$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be5d2894-040c-363c-a295-268a70fda36d.roa File: be5d2894-040c-363c-a295-268a70fda36d.roa (raw, json) Hash identifier: SkO9/jj6axTatLkq4mE+XP/VX05BqxLcQQGixQtBe3s= Subject key identifier: 92:43:84:24:38:1D:78:B5:9E:E0:1B:07:A6:E0:E6:3D:B9:DD:09:29 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF5A043A1B478455F8BE780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be5d2894-040c-363c-a295-268a70fda36d.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33660 IP address blocks: 98.33.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:a0:43:a1:b4:78:45:5f:8b:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=6e4f8586-c3df-4c50-9fc2-74df8a528f98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8a:89:81:74:79:49:e9:3b:31:56:d2:dc:46: d0:eb:27:8d:ec:4c:e0:b4:64:d1:d6:6e:13:0e:f7: c2:95:b7:8d:e1:af:08:3e:43:15:d0:bb:06:16:9b: db:c4:92:38:ed:53:3c:5a:53:9f:01:14:c8:8e:82: fe:19:83:40:ef:f1:38:03:cf:ba:d0:02:b1:16:bf: 2d:31:78:6e:6c:85:5c:f0:2a:fd:62:d2:89:86:90: b8:6e:16:13:a3:47:00:b9:73:68:57:05:9d:a3:2f: 46:c9:45:2a:0b:bf:d5:54:05:28:e4:23:71:21:80: 29:f8:98:7b:2e:83:74:1a:7f:39:49:38:e0:71:82: d2:f2:12:4c:de:4f:4f:46:eb:6f:a6:b2:83:95:95: 69:4b:6a:db:0e:48:dd:e1:5b:45:35:7e:a6:32:56: 16:c6:db:2b:31:4d:2a:a2:05:14:4a:30:b8:5b:48: 07:c1:0a:2b:f9:12:b3:d1:4a:c6:28:b2:d8:31:21: 85:ae:c3:77:c3:99:7d:be:b6:b0:58:fd:20:f9:2c: 0a:7b:c6:75:2d:36:62:70:13:04:d5:e3:e7:70:03: 4c:c2:97:df:f6:af:6f:19:68:87:46:69:69:99:2a: 90:b1:d0:ab:b7:bf:d4:72:b1:01:ca:ca:3d:c7:20: 3a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:43:84:24:38:1D:78:B5:9E:E0:1B:07:A6:E0:E6:3D:B9:DD:09:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be5d2894-040c-363c-a295-268a70fda36d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.33.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dd:6e:4a:b3:a4:54:cd:a2:c3:da:f6:f1:80:20:7f:20:e2:60: 27:c6:01:65:6a:53:3c:da:c0:0d:32:1c:23:0c:c3:fb:4b:59: 21:a1:e6:d7:43:c7:d3:09:91:04:c4:03:d2:d0:45:ce:ed:10: f4:33:d1:b9:0e:5c:51:10:92:54:6c:31:80:08:cc:05:1d:de: ef:eb:28:c1:f9:e5:d6:ea:f9:f7:21:18:a9:9e:0e:6b:c1:a9: 81:b0:1d:98:f6:30:53:93:1f:91:b3:a8:e3:c2:9b:9a:72:b2: 7e:5f:56:ba:ff:61:46:b8:47:07:57:a2:73:bd:b9:9e:2b:ff: 22:52:87:e9:7a:95:1a:4b:61:f2:97:1f:f9:8f:49:34:de:61: ae:32:32:f8:e2:56:a4:9d:ef:e2:c9:db:bb:eb:67:e7:70:71: 38:64:bd:26:23:25:62:55:78:4e:63:09:e8:23:48:ba:9a:1e: 1b:8c:40:cd:9a:01:d8:e2:9b:40:b1:f9:e3:44:62:9d:b3:cd: c6:c3:42:76:b1:21:29:fa:68:7a:d2:8c:4e:44:1b:c9:34:6d: 88:26:d4:3e:cd:31:5f:e0:d1:40:f0:be:8f:92:0c:7c:c3:15: a7:2c:ae:d5:38:b8:05:80:64:96:7d:62:9f:93:8f:31:d6:b5: 03:d2:ae:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9aBDobR4RV+L54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NmU0Zjg1ODYtYzNkZi00YzUwLTlmYzItNzRkZjhhNTI4Zjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIqJgXR5Sek7MVbS3EbQ6yeN7EzgtGTR1m4T DvfClbeN4a8IPkMV0LsGFpvbxJI47VM8WlOfARTIjoL+GYNA7/E4A8+60AKxFr8t MXhubIVc8Cr9YtKJhpC4bhYTo0cAuXNoVwWdoy9GyUUqC7/VVAUo5CNxIYAp+Jh7 LoN0Gn85STjgcYLS8hJM3k9PRutvprKDlZVpS2rbDkjd4VtFNX6mMlYWxtsrMU0q ogUUSjC4W0gHwQor+RKz0UrGKLLYMSGFrsN3w5l9vrawWP0g+SwKe8Z1LTZicBME 1ePncANMwpff9q9vGWiHRmlpmSqQsdCrt7/UcrEByso9xyA6RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJDhCQ4HXi1nuAbB6bg5j253QkpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmU1ZDI4OTQtMDQwYy0z NjNjLWEyOTUtMjY4YTcwZmRhMzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYiGUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAN1uSrOkVM2iw9r28YAgfyDiYCfGAWVqUzzawA0yHCMMw/tLWSGh5tdD x9MJkQTEA9LQRc7tEPQz0bkOXFEQklRsMYAIzAUd3u/rKMH55dbq+fchGKmeDmvB qYGwHZj2MFOTH5GzqOPCm5pysn5fVrr/YUa4RwdXonO9uZ4r/yJSh+l6lRpLYfKX H/mPSTTeYa4yMvjiVqSd7+LJ27vrZ+dwcThkvSYjJWJVeE5jCegjSLqaHhuMQM2a Adjim0Cx+eNEYp2zzcbDQnaxISn6aHrSjE5EG8k0bYgm1D7NMV/g0UDwvo+SDHzD FacsrtU4uAWAZJZ9Yp+TjzHWtQPSrps= -----END CERTIFICATE-----Generated at Tue Apr 21 22:58:48 2026 by rpki-client