$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3bbc53e9-38be-3670-a665-1175f248aad2.roa File: 3bbc53e9-38be-3670-a665-1175f248aad2.roa (raw, json) Hash identifier: uB0gTaJunSHCn9tbP7N5aC8HA9sf5QEyF+IUvJRFMAk= Subject key identifier: 41:76:0A:0E:72:11:C3:39:A7:77:A3:A1:2C:50:67:74:56:CC:86:3C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF68AFBBBD3A90A22FBD9C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3bbc53e9-38be-3670-a665-1175f248aad2.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 98.226.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:8a:fb:bb:d3:a9:0a:22:fb:d9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=2d23b453-0873-463a-bfd7-8b27e2d7f9f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d6:74:e2:e4:21:b6:a2:df:b6:2c:ad:ba:d2: e9:33:c5:2f:7b:9e:f1:76:ca:25:30:ea:c0:3e:36: 1e:5c:d1:85:38:b1:fd:07:59:bb:af:d8:ac:1d:6b: 8d:e9:81:5f:63:f6:b6:b9:82:a2:47:ce:8c:54:dd: e6:df:f7:44:7f:c8:56:f9:f2:ee:ae:25:87:c7:b7: 7c:4e:9e:fd:25:b8:20:a3:57:0d:86:00:9f:10:c8: e0:11:59:f3:64:d5:3e:fb:78:fe:e8:47:c9:91:a2: b3:69:c8:60:b0:dd:79:7c:fd:e7:65:e5:4b:7f:7a: 47:cf:4f:b7:dc:61:94:f7:5d:6e:80:9f:36:1e:1e: bf:ad:64:10:be:02:92:e5:98:2c:89:dd:bd:c7:ad: 30:7d:a2:36:df:b5:97:69:fc:cb:d0:4a:da:ae:6e: 62:8a:e0:28:91:fa:30:82:7d:72:c1:47:b7:b1:e8: d1:22:5d:ec:ac:99:31:8d:06:ef:96:22:2f:56:80: 6f:94:4d:a3:78:ca:a0:7f:71:e1:b2:b2:a8:4e:5c: 24:c5:ee:9a:84:b4:a6:76:85:f8:94:b2:58:fe:6d: a2:ad:17:fa:18:2c:ba:0b:99:2b:78:25:e7:f7:11: 6d:fb:d1:38:ea:fa:a6:61:b2:9f:b2:92:5e:96:53: 6f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:76:0A:0E:72:11:C3:39:A7:77:A3:A1:2C:50:67:74:56:CC:86:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3bbc53e9-38be-3670-a665-1175f248aad2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.226.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:bd:71:c9:b8:04:78:2d:3f:52:86:25:e2:99:77:73:e8:c0: 21:58:b0:7d:ef:94:5e:01:79:11:c4:4b:50:92:61:b8:ac:c7: 4d:7c:af:57:9d:1f:8b:83:4b:84:d5:af:a0:80:c5:26:16:c5: c7:8d:42:1b:ca:92:6b:7d:1d:08:f2:13:17:ab:50:99:09:2c: 3e:94:7a:59:92:98:3f:d7:39:6c:fd:db:14:a6:cf:fa:3b:66: ee:f2:7e:ed:5e:14:85:a3:16:6d:de:88:d4:f9:54:9b:64:6c: 3f:32:a0:da:90:2b:ba:c5:06:8e:52:e4:89:61:5c:d4:ca:96: aa:6f:9b:d4:d2:31:c3:68:76:61:42:dc:6f:52:ff:d1:82:d1: 27:f5:76:37:7a:50:90:b4:dc:44:df:61:9b:64:c8:15:6b:3d: 3e:bc:70:d1:ea:aa:a0:ef:83:7b:46:b8:07:cf:26:15:b0:6c: fc:8b:27:3e:84:15:6a:09:da:29:d5:7b:21:ca:c4:32:59:5b: ea:78:e0:85:cd:33:bb:e2:46:8f:13:82:c2:83:b0:ff:ca:92: dc:0e:e1:04:9c:bd:f4:bf:d3:95:79:f3:0d:07:8e:45:84:53: 2b:6c:d9:72:3e:72:d2:77:ae:af:c1:85:a2:18:00:33:47:0a: 6b:dc:e1:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9or7u9OpCiL72cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MmQyM2I0NTMtMDg3My00NjNhLWJmZDctOGIyN2UyZDdmOWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdZ04uQhtqLftiytutLpM8Uve57xdsolMOrA PjYeXNGFOLH9B1m7r9isHWuN6YFfY/a2uYKiR86MVN3m3/dEf8hW+fLuriWHx7d8 Tp79Jbggo1cNhgCfEMjgEVnzZNU++3j+6EfJkaKzachgsN15fP3nZeVLf3pHz0+3 3GGU911ugJ82Hh6/rWQQvgKS5Zgsid29x60wfaI237WXafzL0Erarm5iiuAokfow gn1ywUe3sejRIl3srJkxjQbvliIvVoBvlE2jeMqgf3HhsrKoTlwkxe6ahLSmdoX4 lLJY/m2irRf6GCy6C5kreCXn9xFt+9E46vqmYbKfspJellNvEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEF2Cg5yEcM5p3ejoSxQZ3RWzIY8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2JiYzUzZTktMzhiZS0z NjcwLWE2NjUtMTE3NWYyNDhhYWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYuKsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEa9ccm4BHgtP1KGJeKZd3PowCFYsH3vlF4BeRHES1CSYbisx018r1ed H4uDS4TVr6CAxSYWxceNQhvKkmt9HQjyExerUJkJLD6UelmSmD/XOWz92xSmz/o7 Zu7yfu1eFIWjFm3eiNT5VJtkbD8yoNqQK7rFBo5S5IlhXNTKlqpvm9TSMcNodmFC 3G9S/9GC0Sf1djd6UJC03ETfYZtkyBVrPT68cNHqqqDvg3tGuAfPJhWwbPyLJz6E FWoJ2inVeyHKxDJZW+p44IXNM7viRo8TgsKDsP/KktwO4QScvfS/05V58w0HjkWE Uyts2XI+ctJ3rq/BhaIYADNHCmvc4Wc= -----END CERTIFICATE-----Generated at Tue Apr 21 19:26:51 2026 by rpki-client