$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4c2bfa4-023e-3f79-862e-860d38a91f2a.roa File: b4c2bfa4-023e-3f79-862e-860d38a91f2a.roa (raw, json) Hash identifier: cduyA224zoH0aYjLqFK/aAX8Em5l16u8ratv2vSNUo0= Subject key identifier: 9C:4B:1C:A1:F7:93:7C:5A:C6:17:2A:B2:29:78:86:DD:D3:02:A6:D5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D5243843C198EE362D5A3F8B0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4c2bfa4-023e-3f79-862e-860d38a91f2a.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 22258 IP address blocks: 98.239.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:84:3c:19:8e:e3:62:d5:a3:f8:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=45d53fca-4f85-42a0-ac78-2c3e5cd6a5ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:bf:49:7d:05:de:1b:c4:1f:1f:4c:32:c8:53: b8:38:a5:24:da:5d:50:ed:39:04:5c:e8:96:62:8a: 01:46:3b:56:7b:c9:3d:c1:ce:08:84:4f:17:c5:d6: ae:82:5c:44:b0:da:44:25:8b:0e:d3:44:55:0b:48: d3:ea:39:8c:ca:f6:a6:27:ed:70:dc:4e:3a:28:46: 7a:e6:72:99:8d:f5:fa:b5:90:f5:a6:ca:0e:c3:cd: 81:ad:a3:db:b4:97:4a:2c:db:d0:7d:f0:fd:b7:2d: 5c:19:0f:d9:ca:14:f1:79:92:a0:1f:f3:95:f5:92: 95:39:46:3a:da:77:ae:dd:54:15:aa:f1:45:51:1f: 20:9c:f2:05:55:3c:d9:4b:87:af:b3:0c:7c:4b:4d: 46:7f:da:c7:23:8c:5d:5b:fb:23:b7:0a:57:c2:a4: 80:f0:aa:8b:27:d5:6c:6d:a9:e4:18:1b:98:35:95: 2a:ef:0c:ad:fb:f0:65:b0:a1:f8:67:cf:c3:73:ab: 20:64:07:c8:67:3b:d4:7b:c0:ed:b6:a3:e3:d3:12: 39:15:39:01:0d:28:38:f8:b4:8b:7c:3a:c6:e8:c1: ef:88:6d:48:96:11:a1:50:a1:6c:07:1d:ce:72:74: 65:07:f4:85:c4:f5:04:1a:e5:8d:cd:80:f1:80:10: ed:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:4B:1C:A1:F7:93:7C:5A:C6:17:2A:B2:29:78:86:DD:D3:02:A6:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4c2bfa4-023e-3f79-862e-860d38a91f2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.239.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:a9:0e:19:f8:e4:cf:bc:8f:b8:b4:0c:23:42:da:e6:cd:b2: 78:6c:dc:7b:23:c2:59:5b:4e:a9:47:7e:77:04:bb:26:78:76: 3a:fa:7c:b7:d1:77:ae:b8:95:6c:15:fa:e2:75:50:1b:6d:9d: 44:78:e1:8a:d8:fa:98:1f:15:7c:d2:d6:a1:93:51:e7:1b:23: aa:00:a2:fe:18:60:28:2b:a2:e3:8c:13:03:c5:56:8c:f8:af: c1:25:2d:72:3f:7b:f9:9d:94:ea:e3:0b:ee:4f:0f:da:d4:7b: d6:80:3f:f9:28:56:87:67:53:20:9f:1f:d6:ae:c5:06:a9:5f: 9d:7d:b1:10:1f:02:d7:ca:cd:a6:f4:2b:4d:c6:08:66:fe:2a: 82:56:53:27:ed:9b:47:9d:da:bb:d5:a7:63:26:21:48:58:c1: 5a:6e:c1:41:fe:a7:6d:3c:85:13:55:88:ee:e4:44:ed:b8:6e: 10:84:c9:65:7b:ae:a8:58:d9:02:68:6b:55:88:7e:9a:25:7c: 32:7f:c9:a7:7c:59:ae:50:10:1d:20:9f:f0:d5:c3:a3:e1:78: 23:47:a9:77:14:2b:ba:64:f3:3e:7a:24:90:6c:a4:c0:2d:56: 5b:8a:a5:d2:8c:c0:ca:cb:8a:d7:7f:3b:f9:33:ad:97:54:4f: a1:f1:68:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ4Q8GY7jYtWj+LAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk NDVkNTNmY2EtNGY4NS00MmEwLWFjNzgtMmMzZTVjZDZhNWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhL9JfQXeG8QfH0wyyFO4OKUk2l1Q7TkEXOiW YooBRjtWe8k9wc4IhE8XxdauglxEsNpEJYsO00RVC0jT6jmMyvamJ+1w3E46KEZ6 5nKZjfX6tZD1psoOw82BraPbtJdKLNvQffD9ty1cGQ/ZyhTxeZKgH/OV9ZKVOUY6 2neu3VQVqvFFUR8gnPIFVTzZS4evswx8S01Gf9rHI4xdW/sjtwpXwqSA8KqLJ9Vs bankGBuYNZUq7wyt+/BlsKH4Z8/Dc6sgZAfIZzvUe8DttqPj0xI5FTkBDSg4+LSL fDrG6MHviG1IlhGhUKFsBx3OcnRlB/SFxPUEGuWNzYDxgBDtowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJxLHKH3k3xaxhcqsil4ht3TAqbVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjRjMmJmYTQtMDIzZS0z Zjc5LTg2MmUtODYwZDM4YTkxZjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYu8CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGpDhn45M+8j7i0DCNC2ubNsnhs3HsjwllbTqlHfncEuyZ4djr6fLfR d664lWwV+uJ1UBttnUR44YrY+pgfFXzS1qGTUecbI6oAov4YYCgrouOMEwPFVoz4 r8ElLXI/e/mdlOrjC+5PD9rUe9aAP/koVodnUyCfH9auxQapX519sRAfAtfKzab0 K03GCGb+KoJWUyftm0ed2rvVp2MmIUhYwVpuwUH+p208hRNViO7kRO24bhCEyWV7 rqhY2QJoa1WIfpolfDJ/yad8Wa5QEB0gn/DVw6PheCNHqXcUK7pk8z56JJBspMAt VluKpdKMwMrLitd/O/kzrZdUT6HxaOg= -----END CERTIFICATE-----Generated at Fri Apr 17 11:58:12 2026 by rpki-client