$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf658221-f5a7-3bb0-8c62-d1364aa8fc52.roa File: cf658221-f5a7-3bb0-8c62-d1364aa8fc52.roa (raw, json) Hash identifier: gJ5gPeLj3SRbKB3FgFckj+P22biWJXOb01ke5+j+pNo= Subject key identifier: 4D:3D:83:61:AB:65:50:75:AA:CF:57:A2:58:5B:2A:57:2E:CC:9E:28 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF691C7DF0DB66C19A3ACD0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf658221-f5a7-3bb0-8c62-d1364aa8fc52.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 98.253.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:91:c7:df:0d:b6:6c:19:a3:ac:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=61632966-bd8c-4305-843c-2f09759197d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:60:fd:13:55:d0:a3:18:55:31:83:4c:20:da: 08:4e:0a:74:89:c5:76:d9:ca:8f:9f:19:bf:b1:57: ae:94:5c:36:fb:9d:67:9b:ab:0e:77:2f:fe:69:b1: 72:2b:73:b6:d9:c9:6a:0a:14:0f:a1:ac:9f:15:46: 7f:d1:86:35:25:46:55:48:5e:40:54:a1:fc:24:0a: 7d:9b:78:d7:12:a9:d3:40:bf:df:51:78:ff:e4:f5: aa:56:9a:3e:d2:94:a5:63:43:96:12:95:21:6b:43: 48:76:68:5b:f3:26:ea:69:fe:e7:d4:e7:8d:b5:a4: 4b:07:53:e3:f5:66:e3:8a:17:d4:26:c1:e3:44:e7: 64:3b:18:c2:c9:ad:f7:05:1c:5d:14:15:5a:0a:97: 54:f4:73:6f:55:15:53:ac:e6:6b:31:a0:51:e7:bf: 7c:c3:25:1d:29:fe:c5:cc:cb:33:4a:0f:0f:57:1b: 8f:8e:99:84:f2:c9:4c:4f:44:8d:e3:af:ba:fa:58: fe:8a:f7:ef:0a:6a:22:c3:dc:92:a0:f4:a4:f8:1d: fe:ed:9d:dc:77:5b:0d:bd:e7:b4:88:99:97:90:5f: 12:a3:43:7b:df:5b:83:de:59:c2:db:ab:6d:ec:26: bd:90:a3:2c:ca:6b:cc:a1:0a:13:88:96:c0:8f:2e: 62:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:3D:83:61:AB:65:50:75:AA:CF:57:A2:58:5B:2A:57:2E:CC:9E:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf658221-f5a7-3bb0-8c62-d1364aa8fc52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.253.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:1d:9f:3a:4e:3e:6c:50:ce:b1:fe:88:e7:d7:ec:69:03:17: db:78:f2:10:50:67:d5:82:66:c3:ee:8c:5c:6e:83:4d:4f:ea: 8d:d8:21:36:2a:6d:02:a0:70:da:5d:48:cf:8f:fb:73:90:c1: 22:16:d7:bb:90:c9:a4:b9:b6:09:31:e7:78:9b:03:58:96:8a: ae:61:6a:69:96:c6:b9:29:cc:bb:7d:6b:6d:56:3b:a9:1f:07: 61:95:e6:af:c7:09:cf:94:f5:60:51:09:4e:b7:5a:de:e3:10: b4:6a:39:51:f4:38:e8:5d:37:a5:85:63:9d:eb:c4:b6:49:af: d0:57:3c:f2:f8:bb:f1:b5:13:13:2b:fb:a9:fb:c0:2d:42:60: 6b:cf:2a:70:89:9d:1f:12:ca:7f:5d:b9:ea:93:46:7f:68:51: 29:58:07:30:13:11:75:9c:7f:96:73:3d:cb:a5:3b:f4:91:11: d3:97:60:86:a0:d0:95:f3:9f:f0:0d:35:6f:ed:3a:e3:5f:d6: 2e:eb:43:d5:18:bd:bd:95:f5:ae:5d:4d:3d:e9:98:fb:b5:a2: 03:a2:e9:71:24:dd:50:3a:35:00:07:c4:55:7e:ec:69:55:23: 83:21:ce:88:90:78:61:50:99:ab:3e:e5:df:dd:e5:b9:10:8c: ae:13:53:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9pHH3w22bBmjrNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NjE2MzI5NjYtYmQ4Yy00MzA1LTg0M2MtMmYwOTc1OTE5N2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2D9E1XQoxhVMYNMINoITgp0icV22cqPnxm/ sVeulFw2+51nm6sOdy/+abFyK3O22clqChQPoayfFUZ/0YY1JUZVSF5AVKH8JAp9 m3jXEqnTQL/fUXj/5PWqVpo+0pSlY0OWEpUha0NIdmhb8ybqaf7n1OeNtaRLB1Pj 9WbjihfUJsHjROdkOxjCya33BRxdFBVaCpdU9HNvVRVTrOZrMaBR5798wyUdKf7F zMszSg8PVxuPjpmE8slMT0SN46+6+lj+ivfvCmoiw9ySoPSk+B3+7Z3cd1sNvee0 iJmXkF8So0N731uD3lnC26tt7Ca9kKMsymvMoQoTiJbAjy5ikQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE09g2GrZVB1qs9XolhbKlcuzJ4oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2Y2NTgyMjEtZjVhNy0z YmIwLThjNjItZDEzNjRhYThmYzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYv0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM8dnzpOPmxQzrH+iOfX7GkDF9t48hBQZ9WCZsPujFxug01P6o3YITYq bQKgcNpdSM+P+3OQwSIW17uQyaS5tgkx53ibA1iWiq5hammWxrkpzLt9a21WO6kf B2GV5q/HCc+U9WBRCU63Wt7jELRqOVH0OOhdN6WFY53rxLZJr9BXPPL4u/G1ExMr +6n7wC1CYGvPKnCJnR8Syn9dueqTRn9oUSlYBzATEXWcf5ZzPculO/SREdOXYIag 0JXzn/ANNW/tOuNf1i7rQ9UYvb2V9a5dTT3pmPu1ogOi6XEk3VA6NQAHxFV+7GlV I4MhzoiQeGFQmas+5d/d5bkQjK4TUwY= -----END CERTIFICATE-----Generated at Tue Apr 21 20:51:13 2026 by rpki-client