$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/98d83296-cbe0-3c48-b055-28ee0ece2329.roa File: 98d83296-cbe0-3c48-b055-28ee0ece2329.roa (raw, json) Hash identifier: hL9kKhg8kIWOT6ZyMXoLZhwkR7IVFM9Xkhy/xgdu5sQ= Subject key identifier: AF:57:EE:D1:14:20:13:89:6B:BC:DD:7F:78:3B:81:42:8D:9C:30:4C Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584D3DFFBB198F298BD80A6D9380 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/98d83296-cbe0-3c48-b055-28ee0ece2329.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 33363 IP address blocks: 71.44.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:bb:19:8f:29:8b:d8:0a:6d:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=3eb6a6aa-bcef-41f8-ba68-14aba1fc620f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:48:c6:61:35:38:8c:95:11:7b:6e:4c:12:82: 82:ff:69:16:e8:9b:26:7d:cb:9c:f2:5c:15:96:39: d7:0f:6f:38:cb:9c:d9:77:a6:63:91:aa:82:87:a5: 88:8d:d7:d1:23:a7:64:8f:df:22:de:59:22:04:1b: aa:04:15:a8:ad:f7:ba:5a:5a:ca:69:3c:ec:07:93: 40:88:e0:e7:4f:da:22:6b:e6:13:59:47:8f:2b:5b: 61:90:29:10:ac:d7:51:1d:03:eb:bc:d8:db:1b:b1: be:b0:e2:62:bd:48:e0:ae:84:3e:ad:9b:5a:e7:0f: c2:5e:32:7e:86:ad:50:a5:29:e7:07:74:af:73:bf: cc:a6:4b:ce:63:49:e5:bb:16:8a:7b:35:4f:03:a5: c3:d1:e8:99:49:65:aa:92:83:97:50:90:da:17:a1: 0a:d5:0b:51:6f:63:db:07:fc:2a:64:a4:1e:26:55: d6:e4:d8:0d:37:66:7e:36:88:9c:ac:f6:c2:93:48: 6c:fc:11:67:2e:a9:06:af:d8:60:6c:8e:18:a8:27: f1:c0:a0:ff:b4:c6:3f:b7:a3:c9:8c:02:b4:19:ea: b6:e9:12:56:ae:45:84:1d:3e:fb:3a:22:61:42:11: 4e:57:40:b9:f7:bd:be:95:7a:3d:59:c3:9d:5f:63: 03:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:57:EE:D1:14:20:13:89:6B:BC:DD:7F:78:3B:81:42:8D:9C:30:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/98d83296-cbe0-3c48-b055-28ee0ece2329.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 71.44.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:33:fd:b4:90:db:32:0a:32:61:26:3a:6b:a7:06:93:83:26: 23:3e:b3:6c:a6:c3:0c:ab:7f:ba:b1:3e:8a:3f:4b:90:e5:44: 02:c7:35:7c:ec:ed:97:31:0e:36:02:7d:b2:ce:ce:c3:d8:9c: f3:60:9c:61:34:6e:b8:bc:74:7c:4e:1a:f7:19:f2:a3:fa:23: 9f:e5:4b:d0:91:e5:c3:37:8a:72:72:c7:2d:c4:85:85:1b:50: fd:61:e5:93:25:47:d2:3f:ab:37:a1:fe:4b:ab:fc:34:a5:14: 8c:45:98:41:37:33:65:88:b0:52:72:7c:41:fd:14:9e:65:f3: 97:9c:7f:e2:88:d8:6f:25:8c:ae:db:d3:f5:35:b4:16:4a:c9: 38:d9:2d:fb:db:be:bb:b5:62:d4:4c:ca:aa:62:d9:58:76:30: 33:43:29:df:17:6b:8f:81:f6:c7:f3:05:50:9f:fa:04:0f:a4: b1:fa:3c:62:b6:a8:16:51:16:21:9a:d9:13:90:b1:f2:00:20: c4:af:bc:d9:ca:52:1d:56:aa:4c:7b:74:75:aa:3d:94:26:33: da:93:19:2c:4d:7b:98:91:53:52:97:04:4e:dc:3c:bb:9a:d0: 5f:35:39:73:21:f4:70:d7:76:81:be:8a:8d:7f:52:da:06:5f: 2b:83:6e:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/7sZjymL2Aptk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk M2ViNmE2YWEtYmNlZi00MWY4LWJhNjgtMTRhYmExZmM2MjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEjGYTU4jJURe25MEoKC/2kW6Jsmfcuc8lwV ljnXD284y5zZd6ZjkaqCh6WIjdfRI6dkj98i3lkiBBuqBBWorfe6WlrKaTzsB5NA iODnT9oia+YTWUePK1thkCkQrNdRHQPrvNjbG7G+sOJivUjgroQ+rZta5w/CXjJ+ hq1QpSnnB3Svc7/MpkvOY0nluxaKezVPA6XD0eiZSWWqkoOXUJDaF6EK1QtRb2Pb B/wqZKQeJlXW5NgNN2Z+NoicrPbCk0hs/BFnLqkGr9hgbI4YqCfxwKD/tMY/t6PJ jAK0Geq26RJWrkWEHT77OiJhQhFOV0C5972+lXo9WcOdX2MDoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK9X7tEUIBOJa7zdf3g7gUKNnDBMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvOThkODMyOTYtY2JlMC0z YzQ4LWIwNTUtMjhlZTBlY2UyMzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARyz3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8z/bSQ2zIKMmEmOmunBpODJiM+s2ymwwyrf7qxPoo/S5DlRALHNXzs 7ZcxDjYCfbLOzsPYnPNgnGE0bri8dHxOGvcZ8qP6I5/lS9CR5cM3inJyxy3EhYUb UP1h5ZMlR9I/qzeh/kur/DSlFIxFmEE3M2WIsFJyfEH9FJ5l85ecf+KI2G8ljK7b 0/U1tBZKyTjZLfvbvru1YtRMyqpi2Vh2MDNDKd8Xa4+B9sfzBVCf+gQPpLH6PGK2 qBZRFiGa2ROQsfIAIMSvvNnKUh1Wqkx7dHWqPZQmM9qTGSxNe5iRU1KXBE7cPLua 0F81OXMh9HDXdoG+io1/UtoGXyuDbjc= -----END CERTIFICATE-----Generated at Thu Mar 26 16:28:45 2026 by rpki-client