$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a5eacc9-70fc-3e22-aef9-47c92a426a04.roa File: 9a5eacc9-70fc-3e22-aef9-47c92a426a04.roa (raw, json) Hash identifier: 0ZmZ72Z7HZyCrfN5Rv3rZ7GcM30uIa/pBpVSOAEYl+c= Subject key identifier: 66:ED:1B:22:88:DD:E8:49:A4:E2:55:B6:A2:C3:9E:41:11:35:3E:DD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BB70E42B05A38BB5AAB500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a5eacc9-70fc-3e22-aef9-47c92a426a04.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33662 IP address blocks: 98.198.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:70:e4:2b:05:a3:8b:b5:aa:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=b8d9c60f-fbf3-478d-b0d1-0a32b4179e94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5d:68:5a:32:0e:46:06:6d:09:04:9c:4c:bf: 0f:b2:1b:79:bd:62:79:e0:51:23:9a:b1:5d:d9:7c: d0:82:4d:74:a3:db:7b:c9:73:19:84:68:b0:aa:96: ef:07:a2:97:ab:c7:fb:4a:0d:2d:10:2f:55:8e:03: 28:e8:0a:54:71:dc:c7:98:74:5e:01:00:84:bb:a0: 43:c1:be:af:3c:e5:97:ba:0c:42:39:72:85:ee:ec: 30:73:9c:23:ba:0f:6a:7b:20:f3:90:c8:d0:e8:d5: 96:e4:39:f2:97:b0:f7:bd:ae:28:89:20:61:64:d5: 01:98:ba:c7:f1:f2:ce:d1:0c:2b:a6:17:fe:4d:e8: bc:1a:6c:c7:a6:0c:00:52:ca:2a:94:d2:47:96:e7: 4d:6b:89:9e:14:4e:8b:c2:51:df:30:74:ec:b4:4a: a3:33:9c:1d:bd:0a:88:f8:44:06:bf:c4:1a:37:bc: 28:f9:2e:79:01:43:85:c7:ca:5e:e2:98:72:7c:f0: 1c:df:c9:51:e8:b8:0c:83:38:43:7f:a8:29:f2:9d: 1a:5f:44:62:89:11:b8:7d:d3:6c:e4:2a:db:00:59: e3:5c:85:a7:3e:73:5e:6a:41:d3:a0:2a:45:7e:43: e3:1c:0b:1b:3c:94:7a:83:50:d1:95:0d:10:2e:cf: da:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:ED:1B:22:88:DD:E8:49:A4:E2:55:B6:A2:C3:9E:41:11:35:3E:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a5eacc9-70fc-3e22-aef9-47c92a426a04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.198.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:40:96:8f:c4:c3:59:37:1e:25:d3:26:c6:42:80:3e:93:d0: 1f:87:df:18:47:c9:64:3f:fa:71:9b:7a:08:51:5d:cd:b9:b9: 58:58:27:eb:46:70:64:8b:63:6f:7d:5d:cc:65:bd:1a:ad:39: 79:14:ea:a2:06:2a:aa:35:09:87:e2:28:de:ed:cf:06:8c:e1: 92:9a:0a:72:d1:f5:10:cf:17:61:99:8b:6c:5c:77:fc:3d:38: dd:a7:60:f2:53:ca:80:b6:fe:e8:cc:b0:6e:cc:03:a3:d9:e0: ef:6d:34:bd:ce:f5:1f:24:59:da:8a:90:32:bf:df:0c:5f:8a: 3a:57:97:db:78:94:32:11:50:18:b7:b9:9d:aa:00:aa:53:dc: 00:89:33:ac:b4:41:7e:b9:58:a8:e8:18:f7:ef:59:8b:9d:60: 6f:06:78:8a:93:c6:26:c5:eb:82:9a:fc:ee:8f:b1:8d:56:35: 6c:25:61:0a:5f:a4:09:55:cd:50:74:67:9c:d9:f0:5f:0d:72: 4d:c0:41:77:d2:c2:6b:0b:57:1a:35:48:b6:76:17:48:84:66: fa:d2:75:d8:e7:2b:c3:2f:71:68:16:85:25:b8:fe:63:d3:eb: af:02:cf:f4:25:32:1f:d0:09:9d:0f:c7:8a:b6:6f:9f:30:31: f0:1a:00:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vu3DkKwWji7WqtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk YjhkOWM2MGYtZmJmMy00NzhkLWIwZDEtMGEzMmI0MTc5ZTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp11oWjIORgZtCQScTL8Psht5vWJ54FEjmrFd 2XzQgk10o9t7yXMZhGiwqpbvB6KXq8f7Sg0tEC9VjgMo6ApUcdzHmHReAQCEu6BD wb6vPOWXugxCOXKF7uwwc5wjug9qeyDzkMjQ6NWW5Dnyl7D3va4oiSBhZNUBmLrH 8fLO0Qwrphf+Tei8GmzHpgwAUsoqlNJHludNa4meFE6LwlHfMHTstEqjM5wdvQqI +EQGv8QaN7wo+S55AUOFx8pe4phyfPAc38lR6LgMgzhDf6gp8p0aX0RiiRG4fdNs 5CrbAFnjXIWnPnNeakHToCpFfkPjHAsbPJR6g1DRlQ0QLs/a5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGbtGyKI3ehJpOJVtqLDnkERNT7dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWE1ZWFjYzktNzBmYy0z ZTIyLWFlZjktNDdjOTJhNDI2YTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYsa8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENAlo/Ew1k3HiXTJsZCgD6T0B+H3xhHyWQ/+nGbeghRXc25uVhYJ+tG cGSLY299XcxlvRqtOXkU6qIGKqo1CYfiKN7tzwaM4ZKaCnLR9RDPF2GZi2xcd/w9 ON2nYPJTyoC2/ujMsG7MA6PZ4O9tNL3O9R8kWdqKkDK/3wxfijpXl9t4lDIRUBi3 uZ2qAKpT3ACJM6y0QX65WKjoGPfvWYudYG8GeIqTxibF64Ka/O6PsY1WNWwlYQpf pAlVzVB0Z5zZ8F8Nck3AQXfSwmsLVxo1SLZ2F0iEZvrSddjnK8MvcWgWhSW4/mPT 668Cz/QlMh/QCZ0Px4q2b58wMfAaAPI= -----END CERTIFICATE-----Generated at Fri Apr 17 12:08:20 2026 by rpki-client