$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d596dcd6-abb0-370d-a1de-a563266404c5.roa File: d596dcd6-abb0-370d-a1de-a563266404c5.roa (raw, json) Hash identifier: 3phVXgfwcBVl21v2VCbsgK00rhZqX5BKn6lP3RgIk9c= Subject key identifier: 1C:A2:8B:F2:5C:1E:36:7D:D6:02:4A:A1:35:17:41:B5:48:52:03:FB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF81C42D560A4A835B59C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d596dcd6-abb0-370d-a1de-a563266404c5.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 98.227.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f8:1c:42:d5:60:a4:a8:35:b5:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=83700104-5a6f-4b58-9bd4-7e1b62247be8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:05:0b:ca:4e:bd:a9:7b:6f:17:cc:4d:8f:3d: 9c:d8:f6:6a:e6:5d:ac:06:65:a5:da:37:2a:ab:af: fd:e2:8d:10:7a:b8:84:f0:62:b7:82:6e:ec:d8:5f: 08:57:c7:81:49:22:bf:a6:b7:dc:08:a1:95:9d:85: 60:67:67:f4:c4:2f:43:98:25:79:90:f7:23:92:86: 22:a2:f1:6c:8e:8e:59:3c:18:43:c6:b0:04:61:6f: 6f:c2:fe:cf:dd:1a:5b:a9:fa:f0:36:88:af:0b:46: ee:8c:f7:94:64:c1:7c:c6:e0:14:e5:be:c0:04:81: 0b:62:56:f0:36:e7:23:cb:5d:ca:4e:d4:fa:c1:7d: b9:a6:a9:b3:74:53:c2:b8:f2:31:df:28:68:ba:8f: bf:f1:7e:c2:28:36:f7:8e:40:73:ba:ed:d1:f3:a7: 6b:2b:9a:3d:24:d1:ab:bb:15:c1:ef:aa:17:fb:86: 17:66:da:e2:ef:21:5f:0d:88:e9:2f:e0:0d:c5:4d: 60:42:ca:b1:13:06:75:14:f5:1c:17:9a:57:32:43: 8f:9a:b8:14:db:32:3c:72:6c:59:c3:c7:61:a8:0f: 86:62:75:a4:2f:5d:c9:be:f3:a2:9a:43:d0:66:22: 69:34:31:6f:c5:c2:05:f3:b7:4e:22:bf:26:ce:fe: 09:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:A2:8B:F2:5C:1E:36:7D:D6:02:4A:A1:35:17:41:B5:48:52:03:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d596dcd6-abb0-370d-a1de-a563266404c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.227.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:de:25:f2:15:ea:2b:74:9c:87:6e:bc:59:2a:6d:a6:3b:0b: 0c:52:74:9f:1b:93:21:5a:cb:99:35:0d:c5:7c:7b:37:01:7e: 1c:4e:9d:37:07:bf:49:86:70:f1:18:1b:f6:3f:50:b6:1a:23: f3:b5:b7:36:6d:71:79:28:6d:da:9e:90:de:60:d2:8a:31:83: a1:a0:2f:0b:03:ca:9b:24:f7:86:5b:14:a7:a4:66:e7:8e:e1: e4:22:c6:39:f8:18:e4:9d:c4:98:15:35:a4:58:0c:a0:05:2f: 35:c8:6f:cd:56:a3:5b:81:f7:a2:53:b7:5f:a6:b7:ca:be:20: 0f:5b:76:f7:8f:43:55:a5:81:53:d3:03:0f:34:28:5d:ae:cf: 35:f8:e8:94:b3:91:ac:0a:d7:7f:17:a2:0e:5f:96:bb:91:a7: bb:4b:90:00:e9:b2:d3:13:5f:26:f0:0f:3f:f9:c0:66:20:83: e3:e7:07:39:7c:09:75:37:c9:e6:57:b4:c2:da:aa:de:58:5d: 91:15:6d:93:54:6c:65:98:25:fd:7a:6b:c1:cb:fe:6d:c7:91: 18:ba:f6:39:a8:f7:e1:1d:97:dc:37:95:7c:97:91:b9:7c:48: 71:8b:3c:2f:ad:34:4b:86:47:7a:bc:b5:fb:0c:21:9e:cd:e2: 9d:99:55:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+BxC1WCkqDW1nIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ODM3MDAxMDQtNWE2Zi00YjU4LTliZDQtN2UxYjYyMjQ3YmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggULyk69qXtvF8xNjz2c2PZq5l2sBmWl2jcq q6/94o0QeriE8GK3gm7s2F8IV8eBSSK/prfcCKGVnYVgZ2f0xC9DmCV5kPcjkoYi ovFsjo5ZPBhDxrAEYW9vwv7P3RpbqfrwNoivC0bujPeUZMF8xuAU5b7ABIELYlbw Nucjy13KTtT6wX25pqmzdFPCuPIx3yhouo+/8X7CKDb3jkBzuu3R86drK5o9JNGr uxXB76oX+4YXZtri7yFfDYjpL+ANxU1gQsqxEwZ1FPUcF5pXMkOPmrgU2zI8cmxZ w8dhqA+GYnWkL13JvvOimkPQZiJpNDFvxcIF87dOIr8mzv4JDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFByii/JcHjZ91gJKoTUXQbVIUgP7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDU5NmRjZDYtYWJiMC0z NzBkLWExZGUtYTU2MzI2NjQwNGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYuMcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLeJfIV6it0nIduvFkqbaY7CwxSdJ8bkyFay5k1DcV8ezcBfhxOnTcH v0mGcPEYG/Y/ULYaI/O1tzZtcXkobdqekN5g0ooxg6GgLwsDypsk94ZbFKekZueO 4eQixjn4GOSdxJgVNaRYDKAFLzXIb81Wo1uB96JTt1+mt8q+IA9bdvePQ1WlgVPT Aw80KF2uzzX46JSzkawK138Xog5flruRp7tLkADpstMTXybwDz/5wGYgg+PnBzl8 CXU3yeZXtMLaqt5YXZEVbZNUbGWYJf16a8HL/m3HkRi69jmo9+Edl9w3lXyXkbl8 SHGLPC+tNEuGR3q8tfsMIZ7N4p2ZVdA= -----END CERTIFICATE-----Generated at Tue Apr 21 20:29:19 2026 by rpki-client