$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/15bed6aa-1643-358d-b9cf-1a75645e6543.roa File: 15bed6aa-1643-358d-b9cf-1a75645e6543.roa (raw, json) Hash identifier: aPBQ1RgKIPCfx4JsahapkpSAjdEvZlJTFoP266Amk1w= Subject key identifier: EE:0A:AA:25:EE:F9:6C:11:CF:88:9C:B8:77:0C:44:10:72:31:F3:C4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF6EDA4C0B52AE08FAAAF32 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/15bed6aa-1643-358d-b9cf-1a75645e6543.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33651 IP address blocks: 98.42.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:ed:a4:c0:b5:2a:e0:8f:aa:af:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=beccc0a0-bd8d-429f-b7ff-0fb252e45c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c1:38:12:7b:2c:15:9a:ca:a6:fe:fb:0d:f1: 23:01:24:8a:90:91:5a:1f:c2:c8:31:71:0b:e2:4d: e3:f7:3e:3e:9f:ce:f0:3d:12:43:5c:af:86:a9:14: d6:1e:73:74:08:1d:f1:9f:fd:a6:24:98:fd:ff:6d: 1e:06:aa:22:03:82:3a:96:3d:d6:fe:6d:2e:68:ec: 2c:31:bb:93:0d:50:4a:99:9e:a9:76:f3:0c:e2:26: 59:09:2d:dc:86:5a:91:d9:2c:07:71:17:6b:da:56: 56:b9:2b:1a:2a:b9:71:97:e5:ab:e8:21:09:40:1e: 66:4f:ca:fa:cb:e2:4f:02:02:c5:fd:ed:59:ba:b8: fe:eb:1a:12:f3:e1:4f:3d:b8:18:e1:74:6d:5b:57: a9:0d:c9:f4:6b:b7:22:fc:b5:a0:b9:9f:78:00:97: 2c:e9:a5:92:64:56:c1:0c:f6:f7:fd:60:e8:7d:8b: bb:a9:7d:6d:e3:6b:05:2e:7d:cd:b4:68:3f:95:7c: 8c:0b:01:28:6b:40:71:78:77:50:40:bc:d7:fa:d7: 3e:1a:df:01:04:54:79:d6:d4:30:32:e5:74:0d:e8: af:f0:88:a2:29:3c:03:cd:d9:d0:62:fe:1f:11:ad: 67:45:04:bc:e1:ad:8c:06:45:b1:ee:b7:e7:7d:3c: 29:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:0A:AA:25:EE:F9:6C:11:CF:88:9C:B8:77:0C:44:10:72:31:F3:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/15bed6aa-1643-358d-b9cf-1a75645e6543.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.42.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:a0:3d:f0:96:47:77:a7:cd:c2:6d:8d:c9:99:25:bb:58:58: a2:4e:d4:1c:3e:3f:2f:14:96:80:a2:cc:b1:c9:d9:d0:a1:ce: 39:ce:5d:b2:9b:14:12:73:63:28:be:ff:7a:71:4d:14:42:da: f7:34:7f:00:c9:ca:9d:9d:4b:b8:cd:4c:c6:83:cf:78:02:0e: 2f:bc:36:d7:77:ee:25:22:53:e3:5b:75:e8:f5:7d:f6:63:3f: 91:51:3d:6d:c5:22:57:f7:6f:6b:d1:2c:f6:a0:a5:e6:85:5f: 67:69:c7:e5:c2:2b:4a:0a:7a:28:09:54:66:92:25:be:84:86: ae:78:fa:32:5d:23:fb:16:a1:dd:82:b4:db:e0:3f:82:d6:4e: 76:fe:4c:95:3a:a6:fe:a4:5e:e1:8a:ea:f5:ca:f4:d9:a0:98: 7f:fb:69:8c:2d:35:19:4c:83:2c:bc:02:15:eb:e3:58:10:7b: fd:c3:df:be:6d:4a:cf:30:02:4f:4c:f8:b1:8f:71:58:39:c5: 33:23:16:9d:57:42:ef:b5:d2:45:11:fc:9a:00:09:d5:b8:38: 7d:44:d1:0c:3f:e6:39:b4:66:dc:40:ae:5e:e7:a1:73:9c:32: 08:7d:98:5b:7a:7f:4e:d8:aa:8e:1f:fc:bc:1a:bc:9c:4c:04: 7d:46:c1:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9u2kwLUq4I+qrzIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk YmVjY2MwYTAtYmQ4ZC00MjlmLWI3ZmYtMGZiMjUyZTQ1YzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcE4EnssFZrKpv77DfEjASSKkJFaH8LIMXEL 4k3j9z4+n87wPRJDXK+GqRTWHnN0CB3xn/2mJJj9/20eBqoiA4I6lj3W/m0uaOws MbuTDVBKmZ6pdvMM4iZZCS3chlqR2SwHcRdr2lZWuSsaKrlxl+Wr6CEJQB5mT8r6 y+JPAgLF/e1Zurj+6xoS8+FPPbgY4XRtW1epDcn0a7ci/LWguZ94AJcs6aWSZFbB DPb3/WDofYu7qX1t42sFLn3NtGg/lXyMCwEoa0BxeHdQQLzX+tc+Gt8BBFR51tQw MuV0Deiv8IiiKTwDzdnQYv4fEa1nRQS84a2MBkWx7rfnfTwptwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4KqiXu+WwRz4icuHcMRBByMfPEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTViZWQ2YWEtMTY0My0z NThkLWI5Y2YtMWE3NTY0NWU2NTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYir9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACigPfCWR3enzcJtjcmZJbtYWKJO1Bw+Py8UloCizLHJ2dChzjnOXbKb FBJzYyi+/3pxTRRC2vc0fwDJyp2dS7jNTMaDz3gCDi+8Ntd37iUiU+Nbdej1ffZj P5FRPW3FIlf3b2vRLPagpeaFX2dpx+XCK0oKeigJVGaSJb6Ehq54+jJdI/sWod2C tNvgP4LWTnb+TJU6pv6kXuGK6vXK9NmgmH/7aYwtNRlMgyy8AhXr41gQe/3D375t Ss8wAk9M+LGPcVg5xTMjFp1XQu+10kUR/JoACdW4OH1E0Qw/5jm0ZtxArl7noXOc Mgh9mFt6f07Yqo4f/LwavJxMBH1Gwes= -----END CERTIFICATE-----Generated at Tue Apr 21 20:49:15 2026 by rpki-client