$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b21c3059-1ce0-3e60-a76c-5578b39bd73c.roa File: b21c3059-1ce0-3e60-a76c-5578b39bd73c.roa (raw, json) Hash identifier: aA0apSTUrD83I2U1k6S6dqrDOpn1dwNZgfdM/Cf33t8= Subject key identifier: CB:83:0B:3F:AE:05:84:F1:85:C2:57:0C:8B:37:40:19:53:02:D1:73 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F49813E788AB19C81D3706640 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b21c3059-1ce0-3e60-a76c-5578b39bd73c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33667 IP address blocks: 98.36.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:81:3e:78:8a:b1:9c:81:d3:70:66:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=26dc5d61-9e58-4f18-9271-d42a6465193e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:62:f4:8a:6f:23:67:c9:0a:a9:fd:b4:7e:14: 87:4a:9d:91:87:fb:55:b8:19:86:e3:04:89:c2:1f: 37:b0:48:d1:b0:e0:27:f0:b1:91:fe:b0:96:7a:9c: 48:e1:57:17:4b:03:ce:63:b5:cc:34:01:ea:18:b0: a8:0b:cc:42:0e:09:e2:52:42:a3:9a:e6:58:d4:f6: d0:b1:26:ea:a3:2b:ac:f9:9a:29:5e:ce:6f:b1:ae: 1c:8c:47:92:82:0d:21:c2:53:30:f2:4f:67:15:23: 21:61:db:82:31:7a:08:02:8e:58:b9:51:01:22:94: 5a:ce:ce:b8:9f:6c:58:5c:70:0d:a6:5b:9e:48:67: dc:cf:1b:e1:d2:ed:29:44:d8:9b:0e:1f:e2:f2:13: 64:70:6e:4f:99:56:fd:5c:b3:61:6c:81:22:46:8a: a0:af:83:4b:46:95:52:3c:d4:71:a0:e0:81:bb:5e: 36:de:b7:fe:98:4d:89:c1:7d:c0:b9:b4:91:ca:70: 5c:9d:ca:8e:47:db:41:e2:05:b6:6c:21:7f:f6:a8: 6c:aa:da:c9:1f:82:12:6f:f5:44:25:9e:ce:85:6c: 2c:b7:1b:b6:1a:93:7b:54:f7:81:20:47:90:14:d3: 80:5c:09:4c:f1:44:96:57:6f:19:11:90:16:3a:88: 81:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:83:0B:3F:AE:05:84:F1:85:C2:57:0C:8B:37:40:19:53:02:D1:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b21c3059-1ce0-3e60-a76c-5578b39bd73c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.36.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:a8:55:ac:1a:b6:28:5c:92:05:45:8d:ea:88:fd:8f:eb:e0: 03:2e:ed:77:de:25:0c:18:5d:72:7b:d3:d8:6c:b8:08:4a:df: a8:50:4c:e2:6f:d3:63:50:f6:0d:fa:71:fa:16:5b:10:77:e0: 8c:5f:32:01:ac:7d:bf:d8:28:9b:b1:7f:40:6f:fd:3e:0a:4d: b6:2e:3d:49:76:73:49:d8:47:ef:3f:e0:e7:b0:54:60:cd:a9: 6c:d0:c9:80:76:63:f0:b8:0e:55:6f:0e:d8:5d:11:09:68:95: 2b:2e:ef:ba:52:8e:0c:6a:be:00:71:0d:3d:ec:11:91:82:07: 8f:3e:e0:4b:dd:2f:e0:7f:af:78:c1:be:04:e6:d5:92:99:53: ea:15:24:b9:51:fe:b5:35:60:e3:28:47:e8:ef:67:65:86:0f: 86:35:55:e5:1b:09:eb:ef:a0:69:0f:e4:44:dc:1e:96:93:0b: 0c:28:8f:51:73:3b:bd:a7:5f:9c:de:c2:37:b6:6a:2e:b3:c2: 86:52:f1:80:1d:54:e3:a0:35:9f:9d:c6:6d:f1:d2:14:d2:33: ac:68:ca:b6:cd:26:fc:40:bf:70:89:3f:25:26:51:e4:ed:90: c8:44:86:51:44:e4:f0:9f:eb:de:da:01:a8:c7:fc:7a:cb:88: 53:9a:7a:30 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9JgT54irGcgdNwZkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjZkYzVkNjEtOWU1OC00ZjE4LTkyNzEtZDQyYTY0NjUxOTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmL0im8jZ8kKqf20fhSHSp2Rh/tVuBmG4wSJ wh83sEjRsOAn8LGR/rCWepxI4VcXSwPOY7XMNAHqGLCoC8xCDgniUkKjmuZY1PbQ sSbqoyus+ZopXs5vsa4cjEeSgg0hwlMw8k9nFSMhYduCMXoIAo5YuVEBIpRazs64 n2xYXHANplueSGfczxvh0u0pRNibDh/i8hNkcG5PmVb9XLNhbIEiRoqgr4NLRpVS PNRxoOCBu1423rf+mE2JwX3AubSRynBcncqOR9tB4gW2bCF/9qhsqtrJH4ISb/VE JZ7OhWwstxu2GpN7VPeBIEeQFNOAXAlM8USWV28ZEZAWOoiBTQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFMuDCz+uBYTxhcJXDIs3QBlTAtFzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjIxYzMwNTktMWNlMC0z ZTYwLWE3NmMtNTU3OGIzOWJkNzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAYiQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEARahVrBq2KFySBUWN6oj9j+vgAy7td94lDBhdcnvT2Gy4CErfqFBM4m/T Y1D2Dfpx+hZbEHfgjF8yAax9v9gom7F/QG/9PgpNti49SXZzSdhH7z/g57BUYM2p bNDJgHZj8LgOVW8O2F0RCWiVKy7vulKODGq+AHENPewRkYIHjz7gS90v4H+veMG+ BObVkplT6hUkuVH+tTVg4yhH6O9nZYYPhjVV5RsJ6++gaQ/kRNwelpMLDCiPUXM7 vadfnN7CN7ZqLrPChlLxgB1U46A1n53GbfHSFNIzrGjKts0m/EC/cIk/JSZR5O2Q yESGUUTk8J/r3toBqMf8esuIU5p6MA== -----END CERTIFICATE-----Generated at Sat Sep 26 10:36:37 2026 by rpki-client