$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa6e3de7-a732-353a-b720-898e65c260ff.roa File: aa6e3de7-a732-353a-b720-898e65c260ff.roa (raw, json) Hash identifier: j69gFQJ9iAA7Lapd0HxDSFR/iGIsKgmkMzZsbGw38Vs= Subject key identifier: 71:FA:B7:AE:E9:E7:8E:39:9E:45:7F:3B:BB:12:B6:76:76:C2:6C:16 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584DDE85F262A2107B5157132FC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa6e3de7-a732-353a-b720-898e65c260ff.roa Signing time: Mon 18 May 2026 01:00:24 +0000 ROA not before: Mon 18 May 2026 01:00:24 +0000 ROA not after: Sun 16 Aug 2026 01:00:24 +0000 asID: 22909 IP address blocks: 98.240.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:de:85:f2:62:a2:10:7b:51:57:13:2f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 18 01:00:24 2026 GMT Not After : Aug 16 01:00:24 2026 GMT Subject: CN=cf0e58da-2150-4dee-961c-9ebcfce90538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:df:57:d7:9c:3e:96:06:02:7f:29:35:d4:aa: 1c:ce:b2:fd:35:4a:64:77:17:26:a7:67:df:4d:3f: d5:20:08:8b:40:20:c5:a0:c8:43:35:58:09:c7:06: a3:7b:d8:63:01:fb:72:70:77:26:7d:e2:1c:00:04: 8f:21:34:7a:84:76:37:bc:92:21:cd:99:47:28:7b: 19:24:22:e7:bb:15:94:5f:8e:b0:a0:aa:85:e4:bc: 12:9f:8b:26:36:93:e9:4d:d5:6a:0c:25:15:e9:78: a0:d0:13:e6:2f:f7:b8:88:2f:6f:e4:d6:b9:52:bc: ac:89:6c:f9:25:1c:fa:40:ef:65:f7:df:97:62:37: 73:10:11:d8:dd:74:fa:25:8e:01:31:80:19:c7:2d: be:84:04:89:21:ad:2a:13:4e:9f:b8:e9:b2:5e:d0: f5:67:39:22:1b:e5:7a:13:56:d2:ad:a6:61:6e:ba: f8:9d:89:5f:5a:69:c9:6e:0b:75:53:2c:eb:d4:25: b9:cf:c5:98:e2:32:b9:44:31:de:70:2e:a9:63:ab: 9a:e3:85:65:df:15:63:f4:53:0b:5e:af:7f:cd:1a: ea:bb:3b:33:fc:0b:e3:c9:27:5f:91:42:2c:de:02: 33:5f:f4:0c:dd:c9:a8:1d:38:7e:65:f5:75:eb:86: 0b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:FA:B7:AE:E9:E7:8E:39:9E:45:7F:3B:BB:12:B6:76:76:C2:6C:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa6e3de7-a732-353a-b720-898e65c260ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.240.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cc:bf:52:c3:e9:e5:98:1c:29:46:c3:a8:78:15:97:8e:5c:35: 7e:f7:de:09:03:c7:5b:49:2a:f8:58:28:d7:a8:3a:83:6f:ea: ab:f4:00:1c:f1:c7:88:58:36:23:5c:de:73:a9:d4:74:5b:c4: 64:a9:32:f2:0f:de:93:d0:22:6b:06:57:cc:e4:a8:bc:c8:ea: 76:02:62:88:ce:36:e2:b9:bc:67:fd:c5:f1:6e:72:02:8b:1b: ae:a7:15:97:11:de:75:79:83:bd:9a:cc:fb:8f:25:17:8e:46: 9e:8e:43:55:85:e7:6d:32:06:42:ba:e2:e7:ea:b8:d2:1b:15: 3c:a0:ea:7c:2e:71:bd:8c:92:b9:24:14:c4:3a:1d:4d:7d:c2: 9f:2e:73:78:25:4e:b2:a5:69:17:63:80:4c:95:46:6a:a5:b8: 0d:49:5d:1e:99:95:16:78:1e:18:56:2c:56:c8:0e:f3:8e:dc: 6d:0e:be:45:a3:ec:6a:01:57:6a:76:3b:cc:41:f8:c0:ab:67: 7c:ba:14:00:0e:04:2b:34:ff:d7:61:fe:59:2a:ab:65:d6:b2: 94:d5:fc:8b:a2:3a:19:2b:64:8d:ac:63:13:14:db:ca:88:00: d8:d1:a7:95:5d:f3:27:9a:70:4d:cb:07:74:2f:cc:f4:3a:b3: 2f:82:01:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3ehfJiohB7UVcTL8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDUxODAxMDAyNFoXDTI2MDgxNjAxMDAyNFowLzEtMCsGA1UEAxMk Y2YwZTU4ZGEtMjE1MC00ZGVlLTk2MWMtOWViY2ZjZTkwNTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjd9X15w+lgYCfyk11KoczrL9NUpkdxcmp2ff TT/VIAiLQCDFoMhDNVgJxwaje9hjAftycHcmfeIcAASPITR6hHY3vJIhzZlHKHsZ JCLnuxWUX46woKqF5LwSn4smNpPpTdVqDCUV6Xig0BPmL/e4iC9v5Na5UrysiWz5 JRz6QO9l99+XYjdzEBHY3XT6JY4BMYAZxy2+hASJIa0qE06fuOmyXtD1ZzkiG+V6 E1bSraZhbrr4nYlfWmnJbgt1Uyzr1CW5z8WY4jK5RDHecC6pY6ua44Vl3xVj9FML Xq9/zRrquzsz/AvjySdfkUIs3gIzX/QM3cmoHTh+ZfV164YLgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHH6t67p5445nkV/O7sStnZ2wmwWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWE2ZTNkZTctYTczMi0z NTNhLWI3MjAtODk4ZTY1YzI2MGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYvAgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMy/UsPp5ZgcKUbDqHgVl45cNX733gkDx1tJKvhYKNeoOoNv6qv0ABzx x4hYNiNc3nOp1HRbxGSpMvIP3pPQImsGV8zkqLzI6nYCYojONuK5vGf9xfFucgKL G66nFZcR3nV5g72azPuPJReORp6OQ1WF520yBkK64ufquNIbFTyg6nwucb2Mkrkk FMQ6HU19wp8uc3glTrKlaRdjgEyVRmqluA1JXR6ZlRZ4HhhWLFbIDvOO3G0OvkWj 7GoBV2p2O8xB+MCrZ3y6FAAOBCs0/9dh/lkqq2XWspTV/IuiOhkrZI2sYxMU28qI ANjRp5Vd8yeacE3LB3QvzPQ6sy+CASc= -----END CERTIFICATE-----Generated at Sat Jun 13 18:25:50 2026 by rpki-client