$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/01d8631e-6609-3611-bbdf-7d6b2200d93d.roa File: 01d8631e-6609-3611-bbdf-7d6b2200d93d.roa (raw, json) Hash identifier: oM1hq0T6aceLmlTUcaY4xjFSv1Mpnz3UfjsA28J+oe4= Subject key identifier: 68:A8:1A:4C:61:6B:89:50:07:79:CF:EC:B1:C5:1B:C3:D2:A0:3F:3C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584DF4DB835E145F15C519810AC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/01d8631e-6609-3611-bbdf-7d6b2200d93d.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 33491 IP address blocks: 98.253.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:83:5e:14:5f:15:c5:19:81:0a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=23d070a8-65eb-4931-9b79-7eb6475b88b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:31:a5:5e:de:ef:62:ed:5a:0c:03:84:1f:48: f8:c6:3b:cd:3f:2f:65:b8:cb:12:cc:fc:8e:89:4e: 03:66:ee:08:a6:1f:0b:14:40:f8:8e:76:92:47:65: 50:66:5f:ca:7c:0f:75:fd:f4:30:23:f2:50:61:ec: 9f:1b:36:60:83:6d:0a:f1:78:c5:84:3a:a4:cc:b9: 7a:66:ad:df:63:6c:11:c0:ac:92:4a:dc:5b:60:75: 1f:fd:37:15:1d:b2:8d:54:7a:dd:be:cb:ed:64:5c: 20:92:14:f8:86:e3:1b:45:55:4c:70:3c:64:2f:2f: 34:cc:0e:22:35:a9:ac:f7:7a:25:03:2e:23:23:7f: d6:81:40:15:9f:72:bb:54:9c:d3:71:cd:dc:6f:a0: 8c:57:ad:d1:0d:db:18:ce:d1:f8:7e:8d:58:94:18: ce:8b:b5:68:31:fd:fd:ec:22:ec:ce:ef:2a:e2:31: 96:77:d3:9d:82:55:8d:1a:7f:9c:75:9e:b6:5d:41: 4c:c1:5c:43:0b:aa:57:21:69:99:f6:39:2e:a2:05: 9f:97:c7:4d:e8:12:0e:de:79:a3:21:6a:83:e3:e1: 1d:8b:da:00:d1:31:34:1e:dc:27:38:96:d9:4f:64: 7f:34:f7:f9:33:38:c5:43:51:99:91:46:d4:5b:f8: b7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A8:1A:4C:61:6B:89:50:07:79:CF:EC:B1:C5:1B:C3:D2:A0:3F:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/01d8631e-6609-3611-bbdf-7d6b2200d93d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.253.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:32:46:be:0e:3a:05:6e:8f:17:5e:1a:2e:04:b3:91:e5:7e: cc:c4:58:7d:5d:53:0a:fe:bc:38:c3:0b:d6:2b:97:af:6a:4d: 95:43:9a:03:d5:fa:6b:c4:c9:c2:80:19:b7:f0:fc:19:f4:76: de:b9:ed:da:cb:c1:3e:77:69:01:f5:3d:0b:df:eb:8a:ba:5c: 2d:bc:af:56:aa:b5:3e:f1:44:04:15:30:cb:8d:a2:a8:f1:aa: d0:de:a6:ad:d7:04:e3:79:0b:08:bc:4a:49:39:7b:e7:02:68: bb:e2:76:8b:c2:cd:0a:39:06:52:01:4e:c7:90:63:93:ae:89: e2:a5:22:29:e7:51:5c:c2:13:5b:ac:6d:75:3b:64:91:c6:13: 13:0b:e3:a2:c1:ee:b7:0d:0b:0f:a9:b3:62:d9:c0:77:07:8f: 16:77:44:75:4a:68:0c:ea:26:0d:03:57:fa:a6:ba:af:f1:98: bf:df:e4:4c:88:44:0d:62:92:46:b6:5d:95:ac:27:76:e0:ab: 52:f9:f1:4a:3c:b1:39:d0:c4:80:21:88:3b:35:e6:97:73:08: 9a:95:70:83:d0:94:f9:80:19:8c:43:70:6a:07:26:fe:7a:bc: 3f:ba:c2:41:48:ef:cd:1a:64:a3:ed:62:fd:5d:ae:40:26:5d: a3:2d:a1:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3024NeFF8VxRmBCsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk MjNkMDcwYTgtNjVlYi00OTMxLTliNzktN2ViNjQ3NWI4OGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzGlXt7vYu1aDAOEH0j4xjvNPy9luMsSzPyO iU4DZu4Iph8LFED4jnaSR2VQZl/KfA91/fQwI/JQYeyfGzZgg20K8XjFhDqkzLl6 Zq3fY2wRwKySStxbYHUf/TcVHbKNVHrdvsvtZFwgkhT4huMbRVVMcDxkLy80zA4i Nams93olAy4jI3/WgUAVn3K7VJzTcc3cb6CMV63RDdsYztH4fo1YlBjOi7VoMf39 7CLszu8q4jGWd9OdglWNGn+cdZ62XUFMwVxDC6pXIWmZ9jkuogWfl8dN6BIO3nmj IWqD4+Edi9oA0TE0HtwnOJbZT2R/NPf5MzjFQ1GZkUbUW/i35QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGioGkxha4lQB3nP7LHFG8PSoD88MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDFkODYzMWUtNjYwOS0z NjExLWJiZGYtN2Q2YjIyMDBkOTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYv3cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM8yRr4OOgVujxdeGi4Es5HlfszEWH1dUwr+vDjDC9Yrl69qTZVDmgPV +mvEycKAGbfw/Bn0dt657drLwT53aQH1PQvf64q6XC28r1aqtT7xRAQVMMuNoqjx qtDepq3XBON5Cwi8Skk5e+cCaLvidovCzQo5BlIBTseQY5OuieKlIinnUVzCE1us bXU7ZJHGExML46LB7rcNCw+ps2LZwHcHjxZ3RHVKaAzqJg0DV/qmuq/xmL/f5EyI RA1ikka2XZWsJ3bgq1L58Uo8sTnQxIAhiDs15pdzCJqVcIPQlPmAGYxDcGoHJv56 vD+6wkFI780aZKPtYv1drkAmXaMtoXc= -----END CERTIFICATE-----Generated at Sat Jun 13 16:20:37 2026 by rpki-client