$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9280fb36-6664-378c-a11e-7ab20388c5ba.roa File: 9280fb36-6664-378c-a11e-7ab20388c5ba.roa (raw, json) Hash identifier: pU8GsxLLXU1lMhlBCbzHvuxoDWtMYa0qvSnOE0RTWmo= Subject key identifier: D1:CE:7B:CB:61:F7:7E:66:38:3C:3D:1C:81:EC:E1:70:6B:5A:1B:8B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BB38B97B718E2EEB9D7180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9280fb36-6664-378c-a11e-7ab20388c5ba.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33668 IP address blocks: 98.243.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:38:b9:7b:71:8e:2e:eb:9d:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=4e2b53ef-cc8e-451b-877e-5839ff60aa65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a9:9b:4a:cc:01:f2:31:b1:c6:e8:0c:aa:27: a3:5e:e2:03:db:92:21:cf:92:5f:1a:f8:2e:73:10: 3e:a7:71:da:02:5b:b8:9d:df:32:6f:64:29:7a:7f: a3:4f:27:92:77:7c:38:5a:0b:0a:ae:49:a3:81:cb: 46:b6:bf:bd:13:62:86:07:39:7f:1e:9e:83:cd:20: a4:25:e0:8f:60:2e:c4:81:7c:c0:cd:cf:bb:85:83: 97:fb:d1:d2:20:ab:4e:51:8c:3e:27:f1:9c:15:30: f3:fe:22:01:e0:72:69:cd:f6:1c:7d:df:26:44:9d: c8:27:91:34:3a:f0:38:20:eb:df:dc:d0:4c:0c:bc: c9:f8:9f:77:7f:83:98:ab:a9:27:f8:34:b9:37:90: 47:43:3d:ca:92:11:bc:73:7c:e6:a3:5c:85:53:21: b8:db:4d:b8:45:33:a4:89:59:64:80:61:c5:70:57: 62:f0:af:08:a5:bf:b5:22:f8:82:9f:f6:6d:74:13: 83:c1:52:eb:d1:13:c1:e9:bd:6e:b9:06:7a:e4:d8: 51:9b:fe:5a:2a:49:30:de:4f:cf:2e:6f:62:61:38: 96:a6:cc:23:68:58:17:f8:80:63:f9:60:9b:37:e1: 3c:4c:1a:ae:4b:b9:bd:95:a6:b9:df:fe:ae:26:db: 35:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:CE:7B:CB:61:F7:7E:66:38:3C:3D:1C:81:EC:E1:70:6B:5A:1B:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9280fb36-6664-378c-a11e-7ab20388c5ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.243.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:0f:8a:d6:d5:45:b6:14:eb:eb:29:ae:55:16:14:07:6a:8b: 42:c4:9f:db:86:ee:76:34:da:26:28:6f:c3:1d:af:08:0a:c8: de:c5:bd:43:3d:f7:6b:67:6c:1f:6c:d0:29:d3:30:0d:09:54: 9d:72:55:59:ca:e1:6b:8d:15:bf:c6:34:89:99:c2:f6:49:df: 33:69:c1:98:1d:f9:08:d3:98:b3:f4:cf:27:6c:2a:9d:cb:42: af:27:0d:74:77:9f:6e:e3:9c:0a:50:7f:34:b2:c8:b9:07:8a: 91:d4:83:bd:d0:c4:52:50:06:1e:e6:f6:11:e4:4d:62:c5:82: 72:d2:d6:b9:47:dd:fa:d9:16:15:5c:42:00:e1:0c:aa:ee:e2: 7b:ab:6d:77:8c:c7:43:a6:61:f5:75:91:bd:f7:88:f7:8c:9a: cd:7e:67:c5:6d:85:be:fb:86:3c:3d:50:94:0f:33:53:71:76: 4a:0d:be:b6:61:d5:8a:62:c9:8b:e8:84:b0:80:c8:16:3b:9c: c9:34:f7:ba:71:bc:a4:86:e9:62:1e:db:ce:d3:5b:ca:56:58: 18:3b:df:42:74:1c:4c:fe:3a:dd:7e:ce:fc:c2:f5:0c:46:2c: 57:e4:21:83:de:98:88:30:49:7d:d4:b5:4b:2d:d0:df:18:e2: 90:12:fe:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vuzi5e3GOLuudcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk NGUyYjUzZWYtY2M4ZS00NTFiLTg3N2UtNTgzOWZmNjBhYTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4KmbSswB8jGxxugMqiejXuID25Ihz5JfGvgu cxA+p3HaAlu4nd8yb2Qpen+jTyeSd3w4WgsKrkmjgctGtr+9E2KGBzl/Hp6DzSCk JeCPYC7EgXzAzc+7hYOX+9HSIKtOUYw+J/GcFTDz/iIB4HJpzfYcfd8mRJ3IJ5E0 OvA4IOvf3NBMDLzJ+J93f4OYq6kn+DS5N5BHQz3KkhG8c3zmo1yFUyG42024RTOk iVlkgGHFcFdi8K8Ipb+1IviCn/ZtdBODwVLr0RPB6b1uuQZ65NhRm/5aKkkw3k/P Lm9iYTiWpswjaFgX+IBj+WCbN+E8TBquS7m9laa53/6uJts1/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNHOe8th935mODw9HIHs4XBrWhuLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTI4MGZiMzYtNjY2NC0z NzhjLWExMWUtN2FiMjAzODhjNWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYvOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHoPitbVRbYU6+sprlUWFAdqi0LEn9uG7nY02iYob8MdrwgKyN7FvUM9 92tnbB9s0CnTMA0JVJ1yVVnK4WuNFb/GNImZwvZJ3zNpwZgd+QjTmLP0zydsKp3L Qq8nDXR3n27jnApQfzSyyLkHipHUg73QxFJQBh7m9hHkTWLFgnLS1rlH3frZFhVc QgDhDKru4nurbXeMx0OmYfV1kb33iPeMms1+Z8Vthb77hjw9UJQPM1NxdkoNvrZh 1YpiyYvohLCAyBY7nMk097pxvKSG6WIe287TW8pWWBg730J0HEz+Ot1+zvzC9QxG LFfkIYPemIgwSX3UtUst0N8Y4pAS/p0= -----END CERTIFICATE-----Generated at Fri Apr 17 16:07:10 2026 by rpki-client