$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f33b7a2e-ed69-3b2b-907d-b6a58489de80.roa File: f33b7a2e-ed69-3b2b-907d-b6a58489de80.roa (raw, json) Hash identifier: rYGQz4p7ti8KBvBqEJ9jp8xHobZG+4eqjhBIo0xOfrc= Subject key identifier: 34:2C:1D:3A:E9:32:E6:1D:BB:61:3E:30:D8:44:77:1A:B5:45:9E:98 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE58A0AE12DE5ED5322567C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f33b7a2e-ed69-3b2b-907d-b6a58489de80.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 98.228.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:a0:ae:12:de:5e:d5:32:25:67:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=57624956-addb-453c-afff-35bc570e72f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:df:75:1f:c7:89:e7:3f:da:d9:cc:41:af:9b: e3:f8:cb:76:0b:55:43:95:70:14:4e:9c:77:d0:dc: 24:8a:c4:3d:34:5e:e8:af:41:84:f3:b1:5d:23:cf: c0:39:d7:8f:f7:ba:2a:f1:6a:e5:31:e6:aa:90:13: bb:2c:ae:c8:08:7d:64:0a:d1:76:b8:4a:90:93:f0: 7b:f3:d8:b4:df:be:03:7b:ff:3a:13:23:6a:f9:d9: f6:a3:59:59:08:2d:1a:79:92:97:cd:4f:c8:3e:47: 83:92:82:45:e2:c5:59:75:e6:57:05:84:fc:47:d7: 1c:f5:8a:0e:2a:73:a5:96:4e:00:01:d5:a5:91:b2: 47:fc:d2:6b:71:dd:ea:9d:98:96:04:0f:57:e9:b0: 13:cc:06:e0:a7:49:5d:85:03:da:dd:89:64:4b:94: 4d:57:c6:19:73:2b:92:41:8b:03:19:10:d6:b9:84: e7:de:89:66:ca:2a:77:f7:92:d4:ec:9e:07:7c:ef: 55:2a:1a:5c:54:09:4e:7d:6a:6d:3f:cf:54:e1:4b: e2:54:8a:32:6c:d5:76:5c:6b:fd:1b:84:ec:1f:9b: 79:3f:6f:04:62:76:10:29:fa:bd:87:3d:37:b4:cd: 5a:cb:fe:d0:55:67:96:56:17:54:bc:ad:f3:f4:f5: d5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:2C:1D:3A:E9:32:E6:1D:BB:61:3E:30:D8:44:77:1A:B5:45:9E:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f33b7a2e-ed69-3b2b-907d-b6a58489de80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.228.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:f1:bf:c5:45:57:ce:8b:2c:26:a9:f7:9f:2f:b2:3b:a2:1c: 62:7f:c0:41:b6:f0:a3:59:3a:86:98:27:f6:96:0d:c1:cd:62: 2f:b5:ee:74:06:30:ad:d8:ca:89:b6:d1:73:29:ab:b6:a9:c1: 73:19:e6:82:20:32:57:58:f0:de:e3:47:f1:fb:35:76:e9:07: b7:d4:79:9d:f5:4e:a3:c2:67:14:a4:47:4d:31:64:bd:a3:69: 33:e8:6e:df:5c:93:b2:53:e0:35:03:e0:f3:05:11:f8:e8:87: 9f:e1:a4:25:c1:0e:e5:28:aa:dc:29:eb:85:ad:d1:f0:fe:5d: 11:8a:1d:12:86:fe:9c:fb:be:52:2b:72:5e:c3:2f:87:93:7b: 0a:b3:58:f4:7e:90:13:5f:31:d8:0d:3f:5f:70:a1:01:27:fa: da:fa:1c:0a:b1:76:24:c6:f9:1a:64:44:ee:df:cc:15:54:2b: 31:ef:17:d5:3e:1d:2b:f1:49:ed:44:2e:34:6c:65:86:2a:1c: 71:b6:46:e7:37:e6:04:76:59:a7:25:ea:85:fd:f6:26:4f:a3: 43:76:d6:b0:ca:d6:7b:8b:a4:12:04:f7:15:53:e7:71:32:85: 82:3f:94:72:51:7f:0e:b3:da:8f:4f:1b:18:4a:cf:d6:1d:30: 28:5f:9a:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWKCuEt5e1TIlZ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NTc2MjQ5NTYtYWRkYi00NTNjLWFmZmYtMzViYzU3MGU3MmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjt91H8eJ5z/a2cxBr5vj+Mt2C1VDlXAUTpx3 0NwkisQ9NF7or0GE87FdI8/AOdeP97oq8WrlMeaqkBO7LK7ICH1kCtF2uEqQk/B7 89i0374De/86EyNq+dn2o1lZCC0aeZKXzU/IPkeDkoJF4sVZdeZXBYT8R9cc9YoO KnOllk4AAdWlkbJH/NJrcd3qnZiWBA9X6bATzAbgp0ldhQPa3YlkS5RNV8YZcyuS QYsDGRDWuYTn3olmyip395LU7J4HfO9VKhpcVAlOfWptP89U4UviVIoybNV2XGv9 G4TsH5t5P28EYnYQKfq9hz03tM1ay/7QVWeWVhdUvK3z9PXVLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQsHTrpMuYdu2E+MNhEdxq1RZ6YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjMzYjdhMmUtZWQ2OS0z YjJiLTkwN2QtYjZhNTg0ODlkZTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYuQcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJzxv8VFV86LLCap958vsjuiHGJ/wEG28KNZOoaYJ/aWDcHNYi+17nQG MK3Yyom20XMpq7apwXMZ5oIgMldY8N7jR/H7NXbpB7fUeZ31TqPCZxSkR00xZL2j aTPobt9ck7JT4DUD4PMFEfjoh5/hpCXBDuUoqtwp64Wt0fD+XRGKHRKG/pz7vlIr cl7DL4eTewqzWPR+kBNfMdgNP19woQEn+tr6HAqxdiTG+RpkRO7fzBVUKzHvF9U+ HSvxSe1ELjRsZYYqHHG2Ruc35gR2Wacl6oX99iZPo0N21rDK1nuLpBIE9xVT53Ey hYI/lHJRfw6z2o9PGxhKz9YdMChfmnQ= -----END CERTIFICATE-----Generated at Sun Mar 1 18:34:39 2026 by rpki-client