$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/744f8564-502f-4952-8060-09b4c7e292b0/e98d0e37-6d22-3975-9250-7e35e00a0427.roa File: e98d0e37-6d22-3975-9250-7e35e00a0427.roa (raw, json) Hash identifier: GvPTQCvZuwngK+21o1PMl135lwkbKyH8AjDlOAYVQfg= Subject key identifier: 36:EE:17:D3:98:33:B1:C8:C5:26:51:61:70:98:57:A4:34:1C:5C:AD Certificate issuer: /CN=744f8564-502f-4952-8060-09b4c7e292b0 Certificate serial: 010D0C9F4328584D8D8FFA5251EEBE52A07F5600 Authority key identifier: 72:61:82:AD:C8:5C:5A:18:24:2F:B9:4B:96:EB:EE:04:2C:4C:A4:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/744f8564-502f-4952-8060-09b4c7e292b0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/744f8564-502f-4952-8060-09b4c7e292b0/e98d0e37-6d22-3975-9250-7e35e00a0427.roa Signing time: Sun 19 Apr 2026 01:00:23 +0000 ROA not before: Sun 19 Apr 2026 01:00:23 +0000 ROA not after: Sat 18 Jul 2026 01:00:23 +0000 asID: 401813 IP address blocks: 95.129.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/744f8564-502f-4952-8060-09b4c7e292b0/744f8564-502f-4952-8060-09b4c7e292b0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/744f8564-502f-4952-8060-09b4c7e292b0/744f8564-502f-4952-8060-09b4c7e292b0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/744f8564-502f-4952-8060-09b4c7e292b0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8d:8f:fa:52:51:ee:be:52:a0:7f:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=744f8564-502f-4952-8060-09b4c7e292b0 Validity Not Before: Apr 19 01:00:23 2026 GMT Not After : Jul 18 01:00:23 2026 GMT Subject: CN=e695ebcd-1949-4d26-a1dc-ab683045cd99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3f:0e:ed:b6:b4:fb:2c:d3:59:b7:02:19:42: d8:38:cd:81:85:e9:a1:37:01:7a:58:b4:c0:61:be: af:69:7e:68:22:60:95:f1:c3:1c:7c:24:15:0f:ad: 53:be:bd:97:07:02:15:f3:5d:cc:b2:20:1c:1d:d7: 57:37:8d:62:0b:97:65:69:37:7f:44:88:0a:5f:f0: 0a:1f:2d:b3:0f:7b:de:d3:7c:b0:79:e6:82:a3:60: 58:28:11:1c:84:c3:ed:66:f2:17:f0:b6:2f:9b:85: 7f:e4:18:7a:b0:79:f2:59:7f:21:e0:11:51:e3:1b: ae:36:e3:ec:cf:fe:94:d2:42:1f:2a:5f:04:34:71: 09:26:b7:99:a8:09:b7:ac:78:77:3e:8a:e5:e2:a1: 25:5f:2b:6c:36:35:eb:ce:cd:36:a8:83:9f:51:5d: d5:f4:32:90:99:36:d4:93:30:c3:35:d1:ee:e7:0b: c0:74:1d:a6:43:46:ed:42:67:93:8b:bd:9b:61:2b: 97:fd:a2:c5:fa:04:be:c7:f2:ee:32:b8:82:46:a6: 5b:ce:22:e9:29:50:9d:20:3d:49:8c:64:66:c6:34: 5d:2f:47:1a:48:ae:ae:1c:65:c5:53:e8:20:12:1a: 0f:8d:29:62:54:42:e3:db:59:ac:99:36:97:21:13: 1d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:EE:17:D3:98:33:B1:C8:C5:26:51:61:70:98:57:A4:34:1C:5C:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/744f8564-502f-4952-8060-09b4c7e292b0/e98d0e37-6d22-3975-9250-7e35e00a0427.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/744f8564-502f-4952-8060-09b4c7e292b0/744f8564-502f-4952-8060-09b4c7e292b0.crl X509v3 Authority Key Identifier: keyid:72:61:82:AD:C8:5C:5A:18:24:2F:B9:4B:96:EB:EE:04:2C:4C:A4:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/744f8564-502f-4952-8060-09b4c7e292b0.cer sbgp-ipAddrBlock: critical IPv4: 95.129.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:d4:86:d2:40:17:13:ef:77:81:d9:f3:26:f3:88:1e:89:e7: 8b:ab:fb:7c:e6:01:4a:c2:31:23:1f:4f:87:9d:04:21:91:4c: 79:e7:13:85:0e:20:1a:62:7d:b9:5c:5a:34:e4:25:df:e0:97: fc:d9:51:62:ad:66:ac:3f:82:6a:08:39:95:14:75:93:15:17: 0b:84:db:09:c4:8c:d8:2e:b1:62:3a:da:c9:95:e3:55:d1:f3: d8:3a:25:6d:d8:a2:d6:77:7c:a6:51:41:b2:6b:77:13:df:97: ea:dc:a4:74:cc:b3:f8:a2:a1:13:54:1d:1d:35:f3:9e:dd:46: 9c:66:29:b4:8c:44:a3:c9:8c:73:cb:1b:8d:00:41:d3:29:90: e8:3b:cc:ba:74:3a:26:69:ed:d9:84:04:18:95:cb:07:fc:85: 92:94:2d:01:b9:27:f1:68:a9:35:20:7c:db:1c:71:6e:98:06: 3f:e8:38:62:0a:0d:5d:bb:ce:bf:63:dd:ae:62:45:ec:35:51: 89:cb:3f:5e:78:8b:e9:27:64:56:ba:ec:e1:8a:b0:98:fb:26: ae:3a:ec:37:2f:50:7c:ae:c9:6d:2e:6e:55:92:e3:d4:e4:59: b8:26:e5:e2:0a:30:1a:7f:9a:ad:0a:aa:eb:87:07:76:39:4e: 90:dc:58:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Nj/pSUe6+UqB/VgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ0Zjg1NjQtNTAyZi00OTUyLTgwNjAtMDliNGM3ZTI5 MmIwMB4XDTI2MDQxOTAxMDAyM1oXDTI2MDcxODAxMDAyM1owLzEtMCsGA1UEAxMk ZTY5NWViY2QtMTk0OS00ZDI2LWExZGMtYWI2ODMwNDVjZDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqD8O7ba0+yzTWbcCGULYOM2BhemhNwF6WLTA Yb6vaX5oImCV8cMcfCQVD61Tvr2XBwIV813MsiAcHddXN41iC5dlaTd/RIgKX/AK Hy2zD3ve03yweeaCo2BYKBEchMPtZvIX8LYvm4V/5Bh6sHnyWX8h4BFR4xuuNuPs z/6U0kIfKl8ENHEJJreZqAm3rHh3Porl4qElXytsNjXrzs02qIOfUV3V9DKQmTbU kzDDNdHu5wvAdB2mQ0btQmeTi72bYSuX/aLF+gS+x/LuMriCRqZbziLpKVCdID1J jGRmxjRdL0caSK6uHGXFU+ggEhoPjSliVELj21msmTaXIRMdGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDbuF9OYM7HIxSZRYXCYV6Q0HFytMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83NDRm ODU2NC01MDJmLTQ5NTItODA2MC0wOWI0YzdlMjkyYjAvZTk4ZDBlMzctNmQyMi0z OTc1LTkyNTAtN2UzNWUwMGEwNDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNzQ0Zjg1NjQtNTAyZi00OTUyLTgw NjAtMDliNGM3ZTI5MmIwLzc0NGY4NTY0LTUwMmYtNDk1Mi04MDYwLTA5YjRjN2Uy OTJiMC5jcmwwHwYDVR0jBBgwFoAUcmGCrchcWhgkL7lLluvuBCxMpPUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC83NDRmODU2NC01MDJmLTQ5NTItODA2MC0wOWI0 YzdlMjkyYjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCX4EkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnUhtJAFxPvd4HZ8ybziB6J54ur+3zmAUrCMSMfT4edBCGRTHnnE4UO IBpifblcWjTkJd/gl/zZUWKtZqw/gmoIOZUUdZMVFwuE2wnEjNgusWI62smV41XR 89g6JW3YotZ3fKZRQbJrdxPfl+rcpHTMs/iioRNUHR01857dRpxmKbSMRKPJjHPL G40AQdMpkOg7zLp0OiZp7dmEBBiVywf8hZKULQG5J/FoqTUgfNsccW6YBj/oOGIK DV27zr9j3a5iRew1UYnLP154i+knZFa67OGKsJj7Jq467DcvUHyuyW0ublWS49Tk Wbgm5eIKMBp/mq0KquuHB3Y5TpDcWKs= -----END CERTIFICATE-----Generated at Wed May 13 03:39:15 2026 by rpki-client