$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca86efca-4dfb-3ae8-ac36-f2d8898fad79.roa File: ca86efca-4dfb-3ae8-ac36-f2d8898fad79.roa (raw, json) Hash identifier: ENzyb5ySwglNN5/pPVkRaCb11W1I6cROcy2d7TeVJjA= Subject key identifier: E7:5A:B2:BA:96:F3:BB:12:81:4E:61:D9:E8:B0:B1:6A:D2:C4:22:08 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF6E34026E85A4F1551E300 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca86efca-4dfb-3ae8-ac36-f2d8898fad79.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33651 IP address blocks: 98.207.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:e3:40:26:e8:5a:4f:15:51:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=45c86abf-5811-4938-81a3-fc1d54d4c730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9b:64:8d:ea:cb:cd:61:f4:4c:d1:be:c8:e8: ce:73:98:e7:9d:b3:68:8c:79:8f:d2:92:f7:79:9e: 54:7e:75:a6:a5:ae:4d:de:45:c3:51:57:f8:d7:d0: 95:f7:da:7c:a9:de:8e:d1:71:6d:ac:9d:e0:f2:83: 6b:c2:ca:60:4a:a9:21:99:68:11:f5:df:80:a3:6c: 88:f6:92:3e:cb:07:d0:d8:ab:20:19:77:95:6f:a4: 73:d5:5b:6f:9d:d4:d5:32:ee:ef:0c:6f:87:23:33: cc:3b:ee:f0:21:b1:16:06:6e:a4:1c:3c:1e:8d:79: e1:55:c3:d3:bd:76:08:86:f1:52:a6:b8:a1:72:8d: 87:41:c0:83:73:68:dd:a0:41:05:74:02:fc:b2:66: 49:75:2d:3a:b2:37:72:6d:d2:6f:65:c1:98:05:7a: a0:7f:6e:f2:84:1d:30:c4:e2:f1:5c:dd:62:ce:e3: d2:cc:07:36:7a:ef:f2:df:1a:d3:29:35:b0:81:da: f2:59:71:3c:9e:c2:d3:3f:1c:b5:e3:fc:70:f6:a9: 4c:8e:0f:7a:a5:dc:55:10:95:b2:03:15:54:fa:9c: ae:90:1c:d4:9b:8e:c6:06:bd:91:fd:74:aa:f5:40: b3:14:f9:24:32:49:7a:38:f1:64:6e:3d:9c:7a:63: 4b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:5A:B2:BA:96:F3:BB:12:81:4E:61:D9:E8:B0:B1:6A:D2:C4:22:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca86efca-4dfb-3ae8-ac36-f2d8898fad79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.207.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:5e:03:e6:be:de:22:f7:0f:89:1c:b7:61:de:a6:f2:80:26: 88:63:2d:5a:95:e5:ea:ae:a0:84:b3:37:6e:b5:f9:8d:e7:a3: 94:66:ef:38:2c:89:48:c1:83:31:4b:0a:35:44:f7:c1:58:fc: d2:ed:2d:2a:3f:9f:eb:97:6a:79:14:b8:70:b0:53:8e:48:8b: a3:77:d4:ab:e3:3a:7f:26:af:f0:ee:d2:9e:e8:ff:7e:e3:aa: 5d:9f:bf:38:ac:7d:07:b4:54:dc:3f:13:c8:44:6e:39:5d:b3: bb:cf:db:24:e3:54:e7:fd:2d:15:1f:a9:19:2e:ad:63:e9:93: c1:ff:89:6c:7c:14:f2:cb:05:9d:b7:83:1d:86:84:b6:7d:63: 70:52:99:e8:e0:2c:35:ef:80:25:e1:03:20:43:49:59:97:0f: d7:b0:41:90:8b:46:8e:7a:4c:2d:63:8d:4f:39:8d:f4:ef:cb: 7e:ed:d2:d3:d2:31:e6:4a:d2:54:99:65:39:b1:78:0c:af:2a: ec:7c:76:af:36:9e:14:6c:a3:15:ad:cf:98:69:b7:d1:6b:36: 08:30:26:39:81:48:e9:f0:dd:20:d1:9a:d0:59:37:2a:5d:c8: 6a:98:c7:ce:9d:96:a7:31:6a:24:1c:25:c8:80:66:02:ae:6b: 22:3a:c0:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9uNAJuhaTxVR4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NDVjODZhYmYtNTgxMS00OTM4LTgxYTMtZmMxZDU0ZDRjNzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnptkjerLzWH0TNG+yOjOc5jnnbNojHmP0pL3 eZ5UfnWmpa5N3kXDUVf419CV99p8qd6O0XFtrJ3g8oNrwspgSqkhmWgR9d+Ao2yI 9pI+ywfQ2KsgGXeVb6Rz1VtvndTVMu7vDG+HIzPMO+7wIbEWBm6kHDwejXnhVcPT vXYIhvFSprihco2HQcCDc2jdoEEFdAL8smZJdS06sjdybdJvZcGYBXqgf27yhB0w xOLxXN1izuPSzAc2eu/y3xrTKTWwgdryWXE8nsLTPxy14/xw9qlMjg96pdxVEJWy AxVU+pyukBzUm47GBr2R/XSq9UCzFPkkMkl6OPFkbj2cemNLYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOdasrqW87sSgU5h2eiwsWrSxCIIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2E4NmVmY2EtNGRmYi0z YWU4LWFjMzYtZjJkODg5OGZhZDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYs98MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJeA+a+3iL3D4kct2HepvKAJohjLVqV5equoISzN261+Y3no5Rm7zgs iUjBgzFLCjVE98FY/NLtLSo/n+uXankUuHCwU45Ii6N31KvjOn8mr/Du0p7o/37j ql2fvzisfQe0VNw/E8hEbjlds7vP2yTjVOf9LRUfqRkurWPpk8H/iWx8FPLLBZ23 gx2GhLZ9Y3BSmejgLDXvgCXhAyBDSVmXD9ewQZCLRo56TC1jjU85jfTvy37t0tPS MeZK0lSZZTmxeAyvKux8dq82nhRsoxWtz5hpt9FrNggwJjmBSOnw3SDRmtBZNypd yGqYx86dlqcxaiQcJciAZgKuayI6wOA= -----END CERTIFICATE-----Generated at Tue Apr 21 19:28:40 2026 by rpki-client