$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/84ee4f5b-0c77-3a00-a6c2-2d370e15013d.roa File: 84ee4f5b-0c77-3a00-a6c2-2d370e15013d.roa (raw, json) Hash identifier: GmsDUAJVIsyk1R8snyd949YL6GNvdjQo+Onf8paXlz0= Subject key identifier: 5B:43:C8:54:1B:99:9C:11:6A:9B:E8:19:0D:4A:09:92:7A:33:4C:23 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF68F1BC67E3DEFE5620500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/84ee4f5b-0c77-3a00-a6c2-2d370e15013d.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 98.228.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:8f:1b:c6:7e:3d:ef:e5:62:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=e3544eaa-e79a-4049-acfe-a74d04b5cbe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:47:e2:2f:3d:ad:14:b4:c8:11:d4:04:f6:4f: cf:27:93:1b:0c:0b:d9:ef:1d:2d:78:d0:a4:ee:d7: a4:39:95:c2:7e:ba:7e:8f:b9:f9:20:d7:b1:0f:e9: 9b:ba:cf:c8:d5:64:e3:86:8b:54:d1:1a:dc:28:6a: 26:e9:01:a1:e0:a9:08:1b:1b:21:b1:7f:1c:5f:c6: 88:57:ff:fa:bf:c7:bb:d8:64:1e:b5:e0:1d:d0:06: 5d:fa:17:3b:09:39:bf:51:cc:9d:77:0f:9c:17:0e: 2c:00:f6:e5:73:8c:cc:6f:3b:6c:41:85:55:e9:b9: ee:48:80:af:ff:36:c8:09:8e:95:d6:d8:d1:b4:04: 01:56:26:82:d5:9b:56:d2:04:82:0f:91:54:f4:7d: 98:b4:17:02:66:12:d8:af:df:63:c9:a6:ba:63:ed: 8b:5b:b4:ed:16:3c:6c:e9:cf:14:27:1a:19:8c:92: 41:61:02:52:7b:c4:05:b6:50:c0:28:df:ad:50:f0: 2d:22:e9:f4:db:19:25:c2:1b:02:d9:9a:c9:a8:ec: 29:de:29:f5:4d:0c:48:65:62:92:86:96:9f:80:fc: 84:b4:d8:d3:93:b4:3f:b2:a6:f2:5b:61:56:73:f8: c9:ff:80:dc:a9:4e:8b:c9:24:1d:d6:3b:40:a7:5d: f3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:43:C8:54:1B:99:9C:11:6A:9B:E8:19:0D:4A:09:92:7A:33:4C:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/84ee4f5b-0c77-3a00-a6c2-2d370e15013d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.228.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:52:df:04:be:d4:18:6e:25:80:bc:da:8b:8c:86:40:44:da: 71:3e:3c:1b:58:93:48:5c:f6:9f:b2:e6:45:9b:5b:7c:d4:d0: d7:d1:4e:06:ff:ec:e5:5d:92:05:aa:51:91:f1:a4:88:27:a1: c7:5f:a6:c5:b6:86:8a:b5:2e:1c:0f:fe:2e:64:8c:d5:59:36: bb:95:8e:11:fd:80:1f:52:2a:27:47:a3:0b:8f:18:99:13:ef: 7e:50:ba:47:49:e6:30:ae:8c:fb:41:bf:5a:b1:1f:98:b5:d9: e9:91:c5:64:3b:62:47:19:11:e2:bd:86:25:23:00:a7:05:3e: c0:94:1c:c7:5e:cf:ba:c6:89:20:14:ec:54:45:27:48:8c:42: a0:a2:72:28:b8:f5:dc:2e:23:10:de:d8:64:b2:8b:82:4a:c8: 29:69:22:09:8f:d8:0b:46:c6:74:61:b6:40:65:dd:0d:98:89: 79:96:dd:aa:31:c1:23:76:b7:88:1c:70:9c:5e:ac:4a:c0:03: 9e:bd:03:d5:d5:e4:80:3c:0c:21:3d:74:6f:eb:40:f3:29:12: df:f8:94:55:cd:31:32:01:0c:eb:26:58:1a:d9:9e:69:a0:99: be:9e:9a:dc:b1:e5:99:55:0a:1a:ea:ff:a3:16:11:7f:6f:65: 12:d2:0c:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9o8bxn497+ViBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ZTM1NDRlYWEtZTc5YS00MDQ5LWFjZmUtYTc0ZDA0YjVjYmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkfiLz2tFLTIEdQE9k/PJ5MbDAvZ7x0teNCk 7tekOZXCfrp+j7n5INexD+mbus/I1WTjhotU0RrcKGom6QGh4KkIGxshsX8cX8aI V//6v8e72GQeteAd0AZd+hc7CTm/Ucyddw+cFw4sAPblc4zMbztsQYVV6bnuSICv /zbICY6V1tjRtAQBViaC1ZtW0gSCD5FU9H2YtBcCZhLYr99jyaa6Y+2LW7TtFjxs 6c8UJxoZjJJBYQJSe8QFtlDAKN+tUPAtIun02xklwhsC2ZrJqOwp3in1TQxIZWKS hpafgPyEtNjTk7Q/sqbyW2FWc/jJ/4DcqU6LySQd1jtAp13zwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFtDyFQbmZwRapvoGQ1KCZJ6M0wjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODRlZTRmNWItMGM3Ny0z YTAwLWE2YzItMmQzNzBlMTUwMTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYuSIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdS3wS+1BhuJYC82ouMhkBE2nE+PBtYk0hc9p+y5kWbW3zU0NfRTgb/ 7OVdkgWqUZHxpIgnocdfpsW2hoq1LhwP/i5kjNVZNruVjhH9gB9SKidHowuPGJkT 735QukdJ5jCujPtBv1qxH5i12emRxWQ7YkcZEeK9hiUjAKcFPsCUHMdez7rGiSAU 7FRFJ0iMQqCicii49dwuIxDe2GSyi4JKyClpIgmP2AtGxnRhtkBl3Q2YiXmW3aox wSN2t4gccJxerErAA569A9XV5IA8DCE9dG/rQPMpEt/4lFXNMTIBDOsmWBrZnmmg mb6emtyx5ZlVChrq/6MWEX9vZRLSDOI= -----END CERTIFICATE-----Generated at Tue Apr 21 20:25:33 2026 by rpki-client