$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0b1e923b-1642-3ca6-a2b2-477d4ca86890.roa File: 0b1e923b-1642-3ca6-a2b2-477d4ca86890.roa (raw, json) Hash identifier: AF9/v+i2UxsUVMmEiZ0pJxe8dyXz5/M/xOotTE0dJsM= Subject key identifier: 3B:F6:5A:9F:74:E9:E7:64:1D:F8:D4:F8:A8:EE:53:85:5A:9A:FB:33 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF6925D7DD1AE9B4AD38F10 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0b1e923b-1642-3ca6-a2b2-477d4ca86890.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 98.253.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:92:5d:7d:d1:ae:9b:4a:d3:8f:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=56d6e691-2d00-4f41-94f3-3ff7973d716e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:27:e8:db:8f:d2:96:90:4a:67:01:0e:bd:fc: bb:e3:72:f3:1c:47:5a:5a:b7:2d:57:9e:53:54:82: 9b:02:d2:9f:7f:fe:1d:25:23:dd:a9:69:79:6c:32: e6:85:f5:ca:60:f2:a3:ea:09:48:6c:16:fb:cf:96: 84:9a:03:d7:00:62:95:d6:50:3b:01:91:f2:08:77: 43:6f:ef:f4:d4:41:3a:06:36:60:8a:33:03:73:ca: 41:24:ff:d0:e8:e3:0e:5a:f7:82:25:5b:e3:76:c6: ff:09:9b:70:ea:47:32:3c:5f:7a:4d:ed:8d:7f:c0: 1d:9b:14:94:90:f3:85:e3:92:c4:8c:23:00:e0:5b: 1e:b4:81:47:d9:50:9f:2c:28:91:3d:19:14:90:54: 2c:ee:ce:af:89:57:84:9e:7a:e5:53:85:b5:ff:35: de:bd:11:84:db:cd:d9:96:66:0b:a7:6b:85:32:f0: e6:8e:9b:3f:a5:5a:4f:ac:08:97:28:8a:08:ea:f6: 0e:db:56:2f:0e:3c:22:74:02:32:c3:69:3f:3d:7b: d5:88:5e:70:8e:e1:11:0e:e1:3b:f1:02:62:70:ce: ba:d5:9d:2c:07:5c:33:64:9f:f8:d3:80:55:56:30: 75:26:87:8e:35:9d:2f:c7:b1:e9:d8:98:15:79:50: 12:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:F6:5A:9F:74:E9:E7:64:1D:F8:D4:F8:A8:EE:53:85:5A:9A:FB:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0b1e923b-1642-3ca6-a2b2-477d4ca86890.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.253.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:36:c8:e3:78:a6:00:dc:6b:1e:0e:9a:2b:aa:3b:e8:a8:8e: ee:2b:9b:8c:fb:39:28:3c:80:58:b5:15:fc:8a:68:b4:fa:b7: 6b:d7:01:11:aa:79:f5:b8:08:d4:d5:ad:8c:85:e4:c9:bb:91: 1f:23:ef:aa:c6:db:80:58:4b:23:9c:a1:f9:ee:d6:5c:00:18: af:4b:48:f1:98:cc:57:5d:4b:b5:8f:f7:17:44:9b:75:22:07: 2d:4c:f7:65:dd:a5:1f:43:5a:b3:13:93:c1:87:5c:07:c5:6d: 66:d4:94:0c:4b:7b:36:ce:40:7c:e1:3b:a0:19:ab:ab:a8:53: d9:e9:a3:59:4a:de:57:f1:27:0e:35:b5:8f:31:ed:dc:97:5f: 44:0a:fb:52:33:64:3e:3b:c3:3d:83:16:be:7c:9d:eb:e4:f6: 86:48:62:c0:fa:f1:01:33:45:aa:72:28:79:ab:e5:53:16:d4: 77:52:47:27:96:d6:3d:75:56:a7:55:fb:df:0a:ee:4a:26:38: 62:dd:13:71:ce:ea:5f:1d:43:05:e0:80:fa:42:5f:35:3e:a6: 3a:3a:57:0c:9e:89:f9:79:ce:95:9b:58:fd:20:96:8b:cf:27: 8b:07:68:c6:97:1f:0c:2a:ef:e4:23:f0:3e:4e:c2:30:a7:b4: f0:70:d6:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9pJdfdGum0rTjxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NTZkNmU2OTEtMmQwMC00ZjQxLTk0ZjMtM2ZmNzk3M2Q3MTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCfo24/SlpBKZwEOvfy743LzHEdaWrctV55T VIKbAtKff/4dJSPdqWl5bDLmhfXKYPKj6glIbBb7z5aEmgPXAGKV1lA7AZHyCHdD b+/01EE6BjZgijMDc8pBJP/Q6OMOWveCJVvjdsb/CZtw6kcyPF96Te2Nf8AdmxSU kPOF45LEjCMA4FsetIFH2VCfLCiRPRkUkFQs7s6viVeEnnrlU4W1/zXevRGE283Z lmYLp2uFMvDmjps/pVpPrAiXKIoI6vYO21YvDjwidAIyw2k/PXvViF5wjuERDuE7 8QJicM661Z0sB1wzZJ/404BVVjB1JoeONZ0vx7Hp2JgVeVASSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDv2Wp906edkHfjU+KjuU4VamvszMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGIxZTkyM2ItMTY0Mi0z Y2E2LWEyYjItNDc3ZDRjYTg2ODkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYv3XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALQ2yON4pgDcax4OmiuqO+ioju4rm4z7OSg8gFi1FfyKaLT6t2vXARGq efW4CNTVrYyF5Mm7kR8j76rG24BYSyOcofnu1lwAGK9LSPGYzFddS7WP9xdEm3Ui By1M92XdpR9DWrMTk8GHXAfFbWbUlAxLezbOQHzhO6AZq6uoU9npo1lK3lfxJw41 tY8x7dyXX0QK+1IzZD47wz2DFr58nevk9oZIYsD68QEzRapyKHmr5VMW1HdSRyeW 1j11VqdV+98K7komOGLdE3HO6l8dQwXggPpCXzU+pjo6Vwyeifl5zpWbWP0glovP J4sHaMaXHwwq7+Qj8D5OwjCntPBw1sE= -----END CERTIFICATE-----Generated at Tue Apr 21 20:46:05 2026 by rpki-client