$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/561d38e5-e470-387b-874a-dc68e7e39021.roa File: 561d38e5-e470-387b-874a-dc68e7e39021.roa (raw, json) Hash identifier: 4DpXU+9oCZ0zWKjnLDxAl70Vsus5umEmxAD4ky4Ncu0= Subject key identifier: 66:51:A5:0C:50:D4:9D:46:9E:12:F3:00:D9:83:C4:C0:F7:AD:30:92 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584E36011FEBFD4DC796310F4F80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/561d38e5-e470-387b-874a-dc68e7e39021.roa Signing time: Thu 18 Jun 2026 09:00:12 +0000 ROA not before: Thu 18 Jun 2026 09:00:12 +0000 ROA not after: Wed 16 Sep 2026 09:00:12 +0000 asID: 33668 IP address blocks: 98.250.66.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:36:01:1f:eb:fd:4d:c7:96:31:0f:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 18 09:00:12 2026 GMT Not After : Sep 16 09:00:12 2026 GMT Subject: CN=d7ca3bcf-4fe5-47a1-821e-02a72d9bcd31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d8:1b:26:5a:ac:ee:41:f6:0f:27:5e:25:0e: e9:3c:52:3a:27:a5:92:0b:94:7a:a8:58:4c:1c:45: e5:c2:b6:b8:87:b1:b1:ed:7c:8d:f5:86:0b:2a:d6: 37:c4:d4:bd:b0:86:fc:63:aa:e4:e3:17:d1:a9:ed: b9:d0:dd:32:9f:94:de:18:da:d1:78:6c:c6:a8:fc: da:79:19:4d:b9:64:65:1b:69:55:66:0f:bd:e1:c9: 11:d9:e4:44:2e:96:dc:b2:c3:0d:f5:c7:2c:51:bb: fc:c5:ac:cf:fe:76:8d:3e:f2:22:1c:b5:01:dc:3d: 17:b0:94:62:38:c1:28:bd:01:eb:c7:48:16:ac:22: 95:3d:9b:e2:91:8f:3d:17:4f:27:a1:e2:a1:eb:99: 8c:42:67:b3:44:a9:f4:43:bd:85:d2:ee:d0:62:36: aa:07:6a:6e:59:75:16:ff:a4:71:a7:1a:0a:f2:69: 22:41:7d:8a:33:13:19:da:af:14:ff:66:c7:52:ae: 24:0f:10:d6:fd:61:e1:1b:09:fa:f9:3d:91:6f:94: f8:1f:dd:34:92:87:81:5d:8c:f3:82:8d:da:23:46: be:ce:9d:84:86:43:75:bb:e7:3a:da:ae:8e:7b:55: 69:7e:67:63:82:67:d0:eb:e3:f9:3e:17:ca:b9:bb: ef:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:51:A5:0C:50:D4:9D:46:9E:12:F3:00:D9:83:C4:C0:F7:AD:30:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/561d38e5-e470-387b-874a-dc68e7e39021.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.250.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:24:38:e1:bb:cc:c1:8f:3d:9d:e6:61:39:80:41:10:e9:b1: 15:21:5b:b6:15:13:73:79:05:4b:32:9a:c2:97:52:9f:0d:86: bc:58:90:06:9f:e9:d4:b6:3a:68:69:47:07:1f:9b:77:fe:7d: 3b:e5:d0:ca:a2:06:63:a5:f9:dd:d5:8c:07:60:5c:c3:05:03: fc:1a:da:e0:94:6a:55:e2:83:1d:09:00:15:e9:14:36:dd:d2: 3a:7d:5c:a3:2e:21:26:8e:d6:94:1a:57:28:ac:f3:b4:35:02: fa:3b:99:77:a6:cc:5a:29:ab:02:bf:bb:c8:a4:01:f2:67:32: 70:f7:ee:11:7d:c3:25:32:6d:6e:56:4e:a0:e7:52:e6:1c:52: 09:9e:1b:e9:ab:a8:72:78:91:07:8f:95:3a:96:b8:b3:69:ea: 89:5c:47:1a:cc:e1:05:1e:2a:f5:14:cf:dd:57:fd:9b:e5:97: 93:95:3f:4d:7b:28:22:da:59:be:b6:9f:ec:54:04:3e:a6:95: 1c:35:94:91:31:ae:c8:80:0f:c4:47:df:31:2f:54:57:73:39: 7f:08:15:e3:6e:d6:59:f4:cc:96:57:0d:8a:05:6c:98:24:c1: 72:be:72:84:84:bc:d1:49:a2:ba:a2:39:4b:65:8f:69:49:cb: ed:64:d3:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE42AR/r/U3HljEPT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDYxODA5MDAxMloXDTI2MDkxNjA5MDAxMlowLzEtMCsGA1UEAxMk ZDdjYTNiY2YtNGZlNS00N2ExLTgyMWUtMDJhNzJkOWJjZDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9gbJlqs7kH2DydeJQ7pPFI6J6WSC5R6qFhM HEXlwra4h7Gx7XyN9YYLKtY3xNS9sIb8Y6rk4xfRqe250N0yn5TeGNrReGzGqPza eRlNuWRlG2lVZg+94ckR2eRELpbcssMN9ccsUbv8xazP/naNPvIiHLUB3D0XsJRi OMEovQHrx0gWrCKVPZvikY89F08noeKh65mMQmezRKn0Q72F0u7QYjaqB2puWXUW /6RxpxoK8mkiQX2KMxMZ2q8U/2bHUq4kDxDW/WHhGwn6+T2Rb5T4H900koeBXYzz go3aI0a+zp2EhkN1u+c62q6Oe1VpfmdjgmfQ6+P5PhfKubvvQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZRpQxQ1J1GnhLzANmDxMD3rTCSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTYxZDM4ZTUtZTQ3MC0z ODdiLTg3NGEtZGM2OGU3ZTM5MDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYvpCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAkOOG7zMGPPZ3mYTmAQRDpsRUhW7YVE3N5BUsymsKXUp8NhrxYkAaf 6dS2OmhpRwcfm3f+fTvl0MqiBmOl+d3VjAdgXMMFA/wa2uCUalXigx0JABXpFDbd 0jp9XKMuISaO1pQaVyis87Q1Avo7mXemzFopqwK/u8ikAfJnMnD37hF9wyUybW5W TqDnUuYcUgmeG+mrqHJ4kQePlTqWuLNp6olcRxrM4QUeKvUUz91X/Zvll5OVP017 KCLaWb62n+xUBD6mlRw1lJExrsiAD8RH3zEvVFdzOX8IFeNu1ln0zJZXDYoFbJgk wXK+coSEvNFJorqiOUtlj2lJy+1k0yo= -----END CERTIFICATE-----Generated at Sat Jul 18 04:32:26 2026 by rpki-client