$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3571cdb1-3574-3de6-a047-2228779fa3ec.roa File: 3571cdb1-3574-3de6-a047-2228779fa3ec.roa (raw, json) Hash identifier: 8GVcnYDr2GqVeHhv4dC5+Lhh/JTbKxz1vtKsOtgi+Nw= Subject key identifier: 4D:76:17:16:60:8E:18:FB:8C:6B:B7:3C:1A:6D:78:ED:7B:D4:A6:19 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584E6F3D3DB654AA838CA31CA400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3571cdb1-3574-3de6-a047-2228779fa3ec.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 33491 IP address blocks: 98.220.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3d:3d:b6:54:aa:83:8c:a3:1c:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=79ae3a17-297f-4efc-bf0f-ead19116b9ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d2:e2:b9:15:b3:be:8b:0f:82:69:76:be:b3: 16:c7:d0:f0:ba:59:5c:5a:95:df:93:0e:b6:b5:32: da:0b:c9:d5:65:c4:52:86:ae:6f:94:03:ab:b1:16: e9:ba:5b:2f:da:97:fc:64:62:7d:8c:bf:bf:51:39: d5:7a:ef:7c:c2:51:e6:e7:8d:44:dd:78:e7:44:ed: 3c:0b:2c:df:cf:fd:1a:5a:f3:1c:3b:e5:1b:e3:e5: 67:ae:79:a6:93:76:1b:6f:12:da:1b:53:cc:cf:d0: 82:0d:c5:2a:3c:29:6a:70:a5:c6:c1:25:da:16:81: 3c:08:35:97:8f:1c:6f:ed:72:37:18:09:27:9d:a4: 8c:c5:2b:0f:9a:00:b9:5f:99:9b:d0:15:c6:15:0e: 10:b9:f0:ad:40:9c:7f:95:aa:c9:63:32:e0:26:e3: ba:dc:18:d9:43:eb:12:18:31:8e:a6:8c:03:5c:1f: 8c:bd:f2:ac:49:13:c9:53:f8:c3:e9:8b:c8:84:89: 20:d1:6f:e9:5c:04:e2:29:7d:e5:65:58:dc:64:5f: d6:f3:04:1c:d4:3b:e5:f8:a0:fa:27:e3:74:ae:5c: cc:16:15:7d:27:68:8d:56:26:61:4f:e9:48:69:e6: 46:1f:f6:a0:eb:f2:d6:50:10:ae:7d:44:d4:00:f9: 84:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:76:17:16:60:8E:18:FB:8C:6B:B7:3C:1A:6D:78:ED:7B:D4:A6:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3571cdb1-3574-3de6-a047-2228779fa3ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.220.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:7f:f9:fc:66:72:82:32:60:3b:c0:58:d2:3c:03:7f:35:f8: 2b:ee:eb:29:79:a0:86:a7:6d:10:f8:a1:1b:d1:41:9e:96:c9: fa:35:04:2a:5e:70:37:d9:d7:17:17:4e:13:6a:b6:af:bf:d0: cd:2f:2a:f9:8f:24:d6:52:6e:5a:a8:2b:17:8b:39:b8:b6:23: f2:43:04:59:c1:9f:0b:85:fd:70:0f:d5:d3:ba:62:e7:6c:10: d2:8b:a9:f3:30:6f:a4:94:2d:6d:b7:79:f6:ed:a3:6a:97:6e: 13:de:d4:63:a2:ac:95:ab:e0:ac:a8:8d:46:0b:f5:40:17:33: 5a:82:1e:d6:2f:69:b9:5d:54:ee:96:29:52:50:37:5f:4a:93: 1e:63:b1:10:7a:9e:b1:07:08:16:b1:26:43:9d:3d:22:31:da: 43:fc:cf:ab:38:df:c2:17:23:45:8a:82:63:67:c4:9f:f9:f4: 5c:a4:25:69:87:5d:03:e9:94:25:b6:c8:0e:cb:e3:e4:c8:35: 40:e8:55:10:9a:9e:9f:46:1b:e2:c5:1a:2a:c7:7e:8f:3f:09: 0b:bc:77:72:01:1e:c9:41:77:1e:8d:7c:b2:34:39:04:5d:70: 3d:fe:76:e0:ce:fd:5f:5c:87:9a:3f:6b:47:2a:b3:9a:10:84: 34:bf:54:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vPT22VKqDjKMcpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk NzlhZTNhMTctMjk3Zi00ZWZjLWJmMGYtZWFkMTkxMTZiOWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdLiuRWzvosPgml2vrMWx9DwullcWpXfkw62 tTLaC8nVZcRShq5vlAOrsRbpulsv2pf8ZGJ9jL+/UTnVeu98wlHm541E3XjnRO08 Cyzfz/0aWvMcO+Ub4+Vnrnmmk3YbbxLaG1PMz9CCDcUqPClqcKXGwSXaFoE8CDWX jxxv7XI3GAknnaSMxSsPmgC5X5mb0BXGFQ4QufCtQJx/larJYzLgJuO63BjZQ+sS GDGOpowDXB+MvfKsSRPJU/jD6YvIhIkg0W/pXATiKX3lZVjcZF/W8wQc1Dvl+KD6 J+N0rlzMFhV9J2iNViZhT+lIaeZGH/ag6/LWUBCufUTUAPmEgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE12FxZgjhj7jGu3PBpteO171KYZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzU3MWNkYjEtMzU3NC0z ZGU2LWEwNDctMjIyODc3OWZhM2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYtzwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK9/+fxmcoIyYDvAWNI8A381+Cvu6yl5oIanbRD4oRvRQZ6Wyfo1BCpe cDfZ1xcXThNqtq+/0M0vKvmPJNZSblqoKxeLObi2I/JDBFnBnwuF/XAP1dO6Yuds ENKLqfMwb6SULW23efbto2qXbhPe1GOirJWr4KyojUYL9UAXM1qCHtYvabldVO6W KVJQN19Kkx5jsRB6nrEHCBaxJkOdPSIx2kP8z6s438IXI0WKgmNnxJ/59FykJWmH XQPplCW2yA7L4+TINUDoVRCanp9GG+LFGirHfo8/CQu8d3IBHslBdx6NfLI0OQRd cD3+duDO/V9ch5o/a0cqs5oQhDS/VCo= -----END CERTIFICATE-----Generated at Wed Jul 22 00:15:50 2026 by rpki-client