$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/628b2995-00ef-3e9e-9a0c-28e05785dc6d.roa File: 628b2995-00ef-3e9e-9a0c-28e05785dc6d.roa (raw, json) Hash identifier: vswzhqpCkh9+YNiJvpNylCu8IIbDozRdKOwgGerRczI= Subject key identifier: D9:EB:C9:DE:F4:CE:A3:0A:5D:A4:08:C3:26:7E:43:AE:43:9A:0F:39 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D524387E9BDA46ECCE9D59A20 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/628b2995-00ef-3e9e-9a0c-28e05785dc6d.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 22258 IP address blocks: 98.251.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:87:e9:bd:a4:6e:cc:e9:d5:9a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=d4af1498-22e5-4b1d-9979-8d31c363490a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:15:5d:e4:fb:b8:dd:0e:7d:82:ee:ef:ae:96: 59:0c:cb:7e:ef:80:7c:25:c6:c6:ef:29:9a:63:8a: 6d:cc:dc:c2:de:7f:09:88:09:51:c2:9e:35:d3:29: 68:51:b8:3a:45:70:a9:55:44:18:9a:0f:79:0d:e7: b2:4e:03:75:2b:ee:1b:23:ad:38:ea:68:06:47:be: d9:ed:22:5e:3c:00:09:59:72:d3:fa:0c:71:0d:18: 98:ba:ee:93:a6:8b:2e:79:cf:40:28:77:63:c9:b3: 26:72:83:b5:22:63:47:ce:dd:eb:bf:c6:e5:0b:53: 42:0a:af:b3:ab:05:ce:e4:45:4c:10:7c:f4:bc:30: 8f:4d:e0:4d:3f:3d:11:59:0f:f8:30:26:be:83:78: e5:2c:c0:05:a3:29:d5:b2:fe:68:d0:c5:48:17:bb: 98:c0:cd:5e:93:48:8d:48:6a:7f:7b:a5:d4:23:be: 80:f7:f3:90:7e:4e:a8:f8:97:6a:e0:9b:97:12:c2: 7a:c5:11:79:b2:54:9d:93:e0:40:99:63:f2:a0:05: 9b:d1:32:ce:ed:3d:11:87:e2:38:ee:6a:f2:77:da: 0f:61:a4:b6:84:cd:c6:2b:6f:8f:a9:87:61:4d:b6: e1:2b:26:a0:01:2c:ae:5b:2d:52:fa:8e:bc:8f:a9: 9d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:EB:C9:DE:F4:CE:A3:0A:5D:A4:08:C3:26:7E:43:AE:43:9A:0F:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/628b2995-00ef-3e9e-9a0c-28e05785dc6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.251.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:01:a1:82:6d:8c:24:8c:19:96:1b:63:f0:e0:54:79:8d:9d: d1:b7:7e:4a:67:eb:01:2e:bf:2c:6a:f8:3e:ad:95:cf:86:35: b7:cc:92:f7:ba:b2:19:c7:22:89:03:21:ee:c2:19:a1:cc:60: 1b:d9:72:f0:12:b8:05:78:9d:e6:64:1c:f4:b7:05:02:13:c7: f5:3d:1b:a0:fd:31:a2:e6:21:bf:3f:a3:4d:19:db:6d:cf:eb: 66:44:27:81:98:76:27:91:43:84:75:60:62:b1:e6:e3:5e:f3: 21:28:80:83:ff:78:ed:e3:17:a9:e6:e9:11:f6:ba:7b:e5:f6: 3d:34:ef:bb:74:cd:aa:58:10:6b:37:bf:38:a7:c1:e9:d0:c8: 0d:ca:f9:7e:4d:34:58:d7:36:04:34:1d:de:59:df:89:33:23: 74:31:2a:e5:c4:5b:4d:0c:59:b3:10:fd:d4:62:f9:4b:de:16: 74:fd:32:e0:0b:3c:70:02:d9:16:2e:d8:1d:11:13:04:75:ce: 3f:fd:09:92:21:3f:d1:5d:66:06:4d:29:0b:98:1f:a9:a5:4b: 34:1f:a2:a1:db:cc:3c:31:a4:23:12:36:31:f7:71:a3:76:91: 06:59:25:f8:7c:51:cb:00:73:f3:52:ab:db:58:a3:d1:47:f7: 59:af:c8:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ4fpvaRuzOnVmiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk ZDRhZjE0OTgtMjJlNS00YjFkLTk5NzktOGQzMWMzNjM0OTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhVd5Pu43Q59gu7vrpZZDMt+74B8JcbG7yma Y4ptzNzC3n8JiAlRwp410yloUbg6RXCpVUQYmg95DeeyTgN1K+4bI6046mgGR77Z 7SJePAAJWXLT+gxxDRiYuu6Tposuec9AKHdjybMmcoO1ImNHzt3rv8blC1NCCq+z qwXO5EVMEHz0vDCPTeBNPz0RWQ/4MCa+g3jlLMAFoynVsv5o0MVIF7uYwM1ek0iN SGp/e6XUI76A9/OQfk6o+Jdq4JuXEsJ6xRF5slSdk+BAmWPyoAWb0TLO7T0Rh+I4 7mryd9oPYaS2hM3GK2+PqYdhTbbhKyagASyuWy1S+o68j6mdpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNnryd70zqMKXaQIwyZ+Q65Dmg85MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjI4YjI5OTUtMDBlZi0z ZTllLTlhMGMtMjhlMDU3ODVkYzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYvv0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFgBoYJtjCSMGZYbY/DgVHmNndG3fkpn6wEuvyxq+D6tlc+GNbfMkve6 shnHIokDIe7CGaHMYBvZcvASuAV4neZkHPS3BQITx/U9G6D9MaLmIb8/o00Z223P 62ZEJ4GYdieRQ4R1YGKx5uNe8yEogIP/eO3jF6nm6RH2unvl9j0077t0zapYEGs3 vzinwenQyA3K+X5NNFjXNgQ0Hd5Z34kzI3QxKuXEW00MWbMQ/dRi+UveFnT9MuAL PHAC2RYu2B0REwR1zj/9CZIhP9FdZgZNKQuYH6mlSzQfoqHbzDwxpCMSNjH3caN2 kQZZJfh8UcsAc/NSq9tYo9FH91mvyIE= -----END CERTIFICATE-----Generated at Fri Apr 17 07:19:34 2026 by rpki-client