$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f7568c4-9b24-3f85-ac1b-3d3a9ba0d761.roa File: 4f7568c4-9b24-3f85-ac1b-3d3a9ba0d761.roa (raw, json) Hash identifier: hYLyFJM2pG3Z4j0wCkrm5CN+4+Z94lOYGxXAjPjumZM= Subject key identifier: F3:28:B3:99:48:C4:1D:1C:A1:6E:15:44:0D:95:41:CE:CA:A1:A8:8B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BC6563285B2BAA352D2A80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f7568c4-9b24-3f85-ac1b-3d3a9ba0d761.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 98.209.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:65:63:28:5b:2b:aa:35:2d:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=7bfd7789-7286-4dad-9837-50021f6d3d94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:15:4a:5b:f1:ea:86:6a:9c:0f:db:25:2a:f3: 46:2b:8e:07:ac:f5:58:44:28:78:24:34:48:d5:15: 9a:c0:58:de:84:f0:3a:71:4e:92:01:49:3d:bb:8c: 9b:2b:e2:3e:e5:8d:95:de:be:c7:9e:cd:57:3a:c4: 4a:8e:cd:5a:d0:71:ca:35:65:c3:3c:39:55:c1:a1: 80:9c:61:ca:31:e2:7a:31:6f:46:e3:f2:30:4a:c9: f2:38:05:33:33:1b:92:2f:e0:26:89:e4:ac:86:d6: 1e:ab:0b:f2:b7:0f:d1:b8:f3:e4:87:b0:6d:59:05: 3c:bb:72:4e:e9:5b:9b:4d:96:63:4e:aa:9b:c4:cc: f3:7f:8f:3d:f8:1a:7e:3a:d2:27:45:94:71:68:cb: 70:4a:a4:2f:52:5e:f9:34:83:a5:6b:05:b3:75:36: 00:f0:a5:bf:4f:ca:15:fb:fe:2a:e1:3d:55:4e:fa: be:6d:7c:ba:49:26:94:eb:c1:1e:22:11:b2:0d:56: ca:2d:dc:9b:8a:26:93:54:05:3d:f1:43:98:bb:d9: 62:ac:8a:3f:9f:73:ae:b0:bb:96:62:82:69:73:a3: 32:27:ea:4b:33:73:c5:47:93:44:49:6e:30:82:bc: 7e:65:b6:f2:78:34:9e:1e:2e:36:42:56:be:90:08: bd:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:28:B3:99:48:C4:1D:1C:A1:6E:15:44:0D:95:41:CE:CA:A1:A8:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f7568c4-9b24-3f85-ac1b-3d3a9ba0d761.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.209.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption da:8f:ae:cc:b3:94:b1:4b:6a:dc:6f:8e:3f:dd:90:d6:83:42: 2d:70:db:13:03:3e:bf:8f:e7:14:21:31:02:09:43:3e:4a:c1: 71:27:d3:92:92:fa:e5:c2:85:ab:f2:0f:81:22:db:2e:b4:e5: 46:ed:02:10:e1:8a:ab:cb:be:a8:5a:57:5e:c3:24:55:22:c4: 08:3d:91:9f:ed:62:c0:69:ff:5e:2a:fc:1f:8e:69:fc:5e:2f: ac:f2:d3:89:49:33:da:bf:d0:71:52:3b:0d:03:e1:6d:65:5a: 46:a2:01:e0:22:91:2b:84:e6:a0:72:5d:e5:75:53:97:7f:a8: 66:ae:0a:15:81:83:96:c4:ca:63:03:03:dd:0f:03:50:1d:c9: 5f:c7:6b:ed:57:70:de:29:f1:b5:1b:2c:bf:82:12:c4:1c:8a: 61:2c:b5:62:8e:51:a1:10:98:99:c7:17:b7:28:48:98:37:c5: f5:4f:73:54:06:83:6a:13:17:81:fd:e1:8a:0d:44:de:25:43: be:d8:ff:82:24:21:bf:a3:d3:37:19:3b:9d:8b:fa:f1:fb:d6: 71:1d:1b:f3:a7:90:1b:f5:b3:90:2c:ee:49:4d:b7:74:3c:d7: 06:2f:da:05:0f:d8:cd:8a:76:5c:44:2f:60:88:0d:a3:d1:c0: e0:4a:9e:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvGVjKFsrqjUtKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk N2JmZDc3ODktNzI4Ni00ZGFkLTk4MzctNTAwMjFmNmQzZDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBVKW/HqhmqcD9slKvNGK44HrPVYRCh4JDRI 1RWawFjehPA6cU6SAUk9u4ybK+I+5Y2V3r7Hns1XOsRKjs1a0HHKNWXDPDlVwaGA nGHKMeJ6MW9G4/IwSsnyOAUzMxuSL+AmieSshtYeqwvytw/RuPPkh7BtWQU8u3JO 6VubTZZjTqqbxMzzf489+Bp+OtInRZRxaMtwSqQvUl75NIOlawWzdTYA8KW/T8oV +/4q4T1VTvq+bXy6SSaU68EeIhGyDVbKLdybiiaTVAU98UOYu9lirIo/n3OusLuW YoJpc6MyJ+pLM3PFR5NESW4wgrx+ZbbyeDSeHi42Qla+kAi9owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPMos5lIxB0coW4VRA2VQc7KoaiLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGY3NTY4YzQtOWIyNC0z Zjg1LWFjMWItM2QzYTliYTBkNzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYtHIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANqPrsyzlLFLatxvjj/dkNaDQi1w2xMDPr+P5xQhMQIJQz5KwXEn05KS +uXChavyD4Ei2y605UbtAhDhiqvLvqhaV17DJFUixAg9kZ/tYsBp/14q/B+Oafxe L6zy04lJM9q/0HFSOw0D4W1lWkaiAeAikSuE5qByXeV1U5d/qGauChWBg5bEymMD A90PA1AdyV/Ha+1XcN4p8bUbLL+CEsQcimEstWKOUaEQmJnHF7coSJg3xfVPc1QG g2oTF4H94YoNRN4lQ77Y/4IkIb+j0zcZO52L+vH71nEdG/OnkBv1s5As7klNt3Q8 1wYv2gUP2M2KdlxEL2CIDaPRwOBKnrA= -----END CERTIFICATE-----Generated at Fri Apr 17 03:24:21 2026 by rpki-client