26:09:31:62:1a:03:34:f8:8a:32:1e:0a:e5:37: 57:2c:9a:80:93:6e:8a:59:7e:16:88:33:00:36:e6:0a:7a:ed: 40:20:da:28:67:c6:80:3d:e5:fa:7f:13:89:3d:7b:b3:90:b5: 0d:54:9c:73:40:3a:e0:ae:2c:af:96:28:3d:7b:f6:42:5d:d3: b0:80:17:fb:b2:e1:61:85:82:42:54:a8:e7:20:78:96:19:21: cf:73:f3:fb:00:e4:18:5a:3a:d4:b4:28:11:17:db:10:6f:90: 95:c7:8f:85:1d:cf:66:82:7a:44:42:08:72:69:01:9a:69:8e: 6f:8a:2b:84:d5:6d:08:28:4e:11:04:ec:0d:71:dc:dd:9e:ab: 88:dc:12:c7:52:3a:ea:f7:11:3c:06:8c:b4:02:5a:44:4f:cd: 74:7a:bb:6a:ea:d5:9c:e9:61:b0:6b:56:1d:67:37:02:24:44: 3c:00:9e:5e:4e:6c:1b:14:74:04:bd:a4:9c:98:fc:7a:d4:66: 11:f3:48:6f:f8:bf:f2:f9:fd:21:6d:57:db:74:e3:2e:e9:da: fe:9c:97:b8:71:49:8d:3b:f3:68:f7:58:d0:c8:72:e3:ab:a8: a6:81:e3:4c -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE1AyzYnidJqsNihTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk MDA4NDRiNzctODdlNS00NmZkLWFmN2UtMWExMWNlMmNlODViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmB9r2ZACAryBkyLrX8mwI43xwXrUiEhafUkB jeaKEaeo3iIRx6z6bwrTuhBTAZHybJEVaXSDx/hwz63BiAlkMuf4oOMr9RFtosAw vxJzrZvDeZ4oJZXm6Cb5Lbq7BvXHD7RqwUfzex7iTlsGG0eFZUU1J6O7uZKHI4rL CdaMYoEVqiD51bHrIPEvcJaIVfuLSPruqhjTYMrN6LPD9ew4gTy/NO6f9R31Npw5 FKKv7KPDjL5O5JdzJ/ChfITix0jLR5oIqqOHQekv3M34L/6NajdD4+Nn5ecXP02E yFaHZhNjVp1/IGHiDnxbSWVLMySAX5rwd1Uz3549NG0XT5fvFQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJa/V3R3RGdDWr1nsma8Y7oFm9SlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvMjg5Njc4YjMtZjIxZi0z ZTk4LTkyODctNDcxODNjZWNkNTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBYpQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAVsChVaVVms4jhZgDQbQqqxKXnEpfayYJMWIaAzT4ijIeCuU3VyyagJNu ill+FogzADbmCnrtQCDaKGfGgD3l+n8TiT17s5C1DVScc0A64K4sr5YoPXv2Ql3T sIAX+7LhYYWCQlSo5yB4lhkhz3Pz+wDkGFo61LQoERfbEG+QlcePhR3PZoJ6REII cmkBmmmOb4orhNVtCChOEQTsDXHc3Z6riNwSx1I66vcRPAaMtAJaRE/NdHq7aurV nOlhsGtWHWc3AiREPACeXk5sGxR0BL2knJj8etRmEfNIb/i/8vn9IW1X23TjLuna /pyXuHFJjTvzaPdY0Mhy46uopoHjTA== -----END CERTIFICATE-----Generated at Thu Mar 26 19:16:28 2026 by rpki-client