$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60eca484-2a95-33c1-a8f7-2352aa1c3361.roa File: 60eca484-2a95-33c1-a8f7-2352aa1c3361.roa (raw, json) Hash identifier: j8Be/alRLSKsWbIYpkErNk0zaybiUp21p2iryCPXKhw= Subject key identifier: 34:61:D9:FA:C3:1C:39:D6:23:4B:70:FD:14:BF:3C:AB:AC:F0:8C:31 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF6902CFADBC1EE4D89DA40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60eca484-2a95-33c1-a8f7-2352aa1c3361.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 98.228.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:90:2c:fa:db:c1:ee:4d:89:da:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=4f22712a-bf5b-4801-a539-f0323526e359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:83:e6:8a:8f:aa:97:b2:31:e9:0c:71:7d:f1: c0:9b:c4:2c:a7:fe:14:b4:60:f8:e1:2e:e1:cb:cf: 50:23:0b:17:3a:60:f7:4f:bc:51:b9:73:5d:e2:61: 9e:2c:cc:e1:14:1a:43:98:78:2b:88:38:28:ec:e1: 82:b6:de:51:76:bc:cb:3d:dc:c6:2b:2f:5f:87:71: 58:90:e1:fa:cb:7e:93:e1:7d:0d:af:15:03:a3:50: 1b:02:1c:07:f9:54:21:d1:73:02:55:3c:a6:65:45: c2:5b:cc:34:c0:d0:69:3d:2e:28:63:d8:e1:e6:81: e2:1c:cf:14:12:6e:28:0f:15:0b:6b:da:1f:ed:0b: 08:68:d2:a3:6b:b2:7d:4c:93:71:d6:d7:05:ce:82: ec:aa:50:a0:e7:7f:72:b2:d4:06:1b:26:c3:6e:22: 4a:e5:6f:dc:1c:70:24:84:df:20:22:3a:49:2a:bf: 17:67:78:e4:ce:cf:8a:2f:76:57:9d:71:13:44:52: 4f:d9:03:07:86:a7:44:66:0a:79:7e:44:36:74:ed: b3:1b:f8:d0:f5:76:f0:f4:db:af:d3:a1:c5:6a:d9: 1d:72:1d:40:37:63:bc:db:76:15:e3:7c:5d:69:0f: 20:16:3d:7c:f4:de:6e:64:80:7e:18:3a:c6:74:7c: 93:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:61:D9:FA:C3:1C:39:D6:23:4B:70:FD:14:BF:3C:AB:AC:F0:8C:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60eca484-2a95-33c1-a8f7-2352aa1c3361.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.228.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:41:bd:97:af:25:8c:0f:c1:0d:79:b0:98:d7:71:bb:7f:71: ae:b2:10:13:e2:cb:76:c7:6f:ec:4e:69:ff:8d:a2:39:44:60: 38:bb:5b:72:d0:eb:e2:bb:f7:05:84:f7:ff:97:04:a4:bc:b1: c3:d9:59:c6:42:05:58:4b:1b:a2:76:0b:3f:58:23:85:17:11: 0c:bd:8f:68:8e:0e:1d:d8:ae:0e:ce:75:1f:91:5d:c6:14:07: fb:d2:00:a3:8f:bd:56:06:e4:20:7d:2b:c2:41:d7:c6:c4:bc: 15:f0:51:6b:6b:9c:f8:aa:04:d3:80:e1:22:ec:af:87:6d:f3: 99:04:d4:6b:0b:14:b8:04:00:18:0a:33:f7:e3:8e:ce:23:3d: b9:64:d5:9e:65:bc:a9:5d:f9:77:9c:9e:a6:12:ff:e2:cd:d6: 8c:20:fc:cb:58:7f:a7:7e:46:fd:98:a1:9e:0d:29:fb:f3:5a: e6:5c:ab:87:a1:aa:b9:dd:38:48:25:a5:fd:80:89:df:f3:22: 16:4e:1e:09:12:cc:15:b3:ca:6b:b5:b7:ea:b7:36:a1:cc:d6: 0f:51:b7:61:56:d5:44:bf:5d:b0:c8:77:f1:79:3d:13:7f:9b: 3b:d3:f7:db:52:d1:c7:88:d7:70:62:c1:03:43:5f:a3:a5:e3: 20:57:7e:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9pAs+tvB7k2J2kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NGYyMjcxMmEtYmY1Yi00ODAxLWE1MzktZjAzMjM1MjZlMzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoPmio+ql7Ix6QxxffHAm8Qsp/4UtGD44S7h y89QIwsXOmD3T7xRuXNd4mGeLMzhFBpDmHgriDgo7OGCtt5RdrzLPdzGKy9fh3FY kOH6y36T4X0NrxUDo1AbAhwH+VQh0XMCVTymZUXCW8w0wNBpPS4oY9jh5oHiHM8U Em4oDxULa9of7QsIaNKja7J9TJNx1tcFzoLsqlCg539ystQGGybDbiJK5W/cHHAk hN8gIjpJKr8XZ3jkzs+KL3ZXnXETRFJP2QMHhqdEZgp5fkQ2dO2zG/jQ9Xbw9Nuv 06HFatkdch1AN2O823YV43xdaQ8gFj189N5uZIB+GDrGdHyTyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDRh2frDHDnWI0tw/RS/PKus8IwxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjBlY2E0ODQtMmE5NS0z M2MxLWE4ZjctMjM1MmFhMWMzMzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYuQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRBvZevJYwPwQ15sJjXcbt/ca6yEBPiy3bHb+xOaf+NojlEYDi7W3LQ 6+K79wWE9/+XBKS8scPZWcZCBVhLG6J2Cz9YI4UXEQy9j2iODh3Yrg7OdR+RXcYU B/vSAKOPvVYG5CB9K8JB18bEvBXwUWtrnPiqBNOA4SLsr4dt85kE1GsLFLgEABgK M/fjjs4jPblk1Z5lvKld+XecnqYS/+LN1owg/MtYf6d+Rv2YoZ4NKfvzWuZcq4eh qrndOEglpf2Aid/zIhZOHgkSzBWzymu1t+q3NqHM1g9Rt2FW1US/XbDId/F5PRN/ mzvT99tS0ceI13BiwQNDX6Ol4yBXfgA= -----END CERTIFICATE-----Generated at Tue Apr 21 23:25:38 2026 by rpki-client