$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e34cfe72-3333-39ae-82e7-c0c9b497f2ce.roa File: e34cfe72-3333-39ae-82e7-c0c9b497f2ce.roa (raw, json) Hash identifier: ncyKzrjvcFBjS8xI5dsaDQwJNwrQnP7CImNUJCZ2v2I= Subject key identifier: 66:13:93:E7:41:CC:EC:E1:18:DB:C9:57:3D:97:78:48:53:33:B5:E0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BCA67E08FE9F3A72948680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e34cfe72-3333-39ae-82e7-c0c9b497f2ce.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33662 IP address blocks: 98.200.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:a6:7e:08:fe:9f:3a:72:94:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=c3f5b411-1923-4d14-a714-d3900ed779f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:29:b9:1d:02:26:3b:fb:1a:cc:33:15:db:f9: 63:53:5b:bf:a1:31:2b:0b:6d:64:3f:f7:f7:bb:9e: 87:68:9f:29:9b:48:ea:6f:c4:37:ac:3b:99:0b:2b: e5:75:df:d2:94:39:60:1d:58:0b:7b:9a:f8:ae:48: 22:24:90:37:d2:9c:d8:a0:61:55:0f:28:14:8b:ad: 19:c9:78:b2:a5:54:b7:a2:b8:12:57:e6:1f:31:9a: 4e:ae:eb:e2:de:cd:f6:ea:b9:9a:1f:81:13:4b:3f: 53:3e:59:f8:ca:d4:c3:e4:26:a8:40:95:3e:7f:30: 25:1a:8b:d0:ea:16:e1:f8:2b:10:db:a3:ce:65:65: d5:d9:83:77:02:59:af:32:ee:c1:6a:7c:e2:56:ea: bc:77:6a:f5:bd:44:e0:69:0a:d7:2d:30:5b:31:bb: 9b:96:08:b7:ef:2c:63:c2:45:a0:9f:42:fe:8f:06: 62:a4:e7:3b:79:ed:8b:c6:af:d4:ea:bd:78:c2:c3: 77:58:42:06:51:5e:28:7a:e0:80:27:00:6e:c2:bc: fe:d3:03:a6:44:8e:50:aa:23:3a:83:bc:22:e2:64: 07:83:6f:e5:4a:bb:a9:e3:55:d0:87:e5:fc:11:82: 33:41:ee:68:cc:70:6d:ac:3c:65:d9:f9:e0:76:d5: e4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:13:93:E7:41:CC:EC:E1:18:DB:C9:57:3D:97:78:48:53:33:B5:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e34cfe72-3333-39ae-82e7-c0c9b497f2ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.200.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:f5:36:e3:db:fb:e7:4e:1e:33:ab:e0:42:cb:df:58:f0:a4: b6:00:ae:bb:2a:2f:2a:54:d4:e2:e0:56:2c:fa:fe:3c:1b:1b: 2e:6a:4d:a9:5f:50:c0:d9:c1:84:e3:29:5d:75:e8:45:29:39: d8:93:83:01:3e:de:bc:de:f6:fb:b3:92:0a:78:d6:89:d8:46: 18:b0:f2:6a:11:46:65:9a:78:97:b1:de:e2:03:65:2c:18:44: cf:a3:6e:dc:c4:63:b9:39:28:24:3a:d4:fe:2d:6f:db:43:54: 81:11:06:69:78:c4:11:ee:7e:79:6b:e7:f7:61:74:25:7a:b1: 26:a5:f5:90:6d:38:3e:5d:5a:1b:29:c3:b8:4d:29:92:5b:97: 27:58:77:52:dc:2c:5c:bb:24:89:1b:45:45:b5:3c:d7:ed:6f: d1:20:88:82:14:d7:57:40:53:74:ec:f5:40:96:ad:8a:fd:93: 51:a8:5b:2d:01:b7:ab:a2:b1:77:36:05:e3:42:2d:71:02:c0: 4d:92:18:c8:08:49:bb:f9:bf:cd:b4:df:33:35:75:83:1c:2b: 33:72:c3:d4:ca:f2:33:74:9a:93:4a:91:49:c1:71:b4:3e:f3: 34:d1:9d:ba:69:31:1f:db:93:fc:7e:d1:a3:c4:7c:22:9c:31: 8f:24:6c:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvKZ+CP6fOnKUhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk YzNmNWI0MTEtMTkyMy00ZDE0LWE3MTQtZDM5MDBlZDc3OWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjym5HQImO/sazDMV2/ljU1u/oTErC21kP/f3 u56HaJ8pm0jqb8Q3rDuZCyvldd/SlDlgHVgLe5r4rkgiJJA30pzYoGFVDygUi60Z yXiypVS3orgSV+YfMZpOruvi3s326rmaH4ETSz9TPln4ytTD5CaoQJU+fzAlGovQ 6hbh+CsQ26POZWXV2YN3AlmvMu7BanziVuq8d2r1vUTgaQrXLTBbMbublgi37yxj wkWgn0L+jwZipOc7ee2Lxq/U6r14wsN3WEIGUV4oeuCAJwBuwrz+0wOmRI5QqiM6 g7wi4mQHg2/lSrup41XQh+X8EYIzQe5ozHBtrDxl2fngdtXk6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYTk+dBzOzhGNvJVz2XeEhTM7XgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTM0Y2ZlNzItMzMzMy0z OWFlLTgyZTctYzBjOWI0OTdmMmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYsjcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB31NuPb++dOHjOr4ELL31jwpLYArrsqLypU1OLgViz6/jwbGy5qTalf UMDZwYTjKV116EUpOdiTgwE+3rze9vuzkgp41onYRhiw8moRRmWaeJex3uIDZSwY RM+jbtzEY7k5KCQ61P4tb9tDVIERBml4xBHufnlr5/dhdCV6sSal9ZBtOD5dWhsp w7hNKZJblydYd1LcLFy7JIkbRUW1PNftb9EgiIIU11dAU3Ts9UCWrYr9k1GoWy0B t6uisXc2BeNCLXECwE2SGMgISbv5v8203zM1dYMcKzNyw9TK8jN0mpNKkUnBcbQ+ 8zTRnbppMR/bk/x+0aPEfCKcMY8kbDg= -----END CERTIFICATE-----Generated at Fri Apr 17 13:39:32 2026 by rpki-client