$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5010a05f-63d3-3bcc-b43b-387af7ce3b38.roa File: 5010a05f-63d3-3bcc-b43b-387af7ce3b38.roa (raw, json) Hash identifier: CUo9a7FuLd9kUj3trY42AzIcvuf5Hu6W6q2cyQtG7lw= Subject key identifier: 8C:A6:6E:AC:24:47:4B:7A:E7:5D:3E:3A:52:E9:51:BC:E7:FF:3F:19 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF686B9085BD224416D1C40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5010a05f-63d3-3bcc-b43b-387af7ce3b38.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 98.222.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:86:b9:08:5b:d2:24:41:6d:1c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=6097a82e-cf29-4275-813b-c325bc60b8c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:49:2e:20:59:17:e5:bc:ae:9e:b8:27:03:17: 52:ec:07:99:21:28:a7:9e:52:db:17:2d:64:de:9f: 12:d7:f1:85:d2:0e:28:d2:8a:ab:ab:19:ea:9e:71: e9:53:37:7e:8b:f8:1e:10:1f:ea:34:30:53:a5:3d: 94:aa:e9:b4:3a:ea:b0:79:92:ed:7d:cf:d7:64:03: 2e:13:bc:24:90:62:2c:0c:f1:e2:fe:58:33:c6:73: a9:9c:b3:a6:6d:c1:54:08:28:47:21:a9:9a:15:b6: 46:11:00:da:22:f2:2d:5d:4d:47:23:a8:e5:3a:c1: a3:8b:a5:bb:af:6a:8e:db:e2:85:77:d7:95:f8:fe: e0:22:cc:5a:e4:59:4d:57:30:48:f3:f0:76:67:2f: 1d:68:60:09:48:4d:c8:d0:f2:97:18:e8:17:ea:b0: db:8c:1c:8b:8f:c4:92:e5:31:94:81:94:b9:53:6c: 8f:7a:1b:e5:22:f2:d1:2a:99:6c:c1:3a:14:e6:f6: e6:b1:7e:25:22:7a:d6:63:91:d4:23:a1:ea:7f:80: 6f:88:76:34:37:03:a2:7e:69:de:ed:b5:8b:fa:34: a4:00:c6:5f:c1:7f:ec:e6:76:5a:f6:9e:d7:df:f3: bd:1b:42:11:ca:63:f5:73:a6:90:6a:ff:b3:74:e4: e6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:A6:6E:AC:24:47:4B:7A:E7:5D:3E:3A:52:E9:51:BC:E7:FF:3F:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5010a05f-63d3-3bcc-b43b-387af7ce3b38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.222.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:a2:2b:df:c0:cd:a1:16:0a:2f:86:c5:a1:56:d5:52:23:2b: 11:7b:dc:95:2b:66:36:a6:76:48:eb:7d:d6:97:55:9c:94:55: ae:3e:29:9a:54:c8:e2:39:a9:c1:9e:23:4b:70:00:4a:9c:72: 46:97:ab:0b:73:25:25:1f:b6:9b:02:52:45:06:9f:ba:a0:ff: c0:7a:43:54:57:67:86:cb:c4:bb:04:4c:ac:b5:c8:ea:61:af: 73:f3:a1:1a:12:66:1b:b1:03:82:8d:64:da:85:20:f7:bd:43: 69:ab:e9:50:23:91:f3:54:76:7f:dd:57:48:ee:91:ba:89:11: 6a:0a:21:a2:0c:bd:67:53:10:c5:c4:f5:bc:45:f6:69:0c:fe: af:55:63:ba:f5:bb:c4:1e:b1:76:49:27:87:e0:36:3f:1e:48: 87:86:2a:f9:2c:02:c6:cd:0c:ad:1a:d8:ac:97:e2:13:86:48: 4d:0c:8b:ce:81:d1:5e:1f:47:9b:c2:2c:17:97:5e:51:66:c3: 3e:c3:47:36:d8:68:0b:9b:72:37:c9:18:a7:c0:1b:77:4a:d9: 69:9f:5e:6b:6f:c2:6d:b8:1c:f5:1e:35:e1:c5:d3:15:fb:a4: 84:f9:02:92:da:76:0f:4a:8f:17:ca:1a:d2:0a:e9:9d:b6:3a: 67:00:d6:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9oa5CFvSJEFtHEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NjA5N2E4MmUtY2YyOS00Mjc1LTgxM2ItYzMyNWJjNjBiOGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EkuIFkX5byunrgnAxdS7AeZISinnlLbFy1k 3p8S1/GF0g4o0oqrqxnqnnHpUzd+i/geEB/qNDBTpT2Uqum0OuqweZLtfc/XZAMu E7wkkGIsDPHi/lgzxnOpnLOmbcFUCChHIamaFbZGEQDaIvItXU1HI6jlOsGji6W7 r2qO2+KFd9eV+P7gIsxa5FlNVzBI8/B2Zy8daGAJSE3I0PKXGOgX6rDbjByLj8SS 5TGUgZS5U2yPehvlIvLRKplswToU5vbmsX4lInrWY5HUI6Hqf4BviHY0NwOifmne 7bWL+jSkAMZfwX/s5nZa9p7X3/O9G0IRymP1c6aQav+zdOTmdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIymbqwkR0t6510+OlLpUbzn/z8ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTAxMGEwNWYtNjNkMy0z YmNjLWI0M2ItMzg3YWY3Y2UzYjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYt7cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEuiK9/AzaEWCi+GxaFW1VIjKxF73JUrZjamdkjrfdaXVZyUVa4+KZpU yOI5qcGeI0twAEqcckaXqwtzJSUftpsCUkUGn7qg/8B6Q1RXZ4bLxLsETKy1yOph r3PzoRoSZhuxA4KNZNqFIPe9Q2mr6VAjkfNUdn/dV0jukbqJEWoKIaIMvWdTEMXE 9bxF9mkM/q9VY7r1u8QesXZJJ4fgNj8eSIeGKvksAsbNDK0a2KyX4hOGSE0Mi86B 0V4fR5vCLBeXXlFmwz7DRzbYaAubcjfJGKfAG3dK2WmfXmtvwm24HPUeNeHF0xX7 pIT5ApLadg9KjxfKGtIK6Z22OmcA1rc= -----END CERTIFICATE-----Generated at Wed Apr 22 00:49:51 2026 by rpki-client