$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3969a28f-02fb-3828-bfb5-0a54010e3049.roa File: 3969a28f-02fb-3828-bfb5-0a54010e3049.roa (raw, json) Hash identifier: UAez5xuS0t7EWFEGXOCQTxfCv2r0D7f/sQqEHCh9ecY= Subject key identifier: 88:92:25:6B:22:A5:99:E0:49:C2:38:6F:86:46:E7:23:83:F8:36:0A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF6F22AB7C1496F89C03B00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3969a28f-02fb-3828-bfb5-0a54010e3049.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33651 IP address blocks: 98.51.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:f2:2a:b7:c1:49:6f:89:c0:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=c26b2d4a-c17a-4bcf-8673-cc90bf546e0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d0:22:83:22:cc:cd:cf:47:18:90:66:b3:41: 3b:71:ee:6c:d1:5c:5c:90:6b:37:36:b8:5c:b8:26: af:ba:dc:fc:66:4a:7d:01:8e:ce:a7:60:eb:3a:a1: b1:83:b4:4f:fc:82:52:e3:92:a6:68:f0:25:bc:33: 2a:65:3f:3d:8b:b5:98:33:2e:6d:2a:c0:69:91:24: 82:2e:77:b3:8e:8b:37:47:35:fe:2e:37:1a:46:4b: 6b:76:e6:96:c3:4e:78:ff:e7:a8:f6:99:ac:65:aa: ae:0d:7e:02:be:14:c4:62:c2:89:98:a3:85:31:48: 33:3d:1e:73:d6:5a:ed:30:63:d0:73:02:43:2b:78: 4c:0d:c8:28:39:90:b2:98:67:71:39:3e:13:3a:2b: 7b:33:e7:a7:22:51:1f:c8:28:c0:86:e8:ed:5e:8c: 80:56:e6:d4:a6:ea:e1:6f:e3:b5:dd:95:99:cc:c9: bb:62:02:74:5d:fb:45:e4:52:8c:fb:1e:87:ab:d8: 8c:62:2e:d6:bb:da:f3:23:e3:af:fb:d4:05:62:ee: 14:96:ca:f4:aa:81:2f:24:89:16:a6:96:89:c4:cd: a9:41:d7:5b:8f:08:48:3b:3a:5c:e1:a5:d9:21:fd: c7:35:f4:dd:19:56:0a:83:cc:bc:da:04:29:c5:33: 3d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:92:25:6B:22:A5:99:E0:49:C2:38:6F:86:46:E7:23:83:F8:36:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3969a28f-02fb-3828-bfb5-0a54010e3049.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.51.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:eb:23:9a:d2:fd:76:5f:0b:24:ca:3e:75:74:8a:e2:03:a0: dc:8c:bb:7d:dd:b7:8f:da:10:e2:46:71:17:00:bc:98:c2:16: 5b:24:3c:77:8a:ee:3f:e3:69:a4:59:54:05:86:89:07:84:40: 67:2f:f0:f1:3d:a4:e0:8f:25:b3:7a:6c:b7:6d:d1:35:c5:36: f6:5f:fb:09:c5:50:15:2d:e3:85:1c:0d:6f:96:e8:03:9f:ef: d7:5a:20:b9:00:8a:50:2f:de:bc:c8:b5:56:3f:47:d5:d8:e4: b7:91:d2:35:12:55:29:ae:75:2d:61:87:75:ab:02:b0:50:6f: ae:9e:b6:77:93:27:d4:74:f3:de:37:bb:48:2e:60:37:87:22: af:7b:17:78:35:85:7c:69:b6:c9:b2:e2:1b:17:40:79:7d:2d: eb:e3:fc:02:b3:ae:bd:41:0d:94:86:45:aa:d8:c2:ae:fb:03: 77:c7:b7:67:7c:4d:cf:2a:08:70:ab:00:96:c6:1d:33:6d:36: 48:ab:89:d9:a7:0d:c9:03:f2:69:c7:0b:6f:6a:70:da:c9:d0: 55:10:8a:21:a9:fe:c3:c8:8d:2f:e6:61:63:e3:8a:6b:f3:dd: 45:9a:1e:4a:ea:e1:6d:3c:71:d9:b0:96:64:3f:88:62:5a:77: 87:14:3d:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9vIqt8FJb4nAOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk YzI2YjJkNGEtYzE3YS00YmNmLTg2NzMtY2M5MGJmNTQ2ZTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNAigyLMzc9HGJBms0E7ce5s0VxckGs3Nrhc uCavutz8Zkp9AY7Op2DrOqGxg7RP/IJS45KmaPAlvDMqZT89i7WYMy5tKsBpkSSC Lnezjos3RzX+LjcaRktrduaWw054/+eo9pmsZaquDX4CvhTEYsKJmKOFMUgzPR5z 1lrtMGPQcwJDK3hMDcgoOZCymGdxOT4TOit7M+enIlEfyCjAhujtXoyAVubUpurh b+O13ZWZzMm7YgJ0XftF5FKM+x6Hq9iMYi7Wu9rzI+Ov+9QFYu4Ulsr0qoEvJIkW ppaJxM2pQddbjwhIOzpc4aXZIf3HNfTdGVYKg8y82gQpxTM9GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIiSJWsipZngScI4b4ZG5yOD+DYKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzk2OWEyOGYtMDJmYi0z ODI4LWJmYjUtMGE1NDAxMGUzMDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYjM4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXrI5rS/XZfCyTKPnV0iuIDoNyMu33dt4/aEOJGcRcAvJjCFlskPHeK 7j/jaaRZVAWGiQeEQGcv8PE9pOCPJbN6bLdt0TXFNvZf+wnFUBUt44UcDW+W6AOf 79daILkAilAv3rzItVY/R9XY5LeR0jUSVSmudS1hh3WrArBQb66etneTJ9R08943 u0guYDeHIq97F3g1hXxptsmy4hsXQHl9Levj/AKzrr1BDZSGRarYwq77A3fHt2d8 Tc8qCHCrAJbGHTNtNkiridmnDckD8mnHC29qcNrJ0FUQiiGp/sPIjS/mYWPjimvz 3UWaHkrq4W08cdmwlmQ/iGJad4cUPWI= -----END CERTIFICATE-----Generated at Tue Apr 21 22:04:41 2026 by rpki-client