$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e423e2b-0389-3c0e-8b5e-f8229ed03e49.roa File: 3e423e2b-0389-3c0e-8b5e-f8229ed03e49.roa (raw, json) Hash identifier: q2pIGY/2Fgjdhy6pqgHgBoRc0EVynPzCQ2YovB/dnfc= Subject key identifier: FE:F3:A4:2E:80:9F:48:EF:27:D4:F8:D6:3B:1E:46:26:D9:39:CF:D5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF6E5FC01D085CC4A0A4D80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e423e2b-0389-3c0e-8b5e-f8229ed03e49.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33651 IP address blocks: 98.234.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:e5:fc:01:d0:85:cc:4a:0a:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=5de38312-35c2-413f-9b5e-ac96e8e17204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f0:30:3e:a1:66:ce:88:e9:35:08:2b:57:63: 7f:af:6c:45:32:55:c2:20:ba:3c:9e:d4:34:87:d3: c0:1b:e5:e7:a8:38:c0:97:32:de:bc:5b:64:2f:49: af:80:61:78:17:b2:c9:88:cb:1c:a3:7a:af:9c:0a: 78:a4:56:ce:13:66:98:a4:f0:f2:2e:11:7a:3b:d9: f2:a5:6f:9a:62:54:42:a2:ba:b7:ce:5d:a6:3c:bf: 23:1e:4e:4b:c2:bc:fa:b3:46:9d:24:84:4d:a8:e6: 91:81:46:a8:9f:1c:41:c7:bf:ee:82:59:ed:82:a9: bc:f9:81:98:2a:d4:10:e0:48:d8:2f:19:76:13:46: 88:43:96:16:90:64:03:66:66:46:86:c3:bb:08:f2: ab:56:34:7a:a6:d1:dd:60:4a:31:cb:4b:33:f0:cc: b5:2d:5c:80:ea:78:a0:09:c5:11:76:5a:1c:af:58: 4a:4a:2b:01:a0:40:4b:6d:ca:df:bc:bd:3b:9f:eb: 14:1e:50:d1:82:8c:64:95:5a:79:5d:bc:43:84:48: 38:61:03:de:1c:4c:0a:67:f6:06:18:fb:8c:0a:68: b4:73:13:ff:79:2b:42:19:76:ef:79:fa:e4:18:93: b3:22:d9:72:9e:cc:04:e1:d9:55:42:f2:89:74:1e: bd:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F3:A4:2E:80:9F:48:EF:27:D4:F8:D6:3B:1E:46:26:D9:39:CF:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e423e2b-0389-3c0e-8b5e-f8229ed03e49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.234.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:0b:a6:69:90:d1:20:ab:bf:d5:ba:7c:96:81:c7:b9:ab:1f: 02:36:e0:af:5e:c8:d3:a4:01:bf:63:29:2e:3c:81:e2:a7:3f: 26:c1:57:6a:81:9a:66:99:fb:93:61:85:83:8b:d8:bd:48:ef: e0:27:e3:27:c6:2a:e7:7e:e2:88:91:7b:88:1d:f5:80:ce:2b: a2:63:9b:73:45:7d:bf:44:e8:e0:27:a8:73:3a:ef:5e:2e:9d: 39:bc:0e:5d:53:da:a4:37:4e:06:14:c4:74:80:d0:75:16:a0: cb:89:f6:e6:8d:69:c3:49:65:41:81:5f:9d:17:8b:e9:3d:40: a9:83:0a:c6:28:ef:72:78:27:cf:e7:c8:87:d8:81:e9:10:3f: 5d:4a:d0:f6:1e:fb:37:0b:5d:5d:15:f8:9d:69:f8:7f:94:45: 83:92:76:35:3e:0b:3f:9a:c1:8d:12:42:b8:82:f4:35:0c:d1: 68:30:d2:8d:bf:a7:70:0f:83:d9:1b:02:c2:65:05:e8:22:22: cb:a1:d2:e9:2e:7c:fe:1f:7b:73:67:51:df:f7:22:44:d8:9c: 4c:e0:7c:52:5d:32:7f:93:8e:c3:e0:95:06:37:0e:97:bd:1a: e0:36:f9:f7:01:ef:c0:5f:e5:f7:5a:01:10:f1:23:b0:66:a6: 42:30:8f:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9uX8AdCFzEoKTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NWRlMzgzMTItMzVjMi00MTNmLTliNWUtYWM5NmU4ZTE3MjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfAwPqFmzojpNQgrV2N/r2xFMlXCILo8ntQ0 h9PAG+XnqDjAlzLevFtkL0mvgGF4F7LJiMsco3qvnAp4pFbOE2aYpPDyLhF6O9ny pW+aYlRCorq3zl2mPL8jHk5Lwrz6s0adJIRNqOaRgUaonxxBx7/uglntgqm8+YGY KtQQ4EjYLxl2E0aIQ5YWkGQDZmZGhsO7CPKrVjR6ptHdYEoxy0sz8My1LVyA6nig CcURdlocr1hKSisBoEBLbcrfvL07n+sUHlDRgoxklVp5XbxDhEg4YQPeHEwKZ/YG GPuMCmi0cxP/eStCGXbvefrkGJOzItlynswE4dlVQvKJdB69ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP7zpC6An0jvJ9T41jseRibZOc/VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2U0MjNlMmItMDM4OS0z YzBlLThiNWUtZjgyMjllZDAzZTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYuocMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEELpmmQ0SCrv9W6fJaBx7mrHwI24K9eyNOkAb9jKS48geKnPybBV2qB mmaZ+5NhhYOL2L1I7+An4yfGKud+4oiRe4gd9YDOK6Jjm3NFfb9E6OAnqHM6714u nTm8Dl1T2qQ3TgYUxHSA0HUWoMuJ9uaNacNJZUGBX50Xi+k9QKmDCsYo73J4J8/n yIfYgekQP11K0PYe+zcLXV0V+J1p+H+URYOSdjU+Cz+awY0SQriC9DUM0Wgw0o2/ p3APg9kbAsJlBegiIsuh0ukufP4fe3NnUd/3IkTYnEzgfFJdMn+TjsPglQY3Dpe9 GuA2+fcB78Bf5fdaARDxI7BmpkIwj4k= -----END CERTIFICATE-----Generated at Tue Apr 21 23:00:48 2026 by rpki-client