$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42a3d720-8d52-35f0-ace7-01ba20486d4e.roa File: 42a3d720-8d52-35f0-ace7-01ba20486d4e.roa (raw, json) Hash identifier: efG+18aL91M7UJtmkC3JzYdMvJmEu9xE72Ukg9WgDts= Subject key identifier: ED:CF:4D:23:CC:AD:6C:21:BF:17:8B:0E:19:8B:A9:C5:9C:7B:3F:4C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BB81CD5EFB74FE9A6985C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42a3d720-8d52-35f0-ace7-01ba20486d4e.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33662 IP address blocks: 98.57.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:81:cd:5e:fb:74:fe:9a:69:85:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=c0517321-b7c8-4aa1-9d2a-0238b59fce1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:44:b9:08:9f:ee:97:4e:49:65:b8:4c:15:a0: 43:6f:f8:ea:7c:36:2a:81:c3:69:be:ac:66:8b:67: e2:a3:1e:28:fb:04:a4:de:e5:4d:cf:9b:28:7e:29: 36:68:e4:76:1c:c7:ae:9a:d2:db:88:a8:38:81:d6: ba:32:6d:5c:0d:11:c1:58:18:ac:d1:de:69:da:7b: 57:d2:5a:b1:a6:11:79:f0:e6:45:14:18:2a:f9:2c: 98:16:f0:63:eb:e9:70:19:8f:f0:68:ee:34:6f:bd: 81:8a:98:3e:ba:bc:dc:37:7a:30:74:7d:49:17:cd: 7f:3c:4d:37:30:6f:a0:85:23:6c:2d:d7:3b:60:4b: d3:ee:29:6a:c9:65:19:0e:f8:1d:7e:8d:8e:ca:e4: 34:09:38:e6:89:58:a5:c1:8e:cb:53:68:9f:7c:c2: fd:20:81:68:f2:90:c0:45:70:46:c1:3e:a7:40:82: fc:22:3f:73:63:86:84:95:5c:45:b6:84:da:f5:a8: a2:9e:bf:04:39:52:29:e7:ea:0d:d7:09:b2:8d:37: 83:8a:f8:42:e0:2f:be:dd:27:59:ee:69:39:75:6c: 86:fd:75:fb:ab:70:83:98:c3:12:10:bc:0c:a3:23: 00:df:fc:9e:41:da:15:3f:5a:36:93:48:c0:c3:c9: 52:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:CF:4D:23:CC:AD:6C:21:BF:17:8B:0E:19:8B:A9:C5:9C:7B:3F:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42a3d720-8d52-35f0-ace7-01ba20486d4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.57.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:0b:86:ca:da:4e:1d:1c:13:2e:01:90:f0:4b:42:c4:05:64: 19:83:05:e7:e5:c6:b9:b4:8c:00:b7:25:4c:16:35:44:96:51: 5c:aa:98:f0:e0:9b:1f:51:f0:fd:a5:05:c2:3b:38:1b:f0:5a: 6f:5a:14:97:8f:0b:ff:83:0a:6f:06:08:a6:c2:14:85:66:60: 31:1b:cd:6e:d4:e7:dd:ee:9e:7d:7c:f8:58:45:94:42:99:9c: e4:53:0e:9c:5c:e3:59:35:8f:1c:fb:14:4e:f6:ae:10:58:94: 1d:30:49:6d:26:5a:70:da:9c:e4:b0:e1:ee:40:7d:bc:5d:99: 15:a1:a0:7f:76:5c:26:70:e4:79:7a:fa:2e:66:41:35:6e:01: f1:9a:13:54:5b:da:1d:5d:5c:1a:8a:2e:c0:78:0a:e9:e7:c3: 53:97:bc:2d:ca:38:54:40:25:d1:49:8b:22:96:8f:96:9a:8a: 6e:ae:da:bb:e7:5d:f5:43:06:cc:1a:4e:b7:64:e6:a4:ee:6f: b2:f0:45:e4:86:52:21:66:e6:40:96:99:a3:87:2f:e5:35:bd: 4a:d1:a3:1a:d9:47:c9:7c:d7:5b:cf:d6:75:50:2c:e4:86:96: 14:37:5c:e1:e8:f5:8a:82:ff:be:1e:7a:03:a0:45:ee:75:2a: 8f:aa:b2:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vu4HNXvt0/ppphcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk YzA1MTczMjEtYjdjOC00YWExLTlkMmEtMDIzOGI1OWZjZTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokS5CJ/ul05JZbhMFaBDb/jqfDYqgcNpvqxm i2fiox4o+wSk3uVNz5sofik2aOR2HMeumtLbiKg4gda6Mm1cDRHBWBis0d5p2ntX 0lqxphF58OZFFBgq+SyYFvBj6+lwGY/waO40b72Bipg+urzcN3owdH1JF81/PE03 MG+ghSNsLdc7YEvT7ilqyWUZDvgdfo2OyuQ0CTjmiVilwY7LU2iffML9IIFo8pDA RXBGwT6nQIL8Ij9zY4aElVxFtoTa9aiinr8EOVIp5+oN1wmyjTeDivhC4C++3SdZ 7mk5dWyG/XX7q3CDmMMSELwMoyMA3/yeQdoVP1o2k0jAw8lSyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO3PTSPMrWwhvxeLDhmLqcWcez9MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDJhM2Q3MjAtOGQ1Mi0z NWYwLWFjZTctMDFiYTIwNDg2ZDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYjnkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQLhsraTh0cEy4BkPBLQsQFZBmDBeflxrm0jAC3JUwWNUSWUVyqmPDg mx9R8P2lBcI7OBvwWm9aFJePC/+DCm8GCKbCFIVmYDEbzW7U593unn18+FhFlEKZ nORTDpxc41k1jxz7FE72rhBYlB0wSW0mWnDanOSw4e5AfbxdmRWhoH92XCZw5Hl6 +i5mQTVuAfGaE1Rb2h1dXBqKLsB4Cunnw1OXvC3KOFRAJdFJiyKWj5aaim6u2rvn XfVDBswaTrdk5qTub7LwReSGUiFm5kCWmaOHL+U1vUrRoxrZR8l811vP1nVQLOSG lhQ3XOHo9YqC/74eegOgRe51Ko+qskE= -----END CERTIFICATE-----Generated at Fri Apr 17 07:27:35 2026 by rpki-client