$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9360fc37-8e98-3b71-9558-114a88e9576a.roa File: 9360fc37-8e98-3b71-9558-114a88e9576a.roa (raw, json) Hash identifier: gYcsD4+IIUzCRQi3mEzYEZbNWOi0fjJFGnNeQyuVfGI= Subject key identifier: 4D:B1:22:A5:87:E3:01:2B:AB:39:68:1E:5D:C0:DF:5E:36:50:24:55 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF83CD9C36E92148143E680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9360fc37-8e98-3b71-9558-114a88e9576a.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 98.52.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f8:3c:d9:c3:6e:92:14:81:43:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=aa97f7e2-3354-4da5-b3e3-68e02481f946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8f:1b:a8:a6:b8:4f:89:30:08:e2:d8:c8:cc: aa:b7:8e:52:ed:07:ad:b8:a9:6c:e1:5a:d7:3e:79: c5:e6:57:66:5f:cb:9f:f0:47:df:ea:64:d4:3f:ed: a1:6a:72:fc:f8:69:51:fa:78:85:a4:13:c8:33:2a: e2:15:a2:f0:9e:ff:c9:4b:11:0e:21:03:71:9c:a0: 79:b6:c3:55:c6:96:b8:44:9e:3a:fb:4a:0c:a8:9c: 9b:68:19:c8:0c:c3:60:87:29:be:96:21:75:74:31: e5:81:6a:3c:89:0a:f4:92:09:0d:1b:4a:67:73:6e: 74:e5:c7:7c:a6:49:c5:e2:39:16:b3:d4:09:47:a1: 9e:85:bc:50:aa:f9:7f:4f:d2:ce:be:5f:84:84:88: e9:5d:90:29:a5:c2:a2:fc:41:52:3d:f2:f5:30:68: 7d:86:77:8f:ed:8e:57:18:4f:4f:27:e9:3a:26:c7: 2d:8d:c0:26:0b:43:0d:76:99:96:9e:99:cb:b8:73: 95:5b:f2:ec:b9:75:f5:c6:9d:1d:7f:d2:62:0d:c8: 99:fd:f9:f1:0b:fb:e5:bb:92:5b:34:31:43:ce:f0: 1e:3f:63:d9:51:e8:db:fd:4c:50:47:97:40:41:2a: 81:58:bd:5f:cd:a1:f6:8b:b4:30:34:d2:c7:08:4d: 66:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:B1:22:A5:87:E3:01:2B:AB:39:68:1E:5D:C0:DF:5E:36:50:24:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9360fc37-8e98-3b71-9558-114a88e9576a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.52.214.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:75:f9:db:83:a1:be:1c:22:e0:1e:7a:03:08:06:5a:4b:49: 55:69:31:10:d5:c8:ac:e3:ec:8b:36:43:05:e1:82:4a:bc:82: 9e:18:13:b8:ba:29:cb:f5:92:7a:42:fe:c3:25:fb:04:b7:5e: fb:6f:af:48:d9:d1:6b:5c:c1:79:6f:3c:c3:e9:11:ad:62:70: 7c:04:8e:bb:1b:3b:aa:56:a6:12:18:27:3d:cd:5f:56:e1:d0: f2:c5:a1:a7:92:ee:49:69:e7:67:ef:63:0f:ee:92:22:11:71: 3e:57:7e:16:6b:25:9a:10:75:75:69:44:c0:5f:91:86:d6:57: a8:46:2a:fd:24:58:e1:94:21:6d:9c:c3:dc:6f:a9:88:47:ef: f8:1d:88:09:b8:18:31:41:9a:1a:85:b0:21:d3:80:40:12:fd: c8:36:5a:98:da:e0:37:38:58:6a:d5:c3:bb:9d:b1:af:5e:df: 38:82:e7:7e:98:cf:d2:e7:04:95:a4:c2:eb:2f:83:4f:df:1f: 8a:2a:a3:e9:f5:0e:af:e0:80:cf:be:12:84:e0:40:a2:b4:a7: 47:ed:e5:2b:58:57:cc:e4:9a:77:32:f3:ce:19:5d:98:dd:ed: a6:86:2b:68:ab:db:3f:87:fc:cd:55:93:32:50:a8:b9:2b:4b: fe:74:6e:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+DzZw26SFIFD5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk YWE5N2Y3ZTItMzM1NC00ZGE1LWIzZTMtNjhlMDI0ODFmOTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqY8bqKa4T4kwCOLYyMyqt45S7QetuKls4VrX PnnF5ldmX8uf8Eff6mTUP+2hanL8+GlR+niFpBPIMyriFaLwnv/JSxEOIQNxnKB5 tsNVxpa4RJ46+0oMqJybaBnIDMNghym+liF1dDHlgWo8iQr0kgkNG0pnc2505cd8 pknF4jkWs9QJR6GehbxQqvl/T9LOvl+EhIjpXZAppcKi/EFSPfL1MGh9hneP7Y5X GE9PJ+k6JsctjcAmC0MNdpmWnpnLuHOVW/LsuXX1xp0df9JiDciZ/fnxC/vlu5Jb NDFDzvAeP2PZUejb/UxQR5dAQSqBWL1fzaH2i7QwNNLHCE1mQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2xIqWH4wErqzloHl3A3142UCRVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTM2MGZjMzctOGU5OC0z YjcxLTk1NTgtMTE0YTg4ZTk1NzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYjTWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADp1+duDob4cIuAeegMIBlpLSVVpMRDVyKzj7Is2QwXhgkq8gp4YE7i6 Kcv1knpC/sMl+wS3Xvtvr0jZ0WtcwXlvPMPpEa1icHwEjrsbO6pWphIYJz3NX1bh 0PLFoaeS7klp52fvYw/ukiIRcT5XfhZrJZoQdXVpRMBfkYbWV6hGKv0kWOGUIW2c w9xvqYhH7/gdiAm4GDFBmhqFsCHTgEAS/cg2Wpja4Dc4WGrVw7udsa9e3ziC536Y z9LnBJWkwusvg0/fH4oqo+n1Dq/ggM++EoTgQKK0p0ft5StYV8zkmncy884ZXZjd 7aaGK2ir2z+H/M1VkzJQqLkrS/50bnA= -----END CERTIFICATE-----Generated at Wed Apr 22 00:52:55 2026 by rpki-client