$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/328bfacd-cd5f-303e-bc65-c6be62f65f42.roa File: 328bfacd-cd5f-303e-bc65-c6be62f65f42.roa (raw, json) Hash identifier: rroAAinFmF4MF4VAZmW/YkQwH41DV0Pa6TQhY383g7s= Subject key identifier: 85:CF:75:5A:D3:F3:35:01:E3:92:43:22:09:B5:31:7C:7D:CE:5E:16 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5CFB435775F1A9976D092C Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/328bfacd-cd5f-303e-bc65-c6be62f65f42.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 98.228.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5c:fb:43:57:75:f1:a9:97:6d:09:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=287bfb7d-57f8-4ebb-88e1-f91915ff2066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d8:37:63:b2:18:02:e6:37:a3:59:a5:31:6e: 62:0b:ec:0c:e8:58:ff:7e:40:8c:24:b3:8c:7b:28: db:b9:85:92:2d:55:97:a8:c3:e6:0f:bb:17:77:f3: d9:94:5b:06:05:7d:cb:77:a9:ea:7d:6d:80:7a:dc: ee:8f:56:15:fd:13:e4:bf:c8:22:5f:e3:71:4b:02: 77:3d:63:ec:57:2d:44:02:4b:d1:5f:2b:dd:12:b8: 94:b8:7d:00:fe:57:c3:61:d0:bc:40:48:b8:5a:c1: a2:94:f6:ae:d2:5f:24:9e:35:cd:e6:a3:62:fb:8e: 06:88:e6:bc:94:28:e0:49:87:5d:90:c0:f5:7f:66: be:b7:48:42:50:e7:e7:f5:34:4e:45:26:10:29:4b: 94:b3:29:dc:61:60:aa:8f:0d:8e:20:a4:16:55:08: f3:bf:c2:b3:5d:79:19:de:1c:5c:48:ef:2d:b0:8d: e5:dc:1f:c3:9b:1d:4a:17:28:b5:22:70:c2:38:e1: 83:cf:d2:b0:7c:f1:73:e9:87:5d:02:19:5d:58:01: e3:3a:1a:77:41:fc:e8:6b:9a:d5:77:96:91:d3:6b: fa:5a:f1:ed:34:a7:67:8b:f5:09:43:98:70:22:b0: 2b:30:f4:5d:62:f8:c5:ff:64:2e:b7:a4:0d:94:bf: 14:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:CF:75:5A:D3:F3:35:01:E3:92:43:22:09:B5:31:7C:7D:CE:5E:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/328bfacd-cd5f-303e-bc65-c6be62f65f42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.228.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:b4:bc:65:1d:bb:69:8f:aa:ab:7e:5d:75:68:73:29:74:61: d0:3e:13:28:f6:1e:59:7c:42:9e:1a:7e:1b:57:3f:e2:55:61: 04:6f:67:6f:2e:81:69:5f:cd:08:2d:66:0f:6e:01:72:b4:ae: 91:78:18:d0:19:af:25:f8:48:f1:2e:9f:5b:71:b1:0d:39:d0: f6:27:53:27:98:6d:28:06:55:85:73:73:8f:b8:b4:34:a0:fe: e0:5b:65:6c:93:a4:b6:5b:ce:b8:80:3d:ea:54:c5:39:fb:b7: 76:fa:f3:af:a5:64:ae:74:c1:ca:59:38:0b:00:83:2a:3d:6a: 78:4f:c4:a9:6d:26:7f:9d:63:b0:95:e4:5d:cd:33:86:dc:cd: e7:e5:a8:16:52:ad:57:09:cf:75:0b:b3:7d:43:a6:8e:a4:22: 6e:c5:2e:3c:ae:44:1d:7f:52:1d:da:fa:6d:16:73:48:fe:13: ff:67:de:91:a4:b0:f4:46:25:b1:9c:78:2b:9c:5c:fb:08:ac: 49:5b:82:77:29:f5:2c:fb:4f:b9:07:23:51:e4:92:ff:8b:31: 59:d2:e7:55:f5:39:c2:07:b7:93:d1:88:86:68:13:f4:07:ff: 55:9e:53:ca:d6:2f:50:e2:a9:10:b4:c2:88:19:d4:7e:5c:b3: 61:ce:d4:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXPtDV3XxqZdtCSwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk Mjg3YmZiN2QtNTdmOC00ZWJiLTg4ZTEtZjkxOTE1ZmYyMDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNg3Y7IYAuY3o1mlMW5iC+wM6Fj/fkCMJLOM eyjbuYWSLVWXqMPmD7sXd/PZlFsGBX3Ld6nqfW2Aetzuj1YV/RPkv8giX+NxSwJ3 PWPsVy1EAkvRXyvdEriUuH0A/lfDYdC8QEi4WsGilPau0l8knjXN5qNi+44GiOa8 lCjgSYddkMD1f2a+t0hCUOfn9TRORSYQKUuUsyncYWCqjw2OIKQWVQjzv8KzXXkZ 3hxcSO8tsI3l3B/Dmx1KFyi1InDCOOGDz9KwfPFz6YddAhldWAHjOhp3Qfzoa5rV d5aR02v6WvHtNKdni/UJQ5hwIrArMPRdYvjF/2Qut6QNlL8UbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXPdVrT8zUB45JDIgm1MXx9zl4WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzI4YmZhY2QtY2Q1Zi0z MDNlLWJjNjUtYzZiZTYyZjY1ZjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYuQoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIK0vGUdu2mPqqt+XXVocyl0YdA+Eyj2Hll8Qp4afhtXP+JVYQRvZ28u gWlfzQgtZg9uAXK0rpF4GNAZryX4SPEun1txsQ050PYnUyeYbSgGVYVzc4+4tDSg /uBbZWyTpLZbzriAPepUxTn7t3b686+lZK50wcpZOAsAgyo9anhPxKltJn+dY7CV 5F3NM4bczeflqBZSrVcJz3ULs31Dpo6kIm7FLjyuRB1/Uh3a+m0Wc0j+E/9n3pGk sPRGJbGceCucXPsIrElbgncp9Sz7T7kHI1Hkkv+LMVnS51X1OcIHt5PRiIZoE/QH /1WeU8rWL1DiqRC0wogZ1H5cs2HO1Ns= -----END CERTIFICATE-----Generated at Sun Mar 1 18:37:04 2026 by rpki-client