$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c823205-d14f-3de4-99fc-d12a8a2959b1.roa File: 8c823205-d14f-3de4-99fc-d12a8a2959b1.roa (raw, json) Hash identifier: BG4wfBtLeV43zaB4cvt3ehy01atqDIA9F/PC/vT/6YI= Subject key identifier: 94:46:1A:7E:94:2C:30:AB:D7:AB:BF:E6:40:AA:85:F2:86:68:8E:E3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF961DBC03C941A78810E80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c823205-d14f-3de4-99fc-d12a8a2959b1.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33651 IP address blocks: 98.51.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f9:61:db:c0:3c:94:1a:78:81:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=780936aa-5730-4136-8131-26a6de6b5adc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:40:26:14:ec:b3:07:29:b1:a0:bb:fa:06:1a: 85:51:2a:5c:68:2b:c4:5f:a7:07:a3:24:5d:32:76: 94:8c:60:8f:5e:d3:68:35:6e:58:a3:94:48:0b:37: b9:f9:84:f5:f6:8e:76:77:37:1d:a7:a8:87:18:4a: c9:ee:4e:6e:ce:6d:34:4c:a0:be:cb:80:63:b6:01: 94:c0:57:1a:84:7a:d4:d7:71:37:03:9a:ab:e9:3c: f9:1d:92:57:ce:4d:9b:af:0b:ea:d8:10:7e:69:39: 4e:ab:3a:86:5a:c0:13:3e:0d:90:a4:7b:30:5b:42: de:f5:27:43:42:9d:f3:58:52:53:04:9d:de:e8:9c: 05:8e:fe:12:66:f2:a0:de:e0:05:30:a5:f0:24:4e: cc:86:73:17:0a:42:3e:46:54:87:20:0e:c2:5f:1a: ee:a2:b5:df:29:74:d9:1b:e5:b8:59:d9:95:d0:8b: 2e:14:b3:be:31:ce:81:e0:83:b0:03:e8:0a:4d:59: c7:c7:7e:63:56:e9:f0:80:da:81:76:d9:a1:30:68: 1d:21:a0:01:ca:0f:42:83:44:a4:98:e5:39:29:29: 7c:e6:a8:e7:e2:b4:91:da:e9:1f:5d:19:60:84:c8: 77:ba:7e:8e:12:3a:d3:87:16:c4:c4:21:4f:81:a3: 54:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:46:1A:7E:94:2C:30:AB:D7:AB:BF:E6:40:AA:85:F2:86:68:8E:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c823205-d14f-3de4-99fc-d12a8a2959b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.51.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:7f:5e:6a:22:05:27:8c:53:65:23:9f:9d:4d:da:73:78:e8: a1:4a:51:e7:58:82:ad:1d:09:61:7d:be:3a:ae:7e:72:24:8b: 4b:b3:58:91:f3:ad:03:f6:d3:0e:e4:ae:4c:f9:99:a2:fc:84: 3d:95:d6:71:ae:cf:54:12:57:e4:2d:0d:02:ee:45:6b:80:69: 7d:66:16:7d:40:ea:f4:c4:e9:2c:96:02:93:76:77:e5:0d:3e: 66:39:2c:b2:9b:b8:ed:31:67:af:b9:aa:a1:09:d7:4e:9e:75: ef:f0:78:d4:a9:a7:7c:3b:9c:82:88:7a:9c:b3:76:4e:7d:10: 4f:7d:14:75:5f:40:ee:ef:33:bd:00:ef:08:3a:fd:e4:e1:92: 44:9c:35:9b:46:90:e5:0b:e2:44:c9:8b:1d:f2:29:03:12:17: 70:db:eb:40:35:13:a4:01:a6:af:32:88:56:b4:66:f5:dc:70: 03:1c:1d:64:27:83:69:1b:e5:aa:d4:d1:21:ae:0b:c4:ce:a2: 47:27:5a:00:ff:e0:5b:ba:20:bd:c5:8c:2f:3e:c9:72:d7:2e: 28:fa:bb:84:9b:14:ab:7c:6e:2e:11:34:0a:b5:12:b3:50:23: 58:61:95:78:4a:d9:91:d9:38:b9:35:4d:2f:a4:5d:af:5b:8b: 3a:38:29:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+WHbwDyUGniBDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NzgwOTM2YWEtNTczMC00MTM2LTgxMzEtMjZhNmRlNmI1YWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0AmFOyzBymxoLv6BhqFUSpcaCvEX6cHoyRd MnaUjGCPXtNoNW5Yo5RICze5+YT19o52dzcdp6iHGErJ7k5uzm00TKC+y4BjtgGU wFcahHrU13E3A5qr6Tz5HZJXzk2brwvq2BB+aTlOqzqGWsATPg2QpHswW0Le9SdD Qp3zWFJTBJ3e6JwFjv4SZvKg3uAFMKXwJE7MhnMXCkI+RlSHIA7CXxruorXfKXTZ G+W4WdmV0IsuFLO+Mc6B4IOwA+gKTVnHx35jVunwgNqBdtmhMGgdIaAByg9Cg0Sk mOU5KSl85qjn4rSR2ukfXRlghMh3un6OEjrThxbExCFPgaNUvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJRGGn6ULDCr16u/5kCqhfKGaI7jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGM4MjMyMDUtZDE0Zi0z ZGU0LTk5ZmMtZDEyYThhMjk1OWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYjPsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACl/XmoiBSeMU2Ujn51N2nN46KFKUedYgq0dCWF9vjqufnIki0uzWJHz rQP20w7krkz5maL8hD2V1nGuz1QSV+QtDQLuRWuAaX1mFn1A6vTE6SyWApN2d+UN PmY5LLKbuO0xZ6+5qqEJ106ede/weNSpp3w7nIKIepyzdk59EE99FHVfQO7vM70A 7wg6/eThkkScNZtGkOUL4kTJix3yKQMSF3Db60A1E6QBpq8yiFa0ZvXccAMcHWQn g2kb5arU0SGuC8TOokcnWgD/4Fu6IL3FjC8+yXLXLij6u4SbFKt8bi4RNAq1ErNQ I1hhlXhK2ZHZOLk1TS+kXa9bizo4KQ4= -----END CERTIFICATE-----Generated at Tue Apr 21 20:21:12 2026 by rpki-client