$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e6cea07-c6be-3d79-806a-a4ae5138fe6c.roa File: 3e6cea07-c6be-3d79-806a-a4ae5138fe6c.roa (raw, json) Hash identifier: uKMCrmh3l2+8ql9HujiUCpcU8VWvACBAJyo6xZRMbgk= Subject key identifier: DC:4E:79:B0:1B:CB:E6:8D:A2:64:03:9E:9A:92:62:19:D6:B7:7E:DB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BB7D5EBBC7F28616C37640 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e6cea07-c6be-3d79-806a-a4ae5138fe6c.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33662 IP address blocks: 98.44.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:7d:5e:bb:c7:f2:86:16:c3:76:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=98667d8a-0cdb-4dc0-8fbf-65d79aded092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:56:70:45:6c:7d:52:ab:df:d1:ce:e6:6c:b0: 93:44:79:d1:59:ee:44:45:c2:98:9a:0a:71:9c:aa: 3a:59:8b:c3:9a:95:e2:0e:fb:0a:ae:44:ab:d2:c7: 4c:56:59:e0:30:b0:c7:71:a4:db:58:39:33:51:db: 3c:8c:85:9d:72:93:1e:0d:6c:6f:ce:f4:e5:4b:66: 5b:27:58:b8:6f:aa:1e:f3:94:47:56:cc:2d:3d:19: 07:69:f3:51:55:5c:ec:0a:61:f4:f3:24:26:6d:05: 60:af:a3:70:b5:fd:80:e0:b2:64:6e:4b:85:13:51: b1:af:a1:f3:c3:a3:01:59:e7:3a:0c:fe:b6:e6:c0: 71:52:1b:b6:c3:69:fb:9b:cf:07:df:db:1d:7a:0a: 8f:d8:a8:65:da:83:ab:c6:55:d9:25:37:7a:1b:1b: f6:b6:a2:18:14:7b:71:eb:7c:6c:17:8a:d5:9d:80: 46:57:ef:2d:62:6e:16:fb:30:38:43:9e:de:9d:a2: 4b:ed:26:6f:d2:da:58:d0:88:fb:87:63:87:48:e0: df:38:99:b0:af:71:a8:2b:51:89:c1:e8:ae:16:14: f1:c3:94:30:23:25:81:85:76:e6:09:36:ea:8f:a7: b1:c4:14:d6:95:08:cf:4c:8b:95:61:ba:43:3c:17: 0c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:4E:79:B0:1B:CB:E6:8D:A2:64:03:9E:9A:92:62:19:D6:B7:7E:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e6cea07-c6be-3d79-806a-a4ae5138fe6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.44.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:21:5a:f7:f5:2a:7c:2c:68:7f:a0:07:96:30:37:0f:7d:d8: a3:a0:cf:98:04:d7:39:d3:0b:07:71:c5:a2:b0:d7:3d:4a:5d: 4b:d7:ae:1d:89:83:b7:be:83:0f:6e:9b:4e:7a:1c:e1:f7:e4: 50:80:75:74:71:ec:58:2c:26:0e:a8:b4:9f:63:a7:fa:3a:b2: f8:4e:9f:e5:5e:f2:8a:14:57:72:77:ab:ff:03:7d:ed:77:39: 77:c4:4a:9e:23:a8:a3:d7:1a:e1:cc:ca:40:d0:71:81:45:85: 21:6a:8c:4a:68:8f:89:db:72:94:82:ce:3d:16:9c:0a:68:f3: 87:a5:b8:f0:b0:14:44:3f:8d:5c:66:a1:97:cf:08:bd:4f:0d: 04:c3:b7:e6:86:3d:64:96:99:62:86:bb:8a:f4:0e:25:0c:58: 84:8a:7d:a2:34:a9:90:ac:65:0c:dd:38:c5:cc:57:95:72:7b: f4:5a:d1:dd:24:13:17:83:92:73:5c:8c:8d:e0:55:e6:40:fa: a7:b4:f1:b2:4c:f5:ca:1c:52:d4:d2:02:ec:04:5d:71:7a:04: ec:7d:04:65:e5:79:97:5c:ce:92:dd:e9:f6:6e:59:77:f1:8c: 5a:1c:f2:77:6e:0d:2c:0f:38:23:19:79:e7:8b:a3:20:fb:c0: 48:52:0a:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vu31eu8fyhhbDdkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk OTg2NjdkOGEtMGNkYi00ZGMwLThmYmYtNjVkNzlhZGVkMDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilZwRWx9Uqvf0c7mbLCTRHnRWe5ERcKYmgpx nKo6WYvDmpXiDvsKrkSr0sdMVlngMLDHcaTbWDkzUds8jIWdcpMeDWxvzvTlS2Zb J1i4b6oe85RHVswtPRkHafNRVVzsCmH08yQmbQVgr6Nwtf2A4LJkbkuFE1Gxr6Hz w6MBWec6DP625sBxUhu2w2n7m88H39sdegqP2Khl2oOrxlXZJTd6Gxv2tqIYFHtx 63xsF4rVnYBGV+8tYm4W+zA4Q57enaJL7SZv0tpY0Ij7h2OHSODfOJmwr3GoK1GJ weiuFhTxw5QwIyWBhXbmCTbqj6exxBTWlQjPTIuVYbpDPBcMAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxOebAby+aNomQDnpqSYhnWt37bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2U2Y2VhMDctYzZiZS0z ZDc5LTgwNmEtYTRhZTUxMzhmZTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYizMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKUhWvf1KnwsaH+gB5YwNw992KOgz5gE1znTCwdxxaKw1z1KXUvXrh2J g7e+gw9um056HOH35FCAdXRx7FgsJg6otJ9jp/o6svhOn+Ve8ooUV3J3q/8Dfe13 OXfESp4jqKPXGuHMykDQcYFFhSFqjEpoj4nbcpSCzj0WnApo84eluPCwFEQ/jVxm oZfPCL1PDQTDt+aGPWSWmWKGu4r0DiUMWISKfaI0qZCsZQzdOMXMV5Vye/Ra0d0k ExeDknNcjI3gVeZA+qe08bJM9cocUtTSAuwEXXF6BOx9BGXleZdczpLd6fZuWXfx jFoc8nduDSwPOCMZeeeLoyD7wEhSCgQ= -----END CERTIFICATE-----Generated at Fri Apr 17 12:49:30 2026 by rpki-client