$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5013228c-e247-3be4-a06d-954b71940c3f.roa File: 5013228c-e247-3be4-a06d-954b71940c3f.roa (raw, json) Hash identifier: b3fKAvBfJFd/b6FM/TB+jIlsCVT8XSxhHl+Xty+829c= Subject key identifier: B2:67:CF:57:93:63:A1:0F:0A:5A:5E:65:AE:DF:34:18:C8:2A:4D:2C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF83AE8A0A67020097D2C70 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5013228c-e247-3be4-a06d-954b71940c3f.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33491 IP address blocks: 98.52.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f8:3a:e8:a0:a6:70:20:09:7d:2c:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=f7a45b50-f64c-417b-932e-72ea2f0eabe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:76:7b:70:d3:33:42:27:4f:31:39:1d:cb:81: e2:f5:9f:67:ce:50:38:cd:d4:48:a1:fe:e2:ad:56: 7e:a2:7e:f8:47:44:17:64:99:90:28:76:55:18:ad: e7:6e:40:7f:a4:7f:dc:4c:42:ff:0a:da:85:8f:5f: 8e:58:d9:93:b6:dc:6e:32:72:cc:25:5f:c8:bd:b7: d1:03:85:cf:45:66:b2:df:0c:21:33:d6:da:02:50: e6:b1:e9:04:6a:a3:dc:60:ac:35:4e:ce:dc:e1:68: e6:ed:23:9a:32:45:50:58:f7:f6:79:15:57:20:fc: 33:d2:d3:72:aa:b7:f7:56:78:c9:0c:9d:11:b4:b4: d6:e5:6a:a0:3e:ea:95:d6:f1:bd:5f:4c:25:c3:c8: fb:53:27:bf:fd:69:37:4c:5e:ec:04:62:68:b1:11: f3:8c:bf:d5:ea:46:f1:b5:9b:bf:6c:ec:c1:18:d3: 32:c3:6e:de:77:f4:7a:ec:b4:ab:f5:17:e1:f1:4e: b7:37:4b:e0:2a:3a:ae:3d:e4:b0:98:34:b2:21:b7: 30:63:8d:5a:d2:01:51:c3:61:e7:fc:ce:2d:0d:ea: 11:9b:d1:2b:ad:da:a2:b7:ce:bc:89:1d:c9:98:14: f7:51:fa:c4:4e:cf:59:32:96:d0:4e:d7:54:07:45: 3e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:67:CF:57:93:63:A1:0F:0A:5A:5E:65:AE:DF:34:18:C8:2A:4D:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5013228c-e247-3be4-a06d-954b71940c3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.52.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:77:1b:0b:7c:5f:0e:4a:14:c8:7d:03:10:63:6b:b3:30:f0: 15:cc:a0:78:02:9d:7c:f7:5c:d0:cc:96:e4:0c:2d:75:39:46: a4:34:cc:ad:1a:e7:a9:cc:37:68:de:24:6d:cd:4b:10:d5:3f: 63:36:55:86:39:e1:a4:84:a3:11:08:90:5b:bc:26:95:37:4a: f0:e2:a4:11:ee:f3:02:77:1f:0e:f2:43:34:24:43:fb:29:fc: c5:70:2f:eb:ad:3c:4e:60:3f:2c:9e:0c:ef:95:54:48:f1:85: 27:15:10:72:6e:01:29:6f:6b:15:06:aa:72:5a:09:9e:e8:df: ad:12:6f:d8:4d:f7:da:73:11:e7:0e:73:d7:03:f0:23:d2:bd: 96:13:3c:83:c7:a0:62:80:47:8d:1f:8a:86:e9:d4:af:36:0f: e7:a2:c4:2f:40:8b:49:df:7e:d8:ad:90:1d:0e:18:d2:40:fa: 4e:20:3f:08:e0:14:35:76:a7:c0:7a:65:c3:d2:83:15:ee:f7: 06:39:79:aa:d6:09:17:34:e2:73:0a:0d:de:63:0a:35:4b:c4: 6e:0f:1d:cb:8f:ec:bc:47:d9:e0:14:5c:64:cf:bb:9e:3c:a1: 80:67:af:c2:9c:f1:2e:f2:63:32:81:e2:32:3d:2d:bd:8b:af: a0:96:1d:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+DrooKZwIAl9LHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ZjdhNDViNTAtZjY0Yy00MTdiLTkzMmUtNzJlYTJmMGVhYmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nZ7cNMzQidPMTkdy4Hi9Z9nzlA4zdRIof7i rVZ+on74R0QXZJmQKHZVGK3nbkB/pH/cTEL/CtqFj1+OWNmTttxuMnLMJV/IvbfR A4XPRWay3wwhM9baAlDmsekEaqPcYKw1Ts7c4Wjm7SOaMkVQWPf2eRVXIPwz0tNy qrf3VnjJDJ0RtLTW5WqgPuqV1vG9X0wlw8j7Uye//Wk3TF7sBGJosRHzjL/V6kbx tZu/bOzBGNMyw27ed/R67LSr9Rfh8U63N0vgKjquPeSwmDSyIbcwY41a0gFRw2Hn /M4tDeoRm9Errdqit868iR3JmBT3UfrETs9ZMpbQTtdUB0U+AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJnz1eTY6EPClpeZa7fNBjIKk0sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTAxMzIyOGMtZTI0Ny0z YmU0LWEwNmQtOTU0YjcxOTQwYzNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYjScMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACh3Gwt8Xw5KFMh9AxBja7Mw8BXMoHgCnXz3XNDMluQMLXU5RqQ0zK0a 56nMN2jeJG3NSxDVP2M2VYY54aSEoxEIkFu8JpU3SvDipBHu8wJ3Hw7yQzQkQ/sp /MVwL+utPE5gPyyeDO+VVEjxhScVEHJuASlvaxUGqnJaCZ7o360Sb9hN99pzEecO c9cD8CPSvZYTPIPHoGKAR40fiobp1K82D+eixC9Ai0nfftitkB0OGNJA+k4gPwjg FDV2p8B6ZcPSgxXu9wY5earWCRc04nMKDd5jCjVLxG4PHcuP7LxH2eAUXGTPu548 oYBnr8Kc8S7yYzKB4jI9Lb2Lr6CWHZQ= -----END CERTIFICATE-----Generated at Tue Apr 21 20:19:42 2026 by rpki-client