$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d218258-37b0-342b-a7d7-5be3b03d0e83.roa File: 5d218258-37b0-342b-a7d7-5be3b03d0e83.roa (raw, json) Hash identifier: GLCGld4qw1hcviq+sEtB6XZ8Xt57/VyQfiYgO/lm3Q0= Subject key identifier: 50:34:87:EB:72:84:D4:0D:A4:B3:12:9C:D9:A3:6D:1D:72:6A:0E:8F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF80CFCA3C64B5F516ADD80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d218258-37b0-342b-a7d7-5be3b03d0e83.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 98.222.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f8:0c:fc:a3:c6:4b:5f:51:6a:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=a0e44ec7-8518-41d6-b514-cd3d47ecc8e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:91:46:9c:19:87:a7:44:6c:b5:33:df:fa:24: bd:0f:ed:5d:a6:c6:90:29:42:4a:bc:b3:67:91:51: f6:e8:5a:f2:44:57:e8:72:33:c8:ae:cc:13:57:a8: 80:7e:4e:58:75:30:28:84:ca:35:52:36:c8:f2:b3: f4:24:7e:c1:cb:4d:d8:37:88:1c:01:f2:39:65:1a: de:e5:0d:ab:66:3f:7f:13:d1:89:af:01:42:6e:18: 87:bc:6d:db:78:5e:3a:a5:c6:ca:bf:55:aa:54:8d: 47:c3:4c:fb:ab:6a:04:88:3e:54:30:bd:d6:cc:74: b7:c5:e9:f2:ba:82:ed:b3:2d:92:ed:ff:67:3b:ce: 4e:34:c0:6c:31:f1:af:d9:bf:7d:c1:96:05:a7:10: 32:ee:17:55:ed:36:82:41:bf:b9:f3:07:cd:e9:03: f8:25:20:0a:3a:a0:4a:6e:b2:6e:40:6b:c6:35:d0: 5b:2c:89:e2:79:e3:1a:98:81:d4:be:ec:4f:50:67: 9d:1d:9f:32:4e:cd:02:29:c5:9b:40:23:40:35:61: 97:3e:bb:3a:d9:59:72:08:12:2a:2e:6b:69:2a:2f: 58:93:7d:0b:46:81:86:e2:f1:e2:98:63:99:ab:ac: 41:21:cb:5d:e4:49:f2:10:c0:aa:8a:fa:81:21:15: 42:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:34:87:EB:72:84:D4:0D:A4:B3:12:9C:D9:A3:6D:1D:72:6A:0E:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d218258-37b0-342b-a7d7-5be3b03d0e83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.222.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:37:b8:9d:a5:f5:ca:8e:1f:00:7a:f4:fc:c4:39:a7:30:79: 6d:10:b5:19:f5:27:23:3e:0c:a7:29:bc:5a:2d:ec:cd:b6:37: 52:6c:70:0f:07:82:7b:f5:f9:eb:4a:6f:25:3c:8c:65:54:96: ae:7a:78:56:c6:94:6a:04:46:ee:39:e9:26:e2:7a:e9:21:74: d8:4e:49:a3:db:2f:ee:48:11:d4:cd:6a:fa:d0:52:db:99:a0: 99:2a:79:c2:57:86:42:95:3a:06:fb:3c:13:30:4a:69:83:c1: 7f:eb:9d:e2:c1:ac:a6:38:e8:e2:56:7a:02:9b:7a:e0:38:7b: ad:f7:35:de:6b:1c:2d:e3:a0:41:35:dc:f6:d1:9d:f4:70:99: ae:ff:1d:86:94:82:57:ba:97:87:0d:10:f9:2c:14:60:b6:c2: 3b:9a:e8:ab:46:4d:c9:d9:c1:af:8b:f4:8d:73:2b:15:64:c6: 79:58:ef:5b:ed:69:1f:13:27:64:2d:1a:41:f2:d6:62:4e:6a: 51:84:dc:f3:84:3e:4e:ab:24:a6:6a:18:9e:80:48:4b:43:8c: 4c:c9:f7:0b:62:38:3f:b2:03:a0:8a:f9:96:08:08:4d:fa:09: 14:b0:e9:bf:96:95:9a:b0:5c:8f:9a:67:78:e1:aa:0d:0a:64: 56:cb:c2:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+Az8o8ZLX1Fq3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk YTBlNDRlYzctODUxOC00MWQ2LWI1MTQtY2QzZDQ3ZWNjOGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5FGnBmHp0RstTPf+iS9D+1dpsaQKUJKvLNn kVH26FryRFfocjPIrswTV6iAfk5YdTAohMo1UjbI8rP0JH7By03YN4gcAfI5ZRre 5Q2rZj9/E9GJrwFCbhiHvG3beF46pcbKv1WqVI1Hw0z7q2oEiD5UML3WzHS3xeny uoLtsy2S7f9nO85ONMBsMfGv2b99wZYFpxAy7hdV7TaCQb+58wfN6QP4JSAKOqBK brJuQGvGNdBbLInieeMamIHUvuxPUGedHZ8yTs0CKcWbQCNANWGXPrs62VlyCBIq LmtpKi9Yk30LRoGG4vHimGOZq6xBIctd5EnyEMCqivqBIRVCKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFA0h+tyhNQNpLMSnNmjbR1yag6PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWQyMTgyNTgtMzdiMC0z NDJiLWE3ZDctNWJlM2IwM2QwZTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYt6oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHY3uJ2l9cqOHwB69PzEOacweW0QtRn1JyM+DKcpvFot7M22N1JscA8H gnv1+etKbyU8jGVUlq56eFbGlGoERu456SbieukhdNhOSaPbL+5IEdTNavrQUtuZ oJkqecJXhkKVOgb7PBMwSmmDwX/rneLBrKY46OJWegKbeuA4e633Nd5rHC3joEE1 3PbRnfRwma7/HYaUgle6l4cNEPksFGC2wjua6KtGTcnZwa+L9I1zKxVkxnlY71vt aR8TJ2QtGkHy1mJOalGE3POEPk6rJKZqGJ6ASEtDjEzJ9wtiOD+yA6CK+ZYICE36 CRSw6b+WlZqwXI+aZ3jhqg0KZFbLwic= -----END CERTIFICATE-----Generated at Tue Apr 21 20:35:26 2026 by rpki-client