$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa885f78-74be-33d1-818b-446f3f63f13a.roa File: aa885f78-74be-33d1-818b-446f3f63f13a.roa (raw, json) Hash identifier: 1BVUXXvueH/JFdcx+upg8ZKI3GkltL47d01kmmdUtuk= Subject key identifier: 83:0B:15:A7:59:2C:4E:0D:64:2C:31:3F:1B:44:3A:EE:01:DE:D9:EF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF692E0B1255481A4D23EC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa885f78-74be-33d1-818b-446f3f63f13a.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 98.253.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:92:e0:b1:25:54:81:a4:d2:3e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=5338bb20-ab13-40e4-bd4f-5e7f3735f3ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d3:f8:92:d0:a5:34:ae:62:9a:e7:dc:ca:f1: cb:40:7c:5e:86:58:cc:bc:21:a5:e2:50:90:4d:e4: 6d:00:c3:1a:db:15:8a:c4:ae:23:ab:3c:c5:0d:d2: ac:80:e6:4e:8c:83:32:00:f5:8a:04:47:d9:96:b7: 08:1b:5b:cb:34:18:2f:76:14:4d:4c:84:40:3e:22: 3b:0a:7a:e0:65:32:90:99:44:4e:a5:42:1c:3a:db: 3b:d8:62:e7:7d:c0:3e:ba:5b:3d:43:0f:c7:1c:59: d1:0f:67:0c:f4:70:cf:80:90:df:b5:02:0c:83:99: 20:d6:1b:f9:94:14:9f:5c:99:84:3a:58:1d:a8:76: e7:9d:77:40:93:88:bc:27:d3:ac:47:99:af:93:7e: 8c:a7:03:14:9b:58:a0:6e:62:59:18:97:8c:5b:bd: 7a:1e:8c:3c:5e:2a:8f:7f:4a:35:bb:5a:10:eb:b0: 79:34:61:d3:3f:eb:b7:82:eb:1c:ed:b2:8e:b9:47: 1c:f6:c8:61:4d:1c:15:32:9e:06:a8:03:82:60:aa: 88:bf:9d:59:05:59:f0:c6:ec:37:f0:0f:e6:b2:a5: f1:10:69:d9:2c:ee:7e:8f:f8:3b:d4:09:78:0b:59: 2d:8a:a5:ca:29:64:0f:c8:9e:7d:99:e8:4e:86:4b: 77:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:0B:15:A7:59:2C:4E:0D:64:2C:31:3F:1B:44:3A:EE:01:DE:D9:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa885f78-74be-33d1-818b-446f3f63f13a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.253.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:16:5c:e8:12:34:18:aa:7c:07:26:07:f4:2b:29:9f:ba:02: 2a:9a:9a:3a:b4:3f:46:0a:1f:41:ab:e4:91:2d:fb:77:74:56: 35:63:94:7a:93:37:43:8d:04:b8:a7:59:b6:f9:64:db:1a:be: c9:31:de:66:26:47:2f:ca:fe:8b:8d:02:dc:e7:7b:58:12:42: da:fc:70:60:f9:b5:d2:6c:9f:4c:b7:e8:75:67:95:94:16:d8: 7b:1f:26:2b:e5:87:30:7e:e9:4d:f5:44:d3:6d:e7:07:c0:e1: 53:f1:85:28:80:5d:e2:40:21:e9:39:1f:02:c7:ad:e4:28:23: a9:c6:c5:6b:4b:23:2f:56:8e:ed:db:2e:f5:37:ca:13:5d:f0: fb:25:07:e0:6d:49:90:fa:5b:85:bb:a2:e1:ce:2a:78:fa:95: ea:3d:b8:ec:17:ad:9e:8e:dc:39:c2:4a:54:26:14:24:e1:99: a4:ce:93:f9:c2:48:30:9b:5d:31:26:11:0c:aa:5d:d1:0c:ee: 97:82:94:46:cb:3f:52:f0:be:32:fd:a1:49:a1:02:de:71:09: 1c:b4:0c:c0:67:fb:04:d6:7f:c6:5f:63:06:e0:c1:c3:c4:3c: d1:a8:ac:ef:a4:c2:2c:e9:70:c0:e8:8a:ee:65:fb:c7:41:1b: d3:1d:1e:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9pLgsSVUgaTSPsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NTMzOGJiMjAtYWIxMy00MGU0LWJkNGYtNWU3ZjM3MzVmM2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9P4ktClNK5imufcyvHLQHxehljMvCGl4lCQ TeRtAMMa2xWKxK4jqzzFDdKsgOZOjIMyAPWKBEfZlrcIG1vLNBgvdhRNTIRAPiI7 CnrgZTKQmUROpUIcOts72GLnfcA+uls9Qw/HHFnRD2cM9HDPgJDftQIMg5kg1hv5 lBSfXJmEOlgdqHbnnXdAk4i8J9OsR5mvk36MpwMUm1igbmJZGJeMW716How8XiqP f0o1u1oQ67B5NGHTP+u3gusc7bKOuUcc9shhTRwVMp4GqAOCYKqIv51ZBVnwxuw3 8A/msqXxEGnZLO5+j/g71Al4C1ktiqXKKWQPyJ59mehOhkt3/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIMLFadZLE4NZCwxPxtEOu4B3tnvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWE4ODVmNzgtNzRiZS0z M2QxLTgxOGItNDQ2ZjNmNjNmMTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYv0pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEWXOgSNBiqfAcmB/QrKZ+6Aiqamjq0P0YKH0Gr5JEt+3d0VjVjlHqT N0ONBLinWbb5ZNsavskx3mYmRy/K/ouNAtzne1gSQtr8cGD5tdJsn0y36HVnlZQW 2HsfJivlhzB+6U31RNNt5wfA4VPxhSiAXeJAIek5HwLHreQoI6nGxWtLIy9Wju3b LvU3yhNd8PslB+BtSZD6W4W7ouHOKnj6leo9uOwXrZ6O3DnCSlQmFCThmaTOk/nC SDCbXTEmEQyqXdEM7peClEbLP1LwvjL9oUmhAt5xCRy0DMBn+wTWf8ZfYwbgwcPE PNGorO+kwizpcMDoiu5l+8dBG9MdHsc= -----END CERTIFICATE-----Generated at Tue Apr 21 19:28:29 2026 by rpki-client