$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8022f01-a9e7-37c2-8411-6547e69fe88b.roa File: d8022f01-a9e7-37c2-8411-6547e69fe88b.roa (raw, json) Hash identifier: FeD/1gwbDO/y9ukeVnTkShx3BYqkV7KluJ6GEpI7BZg= Subject key identifier: 5C:0D:47:D5:AB:B7:27:E0:1A:69:1C:39:42:FF:E7:24:24:E1:0B:45 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584E6F3B91FBD80756031DA93340 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8022f01-a9e7-37c2-8411-6547e69fe88b.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 33651 IP address blocks: 98.42.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3b:91:fb:d8:07:56:03:1d:a9:33:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=40d74b7c-5df2-49bd-a3b1-eb2ee2159d00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:70:06:49:f4:88:d0:b5:7a:3c:f9:72:24:12: 94:8f:26:91:19:74:3d:f8:3f:77:1a:66:53:c3:72: 64:74:f6:01:57:1e:d3:96:f8:85:ef:30:06:b4:00: 66:88:d4:58:ee:ea:3f:2b:e7:6d:2f:39:38:2f:37: 73:83:25:49:a0:e9:5d:d7:57:ca:48:0f:63:fc:08: 93:2d:74:07:4b:92:4f:31:18:51:df:c1:cb:a4:af: 51:2c:08:6b:6b:e6:0e:db:f8:51:ea:61:5b:86:34: 21:87:ef:b5:0a:b4:04:a9:66:b7:cf:24:2b:df:92: b5:58:a4:e6:02:21:d5:55:1d:6c:fc:4a:8a:1a:b2: 3d:49:4d:8c:04:58:99:65:7c:62:88:11:e9:8d:39: 73:ca:da:19:f5:e4:d6:27:f8:00:b0:87:3f:ba:3e: 68:cf:60:a3:5a:68:09:9f:c2:70:8d:3d:f7:a7:6a: 10:a6:a0:f3:76:d5:70:7e:4b:17:7f:bb:d7:01:53: 00:08:d1:1a:9c:b8:e8:aa:e6:d4:60:ac:1a:14:df: 76:cb:4c:a8:0e:bb:80:da:23:40:28:9b:b5:d0:e5: ac:d1:46:af:06:62:b9:3b:e4:99:c2:cf:ce:5a:4e: ed:16:d4:2f:e7:3d:74:0f:52:55:36:ef:ff:16:62: dc:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:0D:47:D5:AB:B7:27:E0:1A:69:1C:39:42:FF:E7:24:24:E1:0B:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8022f01-a9e7-37c2-8411-6547e69fe88b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.42.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:51:dd:52:05:56:8f:ef:e7:d3:d7:d7:bf:43:25:71:0e:d3: bf:c0:5e:b5:5d:84:84:4a:a7:22:18:f8:7b:ec:9e:dd:47:d6: 06:f5:ff:cb:13:c6:5a:fe:dc:7f:0e:87:eb:91:ac:bf:b8:82: 10:d1:02:ef:2e:58:58:8e:4c:c9:62:72:3e:cd:69:4c:41:4b: 7d:f6:7a:d9:95:04:5f:78:21:43:09:75:7d:5e:bc:a6:38:a7: 55:21:f2:a7:fd:3b:bd:fa:48:46:75:bf:cd:b4:d3:70:22:8d: 3d:e3:f9:c8:f0:fa:73:e1:36:70:05:b9:e1:a0:04:81:3f:e1: 03:75:fd:5b:09:05:bd:07:d2:54:16:10:47:12:11:0d:df:a2: 4c:2b:1f:12:3d:37:64:0a:66:a3:75:7d:44:d5:0b:11:73:11: d3:a5:03:95:ad:c3:ee:e5:be:a1:04:13:7d:93:44:11:1b:f4: d8:87:3a:cd:e0:c1:c9:03:28:28:38:0e:c7:88:56:0e:1d:2a: 08:8b:0b:c3:29:c3:b7:71:f9:f9:88:94:9f:fc:72:2d:a0:2a: b6:c0:38:e5:cf:91:e6:eb:70:cb:f2:a4:61:60:7a:d8:cb:f1: 02:78:13:61:82:b8:ca:b5:49:a5:fb:d9:27:66:d3:4f:53:f8: 32:ba:5b:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vO5H72AdWAx2pM0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk NDBkNzRiN2MtNWRmMi00OWJkLWEzYjEtZWIyZWUyMTU5ZDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3AGSfSI0LV6PPlyJBKUjyaRGXQ9+D93GmZT w3JkdPYBVx7TlviF7zAGtABmiNRY7uo/K+dtLzk4LzdzgyVJoOld11fKSA9j/AiT LXQHS5JPMRhR38HLpK9RLAhra+YO2/hR6mFbhjQhh++1CrQEqWa3zyQr35K1WKTm AiHVVR1s/EqKGrI9SU2MBFiZZXxiiBHpjTlzytoZ9eTWJ/gAsIc/uj5oz2CjWmgJ n8JwjT33p2oQpqDzdtVwfksXf7vXAVMACNEanLjoqubUYKwaFN92y0yoDruA2iNA KJu10OWs0UavBmK5O+SZws/OWk7tFtQv5z10D1JVNu//FmLcLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFwNR9WrtyfgGmkcOUL/5yQk4QtFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDgwMjJmMDEtYTllNy0z N2MyLTg0MTEtNjU0N2U2OWZlODhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYirKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtR3VIFVo/v59PX179DJXEO07/AXrVdhIRKpyIY+Hvsnt1H1gb1/8sT xlr+3H8Oh+uRrL+4ghDRAu8uWFiOTMlicj7NaUxBS332etmVBF94IUMJdX1evKY4 p1Uh8qf9O736SEZ1v82003AijT3j+cjw+nPhNnAFueGgBIE/4QN1/VsJBb0H0lQW EEcSEQ3fokwrHxI9N2QKZqN1fUTVCxFzEdOlA5Wtw+7lvqEEE32TRBEb9NiHOs3g wckDKCg4DseIVg4dKgiLC8Mpw7dx+fmIlJ/8ci2gKrbAOOXPkebrcMvypGFgetjL 8QJ4E2GCuMq1SaX72Sdm009T+DK6W1s= -----END CERTIFICATE-----Generated at Tue Jul 21 20:09:42 2026 by rpki-client