$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b6cf1d27-45c9-30cd-9839-8ebb69e80500.roa File: b6cf1d27-45c9-30cd-9839-8ebb69e80500.roa (raw, json) Hash identifier: 7A5TuFEz48Ebb7pcVelYZ9erEOTgJCtt6VfQxUYvJNQ= Subject key identifier: 08:EB:EB:27:5A:54:85:6E:D4:1F:7B:B3:E3:5A:06:08:B8:8E:EA:88 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BB3BCF49BD335F3F90EAC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b6cf1d27-45c9-30cd-9839-8ebb69e80500.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 98.250.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:3b:cf:49:bd:33:5f:3f:90:ea:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=5970f8c9-d083-49b1-aa12-8efd84467442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9c:18:61:b6:f5:d2:bf:26:d1:93:23:70:e2: a6:db:12:a7:81:6d:28:c1:46:03:fc:b7:2a:df:ba: 61:ba:0a:e0:53:ea:d6:32:c2:1e:fb:98:65:22:9a: b0:90:f9:78:8d:72:a2:19:cb:31:98:28:54:91:5c: 7d:28:ad:b4:9f:f0:f5:4e:1d:3d:7b:19:c8:51:a3: cb:f9:96:d6:de:17:eb:54:3c:a3:27:c2:91:10:91: 12:53:4b:7f:59:a6:65:85:dc:06:22:c0:1f:21:41: 33:dd:3f:9c:b4:8a:57:f6:20:70:26:fb:8b:1e:a2: 45:b0:e1:50:2c:ff:ac:11:50:09:60:36:e6:ed:ea: a5:c3:b7:b6:16:0c:a8:24:2d:07:c1:1e:b6:04:a6: 3b:9f:96:91:4a:2d:05:bf:aa:20:c5:88:95:db:d3: b6:39:84:5d:18:8a:eb:0a:ae:9a:73:7f:e6:84:74: 55:50:a7:a1:cb:39:11:81:7e:9c:93:58:36:2d:76: 42:4d:0f:48:ed:cd:05:23:0b:a0:bd:5d:66:a3:19: 91:20:f3:fc:a7:3b:a2:2f:d8:9c:9f:5f:58:8a:95: 31:96:74:cd:06:5a:73:17:59:5e:ef:79:3a:45:e1: fc:23:70:24:98:80:bd:32:55:9f:da:37:d4:a9:4c: 18:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:EB:EB:27:5A:54:85:6E:D4:1F:7B:B3:E3:5A:06:08:B8:8E:EA:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b6cf1d27-45c9-30cd-9839-8ebb69e80500.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.250.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:75:2a:a7:e8:60:dd:df:f5:34:e2:4e:2f:67:f5:ad:94:23: a4:90:b7:23:a9:10:2b:42:27:5d:62:a3:17:02:a3:67:b4:48: e3:1c:85:99:32:b1:56:1e:e8:2e:2a:aa:ab:38:bc:e8:87:c9: 06:ab:65:35:c7:c5:fa:13:2f:22:5a:60:b6:9f:f2:a7:83:ba: 56:ec:4e:09:c2:49:99:36:ee:b8:1d:f9:cb:89:8d:ad:50:88: f3:6a:20:53:4b:6b:3a:ce:81:b2:c1:3f:fc:ac:b8:35:91:87: d4:cc:6e:1d:ed:18:85:d0:c7:be:0c:4c:bf:3f:d7:65:72:d1: 0b:97:77:ea:2a:7d:1d:fe:c1:3c:0e:d4:7f:31:8b:71:9f:b4: 02:16:f4:49:3a:f7:91:15:ce:2d:4a:79:f2:ed:99:44:9c:df: c8:4d:2d:4c:44:07:ca:66:40:5c:4b:cf:49:17:20:f7:2c:b8: e7:d7:ad:35:50:0f:5a:83:b6:46:5f:1f:5d:d1:1c:67:9f:93: f3:15:61:90:b3:98:70:c4:2a:1d:28:06:5a:8e:42:2d:7d:bd: 39:76:29:b3:76:4d:81:eb:8f:81:62:70:b5:77:4c:a9:c5:c7: 1a:7b:f5:4c:e9:99:84:ab:4f:c8:02:b1:08:2d:98:f4:0c:1e: c0:84:14:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VuzvPSb0zXz+Q6sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk NTk3MGY4YzktZDA4My00OWIxLWFhMTItOGVmZDg0NDY3NDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpwYYbb10r8m0ZMjcOKm2xKngW0owUYD/Lcq 37phugrgU+rWMsIe+5hlIpqwkPl4jXKiGcsxmChUkVx9KK20n/D1Th09exnIUaPL +ZbW3hfrVDyjJ8KREJESU0t/WaZlhdwGIsAfIUEz3T+ctIpX9iBwJvuLHqJFsOFQ LP+sEVAJYDbm7eqlw7e2FgyoJC0HwR62BKY7n5aRSi0Fv6ogxYiV29O2OYRdGIrr Cq6ac3/mhHRVUKehyzkRgX6ck1g2LXZCTQ9I7c0FIwugvV1moxmRIPP8pzuiL9ic n19YipUxlnTNBlpzF1le73k6ReH8I3AkmIC9MlWf2jfUqUwYQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAjr6ydaVIVu1B97s+NaBgi4juqIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjZjZjFkMjctNDVjOS0z MGNkLTk4MzktOGViYjY5ZTgwNTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYvp4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALl1KqfoYN3f9TTiTi9n9a2UI6SQtyOpECtCJ11ioxcCo2e0SOMchZky sVYe6C4qqqs4vOiHyQarZTXHxfoTLyJaYLaf8qeDulbsTgnCSZk27rgd+cuJja1Q iPNqIFNLazrOgbLBP/ysuDWRh9TMbh3tGIXQx74MTL8/12Vy0QuXd+oqfR3+wTwO 1H8xi3GftAIW9Ek695EVzi1KefLtmUSc38hNLUxEB8pmQFxLz0kXIPcsuOfXrTVQ D1qDtkZfH13RHGefk/MVYZCzmHDEKh0oBlqOQi19vTl2KbN2TYHrj4FicLV3TKnF xxp79UzpmYSrT8gCsQgtmPQMHsCEFNI= -----END CERTIFICATE-----Generated at Fri Apr 17 03:57:12 2026 by rpki-client