$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aed83997-c494-3d53-981c-7f46ac02bf1f.roa File: aed83997-c494-3d53-981c-7f46ac02bf1f.roa (raw, json) Hash identifier: QkUSIXIFmZHPtqlM3hIcL+zp/gHJdjHyl6PzD7dmdIU= Subject key identifier: EB:4A:09:06:30:A7:04:0C:75:8A:64:E4:DA:7E:A7:42:F5:81:1D:D4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D5243BB6326D1D1D2EB0CA5C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aed83997-c494-3d53-981c-7f46ac02bf1f.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 22258 IP address blocks: 98.251.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:bb:63:26:d1:d1:d2:eb:0c:a5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=d552b180-7b23-4d88-8eb7-97addacca4d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c1:57:1f:5a:7b:c8:85:ad:0f:65:e5:53:e0: e6:1d:ab:ae:3c:29:17:2f:31:b9:c0:95:64:a2:bc: 64:95:f4:00:89:60:f1:49:36:0d:8a:21:ae:99:fa: 6e:ac:da:40:72:bd:ad:ed:e5:67:86:54:ee:bd:cb: e8:69:7b:35:b1:0d:bb:94:1f:4b:fa:66:fe:ef:36: b1:b7:71:cd:dc:c2:45:a2:d0:5a:18:ed:e0:4e:23: d7:e4:6a:dc:59:b1:0a:81:ce:a2:0f:28:cd:b8:c7: 86:5f:db:74:84:cb:e6:c2:1a:d0:50:e2:89:78:55: 33:f5:ea:1f:f2:11:03:76:87:9c:1e:84:6d:3c:a1: 8d:97:28:a9:5b:fe:93:03:35:10:c0:6b:bb:4c:58: 71:20:c6:07:21:d2:da:e2:3d:a0:ef:09:aa:89:76: 2f:08:30:73:87:f9:78:4e:6c:15:71:35:46:31:e8: 5f:44:0d:6d:d8:53:37:00:26:c8:84:a3:9f:b7:d0: 0b:9c:ea:b1:f7:64:c9:61:3a:dd:ac:05:ed:a2:1e: bc:36:42:10:4b:0d:08:37:25:00:04:30:94:af:b8: 9a:0a:da:c5:4a:a7:55:41:68:4f:02:14:c6:01:31: 6c:af:72:ab:0a:23:f5:8c:a8:80:ab:3c:07:2e:ed: ed:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:4A:09:06:30:A7:04:0C:75:8A:64:E4:DA:7E:A7:42:F5:81:1D:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aed83997-c494-3d53-981c-7f46ac02bf1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.251.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:56:dc:21:9a:3d:e2:ff:e6:bf:2a:f7:52:fb:6a:99:d5:56: de:3d:a0:0d:2d:53:c0:4d:ed:1a:5a:60:b1:48:73:a7:a1:66: 9b:75:57:58:99:65:f8:ad:0d:7c:cd:9c:a8:0b:76:e3:ed:0d: a8:db:9a:53:17:73:fe:48:60:6c:29:93:81:e9:6e:89:0e:c5: 90:14:d9:4d:27:a2:cb:05:be:e4:36:41:b3:8e:9f:02:12:43: f5:37:56:f9:c3:bd:5e:93:7f:2d:c7:63:ac:34:97:b7:13:63: 9c:da:a4:0f:dd:f1:d4:58:e8:02:f6:06:75:4f:2d:c0:bc:db: d9:c7:3c:15:77:33:78:f1:82:43:be:14:07:eb:8b:da:36:78: 60:36:76:3b:a8:f2:aa:c2:d4:a2:db:ca:7a:18:93:9d:e9:92: cd:b0:27:61:f1:e1:0c:d3:96:d6:89:80:45:eb:32:db:2f:f6: 03:6c:5f:0c:94:79:3e:02:44:ec:63:5e:ae:8d:22:66:2b:e4: 28:f5:f8:07:8b:9a:b2:39:e4:8b:e1:eb:e1:d4:84:b6:9c:bf: 1b:cf:81:3d:96:92:12:b5:2a:38:40:af:13:24:27:af:5c:77: 88:39:bf:ba:93:6e:e0:ce:85:19:99:19:f4:6f:6c:0d:34:df: 94:90:e5:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ7tjJtHR0usMpcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk ZDU1MmIxODAtN2IyMy00ZDg4LThlYjctOTdhZGRhY2NhNGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8FXH1p7yIWtD2XlU+DmHauuPCkXLzG5wJVk orxklfQAiWDxSTYNiiGumfpurNpAcr2t7eVnhlTuvcvoaXs1sQ27lB9L+mb+7zax t3HN3MJFotBaGO3gTiPX5GrcWbEKgc6iDyjNuMeGX9t0hMvmwhrQUOKJeFUz9eof 8hEDdoecHoRtPKGNlyipW/6TAzUQwGu7TFhxIMYHIdLa4j2g7wmqiXYvCDBzh/l4 TmwVcTVGMehfRA1t2FM3ACbIhKOft9ALnOqx92TJYTrdrAXtoh68NkIQSw0INyUA BDCUr7iaCtrFSqdVQWhPAhTGATFsr3KrCiP1jKiAqzwHLu3tXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOtKCQYwpwQMdYpk5Np+p0L1gR3UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWVkODM5OTctYzQ5NC0z ZDUzLTk4MWMtN2Y0NmFjMDJiZjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYvv8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNW3CGaPeL/5r8q91L7apnVVt49oA0tU8BN7RpaYLFIc6ehZpt1V1iZ ZfitDXzNnKgLduPtDajbmlMXc/5IYGwpk4HpbokOxZAU2U0nossFvuQ2QbOOnwIS Q/U3VvnDvV6Tfy3HY6w0l7cTY5zapA/d8dRY6AL2BnVPLcC829nHPBV3M3jxgkO+ FAfri9o2eGA2djuo8qrC1KLbynoYk53pks2wJ2Hx4QzTltaJgEXrMtsv9gNsXwyU eT4CROxjXq6NImYr5Cj1+AeLmrI55Ivh6+HUhLacvxvPgT2WkhK1KjhArxMkJ69c d4g5v7qTbuDOhRmZGfRvbA0035SQ5RI= -----END CERTIFICATE-----Generated at Fri Apr 17 23:37:46 2026 by rpki-client