$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/847fa7bc-4837-3149-b2ed-1920d9a3f537.roa File: 847fa7bc-4837-3149-b2ed-1920d9a3f537.roa (raw, json) Hash identifier: gIEOKL2LcU81sftOvBhUlv0Bo67/AL/xVeS3SHhcL9w= Subject key identifier: DA:97:E3:0D:93:F6:60:A4:BF:22:55:36:E0:25:DA:71:B1:34:EB:73 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF693199FBA3D677CDDC940 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/847fa7bc-4837-3149-b2ed-1920d9a3f537.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 98.253.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:93:19:9f:ba:3d:67:7c:dd:c9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=068db82a-5299-4bcd-a247-61ab1a30eb3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:46:aa:88:0f:65:99:13:f5:7b:fc:de:fe:8c: 20:f0:cd:68:67:79:1b:f6:0c:a8:75:73:a4:60:3a: d9:50:cd:d1:39:c6:e7:d1:1c:6f:09:05:43:a9:74: 01:79:1e:bb:8c:8d:51:7f:21:54:63:0a:04:d1:89: 9b:f3:b4:04:7d:6d:1e:41:f3:7c:eb:3d:b5:41:3d: fd:bb:32:54:32:61:e3:1c:0e:f0:bf:b6:6d:5e:8c: 7f:2c:a1:1b:f4:8b:91:8f:db:df:d1:22:83:c0:71: f6:9e:e3:db:b7:3e:0e:cf:26:4b:a4:55:d8:ee:e0: bd:b6:1a:0c:58:f6:0b:8d:63:c9:d1:67:9f:26:82: 54:34:0d:85:9f:db:60:ab:c9:0c:e6:45:a1:a1:ba: ca:48:43:28:85:cb:87:ac:f2:28:de:76:5d:e3:2f: e4:80:c5:08:f8:68:bf:c2:2f:33:29:c6:74:79:99: 37:1a:f8:89:34:38:54:49:53:8b:15:43:6d:16:97: a4:53:47:44:1f:73:00:b4:e6:af:a7:bd:a5:93:32: 0f:4a:74:cb:66:56:af:32:70:3e:04:86:ec:cc:26: 29:2e:71:e1:84:31:0c:db:7e:bb:d6:27:3a:bb:5c: 10:cd:b2:b0:c2:05:b1:ce:16:a3:75:08:58:8f:4d: e7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:97:E3:0D:93:F6:60:A4:BF:22:55:36:E0:25:DA:71:B1:34:EB:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/847fa7bc-4837-3149-b2ed-1920d9a3f537.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.253.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:6d:85:0f:0a:8e:9b:16:b7:59:60:22:84:00:c2:f6:28:72: 3b:e0:c1:9b:ae:c0:3e:dc:91:19:b0:19:9e:ac:b1:f7:de:b1: c7:8e:4b:9a:63:c8:05:b2:85:52:08:b2:dc:53:b7:67:5f:65: 70:73:53:31:c2:e9:b7:bd:b7:6a:44:d6:df:d4:69:72:3c:57: 84:c3:7d:68:df:88:b7:07:8c:cb:4d:44:a0:22:5e:0f:d3:90: 21:3f:1d:8a:fc:6f:c3:24:a9:a1:ce:78:c4:47:a4:fe:a8:fc: c1:29:a4:e5:30:26:65:fb:cc:61:20:49:cf:15:f9:73:69:63: 26:22:93:ba:af:31:ac:f9:eb:08:19:bf:de:03:0b:73:21:eb: 59:ff:e0:c0:d3:c7:7d:9f:fc:20:16:22:33:60:1b:f5:08:e2: 2c:60:8e:35:c9:6a:de:77:02:ea:61:46:eb:94:02:72:cb:17: 11:3e:65:f2:0f:b5:fb:47:be:ab:52:f7:b4:cf:52:32:f1:cc: 3d:34:17:98:cc:a7:ec:d5:82:e1:65:65:aa:69:29:38:e5:47: a5:a4:dc:4a:ba:29:b6:87:0d:2c:32:f5:bc:fb:f6:05:cb:7f: 93:63:39:28:e0:d8:5f:08:81:ef:e7:34:a5:ce:3b:78:0e:79: e1:26:a7:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9pMZn7o9Z3zdyUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MDY4ZGI4MmEtNTI5OS00YmNkLWEyNDctNjFhYjFhMzBlYjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0aqiA9lmRP1e/ze/owg8M1oZ3kb9gyodXOk YDrZUM3ROcbn0RxvCQVDqXQBeR67jI1RfyFUYwoE0Ymb87QEfW0eQfN86z21QT39 uzJUMmHjHA7wv7ZtXox/LKEb9IuRj9vf0SKDwHH2nuPbtz4OzyZLpFXY7uC9thoM WPYLjWPJ0WefJoJUNA2Fn9tgq8kM5kWhobrKSEMohcuHrPIo3nZd4y/kgMUI+Gi/ wi8zKcZ0eZk3GviJNDhUSVOLFUNtFpekU0dEH3MAtOavp72lkzIPSnTLZlavMnA+ BIbszCYpLnHhhDEM23671ic6u1wQzbKwwgWxzhajdQhYj03newIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNqX4w2T9mCkvyJVNuAl2nGxNOtzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODQ3ZmE3YmMtNDgzNy0z MTQ5LWIyZWQtMTkyMGQ5YTNmNTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYv1EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALpthQ8KjpsWt1lgIoQAwvYocjvgwZuuwD7ckRmwGZ6ssffesceOS5pj yAWyhVIIstxTt2dfZXBzUzHC6be9t2pE1t/UaXI8V4TDfWjfiLcHjMtNRKAiXg/T kCE/HYr8b8MkqaHOeMRHpP6o/MEppOUwJmX7zGEgSc8V+XNpYyYik7qvMaz56wgZ v94DC3Mh61n/4MDTx32f/CAWIjNgG/UI4ixgjjXJat53AuphRuuUAnLLFxE+ZfIP tftHvqtS97TPUjLxzD00F5jMp+zVguFlZappKTjlR6Wk3Eq6KbaHDSwy9bz79gXL f5NjOSjg2F8Ige/nNKXOO3gOeeEmp6g= -----END CERTIFICATE-----Generated at Tue Apr 21 22:58:20 2026 by rpki-client