$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7a5a744-1d16-3c31-8e98-9c9952e2a7f2.roa File: b7a5a744-1d16-3c31-8e98-9c9952e2a7f2.roa (raw, json) Hash identifier: nKAuQF32E6bBWwhCHFCYqPjfcPDZBhUf8yTA+qV+IWY= Subject key identifier: AE:BC:11:17:0E:6A:D0:66:A9:24:54:C4:42:4E:87:4A:7D:1E:A8:30 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8100A58C602FDFABAEDF9D80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7a5a744-1d16-3c31-8e98-9c9952e2a7f2.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 33659 IP address blocks: 98.221.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:81:00:a5:8c:60:2f:df:ab:ae:df:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=11ff42a3-03c4-44ad-9ac9-bd54bd81c3a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:53:13:54:a3:33:78:10:fe:97:41:bc:14:03: 69:a1:32:b0:5b:20:49:42:ab:96:75:37:ba:f0:58: 2b:98:2b:85:01:e7:2f:df:cb:d9:af:bf:be:c7:58: 52:44:60:07:74:af:c4:8a:f9:bd:f3:2d:2f:bf:25: eb:8a:40:7b:99:d5:7f:72:0a:2c:71:92:64:2c:b7: 99:9f:19:7a:c3:d0:6a:8b:ab:ed:3d:4e:21:44:2d: fc:63:fe:e4:5a:72:b8:33:05:85:e1:57:7c:e0:8e: a6:8b:19:3e:ad:79:32:68:e0:f7:5c:a9:48:1c:be: 9f:32:d6:a3:93:48:86:7c:d9:1a:01:d8:30:ec:1e: 29:b4:81:9f:19:6a:f4:af:a6:78:31:af:82:a6:57: 2d:55:8c:60:a4:3e:a2:57:a5:a8:63:a0:e3:8c:85: 0c:87:ae:2a:74:ca:86:99:3f:71:e8:72:0f:0b:f4: e3:61:1b:d8:9e:49:19:1a:0c:bd:40:4a:44:2d:d6: 03:3c:d1:fa:d9:63:2d:e9:15:17:bd:07:0e:1d:a3: 56:dc:d1:15:16:3e:b0:c2:cb:84:ca:d3:e9:6c:41: 29:a3:d5:76:89:63:e5:ee:a5:3d:42:28:41:45:7e: 07:07:5c:9b:7e:b1:99:6b:b4:d6:f4:af:01:60:34: be:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:BC:11:17:0E:6A:D0:66:A9:24:54:C4:42:4E:87:4A:7D:1E:A8:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7a5a744-1d16-3c31-8e98-9c9952e2a7f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.221.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:7f:40:96:bb:a0:63:38:af:f4:f1:d7:09:ab:86:b5:97:6f: 35:76:36:7a:bc:15:39:3d:d8:e3:28:d4:88:b5:2e:cb:ae:e1: 59:e1:2a:0e:ac:a7:d0:a0:39:7e:70:87:1c:47:33:3e:e1:54: e9:0e:02:83:21:6a:7f:14:5b:8c:f2:16:10:5d:3a:7e:ce:c2: 8d:27:a0:4c:bf:5f:2e:65:86:be:5f:31:77:ed:fa:12:4f:82: 01:0d:ab:f6:4f:34:86:fd:9a:6f:48:06:46:b4:a5:de:d4:81: 6d:bf:cc:55:1c:54:44:e7:17:29:88:a2:59:c1:c9:ae:7b:b0: ab:27:c3:47:30:8f:f1:bc:52:bf:94:3f:a3:65:19:54:12:07: d8:9a:ef:87:bb:60:ba:39:68:b8:aa:12:7b:fb:ca:9d:f6:71: be:b3:f3:74:01:f6:fd:24:17:2f:9b:05:ed:33:6b:44:1a:92: b5:fc:e9:74:b2:6e:87:63:20:7a:32:2c:1f:c2:fc:34:10:d8: 68:63:75:48:48:83:b1:a9:24:2d:0a:80:86:1a:dd:30:e2:16: 0c:28:36:78:24:4b:d5:5a:13:c1:07:14:c1:10:f4:00:f9:ad: b8:81:7e:7d:25:b8:86:85:d0:eb:5e:c2:c1:96:5b:30:a1:73: 0b:7b:0c:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2BAKWMYC/fq67fnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk MTFmZjQyYTMtMDNjNC00NGFkLTlhYzktYmQ1NGJkODFjM2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lMTVKMzeBD+l0G8FANpoTKwWyBJQquWdTe6 8FgrmCuFAecv38vZr7++x1hSRGAHdK/Eivm98y0vvyXrikB7mdV/cgoscZJkLLeZ nxl6w9Bqi6vtPU4hRC38Y/7kWnK4MwWF4Vd84I6mixk+rXkyaOD3XKlIHL6fMtaj k0iGfNkaAdgw7B4ptIGfGWr0r6Z4Ma+CplctVYxgpD6iV6WoY6DjjIUMh64qdMqG mT9x6HIPC/TjYRvYnkkZGgy9QEpELdYDPNH62WMt6RUXvQcOHaNW3NEVFj6wwsuE ytPpbEEpo9V2iWPl7qU9QihBRX4HB1ybfrGZa7TW9K8BYDS+UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK68ERcOatBmqSRUxEJOh0p9HqgwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjdhNWE3NDQtMWQxNi0z YzMxLThlOTgtOWM5OTUyZTJhN2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYt1sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAId/QJa7oGM4r/Tx1wmrhrWXbzV2Nnq8FTk92OMo1Ii1Lsuu4VnhKg6s p9CgOX5whxxHMz7hVOkOAoMhan8UW4zyFhBdOn7Owo0noEy/Xy5lhr5fMXft+hJP ggENq/ZPNIb9mm9IBka0pd7UgW2/zFUcVETnFymIolnBya57sKsnw0cwj/G8Ur+U P6NlGVQSB9ia74e7YLo5aLiqEnv7yp32cb6z83QB9v0kFy+bBe0za0QakrX86XSy bodjIHoyLB/C/DQQ2GhjdUhIg7GpJC0KgIYa3TDiFgwoNngkS9VaE8EHFMEQ9AD5 rbiBfn0luIaF0OtewsGWWzChcwt7DAQ= -----END CERTIFICATE-----Generated at Fri Apr 17 12:59:30 2026 by rpki-client