$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d434570a-727f-3938-bbab-8d32afd8a9a5.roa File: d434570a-727f-3938-bbab-8d32afd8a9a5.roa (raw, json) Hash identifier: QQg7wXCnYqZ+Q923afIXZy2kICvf3ns/zKi1V1jVns8= Subject key identifier: 2B:EB:51:25:7C:1E:32:65:67:C0:B8:22:B7:23:C4:8D:A1:CC:D0:71 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584E3600076A8A2ACE1775D75FE0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d434570a-727f-3938-bbab-8d32afd8a9a5.roa Signing time: Thu 18 Jun 2026 09:00:12 +0000 ROA not before: Thu 18 Jun 2026 09:00:12 +0000 ROA not after: Wed 16 Sep 2026 09:00:12 +0000 asID: 33668 IP address blocks: 98.250.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:36:00:07:6a:8a:2a:ce:17:75:d7:5f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 18 09:00:12 2026 GMT Not After : Sep 16 09:00:12 2026 GMT Subject: CN=fbe8604c-db2f-4428-89df-cecaa5f25920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:0a:3a:da:86:08:e8:62:05:28:a2:32:06:72: 50:8e:9c:c3:16:9f:0f:d0:81:f8:10:b6:b2:d2:05: 4d:59:61:68:4d:9e:a7:e0:49:e8:8e:2a:f6:33:3d: b3:aa:de:ba:48:b2:ca:1a:79:da:21:2a:c9:16:ae: e1:0a:51:e6:e7:8b:dc:13:37:ff:52:f6:ac:33:34: c3:7b:a7:26:c9:51:d9:e4:8b:88:20:39:37:62:00: 52:c5:64:eb:13:d4:41:f6:ea:0b:d0:e8:68:d0:ef: a3:cd:62:8e:f5:a3:47:3e:27:fa:a4:68:98:f5:2c: e6:62:83:27:9d:45:d7:77:1c:03:3d:95:40:d3:eb: 25:70:54:64:64:02:14:9f:b2:18:41:f9:f8:ca:40: 18:da:b0:fa:86:e6:9b:41:d3:23:4b:c6:45:c3:00: fa:cb:8f:b2:d9:84:59:79:f9:7a:5a:61:31:b0:3e: 39:5e:2e:1f:27:09:cb:42:65:51:62:40:b7:7b:05: 47:76:55:97:04:4a:70:0f:14:ea:d1:32:52:92:db: 36:d2:59:c6:45:20:da:f3:68:1f:bc:3c:05:5f:ae: fb:f5:3b:40:7c:c4:35:e8:9c:57:11:b4:e6:fd:44: c3:9a:59:7c:4b:b9:97:1c:9b:b9:60:b4:27:92:db: 5b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:EB:51:25:7C:1E:32:65:67:C0:B8:22:B7:23:C4:8D:A1:CC:D0:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d434570a-727f-3938-bbab-8d32afd8a9a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.250.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:cf:e2:4e:73:6d:32:4e:a7:e9:1b:e8:a7:b6:ab:e6:e5:bf: 3e:32:c7:04:b8:50:3c:f0:b8:5b:63:d8:39:3a:8f:fd:af:c9: d7:32:40:c1:91:a7:af:14:66:23:b2:1f:c1:40:1e:27:7d:8b: 27:32:cc:e8:63:a4:8a:df:bc:22:78:3f:4b:6b:47:a9:f3:54: fc:81:c7:16:71:72:99:f8:63:e1:fb:9e:d5:1b:ee:c5:60:39: e0:2a:d1:dd:c5:6a:02:15:fa:9a:08:e9:1d:e5:e9:68:9b:0d: 08:55:ef:95:94:22:62:76:3b:44:de:6f:5b:af:86:f2:ce:94: 6f:66:09:06:20:0e:3f:c9:b3:9e:ed:4c:5e:89:86:95:ef:5f: d4:50:55:8e:1d:16:1f:3a:93:44:b6:8b:44:e0:01:ba:a8:c2: 1a:26:42:10:7e:ef:2b:a1:4b:7f:5f:82:12:0b:c9:ce:c1:a9: 05:1a:f3:3b:48:79:af:86:a2:07:6a:7d:f6:a5:01:12:b2:d9: 8b:bd:29:d0:b0:04:3e:d1:e3:0a:d2:42:6c:7c:58:48:e0:c3: 71:de:ce:9a:2c:ee:a5:31:28:ee:93:e6:66:53:46:47:13:4a: d5:27:21:96:a7:fc:5c:eb:ac:98:a9:72:30:49:94:fe:a8:ec: 54:8a:ee:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE42AAdqiirOF3XXX+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDYxODA5MDAxMloXDTI2MDkxNjA5MDAxMlowLzEtMCsGA1UEAxMk ZmJlODYwNGMtZGIyZi00NDI4LTg5ZGYtY2VjYWE1ZjI1OTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgo62oYI6GIFKKIyBnJQjpzDFp8P0IH4ELay 0gVNWWFoTZ6n4Enojir2Mz2zqt66SLLKGnnaISrJFq7hClHm54vcEzf/UvasMzTD e6cmyVHZ5IuIIDk3YgBSxWTrE9RB9uoL0Oho0O+jzWKO9aNHPif6pGiY9SzmYoMn nUXXdxwDPZVA0+slcFRkZAIUn7IYQfn4ykAY2rD6huabQdMjS8ZFwwD6y4+y2YRZ efl6WmExsD45Xi4fJwnLQmVRYkC3ewVHdlWXBEpwDxTq0TJSkts20lnGRSDa82gf vDwFX6779TtAfMQ16JxXEbTm/UTDmll8S7mXHJu5YLQnkttbcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvrUSV8HjJlZ8C4IrcjxI2hzNBxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDQzNDU3MGEtNzI3Zi0z OTM4LWJiYWItOGQzMmFmZDhhOWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYvoUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALTP4k5zbTJOp+kb6Ke2q+blvz4yxwS4UDzwuFtj2Dk6j/2vydcyQMGR p68UZiOyH8FAHid9iycyzOhjpIrfvCJ4P0trR6nzVPyBxxZxcpn4Y+H7ntUb7sVg OeAq0d3FagIV+poI6R3l6WibDQhV75WUImJ2O0Teb1uvhvLOlG9mCQYgDj/Js57t TF6JhpXvX9RQVY4dFh86k0S2i0TgAbqowhomQhB+7yuhS39fghILyc7BqQUa8ztI ea+GogdqffalARKy2Yu9KdCwBD7R4wrSQmx8WEjgw3Hezpos7qUxKO6T5mZTRkcT StUnIZan/FzrrJipcjBJlP6o7FSK7pQ= -----END CERTIFICATE-----Generated at Sat Jul 18 04:32:21 2026 by rpki-client