$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4499643-2863-32d6-b713-7776ae1d8db5.roa File: a4499643-2863-32d6-b713-7776ae1d8db5.roa (raw, json) Hash identifier: ZHXhe9EceTvxzE6m/v2Jvnbyu2rfYm3Ch1xXdf7F/xE= Subject key identifier: 8A:E7:F1:9B:41:6B:47:2A:97:AC:1A:C8:A3:CE:AF:7D:6B:E4:07:B3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF93E96855213870FC13C00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4499643-2863-32d6-b713-7776ae1d8db5.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33651 IP address blocks: 98.35.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f9:3e:96:85:52:13:87:0f:c1:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=0d8a491b-676d-447f-bbba-7fc66a2b4dc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:3a:df:92:d3:e7:05:ac:3b:7c:49:2d:ac:c2: 39:48:84:a5:57:57:33:94:a3:0d:a6:fa:c1:7a:af: 17:d6:9a:86:c0:b3:a4:9c:83:e9:33:90:33:0d:fd: 0b:bb:3d:04:df:92:73:3f:66:19:38:ce:74:c1:be: ca:ab:19:d4:6e:df:09:97:3d:b1:49:f7:b9:06:b2: 75:57:88:71:6f:34:9d:05:a5:ae:09:20:80:a0:63: 41:0b:03:45:8a:6e:91:bf:59:04:f3:1f:4d:01:ed: e4:4f:da:7a:26:ec:d2:1d:68:0b:7f:09:d6:54:5a: ae:42:4e:4d:39:11:e7:3f:5f:88:a2:93:c3:01:f6: d2:4d:ea:1a:6c:81:68:7a:17:c0:4b:73:bc:f3:83: 3d:57:4e:22:fb:00:50:73:ca:ce:99:87:21:5f:82: 42:f0:fc:c1:0c:77:a8:d6:9d:6d:c6:23:a2:6e:1e: cc:30:44:65:23:c2:39:ac:66:ec:f7:e1:58:55:1d: 1e:36:d8:58:26:e3:ca:0f:34:f5:42:a8:a2:5b:b6: 47:11:5f:e5:e1:22:26:9d:c9:4c:2f:d9:b1:f2:ae: 9e:84:e4:91:4b:cb:bc:c9:c0:73:9c:2f:6e:c5:e2: 65:4a:74:d8:e9:d2:4c:00:74:21:d4:42:02:65:8e: 06:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E7:F1:9B:41:6B:47:2A:97:AC:1A:C8:A3:CE:AF:7D:6B:E4:07:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4499643-2863-32d6-b713-7776ae1d8db5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.35.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:a6:82:ad:b6:d2:93:19:6b:f6:a7:68:58:da:94:57:cf:3a: 3f:12:3d:50:ba:af:f2:41:b4:3b:c7:18:4c:1a:84:40:82:65: e0:18:44:f5:e9:96:95:d1:8c:64:73:4a:93:b6:17:53:35:3a: 61:b9:59:2c:88:fa:e7:49:5a:7b:d0:3d:be:be:d9:36:d7:2c: 54:d1:df:0f:76:25:4b:be:8d:ce:1f:3c:93:c1:04:c9:d1:c4: 0b:a5:ce:36:0c:5f:a9:87:92:26:85:29:7c:53:da:41:0c:d9: a5:9f:18:cf:3b:18:4e:c9:3e:c9:a9:9c:6d:71:b0:f5:14:4a: 23:14:f9:f0:8c:09:88:04:04:54:25:cd:5b:83:e5:20:cd:53: aa:37:7e:30:f4:c8:b2:96:3c:87:ac:04:b0:fa:b4:3f:69:7e: 1e:df:d0:ad:a4:8b:ae:0b:ce:d2:b7:d7:4b:f1:f8:71:f8:45: 56:3f:69:d6:91:6d:83:cc:c0:84:a3:85:c4:c0:a5:9a:8c:45: a5:b6:f5:7e:b2:ee:13:a7:a8:3e:92:e4:eb:f4:71:5e:be:74: 4b:66:41:de:ba:c7:4a:ad:6a:bd:66:79:57:75:02:b7:e8:2e: 2f:e8:73:30:83:eb:1f:e1:48:66:30:f5:14:4a:d7:3d:d6:dc: 59:0e:c8:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+T6WhVIThw/BPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MGQ4YTQ5MWItNjc2ZC00NDdmLWJiYmEtN2ZjNjZhMmI0ZGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTrfktPnBaw7fEktrMI5SISlV1czlKMNpvrB eq8X1pqGwLOknIPpM5AzDf0Luz0E35JzP2YZOM50wb7KqxnUbt8Jlz2xSfe5BrJ1 V4hxbzSdBaWuCSCAoGNBCwNFim6Rv1kE8x9NAe3kT9p6JuzSHWgLfwnWVFquQk5N ORHnP1+IopPDAfbSTeoabIFoehfAS3O884M9V04i+wBQc8rOmYchX4JC8PzBDHeo 1p1txiOibh7MMERlI8I5rGbs9+FYVR0eNthYJuPKDzT1QqiiW7ZHEV/l4SImnclM L9mx8q6ehOSRS8u8ycBznC9uxeJlSnTY6dJMAHQh1EICZY4G9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIrn8ZtBa0cql6wayKPOr31r5AezMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTQ0OTk2NDMtMjg2My0z MmQ2LWI3MTMtNzc3NmFlMWQ4ZGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYiOUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCmgq220pMZa/anaFjalFfPOj8SPVC6r/JBtDvHGEwahECCZeAYRPXp lpXRjGRzSpO2F1M1OmG5WSyI+udJWnvQPb6+2TbXLFTR3w92JUu+jc4fPJPBBMnR xAulzjYMX6mHkiaFKXxT2kEM2aWfGM87GE7JPsmpnG1xsPUUSiMU+fCMCYgEBFQl zVuD5SDNU6o3fjD0yLKWPIesBLD6tD9pfh7f0K2ki64LztK310vx+HH4RVY/adaR bYPMwISjhcTApZqMRaW29X6y7hOnqD6S5Ov0cV6+dEtmQd66x0qtar1meVd1Arfo Li/oczCD6x/hSGYw9RRK1z3W3FkOyKQ= -----END CERTIFICATE-----Generated at Wed Apr 22 00:54:50 2026 by rpki-client