$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28c299e1-4a64-326e-9aae-4ff36e4e9cb7.roa File: 28c299e1-4a64-326e-9aae-4ff36e4e9cb7.roa (raw, json) Hash identifier: bD/NyTDbnPmwCKU+FOmMeA94EJ0o7Ta+pKVC5zVf3v8= Subject key identifier: 08:DD:74:1F:E9:3C:6B:64:20:9D:F8:6B:7B:45:89:A8:A3:31:A6:F1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BC693DC8C2B2809CAC5200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28c299e1-4a64-326e-9aae-4ff36e4e9cb7.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 98.243.90.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:69:3d:c8:c2:b2:80:9c:ac:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=0ad089c3-e4ec-4f54-bc7d-83110969af7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:88:09:10:3a:20:7c:73:b7:4e:84:c3:00:d1: f2:83:b4:75:e4:8c:75:cf:57:20:ca:fd:1a:67:01: ed:ee:a2:7b:8c:51:4e:d8:af:72:0c:06:b6:e9:6c: 5d:5c:62:e1:34:5f:fa:47:1e:bd:55:46:d8:d8:83: ef:00:bd:03:b3:40:cd:b7:18:c3:31:50:7a:92:23: 3c:93:1b:b8:64:72:f8:e6:1f:1b:91:3c:18:2d:6d: 77:cd:ef:72:a8:ea:de:a3:b1:51:35:75:05:61:e1: 1d:11:fa:dd:d2:97:59:ce:16:e8:70:d4:6a:2d:99: fd:fa:f3:ab:df:19:14:f1:3e:c4:a4:9b:fe:da:bc: d0:e5:d2:3c:26:98:94:ca:dd:75:f9:d6:f8:d1:4c: 20:d0:67:34:eb:d6:25:ac:9f:2d:22:ec:fb:93:30: e4:6f:a4:58:9e:60:c1:1e:6c:b7:31:f2:d1:e9:c3: 53:53:13:f7:43:62:d4:ee:cd:b1:1f:1e:26:e5:94: 4b:b3:28:20:da:9b:b4:44:11:d8:49:04:24:14:51: c4:37:ee:31:4a:43:79:54:36:e5:49:f1:26:16:00: 86:9b:31:73:b2:bd:c9:87:ec:b9:5a:f4:fe:25:38: ee:6a:00:a9:5e:2e:d8:c2:b2:1e:39:41:02:3f:ec: 8b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:DD:74:1F:E9:3C:6B:64:20:9D:F8:6B:7B:45:89:A8:A3:31:A6:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28c299e1-4a64-326e-9aae-4ff36e4e9cb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.243.90.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:1a:45:2a:54:4e:ad:5a:32:30:e7:2e:66:2f:c7:b7:28:22: 2e:95:f2:40:ea:65:29:73:64:5f:be:15:e6:e9:f2:81:e5:bb: b2:8b:cd:eb:64:8e:2c:b4:ec:3b:51:22:ff:fb:8d:4f:a2:72: 58:4d:88:cc:df:cb:ab:bf:75:39:e3:46:9f:8b:72:a3:25:f9: f2:88:c4:00:72:0a:60:3d:34:27:45:35:c0:bd:b6:f1:f0:2b: 21:47:cb:b2:9f:8a:99:6f:7c:2c:01:65:8b:ca:5e:5d:74:86: ae:a2:03:f6:d1:ac:db:04:b3:12:84:47:45:ea:1c:ef:93:28: 03:6f:32:7d:5e:38:f6:98:d6:59:28:4d:cc:0e:ad:df:8f:dd: ce:0f:ef:9e:6a:d5:f4:5e:1a:78:31:b7:df:77:a5:85:e6:de: ff:75:00:51:c6:76:4f:b0:b9:ee:79:1c:b6:47:c9:3f:6e:a7: d3:0b:43:2b:da:f5:c7:06:d6:7e:7a:35:e6:db:dd:c8:d7:fb: e3:aa:40:e7:ba:2f:7e:d7:3a:7d:88:fc:ef:a7:26:86:82:d6: 7c:78:16:cd:e6:b5:c2:9a:07:1c:62:95:b5:2b:5a:0e:4f:d0: 63:98:8f:a2:e5:1a:52:4a:9d:8d:1c:d4:be:a1:00:96:ca:cd: 47:ac:78:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvGk9yMKygJysUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MGFkMDg5YzMtZTRlYy00ZjU0LWJjN2QtODMxMTA5NjlhZjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYgJEDogfHO3ToTDANHyg7R15Ix1z1cgyv0a ZwHt7qJ7jFFO2K9yDAa26WxdXGLhNF/6Rx69VUbY2IPvAL0Ds0DNtxjDMVB6kiM8 kxu4ZHL45h8bkTwYLW13ze9yqOreo7FRNXUFYeEdEfrd0pdZzhbocNRqLZn9+vOr 3xkU8T7EpJv+2rzQ5dI8JpiUyt11+db40Uwg0Gc069YlrJ8tIuz7kzDkb6RYnmDB Hmy3MfLR6cNTUxP3Q2LU7s2xHx4m5ZRLsygg2pu0RBHYSQQkFFHEN+4xSkN5VDbl SfEmFgCGmzFzsr3Jh+y5WvT+JTjuagCpXi7YwrIeOUECP+yLPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAjddB/pPGtkIJ34a3tFiaijMabxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjhjMjk5ZTEtNGE2NC0z MjZlLTlhYWUtNGZmMzZlNGU5Y2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYvNaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMoaRSpUTq1aMjDnLmYvx7coIi6V8kDqZSlzZF++Febp8oHlu7KLzetk jiy07DtRIv/7jU+iclhNiMzfy6u/dTnjRp+LcqMl+fKIxAByCmA9NCdFNcC9tvHw KyFHy7KfiplvfCwBZYvKXl10hq6iA/bRrNsEsxKER0XqHO+TKANvMn1eOPaY1lko TcwOrd+P3c4P755q1fReGngxt993pYXm3v91AFHGdk+wue55HLZHyT9up9MLQyva 9ccG1n56Nebb3cjX++OqQOe6L37XOn2I/O+nJoaC1nx4Fs3mtcKaBxxilbUrWg5P 0GOYj6LlGlJKnY0c1L6hAJbKzUeseIk= -----END CERTIFICATE-----Generated at Fri Apr 17 04:56:52 2026 by rpki-client