$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/003d5bc1-ddff-3192-924f-e763652a1d97.roa File: 003d5bc1-ddff-3192-924f-e763652a1d97.roa (raw, json) Hash identifier: AfBQVE5zQFxTUbD3xJqGzZoj4EU1XBD7xH3K5x78x80= Subject key identifier: 82:ED:E4:B7:F3:C3:8B:A1:D6:9D:7F:5D:9E:B6:1C:35:28:6D:08:94 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5E176D05DC4F5C4E678B00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/003d5bc1-ddff-3192-924f-e763652a1d97.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 98.33.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:17:6d:05:dc:4f:5c:4e:67:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=7e5fb5f9-195f-4d94-a1ac-b980b9d3ac19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a3:5f:bf:1f:c1:02:b2:3c:b3:67:6f:98:52: 22:71:cb:a0:c2:ff:fe:bf:b6:bd:3f:c8:4b:5e:43: d1:35:53:df:a5:d9:56:2f:dd:25:61:4b:fc:dc:cb: 7b:af:34:23:fc:6f:72:f8:d9:b3:8a:b3:a3:28:b9: 6f:0c:b8:42:47:27:79:7d:83:d8:2e:36:45:92:b0: 0e:92:14:f4:2e:4f:31:fd:ef:5d:1c:86:96:f3:32: 27:17:ad:1f:a3:cd:50:16:41:b9:b3:1b:81:fa:99: 15:29:3f:0b:b2:df:b3:bd:5c:9b:f2:86:65:f5:6e: c5:07:dd:6d:e5:e6:c4:b5:8a:f8:a9:09:c5:d0:68: 61:1f:ee:e9:9f:f1:8a:ad:a8:73:02:a3:3d:e3:b9: b5:15:92:d6:07:21:91:ef:dd:a6:9f:58:ad:74:21: 52:01:01:6f:60:f8:ce:98:ce:ad:64:1e:2f:02:6e: 95:2d:66:13:e8:1c:86:db:40:cf:04:87:cf:a3:21: 74:60:ba:43:01:36:83:ae:d9:aa:19:91:56:a7:ef: bb:a1:c1:e9:39:39:66:86:80:0f:4b:52:53:75:ba: 87:29:23:6d:2a:fc:e1:37:1c:14:3c:79:fb:ac:ce: 62:5e:65:4a:23:79:53:db:f5:42:81:1e:1e:6c:f2: 8f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:ED:E4:B7:F3:C3:8B:A1:D6:9D:7F:5D:9E:B6:1C:35:28:6D:08:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/003d5bc1-ddff-3192-924f-e763652a1d97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.33.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:95:de:dc:cf:a7:59:f6:d4:37:0d:14:b2:89:e5:f8:bd:60: 36:eb:ce:0b:b2:12:df:de:9c:7d:54:27:28:e7:c5:b0:f7:26: 51:27:cc:93:d7:6a:61:40:1b:a2:94:a4:e2:b4:b8:12:e0:47: 2b:c6:5f:6e:2f:72:7b:c5:8b:2f:51:03:2a:98:e8:64:c6:c8: 08:e6:eb:fa:1b:e0:a9:a6:36:14:2b:e7:0c:2c:e1:84:b6:1f: 0f:96:04:8d:a0:83:76:3b:0b:5d:6f:3f:bd:4f:2e:fe:bb:a1: ad:92:f6:e1:9d:b7:99:f8:78:89:af:c2:f8:69:24:13:ab:f1: 4d:ff:ac:0b:61:38:25:c9:a6:35:c2:f5:7e:c2:64:4d:a4:48: 1d:02:e4:50:28:0e:e2:fa:6a:ac:c0:3c:bb:22:a1:6a:d4:c9: da:f0:55:ce:3a:e8:9b:85:24:26:a4:72:4a:33:76:14:3a:c3: cc:e3:13:67:f5:1b:9e:1b:60:e9:f5:a6:2f:39:8c:01:8d:01: 1b:6b:02:4a:cd:35:24:18:db:d4:6b:6a:79:29:f4:86:7a:ad: 8b:a3:55:fb:01:e8:53:3d:6a:95:be:1a:f3:6b:de:fe:f2:5d: bf:9f:0a:b2:a1:01:4f:af:4f:ef:35:25:06:72:5e:fb:a2:ac: 5e:18:a8:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXhdtBdxPXE5niwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk N2U1ZmI1ZjktMTk1Zi00ZDk0LWExYWMtYjk4MGI5ZDNhYzE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaNfvx/BArI8s2dvmFIiccugwv/+v7a9P8hL XkPRNVPfpdlWL90lYUv83Mt7rzQj/G9y+NmzirOjKLlvDLhCRyd5fYPYLjZFkrAO khT0Lk8x/e9dHIaW8zInF60fo81QFkG5sxuB+pkVKT8Lst+zvVyb8oZl9W7FB91t 5ebEtYr4qQnF0GhhH+7pn/GKrahzAqM947m1FZLWByGR792mn1itdCFSAQFvYPjO mM6tZB4vAm6VLWYT6ByG20DPBIfPoyF0YLpDATaDrtmqGZFWp++7ocHpOTlmhoAP S1JTdbqHKSNtKvzhNxwUPHn7rM5iXmVKI3lT2/VCgR4ebPKPGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFILt5Lfzw4uh1p1/XZ62HDUobQiUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDAzZDViYzEtZGRmZi0z MTkyLTkyNGYtZTc2MzY1MmExZDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYiF6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOV3tzPp1n21DcNFLKJ5fi9YDbrzguyEt/enH1UJyjnxbD3JlEnzJPX amFAG6KUpOK0uBLgRyvGX24vcnvFiy9RAyqY6GTGyAjm6/ob4KmmNhQr5wws4YS2 Hw+WBI2gg3Y7C11vP71PLv67oa2S9uGdt5n4eImvwvhpJBOr8U3/rAthOCXJpjXC 9X7CZE2kSB0C5FAoDuL6aqzAPLsioWrUydrwVc466JuFJCakckozdhQ6w8zjE2f1 G54bYOn1pi85jAGNARtrAkrNNSQY29Rrankp9IZ6rYujVfsB6FM9apW+GvNr3v7y Xb+fCrKhAU+vT+81JQZyXvuirF4YqEY= -----END CERTIFICATE-----Generated at Sun Mar 1 22:47:55 2026 by rpki-client