$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b42d9ca4-8073-353a-9f50-d30cae06f823.roa File: b42d9ca4-8073-353a-9f50-d30cae06f823.roa (raw, json) Hash identifier: DltUGVo0QPCn3nj7zto33vSgFL+Qb/oO1oqbYIIXtEA= Subject key identifier: 4B:F3:3D:37:58:EA:E1:17:FB:66:66:72:DE:ED:04:C9:AF:06:28:60 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584E6F3B8C6202A032B1F8E09980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b42d9ca4-8073-353a-9f50-d30cae06f823.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 33651 IP address blocks: 98.248.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3b:8c:62:02:a0:32:b1:f8:e0:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=dd78f872-6976-4380-83c6-7e7ea3baca6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2a:63:6c:c6:df:c4:b4:42:92:e1:b2:7f:ad: 54:31:ed:1c:01:b6:78:3d:85:2a:13:c4:1b:eb:b6: 45:ca:e0:50:56:67:d0:e0:f8:34:6f:2e:27:63:f2: 7a:38:c2:fc:12:61:4f:5a:e7:37:b1:29:e1:f0:a2: 51:d0:af:f9:cc:2d:c7:48:54:de:c5:f6:87:ff:f7: a3:9f:79:0e:5e:2a:cf:22:05:9b:f5:8f:99:4d:c4: eb:01:fb:66:fa:17:09:35:d9:0a:6e:20:e3:f2:8a: 5b:57:b0:3e:d6:14:01:4e:b7:24:92:99:67:5e:48: 2f:ef:53:ad:1c:1d:36:43:b1:cb:a9:31:fc:25:13: c8:3c:34:29:b0:4d:19:75:c6:f7:f1:09:ea:e1:97: 53:69:51:d8:d8:5b:8b:d3:48:7b:d5:f5:f5:c3:78: 0d:66:32:0a:bc:ff:9f:6c:58:af:eb:4f:5a:ff:31: 1e:17:c6:01:b6:44:3f:11:8e:fd:6e:69:83:d4:ca: dd:21:e9:5b:69:3e:36:ba:18:f1:0f:71:a0:52:b6: 61:b3:5f:25:80:b3:d4:f3:e4:bf:28:5b:af:76:35: ee:e8:0e:f7:08:a9:13:8e:23:b5:e5:7c:11:0d:a6: ca:4c:12:10:e1:c1:7b:ed:aa:b2:ce:c8:ba:43:24: 3c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:F3:3D:37:58:EA:E1:17:FB:66:66:72:DE:ED:04:C9:AF:06:28:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b42d9ca4-8073-353a-9f50-d30cae06f823.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.248.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:f4:04:33:ba:01:1f:25:8b:3e:5b:08:cf:a4:a8:c8:24:58: 6a:8e:a2:bf:51:f6:24:66:18:5b:98:59:37:25:94:70:cd:3a: 6c:c1:9a:70:2b:86:d5:0b:3d:54:50:38:5c:9c:05:71:b8:76: 7c:7e:1a:9c:6a:a2:6e:ba:1b:d1:b8:c8:07:e0:2a:9b:7d:63: 83:ea:40:93:0d:fa:1f:60:63:b0:dc:c1:3e:3c:61:29:fa:d8: 19:72:cf:88:6a:e2:11:0b:98:c8:a5:44:c7:ae:a0:b4:f9:c6: 12:32:f6:ca:bc:54:8a:01:48:88:6c:a5:d5:70:19:41:a3:d2: 6e:5c:7d:54:cb:79:34:bf:1f:d1:c0:d8:56:84:9c:80:90:35: 97:bb:63:f9:7d:d2:2e:b9:88:22:c5:fc:52:12:68:85:9b:40: 9c:46:3b:02:2c:dd:a8:99:36:59:ee:e1:fe:79:81:19:cf:ff: 50:dc:35:53:7a:43:80:e0:ca:5a:c6:39:91:34:a2:ac:69:eb: 75:15:ea:22:79:12:30:e8:1c:a9:3e:61:4d:57:ed:94:1a:36: 59:4d:c0:96:55:d9:60:0a:a5:ca:23:9e:4c:31:05:82:fe:3c: 0e:f6:d0:76:1e:fa:f8:1a:17:ee:62:70:45:7b:76:4e:5a:a6: c5:df:dc:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vO4xiAqAysfjgmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk ZGQ3OGY4NzItNjk3Ni00MzgwLTgzYzYtN2U3ZWEzYmFjYTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoypjbMbfxLRCkuGyf61UMe0cAbZ4PYUqE8Qb 67ZFyuBQVmfQ4Pg0by4nY/J6OML8EmFPWuc3sSnh8KJR0K/5zC3HSFTexfaH//ej n3kOXirPIgWb9Y+ZTcTrAftm+hcJNdkKbiDj8opbV7A+1hQBTrckkplnXkgv71Ot HB02Q7HLqTH8JRPIPDQpsE0Zdcb38Qnq4ZdTaVHY2FuL00h71fX1w3gNZjIKvP+f bFiv609a/zEeF8YBtkQ/EY79bmmD1MrdIelbaT42uhjxD3GgUrZhs18lgLPU8+S/ KFuvdjXu6A73CKkTjiO15XwRDabKTBIQ4cF77aqyzsi6QyQ8dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEvzPTdY6uEX+2Zmct7tBMmvBihgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjQyZDljYTQtODA3My0z NTNhLTlmNTAtZDMwY2FlMDZmODIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYvjcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIL0BDO6AR8liz5bCM+kqMgkWGqOor9R9iRmGFuYWTcllHDNOmzBmnAr htULPVRQOFycBXG4dnx+Gpxqom66G9G4yAfgKpt9Y4PqQJMN+h9gY7DcwT48YSn6 2Blyz4hq4hELmMilRMeuoLT5xhIy9sq8VIoBSIhspdVwGUGj0m5cfVTLeTS/H9HA 2FaEnICQNZe7Y/l90i65iCLF/FISaIWbQJxGOwIs3aiZNlnu4f55gRnP/1DcNVN6 Q4DgylrGOZE0oqxp63UV6iJ5EjDoHKk+YU1X7ZQaNllNwJZV2WAKpcojnkwxBYL+ PA720HYe+vgaF+5icEV7dk5apsXf3CU= -----END CERTIFICATE-----Generated at Tue Jul 21 21:26:36 2026 by rpki-client