$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/98f32648-a32e-38aa-9fd3-716eb026852a.roa File: 98f32648-a32e-38aa-9fd3-716eb026852a.roa (raw, json) Hash identifier: wa0xozuCahrlyuyLUPZSM7TH7Tv43hN3FGuD52lWzco= Subject key identifier: 3B:38:86:D2:08:FF:71:D9:85:45:D2:48:16:46:55:B8:70:FF:15:8E Certificate issuer: /CN=4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e Certificate serial: 010D0C9F4328584DB4A57A3E55D71475F76BB800 Authority key identifier: DE:28:68:6B:51:72:77:84:75:80:55:FF:DA:DA:17:74:CD:70:CE:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/98f32648-a32e-38aa-9fd3-716eb026852a.roa Signing time: Sun 03 May 2026 01:00:23 +0000 ROA not before: Sun 03 May 2026 01:00:23 +0000 ROA not after: Sat 01 Aug 2026 01:00:23 +0000 asID: 41095 IP address blocks: 98.158.96.0/20 maxlen: 24 104.254.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b4:a5:7a:3e:55:d7:14:75:f7:6b:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e Validity Not Before: May 3 01:00:23 2026 GMT Not After : Aug 1 01:00:23 2026 GMT Subject: CN=03fe3cbf-d74f-46e1-975e-93d23ea98e73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:09:2f:ed:92:06:f3:78:8d:ec:71:bc:ae:63: 4b:70:91:69:95:b7:8f:d5:17:10:49:4c:f4:ab:2c: 75:24:50:2f:1a:9b:ac:ee:60:e0:57:7d:d8:11:14: 5c:cd:38:c0:3e:f3:49:09:b8:ae:0a:67:cf:8e:b4: ec:d5:72:2a:96:76:c4:79:63:a8:99:81:19:69:f7: ae:0e:2e:39:c8:6a:44:85:4a:cd:40:69:77:a4:2b: af:b4:a0:59:e6:48:37:85:da:e6:77:47:3e:f6:94: 7c:da:ab:4e:19:05:ab:cf:2a:dc:87:94:de:22:05: 0b:33:aa:61:46:d3:4c:3c:da:f2:7d:34:a0:a9:3b: 95:7d:c1:78:c4:7d:f5:9d:b1:fd:54:37:dc:d3:fa: a9:7f:52:e4:56:72:d4:86:f8:fe:93:8f:c8:38:40: 96:c6:23:54:0f:e6:57:f6:48:65:55:c2:50:77:bf: 49:54:6f:09:fb:5e:0d:72:a6:1e:3b:d0:f4:9a:aa: 16:21:9f:60:c0:57:56:d2:56:17:b5:12:8a:d0:fa: 24:5a:e8:4d:4f:68:1e:f5:8e:02:ec:e0:07:98:32: af:fe:40:5c:8b:81:a4:cb:03:09:e4:bf:26:da:11: 26:86:7d:f6:4b:31:03:c6:b5:2f:83:fc:06:60:80: 0b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:38:86:D2:08:FF:71:D9:85:45:D2:48:16:46:55:B8:70:FF:15:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/98f32648-a32e-38aa-9fd3-716eb026852a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.crl X509v3 Authority Key Identifier: keyid:DE:28:68:6B:51:72:77:84:75:80:55:FF:DA:DA:17:74:CD:70:CE:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.cer sbgp-ipAddrBlock: critical IPv4: 98.158.96.0/20 104.254.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:ce:0e:53:30:46:ef:9a:94:aa:96:e7:1b:8b:21:22:e4:a0: 9e:2a:dd:6a:ed:3b:6c:ad:13:9b:8f:a1:c3:e7:99:c1:de:aa: 0d:f9:33:f1:46:26:b0:a9:4b:ed:41:55:76:2b:02:a6:d7:57: aa:7d:01:04:7d:e4:70:3b:22:a5:8a:df:d7:ec:9c:32:0d:28: a5:73:09:cb:63:4f:c9:2c:ad:4f:2b:b0:58:b7:ee:80:03:27: 2e:9f:8d:56:eb:a4:25:d0:af:6e:2a:8e:d9:a3:2c:ac:37:5f: 97:f4:51:99:7e:61:2c:fa:53:21:45:62:ce:56:b8:70:46:52: dd:a2:f3:7a:d7:a6:fe:c7:be:01:3c:c4:18:e6:60:a5:fe:d1: 0f:f6:6b:17:bb:5e:65:04:93:2f:d2:92:9a:0a:60:f0:40:e2: 3f:69:82:07:26:e0:e9:71:a0:68:8e:e7:03:2a:b0:e2:ea:10: b7:9a:01:f7:6e:df:57:f4:bb:48:71:a3:1d:5f:33:12:f7:63: 1d:28:26:42:a6:a6:19:1c:a3:76:79:6e:8d:5e:99:6c:04:1d: 21:e2:8e:61:a5:e5:fa:9f:85:cf:a9:dd:f4:fb:15:62:3c:8a: d6:bb:56:ce:0c:10:04:4a:3d:aa:22:44:ee:f6:49:1f:44:59: 15:60:d9:ca -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE20pXo+VdcUdfdruAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGZiNWY2NDgtZDhiNC00ZWUyLWE0M2QtMWJhMDFiMDQy ZTVlMB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk MDNmZTNjYmYtZDc0Zi00NmUxLTk3NWUtOTNkMjNlYTk4ZTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQkv7ZIG83iN7HG8rmNLcJFplbeP1RcQSUz0 qyx1JFAvGpus7mDgV33YERRczTjAPvNJCbiuCmfPjrTs1XIqlnbEeWOomYEZafeu Di45yGpEhUrNQGl3pCuvtKBZ5kg3hdrmd0c+9pR82qtOGQWrzyrch5TeIgULM6ph RtNMPNryfTSgqTuVfcF4xH31nbH9VDfc0/qpf1LkVnLUhvj+k4/IOECWxiNUD+ZX 9khlVcJQd79JVG8J+14NcqYeO9D0mqoWIZ9gwFdW0lYXtRKK0PokWuhNT2ge9Y4C 7OAHmDKv/kBci4GkywMJ5L8m2hEmhn32SzEDxrUvg/wGYIALrwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDs4htII/3HZhUXSSBZGVbhw/xWOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZmI1 ZjY0OC1kOGI0LTRlZTItYTQzZC0xYmEwMWIwNDJlNWUvOThmMzI2NDgtYTMyZS0z OGFhLTlmZDMtNzE2ZWIwMjY4NTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGZiNWY2NDgtZDhiNC00ZWUyLWE0 M2QtMWJhMDFiMDQyZTVlLzRmYjVmNjQ4LWQ4YjQtNGVlMi1hNDNkLTFiYTAxYjA0 MmU1ZS5jcmwwHwYDVR0jBBgwFoAU3ihoa1Fyd4R1gFX/2toXdM1wzkIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZmI1ZjY0OC1kOGI0LTRlZTItYTQzZC0xYmEw MWIwNDJlNWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEYp5gAwQC aP58MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABzODlMwRu+alKqW5xuLISLkoJ4q3WrtO2ytE5uPocPnmcHe qg35M/FGJrCpS+1BVXYrAqbXV6p9AQR95HA7IqWK39fsnDINKKVzCctjT8ksrU8r sFi37oADJy6fjVbrpCXQr24qjtmjLKw3X5f0UZl+YSz6UyFFYs5WuHBGUt2i83rX pv7HvgE8xBjmYKX+0Q/2axe7XmUEky/SkpoKYPBA4j9pggcm4OlxoGiO5wMqsOLq ELeaAfdu31f0u0hxox1fMxL3Yx0oJkKmphkco3Z5bo1emWwEHSHijmGl5fqfhc+p 3fT7FWI8ita7Vs4MEARKPaoiRO72SR9EWRVg2co= -----END CERTIFICATE-----Generated at Wed May 13 11:09:22 2026 by rpki-client