$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45d2b403-0342-3300-a394-93de6670aea3.roa File: 45d2b403-0342-3300-a394-93de6670aea3.roa (raw, json) Hash identifier: 1OFJFCaGQM2nHea9NXaE93XODgreOIkEV882mWWZZRs= Subject key identifier: C8:27:51:3C:6B:BB:AE:BB:58:0A:C5:D4:79:F8:B1:CA:31:BC:A1:E5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF93DDC093DA8A77D16E280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45d2b403-0342-3300-a394-93de6670aea3.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33651 IP address blocks: 98.35.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f9:3d:dc:09:3d:a8:a7:7d:16:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=a0172ee1-22b2-430c-948c-218d2466c7e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f7:4c:f4:86:d3:00:f9:dc:af:b4:c8:56:82: 9e:c0:e4:a4:4f:d4:08:39:f2:f4:e1:9a:82:95:53: 14:76:c7:77:c2:9f:00:48:bc:69:76:78:fe:cb:01: 65:8b:10:41:ce:77:0a:3d:d5:e6:f8:4b:4d:70:bf: 17:ef:7a:c0:1e:4c:ee:c7:5e:4e:b9:3e:3a:aa:c9: 8d:64:e4:b8:68:16:8f:c8:54:33:33:b6:9e:9f:92: 58:fe:78:8b:72:bc:0f:80:8b:b8:d7:7c:92:c7:ce: 21:f1:53:3f:86:85:22:4e:8e:c2:49:10:ca:e8:56: c6:03:aa:38:0a:61:01:50:ec:bf:99:5c:d4:0c:e4: f1:1a:0a:32:d9:3f:ea:4e:a6:88:ab:73:f5:51:b8: ab:e6:b2:84:c0:52:1c:aa:e5:f5:64:bd:57:74:53: d3:c7:12:50:96:04:cc:3b:33:0d:2d:70:7f:7d:61: b6:e4:c1:73:dc:35:c2:bc:92:53:13:93:27:1a:34: 74:8f:c0:d5:3b:48:37:b4:e3:68:00:53:f9:66:c1: 11:97:28:31:5d:9a:e4:f9:53:50:82:6d:34:0b:8b: fc:51:b9:c4:ae:b6:b6:ef:f2:55:34:df:b0:64:3d: 5b:51:1f:31:08:90:15:56:74:c6:c7:b4:e2:41:d3: 22:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:27:51:3C:6B:BB:AE:BB:58:0A:C5:D4:79:F8:B1:CA:31:BC:A1:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45d2b403-0342-3300-a394-93de6670aea3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.35.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:a2:ea:b3:0d:ee:0a:f8:55:4c:75:5d:d8:fd:33:be:ff:b0: 7d:10:ab:88:3d:21:80:0e:82:cd:06:b1:3b:fa:a8:6c:7f:5e: c1:ab:a1:d8:6c:90:0d:23:13:a3:3f:be:5f:56:63:93:4d:23: 06:d0:54:71:71:c0:0d:1d:8f:10:9e:28:1f:5b:ae:9f:09:3d: c2:ae:73:d4:d5:ea:48:b7:ec:81:81:ee:ff:0f:2c:2e:4b:24: 1a:63:30:72:6b:7a:d0:6d:4b:fc:9b:a5:e9:22:4b:e0:9b:5e: 20:40:4a:8b:59:23:1e:b2:b5:d8:99:81:22:aa:af:a4:c6:36: 63:da:2c:4e:0d:7d:85:98:89:12:f5:6a:44:61:b5:80:31:68: bd:01:41:1a:91:58:03:72:c4:2b:a6:dc:0e:9d:23:73:c7:ab: b8:d4:56:d9:5e:27:c7:93:2f:40:f6:33:45:ab:b7:79:5f:9f: f1:4b:f7:63:6c:3c:14:5d:e2:58:92:cf:6a:36:3d:67:cf:ff: 15:a0:0a:86:8d:b2:e3:2a:87:ec:1e:4a:12:ed:74:6a:7b:a5: ea:92:91:24:1f:ad:26:a3:da:3b:10:9a:f6:c5:98:20:71:6f: b4:9e:5f:e7:88:26:1d:8b:3e:74:39:3a:5c:64:70:90:3d:4c: 31:91:57:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+T3cCT2op30W4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk YTAxNzJlZTEtMjJiMi00MzBjLTk0OGMtMjE4ZDI0NjZjN2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/dM9IbTAPncr7TIVoKewOSkT9QIOfL04ZqC lVMUdsd3wp8ASLxpdnj+ywFlixBBzncKPdXm+EtNcL8X73rAHkzux15OuT46qsmN ZOS4aBaPyFQzM7aen5JY/niLcrwPgIu413ySx84h8VM/hoUiTo7CSRDK6FbGA6o4 CmEBUOy/mVzUDOTxGgoy2T/qTqaIq3P1Ubir5rKEwFIcquX1ZL1XdFPTxxJQlgTM OzMNLXB/fWG25MFz3DXCvJJTE5MnGjR0j8DVO0g3tONoAFP5ZsERlygxXZrk+VNQ gm00C4v8UbnErra27/JVNN+wZD1bUR8xCJAVVnTGx7TiQdMiXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgnUTxru667WArF1Hn4scoxvKHlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDVkMmI0MDMtMDM0Mi0z MzAwLWEzOTQtOTNkZTY2NzBhZWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYiMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGi6rMN7gr4VUx1Xdj9M77/sH0Qq4g9IYAOgs0GsTv6qGx/XsGrodhs kA0jE6M/vl9WY5NNIwbQVHFxwA0djxCeKB9brp8JPcKuc9TV6ki37IGB7v8PLC5L JBpjMHJretBtS/ybpekiS+CbXiBASotZIx6ytdiZgSKqr6TGNmPaLE4NfYWYiRL1 akRhtYAxaL0BQRqRWANyxCum3A6dI3PHq7jUVtleJ8eTL0D2M0Wrt3lfn/FL92Ns PBRd4liSz2o2PWfP/xWgCoaNsuMqh+weShLtdGp7peqSkSQfrSaj2jsQmvbFmCBx b7SeX+eIJh2LPnQ5OlxkcJA9TDGRV40= -----END CERTIFICATE-----Generated at Tue Apr 21 20:50:04 2026 by rpki-client