$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b16e8485-7a70-3714-92ae-da839e1b06d2.roa File: b16e8485-7a70-3714-92ae-da839e1b06d2.roa (raw, json) Hash identifier: q8dvoSh5SR41VV+k7WjyDp2lh2aVqfL3+GIEqXqOz8M= Subject key identifier: 79:BD:9C:39:A0:B7:93:D7:EA:2C:FA:2C:4D:12:B8:AF:62:C0:89:48 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF6F1DDB46CB35D3E4DF8A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b16e8485-7a70-3714-92ae-da839e1b06d2.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33651 IP address blocks: 98.51.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:f1:dd:b4:6c:b3:5d:3e:4d:f8:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=421835b2-cedb-45e8-8788-4850f93b7544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1a:9f:a9:c1:93:aa:a3:75:18:ab:ff:7b:a3: 02:ce:98:77:86:a9:46:53:aa:f0:93:83:7a:e2:a7: be:3e:9b:fa:b8:4c:d7:85:7e:98:44:cf:49:19:8f: 4c:77:fa:87:32:83:4a:7b:bf:da:c1:a2:5d:9f:cf: e8:ed:b3:c9:e7:ad:c5:66:57:dc:4f:12:24:53:e4: 3d:70:ae:76:5b:2f:03:eb:3a:8e:82:b3:f5:0b:05: 57:c1:be:55:fa:12:f1:1e:41:a4:49:93:91:1b:86: 06:1a:db:01:b9:4b:d1:c9:c6:cd:81:fb:56:dc:7c: ff:39:e9:25:2e:83:42:0c:8d:7a:61:1c:7c:c1:d6: 8d:00:2b:5d:58:22:cc:72:9d:9d:f6:3b:bb:1e:fe: 0e:4e:e8:1f:cf:b0:a6:23:d9:cc:8b:c4:67:87:10: 8b:a3:fa:56:2e:7a:85:52:9c:92:eb:d8:65:28:e9: d7:ef:23:8f:31:a7:c9:32:7c:ab:4e:a4:67:fd:b1: e7:2f:af:1d:c7:80:19:24:88:5d:c8:37:f9:37:cd: 7b:8e:c6:8c:4d:bf:f2:10:e8:6b:2f:6c:7d:37:4f: 0f:21:06:fd:43:89:e0:ef:86:41:50:f7:b1:9c:0a: 4b:55:4e:a5:1b:2a:40:49:51:15:6e:64:18:a7:db: ba:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:BD:9C:39:A0:B7:93:D7:EA:2C:FA:2C:4D:12:B8:AF:62:C0:89:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b16e8485-7a70-3714-92ae-da839e1b06d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.51.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:c7:73:6e:a0:67:c1:79:88:47:4d:ac:61:c2:05:8b:ee:c1: ab:30:9f:d6:79:1b:f2:46:b1:29:0e:26:a8:6f:35:5e:ec:dd: 60:da:25:5f:e1:fb:71:ba:1d:9f:1f:51:9e:12:02:9f:92:83: e1:16:d0:9a:a3:bf:fa:b8:80:d6:1a:51:41:8b:b5:1d:af:16: 8e:9e:4d:61:1e:58:bb:0c:45:e8:5f:94:cb:28:5f:ba:74:a7: 89:1a:71:d1:73:84:40:98:ed:1b:a6:41:8d:32:52:3f:30:fe: c1:df:32:1b:cc:5a:83:e4:00:b6:1b:f7:c4:d0:82:ed:7b:d2: 30:ed:00:cd:32:bf:78:7f:13:17:97:a8:6e:31:8e:a6:c4:8d: ab:cc:9b:ab:b0:5a:5b:60:19:9f:65:22:a2:6c:43:65:cb:cc: fe:49:11:40:99:5e:77:aa:eb:4c:dc:5f:53:03:14:24:49:fd: be:b6:a9:a2:41:ce:3b:fd:af:9c:34:3e:0c:3c:f2:21:8f:ca: c6:91:d8:67:e3:f4:df:50:bf:04:52:bf:cd:de:71:e1:f9:97: 50:3a:d5:9f:cb:4d:ae:b9:57:f0:9a:b8:5e:81:01:1f:2b:a6: 7b:a5:24:7e:8d:f9:a0:2a:73:52:c8:13:ee:f5:e4:89:14:a0: f9:6f:e5:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9vHdtGyzXT5N+KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NDIxODM1YjItY2VkYi00NWU4LTg3ODgtNDg1MGY5M2I3NTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxqfqcGTqqN1GKv/e6MCzph3hqlGU6rwk4N6 4qe+Ppv6uEzXhX6YRM9JGY9Md/qHMoNKe7/awaJdn8/o7bPJ563FZlfcTxIkU+Q9 cK52Wy8D6zqOgrP1CwVXwb5V+hLxHkGkSZORG4YGGtsBuUvRycbNgftW3Hz/Oekl LoNCDI16YRx8wdaNACtdWCLMcp2d9ju7Hv4OTugfz7CmI9nMi8RnhxCLo/pWLnqF UpyS69hlKOnX7yOPMafJMnyrTqRn/bHnL68dx4AZJIhdyDf5N817jsaMTb/yEOhr L2x9N08PIQb9Q4ng74ZBUPexnApLVU6lGypASVEVbmQYp9u6YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHm9nDmgt5PX6iz6LE0SuK9iwIlIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjE2ZTg0ODUtN2E3MC0z NzE0LTkyYWUtZGE4MzllMWIwNmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYjPcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMvHc26gZ8F5iEdNrGHCBYvuwaswn9Z5G/JGsSkOJqhvNV7s3WDaJV/h +3G6HZ8fUZ4SAp+Sg+EW0Jqjv/q4gNYaUUGLtR2vFo6eTWEeWLsMRehflMsoX7p0 p4kacdFzhECY7RumQY0yUj8w/sHfMhvMWoPkALYb98TQgu170jDtAM0yv3h/ExeX qG4xjqbEjavMm6uwWltgGZ9lIqJsQ2XLzP5JEUCZXneq60zcX1MDFCRJ/b62qaJB zjv9r5w0Pgw88iGPysaR2Gfj9N9QvwRSv83eceH5l1A61Z/LTa65V/CauF6BAR8r pnulJH6N+aAqc1LIE+715IkUoPlv5Zc= -----END CERTIFICATE-----Generated at Tue Apr 21 22:01:58 2026 by rpki-client