$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/19f632e8-19a7-3130-b3c0-01e5bba26dc3.roa File: 19f632e8-19a7-3130-b3c0-01e5bba26dc3.roa (raw, json) Hash identifier: Dv+GmSEoy/xLSscSn8zq2Cb/khTt9oSkc73CzTsiiDs= Subject key identifier: BA:EF:1C:00:88:FA:5A:4F:E3:3D:D9:F4:8F:25:AA:0A:E2:60:BF:14 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BC65E87A50BCB05D104820 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/19f632e8-19a7-3130-b3c0-01e5bba26dc3.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 98.209.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:65:e8:7a:50:bc:b0:5d:10:48:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=3894994a-620c-4633-b226-a50d8edfa021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a3:16:5c:a9:68:78:14:e8:49:fc:e5:8e:61: eb:58:27:80:f6:e7:f8:22:6c:3c:b6:d5:fd:4f:ec: fb:52:30:ef:44:22:f9:c5:06:9d:03:c2:db:6f:b6: 5c:9b:a5:a6:96:64:3e:c8:b5:b5:be:73:52:8d:43: f2:80:4c:0c:4b:94:31:88:12:d9:b7:c1:cb:c8:f9: 37:99:09:71:b7:7b:90:21:ba:09:9e:e1:7f:36:9a: 4d:05:fd:a1:cd:d1:b5:d9:32:c6:47:35:01:6f:7c: 06:94:92:44:a2:48:93:f1:fc:e2:9d:c8:4c:c7:c7: 0c:24:f9:ae:35:e0:7f:91:a3:0a:ca:82:2b:98:3b: 71:1e:f8:9f:49:2f:f4:f7:77:21:fa:a7:96:55:b5: b9:02:ca:61:fc:58:a9:68:54:80:8f:49:f1:e3:65: 13:19:c3:60:b7:ec:34:a6:84:16:d1:a5:cd:f0:15: cd:f6:6e:b1:3d:5b:1f:d8:f4:35:45:61:0d:d9:91: ef:a7:c3:83:c9:9b:12:e6:ba:35:5e:60:01:85:c2: a1:08:7c:98:54:02:4d:31:8c:e2:c5:3f:58:4e:a8: 20:c9:df:43:5a:8e:d5:b9:d4:1f:f2:0d:33:ac:a4: 2c:88:9e:31:54:5a:e3:73:f0:77:5c:e8:37:9a:b0: 75:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:EF:1C:00:88:FA:5A:4F:E3:3D:D9:F4:8F:25:AA:0A:E2:60:BF:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/19f632e8-19a7-3130-b3c0-01e5bba26dc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.209.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:b7:a8:92:8e:24:40:29:15:a8:d1:11:83:22:6f:17:bf:2d: 5f:9f:d6:10:1f:e3:94:32:35:dc:01:fe:2e:cd:a5:37:62:30: a8:fa:c5:fe:72:bc:8f:43:cd:93:38:a2:d0:c5:0f:88:21:38: 49:86:ab:12:9e:63:67:51:0e:35:81:9e:ff:ca:40:69:8b:b0: a8:20:37:43:6a:c7:f6:40:96:b7:6d:0e:69:b9:21:a8:d7:db: cc:7c:6e:96:ac:2f:9b:6f:31:a6:d2:02:4d:44:f5:96:2e:a6: 04:0a:cc:d5:3e:44:70:69:e1:35:d2:51:05:3e:b9:96:38:59: 35:6b:64:be:74:75:cd:e9:65:b9:be:45:85:68:29:ee:11:c5: 9b:ec:ab:11:02:bb:0b:f4:be:d7:d7:e1:eb:5c:2d:18:92:eb: 86:4c:93:b2:66:f9:ad:a7:fe:0d:c4:51:3c:88:7e:a3:84:ca: 00:d9:e3:9d:07:b5:d7:2a:c7:d8:05:41:62:c6:29:c5:79:53: 2a:c2:9b:58:b3:36:37:f6:c2:53:f2:9d:dd:74:ac:c9:af:ed: 0f:35:b9:31:ea:d4:41:1a:4b:13:ce:c0:0f:ed:7f:ba:73:a4: da:fa:fa:f4:7e:26:02:e0:65:87:b9:8f:90:ed:b7:31:67:da: 73:db:ed:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvGXoelC8sF0QSCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk Mzg5NDk5NGEtNjIwYy00NjMzLWIyMjYtYTUwZDhlZGZhMDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKMWXKloeBToSfzljmHrWCeA9uf4Imw8ttX9 T+z7UjDvRCL5xQadA8Lbb7Zcm6WmlmQ+yLW1vnNSjUPygEwMS5QxiBLZt8HLyPk3 mQlxt3uQIboJnuF/NppNBf2hzdG12TLGRzUBb3wGlJJEokiT8fzinchMx8cMJPmu NeB/kaMKyoIrmDtxHvifSS/093ch+qeWVbW5Asph/FipaFSAj0nx42UTGcNgt+w0 poQW0aXN8BXN9m6xPVsf2PQ1RWEN2ZHvp8ODyZsS5ro1XmABhcKhCHyYVAJNMYzi xT9YTqggyd9DWo7VudQf8g0zrKQsiJ4xVFrjc/B3XOg3mrB1HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLrvHACI+lpP4z3Z9I8lqgriYL8UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTlmNjMyZTgtMTlhNy0z MTMwLWIzYzAtMDFlNWJiYTI2ZGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYtH4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACq3qJKOJEApFajREYMibxe/LV+f1hAf45QyNdwB/i7NpTdiMKj6xf5y vI9DzZM4otDFD4ghOEmGqxKeY2dRDjWBnv/KQGmLsKggN0Nqx/ZAlrdtDmm5IajX 28x8bpasL5tvMabSAk1E9ZYupgQKzNU+RHBp4TXSUQU+uZY4WTVrZL50dc3pZbm+ RYVoKe4RxZvsqxECuwv0vtfX4etcLRiS64ZMk7Jm+a2n/g3EUTyIfqOEygDZ450H tdcqx9gFQWLGKcV5UyrCm1izNjf2wlPynd10rMmv7Q81uTHq1EEaSxPOwA/tf7pz pNr6+vR+JgLgZYe5j5DttzFn2nPb7XU= -----END CERTIFICATE-----Generated at Fri Apr 17 13:05:26 2026 by rpki-client