$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cb45a3a4-3243-35fa-8a55-eb22a0413e1e.roa File: cb45a3a4-3243-35fa-8a55-eb22a0413e1e.roa (raw, json) Hash identifier: ecu+vQF+g6W2tbIlsBo5pGYZGMWAj1znZtRL0KyM5UM= Subject key identifier: 7D:DF:FE:A6:27:14:61:94:CC:A0:D5:6E:D8:D0:B6:A1:96:B9:F7:EA Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F4328584D2644AE9E98C29C1A26608ED0 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cb45a3a4-3243-35fa-8a55-eb22a0413e1e.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 20001 IP address blocks: 98.147.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:ae:9e:98:c2:9c:1a:26:60:8e:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=0e353143-3fca-4dde-b780-cbe4ad798abd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e1:87:8a:a9:31:df:99:d1:4b:3b:4a:11:a4: 18:14:a4:4e:50:33:7a:35:a7:7a:76:41:d4:90:dd: fc:f0:76:0c:39:74:30:39:ba:d1:97:70:8d:e4:1e: a9:9e:98:55:5d:e4:17:75:7a:39:e0:7f:55:2a:5d: 37:c2:4d:4b:31:6e:c2:5a:15:94:a6:ee:bf:bd:bd: 2a:9b:a5:c7:e6:5b:96:0f:99:a2:d7:41:86:c9:12: f7:f5:60:8c:50:a7:56:5e:69:7d:31:39:b8:8e:cb: 91:07:cd:e5:ac:7d:7e:89:5b:89:4c:30:72:f2:93: ff:5c:35:9e:54:0a:2c:94:19:a0:f8:c5:44:80:e8: 9f:7a:6d:55:69:5b:49:b6:67:33:b0:cc:00:d5:b3: d1:7a:29:0b:cb:69:6a:fa:a9:04:52:24:5d:bb:c2: 04:c5:14:fd:18:2d:59:7b:fb:58:e6:d8:78:e6:8c: 2f:1d:d5:38:80:8f:71:16:a5:3b:3a:d6:ad:43:18: 80:66:1f:38:e2:90:e5:aa:10:6e:8d:66:0e:e2:02: 00:e1:81:9d:3a:5e:25:f2:90:1c:c9:75:e5:cd:44: 9f:ca:ef:db:5c:98:bb:0f:e2:c9:45:9b:23:68:48: a7:41:38:58:b4:e6:55:92:e2:56:c6:af:23:3c:87: 3a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:DF:FE:A6:27:14:61:94:CC:A0:D5:6E:D8:D0:B6:A1:96:B9:F7:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cb45a3a4-3243-35fa-8a55-eb22a0413e1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 98.147.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:f1:79:0c:1c:dd:bf:63:61:66:cf:53:b1:ec:53:0b:7a:88: e5:2b:3d:e3:b1:f4:b6:47:19:82:ea:56:83:c8:a4:bd:f8:27: 60:ec:05:02:bc:88:c1:ea:b7:a0:9a:83:c4:65:a8:6c:3e:a3: 09:59:39:75:5d:f1:17:2b:32:21:7d:3a:15:8d:52:03:c3:a0: 45:92:8c:c8:70:b7:a7:d8:a7:73:f1:cc:bf:f4:45:ae:af:5d: 01:d4:11:d3:13:27:c3:69:b2:17:e1:23:28:fb:68:3a:de:f0: 2b:30:41:c0:02:f0:54:e9:08:cb:5f:f2:e0:29:3e:c5:99:ae: 46:e6:bd:44:dd:97:d2:1d:84:90:13:91:62:d3:c7:24:5f:87: 0b:79:21:2b:07:8d:a3:f7:31:64:8e:20:cc:d7:e9:9d:17:d2: 10:7d:c4:19:21:27:ab:06:3b:f0:57:92:c5:a9:e8:7f:77:68: ed:2c:26:50:50:54:84:27:a6:fb:b5:83:06:ef:5d:69:ac:f5: 86:43:4d:c5:27:d4:ab:ed:bc:64:86:79:59:00:5e:7a:08:5d: 8e:25:ae:9d:b3:be:cd:48:56:e3:22:7a:e2:be:8d:db:86:9a: 67:44:17:be:ba:4e:8d:31:05:a2:d0:3e:c2:1f:c6:82:5f:71: 11:66:f2:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mRK6emMKcGiZgjtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk MGUzNTMxNDMtM2ZjYS00ZGRlLWI3ODAtY2JlNGFkNzk4YWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+GHiqkx35nRSztKEaQYFKROUDN6Nad6dkHU kN388HYMOXQwObrRl3CN5B6pnphVXeQXdXo54H9VKl03wk1LMW7CWhWUpu6/vb0q m6XH5luWD5mi10GGyRL39WCMUKdWXml9MTm4jsuRB83lrH1+iVuJTDBy8pP/XDWe VAoslBmg+MVEgOifem1VaVtJtmczsMwA1bPReikLy2lq+qkEUiRdu8IExRT9GC1Z e/tY5th45owvHdU4gI9xFqU7OtatQxiAZh844pDlqhBujWYO4gIA4YGdOl4l8pAc yXXlzUSfyu/bXJi7D+LJRZsjaEinQThYtOZVkuJWxq8jPIc6HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH3f/qYnFGGUzKDVbtjQtqGWuffqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvY2I0NWEzYTQtMzI0My0z NWZhLThhNTUtZWIyMmEwNDEzZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYpN4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArxeQwc3b9jYWbPU7HsUwt6iOUrPeOx9LZHGYLqVoPIpL34J2DsBQK8 iMHqt6Cag8RlqGw+owlZOXVd8RcrMiF9OhWNUgPDoEWSjMhwt6fYp3PxzL/0Ra6v XQHUEdMTJ8NpshfhIyj7aDre8CswQcAC8FTpCMtf8uApPsWZrkbmvUTdl9IdhJAT kWLTxyRfhwt5ISsHjaP3MWSOIMzX6Z0X0hB9xBkhJ6sGO/BXksWp6H93aO0sJlBQ VIQnpvu1gwbvXWms9YZDTcUn1KvtvGSGeVkAXnoIXY4lrp2zvs1IVuMieuK+jduG mmdEF766To0xBaLQPsIfxoJfcRFm8i8= -----END CERTIFICATE-----Generated at Thu Mar 26 05:57:36 2026 by rpki-client