$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/925a1436-2bed-31c6-9337-51b07313975c.roa File: 925a1436-2bed-31c6-9337-51b07313975c.roa (raw, json) Hash identifier: JRouCAxXUtxZvSgQ6m4LYluFiyJnVMPupd33KX3AOwc= Subject key identifier: 5A:91:AB:87:1A:9B:2B:5E:8A:0F:04:27:F0:A2:97:DD:75:48:92:8A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF82564E7EC00C1129F4F80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/925a1436-2bed-31c6-9337-51b07313975c.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 98.253.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f8:25:64:e7:ec:00:c1:12:9f:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=4f8f969e-683a-40ec-a58f-c39944689f23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:66:b8:a4:59:85:f5:9c:4b:0c:3c:0d:7e:05: 8b:4f:d1:96:92:68:64:c0:5f:41:1b:dc:2e:71:43: 2a:79:cc:79:5b:d9:85:35:b1:ed:28:a5:af:c3:dd: b7:60:7a:92:70:76:4d:7d:72:39:26:73:fb:c6:f6: 8b:d9:58:d3:d2:fc:a9:1c:00:66:db:bb:47:f1:35: b1:a4:12:fa:0d:0f:e1:ce:91:7c:6f:cb:17:cf:02: 92:3c:36:47:af:0f:e0:b5:53:ac:ec:38:84:35:9d: 88:89:42:e7:ff:15:7d:57:25:da:37:d7:c9:ad:9c: f0:a6:a3:bf:8c:78:ca:fa:48:72:a7:e8:74:08:ae: e1:da:3a:57:68:2a:9e:3a:c4:15:7b:93:37:6d:fa: 13:62:0e:41:39:9f:11:a0:c9:38:09:fb:f5:c7:e7: 0e:9f:96:ca:88:f4:39:6a:8c:25:ce:e0:7b:cb:58: 9c:b9:02:0c:90:3f:2b:0f:df:6a:a3:e3:bc:20:77: 83:eb:a0:df:36:54:8b:db:8c:f4:35:0f:36:41:26: c6:42:16:a4:2a:15:f3:2e:ab:10:f3:9e:79:13:1d: 67:1f:e9:7e:b3:26:89:8b:8e:52:8f:d0:f9:37:1d: d6:99:eb:27:85:aa:0e:20:69:84:c5:45:db:a6:4f: 47:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:91:AB:87:1A:9B:2B:5E:8A:0F:04:27:F0:A2:97:DD:75:48:92:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/925a1436-2bed-31c6-9337-51b07313975c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.253.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:b6:6a:19:c0:70:80:e1:0a:b6:0c:ea:ce:ec:8c:7f:92:b8: 16:d1:68:9d:58:04:46:5c:ce:9a:01:b4:b6:c3:69:78:03:d1: 0d:41:9a:2a:3c:1d:3a:fe:c9:9b:2a:94:87:5a:05:29:a0:e7: 69:2e:bd:43:94:fe:aa:d7:d6:cc:42:9f:16:c9:b7:9a:3a:4b: 66:c9:bf:8c:58:37:1c:f2:5d:da:ea:3e:7e:50:6a:fe:50:ce: 44:1e:67:d3:b2:7b:3f:9a:c6:60:c4:31:fd:28:23:68:3e:46: 86:5c:fc:94:9a:ed:26:d4:be:7d:7a:04:d7:21:62:84:55:b4: 81:b6:3d:e6:40:fd:c2:bf:01:20:b5:25:ae:ce:e3:f2:14:41: 07:21:05:38:29:fc:f4:11:2d:1f:2d:17:bb:c6:09:5d:5e:7d: 7b:43:9f:e3:26:41:0c:33:dc:83:f9:14:88:03:3d:f4:9d:b1: 69:69:f5:58:b0:f9:67:98:00:67:4f:01:78:2f:04:ea:32:83: ad:bc:61:56:80:fa:af:87:5a:4c:f5:7d:5c:cc:c0:58:2a:dd: e4:00:e4:41:64:7e:e7:6f:d8:d5:9b:44:2b:d1:0b:ce:5e:8f: 21:68:a2:73:62:51:57:32:ca:b4:87:48:ca:0a:86:55:96:75: 5b:8b:d9:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+CVk5+wAwRKfT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NGY4Zjk2OWUtNjgzYS00MGVjLWE1OGYtYzM5OTQ0Njg5ZjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2a4pFmF9ZxLDDwNfgWLT9GWkmhkwF9BG9wu cUMqecx5W9mFNbHtKKWvw923YHqScHZNfXI5JnP7xvaL2VjT0vypHABm27tH8TWx pBL6DQ/hzpF8b8sXzwKSPDZHrw/gtVOs7DiENZ2IiULn/xV9VyXaN9fJrZzwpqO/ jHjK+khyp+h0CK7h2jpXaCqeOsQVe5M3bfoTYg5BOZ8RoMk4Cfv1x+cOn5bKiPQ5 aowlzuB7y1icuQIMkD8rD99qo+O8IHeD66DfNlSL24z0NQ82QSbGQhakKhXzLqsQ 8555Ex1nH+l+syaJi45Sj9D5Nx3WmesnhaoOIGmExUXbpk9H7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFqRq4camyteig8EJ/Cil911SJKKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTI1YTE0MzYtMmJlZC0z MWM2LTkzMzctNTFiMDczMTM5NzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYv2gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI22ahnAcIDhCrYM6s7sjH+SuBbRaJ1YBEZczpoBtLbDaXgD0Q1Bmio8 HTr+yZsqlIdaBSmg52kuvUOU/qrX1sxCnxbJt5o6S2bJv4xYNxzyXdrqPn5Qav5Q zkQeZ9Oyez+axmDEMf0oI2g+RoZc/JSa7SbUvn16BNchYoRVtIG2PeZA/cK/ASC1 Ja7O4/IUQQchBTgp/PQRLR8tF7vGCV1efXtDn+MmQQwz3IP5FIgDPfSdsWlp9Viw +WeYAGdPAXgvBOoyg628YVaA+q+HWkz1fVzMwFgq3eQA5EFkfudv2NWbRCvRC85e jyFoonNiUVcyyrSHSMoKhlWWdVuL2WI= -----END CERTIFICATE-----Generated at Tue Apr 21 20:55:12 2026 by rpki-client