$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02f320db-e7d7-3fd0-9de9-be08a72a64b1.roa File: 02f320db-e7d7-3fd0-9de9-be08a72a64b1.roa (raw, json) Hash identifier: F10lD1OvMCIdqCUYfXZm6D5aV7/Ij2H4YTHnHAxOfmY= Subject key identifier: 86:49:DE:47:8B:9C:AA:97:47:EA:D7:51:E8:96:87:38:3C:67:BA:75 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF697B65730523D328AEF80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02f320db-e7d7-3fd0-9de9-be08a72a64b1.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 98.52.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:97:b6:57:30:52:3d:32:8a:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=14c9096d-baf0-4f9c-9604-62b772fac2bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:6c:e4:02:7b:a2:ff:9b:5a:55:d9:e0:d6:f8: 1d:71:16:fb:83:99:11:df:b0:3a:c3:f9:2e:a3:e5: 96:2b:f1:e1:6f:b0:6b:9a:3a:a7:cc:fa:ae:4b:5e: b1:4d:ec:e5:47:0d:71:ca:1c:69:01:b5:27:52:12: a2:5d:f1:7b:21:e2:6e:39:15:d8:c3:85:6c:81:2c: 1d:ee:29:69:eb:43:df:09:fe:22:49:a7:18:62:2e: ac:3b:ae:c0:de:48:6c:c8:7f:dd:32:5e:43:c6:bc: 39:39:a1:4d:39:b0:d8:1c:50:93:16:ed:6d:eb:e3: 36:65:55:9b:70:80:5e:15:f2:07:ef:29:4a:65:65: a8:12:e9:04:19:00:d3:3e:52:a8:fe:73:77:74:8e: 88:a1:95:01:3f:28:e8:b6:f8:ea:b2:45:b3:be:58: 6f:33:b7:17:19:ec:7a:f1:37:eb:29:a8:67:3c:e6: c2:31:d3:4e:8e:65:51:f2:ed:e0:62:82:01:e8:13: 55:aa:7e:7f:03:de:9e:6b:7f:3b:9f:55:d1:1d:41: d8:b7:fd:7d:0b:e2:b0:4f:4c:86:75:8c:c5:7f:06: e5:7e:96:47:1c:b3:83:79:a2:6b:8b:6e:c9:61:cb: 3a:57:47:1b:1f:c2:6a:5c:ef:c0:18:ce:84:15:dc: 0f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:49:DE:47:8B:9C:AA:97:47:EA:D7:51:E8:96:87:38:3C:67:BA:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02f320db-e7d7-3fd0-9de9-be08a72a64b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.52.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:9e:f3:37:a3:3a:4d:d1:42:e6:06:99:e3:06:76:b6:ee:15: fe:89:db:d7:59:bf:c6:cf:5c:7d:23:ba:ba:a8:e5:86:ce:17: 96:d6:82:62:5f:be:59:d5:fe:0c:b4:77:12:98:96:85:99:88: 95:36:3c:6f:5e:0a:98:8d:a5:c1:5c:0c:2b:fe:ed:93:01:8a: dc:a2:8e:64:ba:d3:bf:09:ab:44:5b:4b:f4:50:23:22:cc:f9: 50:0e:c7:6d:bd:e2:15:5c:c1:3a:9f:f9:cd:ca:01:87:a7:b0: eb:97:9c:cb:32:f0:12:7a:09:fd:85:7a:26:88:8f:22:e2:53: bd:0d:8c:86:22:31:55:d9:ca:d6:31:38:be:52:56:74:5a:ce: 45:59:f6:4f:06:df:66:41:b6:48:3e:ec:eb:6b:1c:99:97:e6: 78:d6:88:da:f1:0d:f9:1c:85:58:ef:01:ad:0d:23:8d:eb:d3: 96:e2:94:a7:a4:c8:0d:35:a9:51:2c:83:21:72:11:3c:40:0b: c8:66:42:2b:f7:8e:f1:41:fa:e1:84:fb:15:b3:84:e8:fd:d5: e1:99:56:ee:5d:37:57:42:18:5f:1b:24:d0:85:60:51:43:89: ab:f7:d4:00:99:2d:41:19:d2:a0:1d:bd:ce:74:82:79:b8:3a: 37:bb:22:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9pe2VzBSPTKK74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MTRjOTA5NmQtYmFmMC00ZjljLTk2MDQtNjJiNzcyZmFjMmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmzkAnui/5taVdng1vgdcRb7g5kR37A6w/ku o+WWK/Hhb7BrmjqnzPquS16xTezlRw1xyhxpAbUnUhKiXfF7IeJuORXYw4VsgSwd 7ilp60PfCf4iSacYYi6sO67A3khsyH/dMl5Dxrw5OaFNObDYHFCTFu1t6+M2ZVWb cIBeFfIH7ylKZWWoEukEGQDTPlKo/nN3dI6IoZUBPyjotvjqskWzvlhvM7cXGex6 8TfrKahnPObCMdNOjmVR8u3gYoIB6BNVqn5/A96ea387n1XRHUHYt/19C+KwT0yG dYzFfwblfpZHHLODeaJri27JYcs6V0cbH8JqXO/AGM6EFdwPewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZJ3keLnKqXR+rXUeiWhzg8Z7p1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDJmMzIwZGItZTdkNy0z ZmQwLTlkZTktYmUwOGE3MmE2NGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYjTuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABye8zejOk3RQuYGmeMGdrbuFf6J29dZv8bPXH0jurqo5YbOF5bWgmJf vlnV/gy0dxKYloWZiJU2PG9eCpiNpcFcDCv+7ZMBityijmS6078Jq0RbS/RQIyLM +VAOx2294hVcwTqf+c3KAYensOuXnMsy8BJ6Cf2FeiaIjyLiU70NjIYiMVXZytYx OL5SVnRazkVZ9k8G32ZBtkg+7OtrHJmX5njWiNrxDfkchVjvAa0NI43r05bilKek yA01qVEsgyFyETxAC8hmQiv3jvFB+uGE+xWzhOj91eGZVu5dN1dCGF8bJNCFYFFD iav31ACZLUEZ0qAdvc50gnm4Oje7IpU= -----END CERTIFICATE-----Generated at Tue Apr 21 19:11:05 2026 by rpki-client