$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc25887d-78d4-3ac6-be05-11eb92b9dae5.roa File: dc25887d-78d4-3ac6-be05-11eb92b9dae5.roa (raw, json) Hash identifier: kruBBPnPirWDM1aJo/ZLEc4FYeSV0zQYjnfqro+u/DM= Subject key identifier: 0C:6D:5C:3E:28:0C:A6:16:2B:8B:C7:65:32:E2:64:D1:66:78:CA:D6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D52438605A876FE892DDBBBC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc25887d-78d4-3ac6-be05-11eb92b9dae5.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 22258 IP address blocks: 98.251.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:86:05:a8:76:fe:89:2d:db:bb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=5b3ebb98-3ff3-4b6e-8d41-0b747a415a85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3f:fe:c0:f8:a0:89:86:81:b2:2f:2b:61:13: b7:0b:74:32:fb:c9:c8:d7:a9:fe:4a:b5:32:82:67: b8:40:8c:cf:8e:3c:af:6a:ee:c0:ed:43:aa:90:df: 97:d5:63:42:f3:16:02:6e:a9:97:ff:54:3e:04:30: be:4e:04:3b:59:57:71:88:30:f9:77:14:60:3e:59: 4b:51:b7:c2:5b:cb:13:69:8f:4f:e6:d6:13:64:1f: 24:3e:f5:c5:99:0d:fd:f6:bf:c2:3a:37:fd:ea:8c: 25:c5:f7:48:91:6d:b7:c0:c4:67:95:a7:88:50:4e: 81:53:7f:d2:cd:a4:97:bf:cf:63:de:f5:07:f8:c9: 8e:5e:3b:b6:1d:2f:ed:1c:13:df:cc:35:01:ad:dc: 44:24:c3:7d:ae:67:7e:a9:90:fd:da:ee:e4:62:55: 8e:7f:ad:53:65:9b:c3:f7:16:a0:41:8c:22:89:6f: cb:e4:c5:e8:c5:9f:1a:4f:d4:74:6c:c5:54:05:d3: f2:5e:38:a2:e8:da:0d:79:1b:ff:6b:9c:bb:f7:da: 1f:c0:f9:35:e3:17:bd:5d:87:8c:e8:d4:7f:c8:68: c7:a0:fc:e0:ff:50:1e:10:2d:ee:3d:74:7b:32:d6: 25:e7:0a:c9:3b:f0:43:3c:db:af:3d:22:29:e3:2d: d5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:6D:5C:3E:28:0C:A6:16:2B:8B:C7:65:32:E2:64:D1:66:78:CA:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc25887d-78d4-3ac6-be05-11eb92b9dae5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.251.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:54:ee:92:85:2b:af:f2:fe:63:2c:be:83:f9:f8:34:05:f3: 4d:43:cb:e4:fd:20:87:83:cf:cd:4c:a2:64:b3:e6:db:bb:58: 85:c9:e9:03:f4:19:b2:da:2b:20:c0:91:0d:5a:bb:60:40:93: ef:f6:af:bf:cc:34:34:31:aa:36:06:d9:c0:69:65:64:53:37: ed:20:2b:7b:41:73:31:ce:52:67:1b:80:33:12:7c:a8:c5:7e: 3e:0f:ea:0a:43:64:65:62:d7:dc:ab:2c:90:60:42:a8:3c:e7: 34:1d:fb:58:1c:32:5c:98:5a:9c:53:d0:fb:35:7b:f2:89:44: 48:a9:dc:3a:eb:4c:8d:58:90:3a:80:67:14:c2:f4:43:b6:55: 25:fa:01:32:43:d7:59:3e:68:00:23:0b:73:68:a6:d9:db:f2: 0d:dd:0b:d3:41:d3:08:75:a2:35:94:7c:4f:77:95:ca:97:59: e0:75:56:88:bd:55:fb:af:d4:a5:6b:c7:c8:52:ed:1a:0d:0e: b2:6e:be:70:af:30:6e:fa:2a:b4:e9:3e:f9:a5:53:f9:0d:e5: 36:7e:1c:58:0f:53:ac:71:34:53:24:de:9f:d7:a3:39:58:82: 8e:d0:d9:74:d3:f1:40:22:ac:bc:8b:40:ac:25:fd:c2:ee:4d: 6e:9d:ba:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ4YFqHb+iS3bu8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk NWIzZWJiOTgtM2ZmMy00YjZlLThkNDEtMGI3NDdhNDE1YTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtD/+wPigiYaBsi8rYRO3C3Qy+8nI16n+SrUy gme4QIzPjjyvau7A7UOqkN+X1WNC8xYCbqmX/1Q+BDC+TgQ7WVdxiDD5dxRgPllL UbfCW8sTaY9P5tYTZB8kPvXFmQ399r/COjf96owlxfdIkW23wMRnlaeIUE6BU3/S zaSXv89j3vUH+MmOXju2HS/tHBPfzDUBrdxEJMN9rmd+qZD92u7kYlWOf61TZZvD 9xagQYwiiW/L5MXoxZ8aT9R0bMVUBdPyXjii6NoNeRv/a5y799ofwPk14xe9XYeM 6NR/yGjHoPzg/1AeEC3uPXR7MtYl5wrJO/BDPNuvPSIp4y3VQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAxtXD4oDKYWK4vHZTLiZNFmeMrWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGMyNTg4N2QtNzhkNC0z YWM2LWJlMDUtMTFlYjkyYjlkYWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYvuIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALFU7pKFK6/y/mMsvoP5+DQF801Dy+T9IIeDz81MomSz5tu7WIXJ6QP0 GbLaKyDAkQ1au2BAk+/2r7/MNDQxqjYG2cBpZWRTN+0gK3tBczHOUmcbgDMSfKjF fj4P6gpDZGVi19yrLJBgQqg85zQd+1gcMlyYWpxT0Ps1e/KJREip3DrrTI1YkDqA ZxTC9EO2VSX6ATJD11k+aAAjC3Noptnb8g3dC9NB0wh1ojWUfE93lcqXWeB1Voi9 Vfuv1KVrx8hS7RoNDrJuvnCvMG76KrTpPvmlU/kN5TZ+HFgPU6xxNFMk3p/XozlY go7Q2XTT8UAirLyLQKwl/cLuTW6durE= -----END CERTIFICATE-----Generated at Fri Apr 17 19:36:40 2026 by rpki-client