$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e50f5171-d5d1-39bd-9ae5-737eb647ff7a.roa File: e50f5171-d5d1-39bd-9ae5-737eb647ff7a.roa (raw, json) Hash identifier: aRGWMsfEAVywq6pRGDKW1Z24RL8pplY7Y8piUa5y99A= Subject key identifier: AA:67:F8:F5:6F:77:87:48:B3:3D:91:04:D8:EB:3C:F3:9E:E7:57:B2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BB35F2338036BACB291D60 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e50f5171-d5d1-39bd-9ae5-737eb647ff7a.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 98.209.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:35:f2:33:80:36:ba:cb:29:1d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=8a63fe7b-14aa-482c-b2b4-ef43e3864cf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4e:9a:6b:3e:20:24:1d:7b:7a:bf:7e:87:82: df:db:bd:d2:a8:ac:44:3d:79:d0:84:74:9b:7e:e7: a0:96:42:d9:fb:8c:6b:54:93:3b:26:9f:ab:e3:a3: f0:82:64:ff:7c:77:cf:ee:1c:4a:2a:a1:89:73:fc: 7f:3a:59:86:98:46:d0:61:0a:68:44:f4:a9:90:dd: 69:29:b5:4f:da:44:1f:ea:21:6a:85:36:3d:dc:58: b2:38:ed:58:53:08:c7:3e:3f:ce:cf:8e:02:e6:4a: 1c:a9:37:6d:45:f5:45:60:0a:b1:cc:83:82:ad:b7: 1f:31:1e:04:c4:f2:6f:5d:5f:1b:2c:32:d3:d0:45: 86:7b:ac:91:32:c5:ae:4d:0c:a5:bf:67:78:08:55: 7c:02:35:01:2b:1f:ed:88:22:f3:42:d4:cb:e1:15: f3:a2:ef:16:67:b2:88:32:09:cc:aa:37:e4:c6:19: 0e:ff:7e:1e:63:3a:5f:8d:2b:3f:0b:6f:ac:20:8d: 2e:45:22:a0:6d:70:80:89:6c:84:7f:5d:26:cb:46: 71:a5:f5:16:d1:8f:11:70:4c:96:26:ad:b0:c4:9d: 10:cd:d4:c8:11:2f:2a:97:6d:a4:cf:92:70:e4:00: 1d:31:01:73:6d:e1:19:df:ef:ad:f1:a6:5f:45:22: 98:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:67:F8:F5:6F:77:87:48:B3:3D:91:04:D8:EB:3C:F3:9E:E7:57:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e50f5171-d5d1-39bd-9ae5-737eb647ff7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.209.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:8c:8e:91:bf:3f:ab:f4:78:74:3a:5e:87:23:95:a4:b7:d1: 90:57:d7:71:82:41:ef:26:44:8b:53:87:bb:e3:a1:19:26:21: a9:96:16:fc:0e:9e:96:b4:08:5b:84:3e:d6:92:54:7f:18:8d: 5f:b0:52:69:46:e5:0c:c9:bb:a7:89:3d:47:fa:6c:26:79:f7: df:28:c6:12:d2:d9:f6:75:74:8c:bd:e3:3d:d3:97:3b:f7:ab: 1c:1f:bd:a4:47:f2:c8:ed:2c:9b:cb:97:7a:30:9b:9d:d6:3a: 66:5e:e2:cf:fc:bb:6c:b2:6f:8a:fa:ea:78:f8:61:cd:e3:34: 29:0c:ab:58:6f:ee:44:83:58:39:95:53:b4:a5:d4:fc:f9:7c: ad:d0:f2:f5:e5:08:17:e7:ea:e4:51:09:53:c0:93:6c:31:8a: 15:17:e0:f1:ff:37:6d:ca:c1:5f:a6:54:a7:9e:d2:d5:14:f5: ac:79:21:6e:a7:7b:4a:86:5d:48:46:dc:ba:ee:64:f2:4b:a2: e6:68:21:02:29:d3:fc:77:e8:46:76:53:b0:34:de:28:b8:00: d2:f1:a5:94:d6:3b:67:93:47:7f:e2:b5:8e:eb:66:e7:93:c0: a3:d7:c5:e5:3e:3f:0f:8e:02:2c:97:b7:f0:e4:d9:a3:c0:a5: 84:84:ae:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VuzXyM4A2usspHWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk OGE2M2ZlN2ItMTRhYS00ODJjLWIyYjQtZWY0M2UzODY0Y2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoU6aaz4gJB17er9+h4Lf273SqKxEPXnQhHSb fueglkLZ+4xrVJM7Jp+r46PwgmT/fHfP7hxKKqGJc/x/OlmGmEbQYQpoRPSpkN1p KbVP2kQf6iFqhTY93FiyOO1YUwjHPj/Oz44C5kocqTdtRfVFYAqxzIOCrbcfMR4E xPJvXV8bLDLT0EWGe6yRMsWuTQylv2d4CFV8AjUBKx/tiCLzQtTL4RXzou8WZ7KI MgnMqjfkxhkO/34eYzpfjSs/C2+sII0uRSKgbXCAiWyEf10my0ZxpfUW0Y8RcEyW Jq2wxJ0QzdTIES8ql22kz5Jw5AAdMQFzbeEZ3++t8aZfRSKYHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpn+PVvd4dIsz2RBNjrPPOe51eyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTUwZjUxNzEtZDVkMS0z OWJkLTlhZTUtNzM3ZWI2NDdmZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYtF0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOMjpG/P6v0eHQ6XocjlaS30ZBX13GCQe8mRItTh7vjoRkmIamWFvwO npa0CFuEPtaSVH8YjV+wUmlG5QzJu6eJPUf6bCZ5998oxhLS2fZ1dIy94z3Tlzv3 qxwfvaRH8sjtLJvLl3owm53WOmZe4s/8u2yyb4r66nj4Yc3jNCkMq1hv7kSDWDmV U7Sl1Pz5fK3Q8vXlCBfn6uRRCVPAk2wxihUX4PH/N23KwV+mVKee0tUU9ax5IW6n e0qGXUhG3LruZPJLouZoIQIp0/x36EZ2U7A03ii4ANLxpZTWO2eTR3/itY7rZueT wKPXxeU+Pw+OAiyXt/Dk2aPApYSErg4= -----END CERTIFICATE-----Generated at Fri Apr 17 10:29:32 2026 by rpki-client