$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3112e5e-c049-3664-bd63-a89430e5c577.roa File: a3112e5e-c049-3664-bd63-a89430e5c577.roa (raw, json) Hash identifier: 62vXXQX89pmvTCKiZmXBilGJ4LhNYlxwxIo3zS3LTY8= Subject key identifier: E4:50:97:C4:FC:6F:2A:D1:8C:66:B1:CE:EE:57:F5:E0:10:FE:CA:CB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584E6F3C0C485F5E67F502515B80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3112e5e-c049-3664-bd63-a89430e5c577.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 33287 IP address blocks: 98.221.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3c:0c:48:5f:5e:67:f5:02:51:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=967bdc40-bee9-4911-b1d2-6add802cad8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ef:7f:d3:32:9a:27:b4:83:d4:36:e0:e3:e1: 04:6a:46:15:62:b2:d8:75:37:c6:8e:ae:30:fb:3c: b8:f4:5c:58:da:c6:77:11:66:76:66:e0:a9:1d:4e: 48:63:34:25:c2:4e:d7:21:6b:c1:49:95:85:5c:25: e6:3e:f3:6a:81:5f:e4:03:c9:e1:92:19:78:f6:34: d0:8c:df:37:6b:98:9d:dd:56:3c:34:be:a8:16:ce: 7e:3c:0a:69:c3:b8:ba:6f:79:e3:07:ac:a1:4b:aa: 14:a0:1d:ee:be:dc:2c:80:8c:c0:10:b1:da:fc:84: c0:77:45:81:15:28:57:aa:6c:46:37:cc:bb:6b:90: 87:85:07:a1:ac:77:29:58:6a:13:e0:8a:23:23:cb: 5f:75:dc:1d:76:67:cb:65:10:fa:8e:e3:ba:c0:9c: d5:4b:cc:5a:41:75:57:84:c0:90:46:dd:62:3f:12: fb:d2:86:24:1d:e5:1e:70:ad:84:c4:63:a8:75:23: 6a:40:84:e0:e0:c7:e2:93:81:71:59:49:c2:10:25: 79:69:b4:3e:c0:f2:53:7d:7d:19:6c:24:7f:40:89: 67:15:2b:97:8c:bd:b9:ad:4b:30:fd:3f:be:01:82: a0:fd:d6:af:c4:22:7d:f4:a4:64:49:62:a0:5d:6e: 5c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:50:97:C4:FC:6F:2A:D1:8C:66:B1:CE:EE:57:F5:E0:10:FE:CA:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3112e5e-c049-3664-bd63-a89430e5c577.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.221.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:05:d7:96:f9:36:83:c9:3f:88:54:52:7c:11:7c:05:a2:40: 1b:1e:94:f5:67:1c:3e:34:32:69:cf:58:0a:a1:bb:af:03:b3: d3:12:34:8d:49:60:66:a9:aa:1f:95:17:ae:47:37:97:5a:81: 55:b0:8b:e9:84:63:ca:2a:e8:e8:a3:eb:88:f2:54:82:6c:ba: 58:a6:61:e6:1b:e9:fb:45:f1:61:56:10:82:b6:93:3c:53:43: d4:bd:20:6b:4d:87:0a:43:65:77:bb:b6:19:89:e7:82:39:bf: 48:1d:69:26:16:bc:14:5d:c6:40:b8:48:13:6e:20:fa:3e:d2: 8d:f1:76:28:73:e1:94:04:08:d4:78:0a:d6:53:1e:8c:01:a8: bf:95:23:38:06:43:b8:da:55:1c:6e:5a:50:0e:5d:c6:d6:ca: fe:8f:f6:6c:ed:ca:69:ac:96:3d:63:30:03:97:a5:bd:2e:c0: da:07:c1:1a:c1:1e:d1:bf:2d:b7:c6:fa:e5:e1:8b:e4:b7:9c: 75:2d:31:c5:b7:41:5c:9a:95:fe:c2:16:64:61:a7:0d:db:d4: 55:aa:83:d5:54:a2:8d:1c:4b:18:f0:1d:ff:3f:ed:e8:9f:99: ee:9a:ca:d6:ee:a6:30:ce:5c:71:8f:70:4a:7b:45:8b:30:55: 11:50:55:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vPAxIX15n9QJRW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk OTY3YmRjNDAtYmVlOS00OTExLWIxZDItNmFkZDgwMmNhZDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhe9/0zKaJ7SD1Dbg4+EEakYVYrLYdTfGjq4w +zy49FxY2sZ3EWZ2ZuCpHU5IYzQlwk7XIWvBSZWFXCXmPvNqgV/kA8nhkhl49jTQ jN83a5id3VY8NL6oFs5+PAppw7i6b3njB6yhS6oUoB3uvtwsgIzAELHa/ITAd0WB FShXqmxGN8y7a5CHhQehrHcpWGoT4IojI8tfddwddmfLZRD6juO6wJzVS8xaQXVX hMCQRt1iPxL70oYkHeUecK2ExGOodSNqQITg4Mfik4FxWUnCECV5abQ+wPJTfX0Z bCR/QIlnFSuXjL25rUsw/T++AYKg/davxCJ99KRkSWKgXW5cCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFORQl8T8byrRjGaxzu5X9eAQ/srLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTMxMTJlNWUtYzA0OS0z NjY0LWJkNjMtYTg5NDMwZTVjNTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYt14MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8F15b5NoPJP4hUUnwRfAWiQBselPVnHD40MmnPWAqhu68Ds9MSNI1J YGapqh+VF65HN5dagVWwi+mEY8oq6Oij64jyVIJsulimYeYb6ftF8WFWEIK2kzxT Q9S9IGtNhwpDZXe7thmJ54I5v0gdaSYWvBRdxkC4SBNuIPo+0o3xdihz4ZQECNR4 CtZTHowBqL+VIzgGQ7jaVRxuWlAOXcbWyv6P9mztymmslj1jMAOXpb0uwNoHwRrB HtG/LbfG+uXhi+S3nHUtMcW3QVyalf7CFmRhpw3b1FWqg9VUoo0cSxjwHf8/7eif me6aytbupjDOXHGPcEp7RYswVRFQVXk= -----END CERTIFICATE-----Generated at Wed Jul 22 21:45:27 2026 by rpki-client