$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aed0b948-1c7b-3610-96c7-b8713e929335.roa File: aed0b948-1c7b-3610-96c7-b8713e929335.roa (raw, json) Hash identifier: Z5ilQldjERN6HSyMoUdl7qrbp4e8HX0WDIzEkMaO4QY= Subject key identifier: D4:E3:66:7C:B9:77:15:81:F9:D8:4F:F9:36:AA:2B:55:22:33:F7:99 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF7F53E98E713FE1C66F700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aed0b948-1c7b-3610-96c7-b8713e929335.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 98.206.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f7:f5:3e:98:e7:13:fe:1c:66:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=f49d84ef-6912-4d69-a6b7-8d4a476f3929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e5:c4:17:93:9d:f2:3b:71:9b:57:ff:4b:03: 4f:35:9e:a4:e2:fb:04:50:39:28:fa:9c:19:86:84: b4:d0:ad:f2:a3:7f:56:d5:b4:2c:04:32:c0:bb:45: 18:8a:71:5c:71:bc:1b:ea:67:a7:79:29:2e:66:5c: 2b:08:08:34:d9:7d:aa:92:3c:dd:d0:a0:e6:6c:ae: 2c:28:ed:60:70:4b:6c:79:6c:83:15:11:84:21:8e: 42:8f:bc:f9:9a:d4:d9:64:8a:4d:74:09:4a:5f:a4: ca:89:1d:15:65:3b:84:3c:ba:41:ee:82:29:95:76: fc:60:2f:84:b1:10:a5:63:90:03:b8:53:29:7c:b8: f4:e4:3c:e5:f1:55:b3:6d:6f:cb:ff:76:2e:39:54: 8d:50:0e:7b:da:4d:db:eb:74:33:f8:24:ca:29:89: 04:55:10:b4:d4:7b:02:06:32:b8:40:1b:98:ed:44: 34:43:bd:31:d5:bf:2b:43:45:ba:f0:e1:cd:ed:5b: a7:7e:f1:71:87:cc:ee:58:b5:38:c2:ea:a1:f0:5f: 81:b2:97:74:e3:dc:c4:9a:46:80:31:4e:81:4c:56: 49:f9:71:60:90:3b:c3:99:72:d5:c8:07:bc:9b:3f: c6:f0:00:f8:a2:1e:c4:a8:bb:24:e4:fe:9d:4d:d0: 5e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:E3:66:7C:B9:77:15:81:F9:D8:4F:F9:36:AA:2B:55:22:33:F7:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aed0b948-1c7b-3610-96c7-b8713e929335.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.206.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:24:c7:e7:14:ac:74:e7:e6:57:78:3c:dd:27:92:e6:86:98: 6b:0e:82:f1:94:ea:6b:dd:7b:77:06:65:b7:50:b7:ce:35:6c: 2e:45:de:ed:7b:3c:14:9b:c1:2a:f5:c2:bf:68:9b:f1:75:31: 3e:80:cd:29:f1:75:00:f5:d2:6b:a4:e2:ac:10:73:32:58:6c: 98:87:10:53:ce:d3:9d:0a:8a:ac:3a:d6:ab:b1:93:28:92:3d: e3:3e:f3:ff:4a:24:6c:48:94:58:20:ec:67:b5:a3:41:fc:08: 28:ef:cb:55:40:b5:04:f9:18:b2:54:1c:67:5b:f0:f3:05:1f: c0:37:c2:4b:b0:f0:35:c4:ea:df:b3:2f:51:46:a8:70:aa:18: b3:0d:59:c8:e3:af:41:06:2e:3f:6f:28:83:37:0e:6f:8d:e6: a7:c9:3d:43:ab:d0:8a:3c:2c:89:3e:71:dc:e4:3a:6e:33:93: 73:14:5f:0d:bb:6c:52:4d:ee:f9:37:76:6b:20:f8:d7:86:9e: 27:37:89:71:16:0d:40:96:bf:8c:23:c3:15:5c:44:fd:09:e7: 5b:c9:ee:81:c1:32:4a:24:55:f5:03:7f:2b:ef:df:c3:1d:f0: 49:8c:fb:7f:29:aa:3a:88:65:eb:bb:8e:8a:8b:d4:56:84:75: 3d:52:d4:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9/U+mOcT/hxm9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ZjQ5ZDg0ZWYtNjkxMi00ZDY5LWE2YjctOGQ0YTQ3NmYzOTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+XEF5Od8jtxm1f/SwNPNZ6k4vsEUDko+pwZ hoS00K3yo39W1bQsBDLAu0UYinFccbwb6meneSkuZlwrCAg02X2qkjzd0KDmbK4s KO1gcEtseWyDFRGEIY5Cj7z5mtTZZIpNdAlKX6TKiR0VZTuEPLpB7oIplXb8YC+E sRClY5ADuFMpfLj05Dzl8VWzbW/L/3YuOVSNUA572k3b63Qz+CTKKYkEVRC01HsC BjK4QBuY7UQ0Q70x1b8rQ0W68OHN7VunfvFxh8zuWLU4wuqh8F+Bspd049zEmkaA MU6BTFZJ+XFgkDvDmXLVyAe8mz/G8AD4oh7EqLsk5P6dTdBeawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNTjZny5dxWB+dhP+TaqK1UiM/eZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWVkMGI5NDgtMWM3Yi0z NjEwLTk2YzctYjg3MTNlOTI5MzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYs78MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQkx+cUrHTn5ld4PN0nkuaGmGsOgvGU6mvde3cGZbdQt841bC5F3u17 PBSbwSr1wr9om/F1MT6AzSnxdQD10muk4qwQczJYbJiHEFPO050Kiqw61quxkyiS PeM+8/9KJGxIlFgg7Ge1o0H8CCjvy1VAtQT5GLJUHGdb8PMFH8A3wkuw8DXE6t+z L1FGqHCqGLMNWcjjr0EGLj9vKIM3Dm+N5qfJPUOr0Io8LIk+cdzkOm4zk3MUXw27 bFJN7vk3dmsg+NeGnic3iXEWDUCWv4wjwxVcRP0J51vJ7oHBMkokVfUDfyvv38Md 8EmM+38pqjqIZeu7joqL1FaEdT1S1HY= -----END CERTIFICATE-----Generated at Tue Apr 21 20:48:46 2026 by rpki-client