$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f55e1b6-c638-3f47-a10a-8169e4b7859b.roa File: 9f55e1b6-c638-3f47-a10a-8169e4b7859b.roa (raw, json) Hash identifier: ajk3Pb0g3sa2iHodWJVEwjW4+ILhmdbz1T49uWYl0BA= Subject key identifier: 6D:3F:0C:59:B0:B6:1F:80:BF:AA:3A:78:9E:B6:1E:FF:46:34:03:65 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF81F3FBCAA9474A1178700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f55e1b6-c638-3f47-a10a-8169e4b7859b.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 98.228.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f8:1f:3f:bc:aa:94:74:a1:17:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=9c45a48c-975f-41fb-a139-e131889fa66d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e1:8d:20:28:d6:eb:00:89:17:2b:f1:d1:e9: 36:0f:89:d7:4b:a2:65:1e:af:98:2b:7b:51:c2:3a: a5:ec:b1:a9:65:24:0a:e3:f0:68:01:4f:73:a0:e5: 3a:b0:bc:ce:a0:73:f6:1f:2c:b4:0e:70:d0:ae:a6: 81:08:50:77:0d:81:f9:70:fc:f4:e4:04:ac:75:ef: 97:82:01:68:38:40:fa:dc:8b:78:a3:56:9b:42:01: fa:cc:c3:62:17:a3:19:33:07:6a:a1:16:6a:90:5c: 78:91:06:e9:61:3c:9e:a6:13:8f:11:20:d0:a7:bf: 7c:09:bb:54:7d:7c:4f:59:18:3e:2f:d2:2d:70:15: b3:2c:6c:a3:12:40:13:70:bc:e0:bb:6f:5b:d3:54: 96:e3:9b:7c:36:33:59:08:9c:4f:7d:de:a1:ff:22: 35:dc:ac:c7:e1:93:5c:5f:c6:5a:67:f3:44:5c:46: 7b:f0:45:86:9c:15:a7:bd:e5:e0:35:91:49:c2:77: 43:36:bf:aa:63:4f:70:ac:16:db:0c:b9:32:c9:d9: a4:1b:96:c7:84:87:95:f8:51:85:0a:32:e6:af:8f: 2b:4b:2b:a0:f1:7c:f5:11:0f:25:fe:54:f4:3b:81: 3c:36:64:84:5a:10:ec:90:14:d8:47:1e:e9:95:97: 5d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:3F:0C:59:B0:B6:1F:80:BF:AA:3A:78:9E:B6:1E:FF:46:34:03:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f55e1b6-c638-3f47-a10a-8169e4b7859b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.228.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:ee:9c:3b:47:ee:b0:0c:2c:c3:a4:86:e5:06:ed:ad:ca:e5: fc:05:fa:9b:59:0a:c4:58:a2:9f:3b:94:9d:2d:3c:43:8b:e6: f8:ad:a9:40:74:f5:a0:83:45:c4:fa:1a:3a:8d:2f:d5:78:77: 9e:eb:ba:5f:88:ed:23:a7:10:c9:ef:bd:fd:52:d0:74:0f:a2: 3b:21:09:76:0f:1b:ef:2a:23:13:3e:55:7f:e3:c4:c0:29:c3: ac:3d:d6:f7:93:39:58:ec:2b:2d:79:f0:00:8b:dc:87:88:5b: 99:24:39:30:6e:45:c2:52:5b:5f:90:eb:a4:fa:51:01:c1:14: a8:2e:9a:30:f9:4d:ac:42:0e:ca:2b:77:bd:63:80:93:85:90: 19:7c:26:0c:99:60:ca:4f:b9:01:81:1b:6e:be:9d:d4:df:6f: 0e:13:c5:b2:2a:2f:6c:2d:bd:8d:b4:99:72:67:28:ee:71:bc: bd:0f:42:39:fa:97:0e:69:66:16:af:7d:2b:9a:c4:08:70:94: f1:ae:36:3f:8c:4f:24:cf:6b:22:1a:d0:b0:9e:0d:82:d1:8e: 34:0e:ff:d5:fc:6c:dd:fe:53:22:f9:bf:d0:f5:f5:89:ab:3f: d9:6d:14:0c:4e:ae:97:53:a5:c9:db:95:78:90:2c:1d:79:8d: 9b:a6:a7:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+B8/vKqUdKEXhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk OWM0NWE0OGMtOTc1Zi00MWZiLWExMzktZTEzMTg4OWZhNjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuGNICjW6wCJFyvx0ek2D4nXS6JlHq+YK3tR wjql7LGpZSQK4/BoAU9zoOU6sLzOoHP2Hyy0DnDQrqaBCFB3DYH5cPz05ASsde+X ggFoOED63It4o1abQgH6zMNiF6MZMwdqoRZqkFx4kQbpYTyephOPESDQp798CbtU fXxPWRg+L9ItcBWzLGyjEkATcLzgu29b01SW45t8NjNZCJxPfd6h/yI13KzH4ZNc X8ZaZ/NEXEZ78EWGnBWnveXgNZFJwndDNr+qY09wrBbbDLkyydmkG5bHhIeV+FGF CjLmr48rSyug8Xz1EQ8l/lT0O4E8NmSEWhDskBTYRx7plZdd2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG0/DFmwth+Av6o6eJ62Hv9GNANlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWY1NWUxYjYtYzYzOC0z ZjQ3LWExMGEtODE2OWU0Yjc4NTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYuSQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALunDtH7rAMLMOkhuUG7a3K5fwF+ptZCsRYop87lJ0tPEOL5vitqUB0 9aCDRcT6GjqNL9V4d57rul+I7SOnEMnvvf1S0HQPojshCXYPG+8qIxM+VX/jxMAp w6w91veTOVjsKy158ACL3IeIW5kkOTBuRcJSW1+Q66T6UQHBFKgumjD5TaxCDsor d71jgJOFkBl8JgyZYMpPuQGBG26+ndTfbw4TxbIqL2wtvY20mXJnKO5xvL0PQjn6 lw5pZhavfSuaxAhwlPGuNj+MTyTPayIa0LCeDYLRjjQO/9X8bN3+UyL5v9D19Ymr P9ltFAxOrpdTpcnblXiQLB15jZump+4= -----END CERTIFICATE-----Generated at Wed Apr 22 00:20:58 2026 by rpki-client