$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/36c1be89-c9f1-34fd-aed7-5e03b29f69a7.roa File: 36c1be89-c9f1-34fd-aed7-5e03b29f69a7.roa (raw, json) Hash identifier: 9p+7uqAYanahoNg1QiasfByu45a5tjMzi9HBd3O+Xd0= Subject key identifier: 4F:27:92:BC:03:8A:39:C0:62:AC:EB:63:0D:55:62:E0:54:E3:35:D1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE591C031F08CEB9E4F43C20 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/36c1be89-c9f1-34fd-aed7-5e03b29f69a7.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 98.51.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:59:1c:03:1f:08:ce:b9:e4:f4:3c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=7f7a8343-1ff7-48b3-8290-0ce01e6c4702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:21:02:b8:e4:ad:74:ef:62:68:c1:80:89:43: a9:f9:a2:f9:0f:6f:bd:bc:ff:b2:ee:a7:5e:fb:21: 62:20:b2:41:85:c1:8f:67:cf:12:67:f6:0e:cc:e9: c4:26:9d:32:cf:33:5d:b0:0a:ee:8e:ff:32:d4:98: b0:cd:35:c6:1a:56:e0:b5:33:be:ae:d7:79:94:f6: 88:9f:eb:fb:6c:a3:62:41:1f:08:bf:48:1d:10:28: a1:8c:63:9f:7f:3f:44:3c:39:2c:b3:aa:ad:2e:87: e6:69:0a:fb:4c:f3:2e:02:f6:9d:70:2f:3a:c3:c5: e4:0f:2f:88:bb:54:06:7b:be:4f:22:eb:a4:4e:d3: 68:31:83:7a:cd:94:dd:6c:f7:6c:02:54:98:3d:2d: 65:17:04:d8:9b:a7:b3:17:e5:a5:9b:84:23:b8:b2: 9b:92:a8:80:4a:01:35:4a:82:10:13:b7:b2:da:21: ba:d4:b9:53:c8:fb:86:90:85:67:45:57:57:ab:9f: 58:f5:3d:a7:e4:0b:f4:ba:4a:95:88:ae:6b:25:b8: bc:12:f0:4f:22:e6:16:e4:bc:be:5f:ef:03:7e:7e: fa:5e:d6:9d:96:32:d6:e7:45:af:06:45:f9:c3:5e: 54:ad:32:b8:12:0f:d5:67:f0:d4:bd:6c:d5:03:81: ba:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:27:92:BC:03:8A:39:C0:62:AC:EB:63:0D:55:62:E0:54:E3:35:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/36c1be89-c9f1-34fd-aed7-5e03b29f69a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.51.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:fd:5a:80:db:5f:cd:6b:6b:78:9e:60:b4:d4:ea:18:da:c4: 42:01:69:79:df:94:24:bf:70:8c:76:53:88:e3:99:87:7a:7b: 10:23:3d:ba:05:8c:70:d0:01:26:21:c0:7b:bb:a5:3f:3f:57: 7a:b3:ec:45:94:33:4b:aa:d8:69:86:61:01:f1:4b:71:5c:f0: 65:af:60:e6:b5:fe:a3:48:ab:87:c9:0e:2c:0f:89:3e:59:dd: a7:4a:2b:da:17:86:09:80:b6:56:e1:64:95:c1:c5:ec:39:0d: ce:40:74:6e:e6:f4:8e:13:50:bb:5d:61:bc:db:b4:f5:0a:0e: 7e:3d:05:3e:f9:93:88:61:2d:ec:6a:f7:5a:93:d1:a2:11:bf: fb:a1:1e:07:64:36:9f:34:f1:fc:88:c7:30:37:cd:99:ca:03: 55:36:dc:d2:f0:20:79:da:26:28:d1:f5:1b:92:83:bd:4c:39: 35:86:a6:f7:c3:35:bf:84:d4:fe:ef:c0:91:96:2e:7b:a1:f6: f2:9d:d8:46:7b:c1:0e:98:5f:eb:cf:85:7c:7e:ee:22:2f:76: 3c:3f:86:9f:4c:2a:c7:6e:2f:9a:8f:cd:e5:ee:59:fa:83:f1: 83:a1:5c:c9:de:ed:06:42:07:58:4f:88:11:00:9e:ab:34:b1: 62:33:08:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWRwDHwjOueT0PCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk N2Y3YTgzNDMtMWZmNy00OGIzLTgyOTAtMGNlMDFlNmM0NzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SECuOStdO9iaMGAiUOp+aL5D2+9vP+y7qde +yFiILJBhcGPZ88SZ/YOzOnEJp0yzzNdsArujv8y1JiwzTXGGlbgtTO+rtd5lPaI n+v7bKNiQR8Iv0gdECihjGOffz9EPDkss6qtLofmaQr7TPMuAvadcC86w8XkDy+I u1QGe75PIuukTtNoMYN6zZTdbPdsAlSYPS1lFwTYm6ezF+Wlm4QjuLKbkqiASgE1 SoIQE7ey2iG61LlTyPuGkIVnRVdXq59Y9T2n5Av0ukqViK5rJbi8EvBPIuYW5Ly+ X+8Dfn76XtadljLW50WvBkX5w15UrTK4Eg/VZ/DUvWzVA4G67QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8nkrwDijnAYqzrYw1VYuBU4zXRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzZjMWJlODktYzlmMS0z NGZkLWFlZDctNWUwM2IyOWY2OWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYjOcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHT9WoDbX81ra3ieYLTU6hjaxEIBaXnflCS/cIx2U4jjmYd6exAjPboF jHDQASYhwHu7pT8/V3qz7EWUM0uq2GmGYQHxS3Fc8GWvYOa1/qNIq4fJDiwPiT5Z 3adKK9oXhgmAtlbhZJXBxew5Dc5AdG7m9I4TULtdYbzbtPUKDn49BT75k4hhLexq 91qT0aIRv/uhHgdkNp808fyIxzA3zZnKA1U23NLwIHnaJijR9RuSg71MOTWGpvfD Nb+E1P7vwJGWLnuh9vKd2EZ7wQ6YX+vPhXx+7iIvdjw/hp9MKsduL5qPzeXuWfqD 8YOhXMne7QZCB1hPiBEAnqs0sWIzCOQ= -----END CERTIFICATE-----Generated at Sun Mar 1 23:06:41 2026 by rpki-client