$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7fc6a2f7-7657-3c37-a7be-6797f49b627b.roa File: 7fc6a2f7-7657-3c37-a7be-6797f49b627b.roa (raw, json) Hash identifier: wXYZmo1WIChqbflW66MILid10XGub0z/kmEM8rr6Ixs= Subject key identifier: 94:1A:A8:D2:EB:34:E4:98:0B:59:A5:A5:6C:2F:2E:BF:31:B9:0D:67 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF67F1D406C6510618F8700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7fc6a2f7-7657-3c37-a7be-6797f49b627b.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 98.212.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:7f:1d:40:6c:65:10:61:8f:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=7820c08c-d0ea-4854-b1b8-57c9e35cd971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:aa:3c:de:0f:87:c7:46:e7:48:c9:ce:af:e3: b8:7c:bc:63:d4:f1:f3:82:83:c0:e4:f7:a8:a6:55: 84:76:27:a9:7c:45:29:62:d2:dd:e3:6f:f5:bd:56: b3:8f:93:f9:5b:eb:11:41:30:b7:e0:48:71:73:0e: 95:61:34:da:a0:b7:36:9e:a2:2e:19:c7:0e:13:d1: 4b:b3:db:02:46:29:ae:b7:ce:dd:39:3e:37:fe:86: 89:bb:7b:b4:89:55:4d:66:8e:7a:f7:52:ee:1e:c8: b5:e5:1f:84:f2:00:00:94:15:9b:07:d1:92:64:6b: ba:75:26:2b:d9:52:33:08:d2:6d:4d:f2:75:a4:13: c4:dc:77:d4:75:3b:a6:57:9d:e3:83:83:05:62:7a: 8d:af:18:57:64:cb:d4:10:78:6b:42:0a:a8:5c:41: de:41:64:78:ca:9c:39:01:cc:cc:55:c0:60:01:e3: b1:c8:79:9f:87:ff:db:1d:a3:40:85:59:d7:ec:d4: 71:53:db:e1:7a:20:dd:ce:ee:8a:40:a8:82:af:62: cb:f7:ff:36:bb:3e:5f:a6:ac:dc:3d:28:2b:90:08: 03:7b:4e:14:ad:4f:57:51:e9:6b:85:6b:bc:02:62: 85:de:bc:95:21:32:89:6a:a8:9a:ac:c9:94:22:c5: e9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:1A:A8:D2:EB:34:E4:98:0B:59:A5:A5:6C:2F:2E:BF:31:B9:0D:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7fc6a2f7-7657-3c37-a7be-6797f49b627b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.212.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:8e:cd:7e:bc:cc:28:98:53:1c:44:7b:bb:e3:c2:1a:14:9a: 91:2e:e1:fc:91:e7:e8:77:83:40:ce:64:3e:80:7f:89:af:25: 41:dc:8f:38:c3:af:22:69:b0:d7:47:3c:66:27:c6:2a:26:51: 15:aa:91:27:73:c4:19:c8:56:62:92:d4:6c:df:0b:44:65:37: e9:6b:80:2a:29:aa:61:0e:80:be:4f:12:5b:c6:8f:88:13:18: fa:d8:00:50:36:78:07:45:34:ff:a4:25:24:83:1d:4b:29:f9: c2:82:d4:1d:31:43:bf:d0:98:d5:eb:f5:a7:69:3b:3b:85:c3: 78:95:42:26:37:19:20:f6:1e:30:9b:d0:a4:64:e3:a3:b0:9e: e7:23:7e:b1:70:9b:f0:e8:be:f3:5f:e2:0b:72:98:fa:2f:88: 04:92:b1:b6:af:80:19:8f:69:70:c1:3c:f6:70:08:60:c0:60: 03:21:19:2d:1c:06:36:5d:32:ba:22:40:a1:f0:b0:de:a2:05: 50:e8:05:ee:d0:3c:5f:99:03:ca:3c:a5:99:cd:6e:0c:c8:34: 85:f7:7c:f6:c0:7e:e4:30:78:5d:68:9f:78:d6:1b:53:6e:2e: da:36:f8:51:cb:c6:1c:e3:0e:d9:29:38:d2:4c:8a:64:de:69: c0:bf:9b:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9n8dQGxlEGGPhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NzgyMGMwOGMtZDBlYS00ODU0LWIxYjgtNTdjOWUzNWNkOTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKo83g+Hx0bnSMnOr+O4fLxj1PHzgoPA5Peo plWEdiepfEUpYtLd42/1vVazj5P5W+sRQTC34Ehxcw6VYTTaoLc2nqIuGccOE9FL s9sCRimut87dOT43/oaJu3u0iVVNZo5691LuHsi15R+E8gAAlBWbB9GSZGu6dSYr 2VIzCNJtTfJ1pBPE3HfUdTumV53jg4MFYnqNrxhXZMvUEHhrQgqoXEHeQWR4ypw5 AczMVcBgAeOxyHmfh//bHaNAhVnX7NRxU9vheiDdzu6KQKiCr2LL9/82uz5fpqzc PSgrkAgDe04UrU9XUelrhWu8AmKF3ryVITKJaqiarMmUIsXpvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJQaqNLrNOSYC1mlpWwvLr8xuQ1nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2ZjNmEyZjctNzY1Ny0z YzM3LWE3YmUtNjc5N2Y0OWI2MjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYtQmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCOzX68zCiYUxxEe7vjwhoUmpEu4fyR5+h3g0DOZD6Af4mvJUHcjzjD ryJpsNdHPGYnxiomURWqkSdzxBnIVmKS1GzfC0RlN+lrgCopqmEOgL5PElvGj4gT GPrYAFA2eAdFNP+kJSSDHUsp+cKC1B0xQ7/QmNXr9adpOzuFw3iVQiY3GSD2HjCb 0KRk46OwnucjfrFwm/DovvNf4gtymPoviASSsbavgBmPaXDBPPZwCGDAYAMhGS0c BjZdMroiQKHwsN6iBVDoBe7QPF+ZA8o8pZnNbgzINIX3fPbAfuQweF1on3jWG1Nu Lto2+FHLxhzjDtkpONJMimTeacC/m0o= -----END CERTIFICATE-----Generated at Tue Apr 21 23:23:35 2026 by rpki-client