$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/44c76717-7c6a-3e7b-89d8-f788617ffd17.roa File: 44c76717-7c6a-3e7b-89d8-f788617ffd17.roa (raw, json) Hash identifier: ANJ1m6FCT1x4jHf2x07xTQf/q3cCnzTsdmqI+B4GBHs= Subject key identifier: 87:CB:28:2F:02:1B:92:91:08:15:F3:08:CD:55:27:6F:F1:4F:77:97 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF7067EDC998E938B8D1540 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/44c76717-7c6a-3e7b-89d8-f788617ffd17.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33660 IP address blocks: 98.33.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f7:06:7e:dc:99:8e:93:8b:8d:15:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=3f158227-ee15-414e-9d49-d0fe78569a25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:53:e2:4f:59:9c:c7:83:37:c1:aa:9a:a9:e8: 56:a3:e6:64:f8:0f:61:82:e0:14:38:b3:d2:1d:a1: c2:33:98:77:f1:aa:b1:4e:8a:4e:ed:7a:37:4a:48: 70:ff:fd:33:b4:b5:74:93:d2:63:42:67:73:53:01: b8:66:4e:f7:5b:75:8d:9e:fb:13:86:f2:04:a4:f0: 1e:b7:95:88:91:56:de:d5:04:d7:ad:df:f2:a2:4a: 66:7c:30:1b:f5:9e:36:14:c5:d4:d8:d0:76:3f:44: 51:dc:9d:c2:bf:a6:e9:85:e4:2c:55:ac:04:dc:6f: bc:b8:c9:25:09:5a:cf:ad:0d:ce:80:0d:1a:8f:d7: 4c:d5:14:f9:e2:bc:d6:79:90:de:bd:62:2f:44:28: 48:6f:d0:9d:24:35:89:f4:46:ac:d8:78:06:29:a5: 19:80:eb:1b:2c:64:70:81:be:4e:b3:ea:87:e9:b8: b8:da:af:ff:3f:07:e6:0c:6e:e3:c7:a1:6c:88:75: ff:d0:f0:81:c1:20:95:5a:22:5a:c4:70:d9:c2:fe: c8:7a:4a:7b:d7:6d:fa:f0:d8:11:cc:d0:a9:9a:b7: 28:a8:ed:c3:de:38:18:5c:94:0a:1a:08:61:22:96: 71:ec:74:ae:b2:13:cc:af:8a:6c:c4:2c:27:58:78: 1b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:CB:28:2F:02:1B:92:91:08:15:F3:08:CD:55:27:6F:F1:4F:77:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/44c76717-7c6a-3e7b-89d8-f788617ffd17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.33.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:49:c8:d0:70:2e:02:69:f6:fb:60:47:2a:e4:48:1d:dc:8e: ce:50:34:f2:52:50:a5:3a:2b:68:7d:d2:48:c5:80:4b:0f:a3: b2:59:d6:d3:b1:bd:8a:ee:5d:0c:1a:31:33:cd:9b:92:f6:38: 81:ea:19:9b:c1:f8:86:30:dd:7b:e0:08:c0:70:c2:02:28:80: b9:fc:24:42:db:cb:9c:ca:4c:86:8e:8e:b4:e2:d4:ae:ee:ca: 15:c8:f0:fb:89:ff:1b:c6:56:bf:7d:04:dc:39:f6:57:a5:b6: 91:e4:20:ac:83:8a:a2:4a:07:00:57:c1:43:3e:a1:99:a8:10: df:3e:eb:28:d8:1d:0a:a7:eb:d9:27:4e:73:26:a1:26:eb:7b: 70:f7:c9:f5:b7:83:20:cd:77:bf:a5:0a:cb:bc:6b:1f:bd:c8: d8:61:f5:3f:ad:ed:8e:67:81:2d:cc:61:f2:7d:a6:c8:c8:56: 16:59:5f:b9:ea:b1:e1:1e:f4:46:68:59:50:c7:ab:dd:91:15: a6:bb:91:85:2e:26:82:4b:db:3a:51:95:16:cc:be:fb:bf:d7: 20:16:9c:3d:fa:f9:90:4e:d0:56:c7:73:da:04:7d:e9:62:b2: 73:90:e9:10:68:df:04:93:f4:c4:78:e0:86:cd:e7:4a:57:ff: e0:d5:4c:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9wZ+3JmOk4uNFUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk M2YxNTgyMjctZWUxNS00MTRlLTlkNDktZDBmZTc4NTY5YTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVPiT1mcx4M3waqaqehWo+Zk+A9hguAUOLPS HaHCM5h38aqxTopO7Xo3Skhw//0ztLV0k9JjQmdzUwG4Zk73W3WNnvsThvIEpPAe t5WIkVbe1QTXrd/yokpmfDAb9Z42FMXU2NB2P0RR3J3Cv6bpheQsVawE3G+8uMkl CVrPrQ3OgA0aj9dM1RT54rzWeZDevWIvRChIb9CdJDWJ9Eas2HgGKaUZgOsbLGRw gb5Os+qH6bi42q//PwfmDG7jx6FsiHX/0PCBwSCVWiJaxHDZwv7Iekp712368NgR zNCpmrcoqO3D3jgYXJQKGghhIpZx7HSushPMr4psxCwnWHgbRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIfLKC8CG5KRCBXzCM1VJ2/xT3eXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDRjNzY3MTctN2M2YS0z ZTdiLTg5ZDgtZjc4ODYxN2ZmZDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYiHcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhJyNBwLgJp9vtgRyrkSB3cjs5QNPJSUKU6K2h90kjFgEsPo7JZ1tOx vYruXQwaMTPNm5L2OIHqGZvB+IYw3XvgCMBwwgIogLn8JELby5zKTIaOjrTi1K7u yhXI8PuJ/xvGVr99BNw59leltpHkIKyDiqJKBwBXwUM+oZmoEN8+6yjYHQqn69kn TnMmoSbre3D3yfW3gyDNd7+lCsu8ax+9yNhh9T+t7Y5ngS3MYfJ9psjIVhZZX7nq seEe9EZoWVDHq92RFaa7kYUuJoJL2zpRlRbMvvu/1yAWnD36+ZBO0FbHc9oEfeli snOQ6RBo3wST9MR44IbN50pX/+DVTLc= -----END CERTIFICATE-----Generated at Tue Apr 21 20:53:09 2026 by rpki-client