$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/95725f07-bc04-33fd-bbea-0356984e7fba.roa File: 95725f07-bc04-33fd-bbea-0356984e7fba.roa (raw, json) Hash identifier: 85USlYOyX5gKZ4JJA5SIdqJcach02Dk3LCHXiATWwjo= Subject key identifier: 55:47:BF:F5:11:CE:29:05:2B:D9:E9:63:0C:A3:55:B2:13:2D:38:F3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF94A49A343835539CBF780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/95725f07-bc04-33fd-bbea-0356984e7fba.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33651 IP address blocks: 98.42.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f9:4a:49:a3:43:83:55:39:cb:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=585bab88-f8aa-45c4-94c2-b0eb24a39cfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:96:f8:8e:33:fc:29:51:12:aa:c3:a0:eb:1b: b1:4c:0b:1b:b3:e8:95:3c:34:78:ab:29:fa:b0:0d: bf:38:77:70:77:b6:32:44:68:77:67:44:8d:fe:09: 4c:17:90:5d:08:89:12:85:7b:97:1a:9a:11:3f:d7: 5f:16:4a:53:1b:7b:72:8b:6c:79:c0:5b:da:9d:d1: 63:7a:57:16:8c:23:ab:f0:91:d5:ac:31:cf:4f:3c: f8:01:5b:1e:bc:dc:bd:82:71:ea:9d:58:5e:25:77: fd:3e:2c:3e:74:ff:4e:ad:fb:d7:0d:fc:06:cd:d1: 6b:79:92:8f:56:31:39:11:43:77:e7:04:9c:b5:4a: 97:bf:3f:7b:e0:bf:0e:bb:32:6d:7a:1c:56:6b:18: 2c:b8:02:e3:01:a8:34:6d:c0:56:37:99:43:52:8d: 8c:bc:7e:de:5c:07:93:ad:69:da:64:03:a6:38:06: 25:14:77:50:98:f4:ec:7d:1b:eb:f4:eb:5a:4d:e6: 40:2a:9d:38:9c:aa:32:41:74:19:fc:55:d9:5c:17: d6:d5:d9:d0:ae:6c:d2:4b:08:00:48:23:2b:14:95: 8c:fd:a1:9a:6c:bd:34:8f:98:4f:5d:db:49:6f:85: 2c:a0:89:81:50:a5:df:de:71:02:d1:22:8a:96:f5: ab:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:47:BF:F5:11:CE:29:05:2B:D9:E9:63:0C:A3:55:B2:13:2D:38:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/95725f07-bc04-33fd-bbea-0356984e7fba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.42.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:02:b9:b0:ab:e4:31:22:be:7d:da:fe:95:09:c2:d3:a5:a8: 76:fa:44:65:7f:20:67:e1:8a:36:96:0f:f0:ec:80:1d:7b:52: 79:64:df:42:51:6a:4f:34:5e:ac:03:88:1d:4d:9c:ff:32:4f: 38:0b:17:a3:8d:ae:cb:5a:59:d9:12:50:71:a8:69:c9:af:a3: 93:d1:23:25:45:18:d4:41:72:f8:7a:40:83:93:5e:e5:7b:fa: 40:39:de:2d:58:b1:d4:89:8b:05:ff:aa:8e:ac:97:49:1c:28: fa:75:2e:a6:a8:25:0e:f2:55:62:29:2d:de:60:5c:46:97:85: df:73:2c:ac:c4:75:4b:87:9b:09:ec:3c:e3:1d:1d:8d:99:69: 96:c5:e8:c6:71:7c:66:a1:b2:ca:6d:bd:d6:e9:30:63:4a:69: 1c:32:ec:68:e3:25:16:b6:2b:73:db:f8:91:4d:cd:f7:b2:0f: 8e:fd:9f:4c:ce:1e:78:8f:78:f8:c4:45:18:ca:f1:a3:4a:3b: 46:40:da:96:41:20:43:c7:91:94:37:31:15:a6:89:ff:91:11: 3a:5d:e4:8a:04:32:d3:bc:7a:67:6c:70:db:ec:ac:99:e4:3c: 83:6d:7e:b2:35:71:db:ee:07:99:8f:0d:f8:0c:a6:6b:f6:ad: 05:3e:3c:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+UpJo0ODVTnL94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NTg1YmFiODgtZjhhYS00NWM0LTk0YzItYjBlYjI0YTM5Y2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJb4jjP8KVESqsOg6xuxTAsbs+iVPDR4qyn6 sA2/OHdwd7YyRGh3Z0SN/glMF5BdCIkShXuXGpoRP9dfFkpTG3tyi2x5wFvandFj elcWjCOr8JHVrDHPTzz4AVsevNy9gnHqnVheJXf9Piw+dP9OrfvXDfwGzdFreZKP VjE5EUN35wSctUqXvz974L8OuzJtehxWaxgsuALjAag0bcBWN5lDUo2MvH7eXAeT rWnaZAOmOAYlFHdQmPTsfRvr9OtaTeZAKp04nKoyQXQZ/FXZXBfW1dnQrmzSSwgA SCMrFJWM/aGabL00j5hPXdtJb4UsoImBUKXf3nEC0SKKlvWrswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFVHv/URzikFK9npYwyjVbITLTjzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTU3MjVmMDctYmMwNC0z M2ZkLWJiZWEtMDM1Njk4NGU3ZmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYir4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKgCubCr5DEivn3a/pUJwtOlqHb6RGV/IGfhijaWD/DsgB17Unlk30JR ak80XqwDiB1NnP8yTzgLF6ONrstaWdkSUHGoacmvo5PRIyVFGNRBcvh6QIOTXuV7 +kA53i1YsdSJiwX/qo6sl0kcKPp1LqaoJQ7yVWIpLd5gXEaXhd9zLKzEdUuHmwns POMdHY2ZaZbF6MZxfGahssptvdbpMGNKaRwy7GjjJRa2K3Pb+JFNzfeyD479n0zO HniPePjERRjK8aNKO0ZA2pZBIEPHkZQ3MRWmif+RETpd5IoEMtO8emdscNvsrJnk PINtfrI1cdvuB5mPDfgMpmv2rQU+PAc= -----END CERTIFICATE-----Generated at Tue Apr 21 22:57:13 2026 by rpki-client