$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/003dda49-677c-39c0-a27f-c7c0635dae3d.roa File: 003dda49-677c-39c0-a27f-c7c0635dae3d.roa (raw, json) Hash identifier: CkhMXwREGX6qr3+8fGhRrxxr46C2fzIXfhpvfQozdUA= Subject key identifier: 56:81:04:34:13:FF:71:56:0E:F0:1E:2D:4D:A1:94:0E:F5:45:CB:AA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5D1707636A819D6CF11E00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/003dda49-677c-39c0-a27f-c7c0635dae3d.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 98.52.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5d:17:07:63:6a:81:9d:6c:f1:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=c0177ae9-2a64-42d2-a965-145e27007ee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:dd:29:eb:5b:ea:24:ad:30:11:1a:d4:b7:16: 0e:e2:a7:79:31:4f:73:be:79:1a:cc:b8:e1:74:73: d7:7c:27:dd:3c:34:16:63:17:88:33:af:02:88:24: 06:d4:8f:f0:a1:2b:a1:2d:5a:9b:bc:a2:bd:f2:b4: 94:4d:1e:b8:66:57:8c:cd:57:08:3b:60:8e:0d:da: 99:7b:08:0a:df:d8:a6:ee:6e:70:eb:70:85:ed:0e: ad:07:ff:23:d2:12:43:d2:cc:c6:ad:23:c4:72:46: 80:7e:3e:aa:04:00:ce:44:a0:8d:ba:b2:da:65:8e: 47:7b:db:e6:9e:d7:54:a5:bc:5c:76:d1:82:0a:60: 93:88:b5:20:9e:2a:04:0b:36:79:a8:0a:a9:b0:5a: 6c:3a:8f:1d:b6:db:09:52:0e:11:d4:9f:0a:6a:d0: 12:00:38:26:4a:53:e7:3c:fe:d9:a6:4e:4d:c4:2a: 57:18:62:05:7c:0c:76:c9:b7:ec:7a:a2:b7:2f:9c: 5d:6f:44:19:c6:37:16:0d:ef:d8:ae:17:37:4b:36: ef:fa:d6:32:17:71:b8:6a:7f:fa:33:32:5b:ce:a6: 60:bb:03:e0:dd:ce:42:bd:da:ea:2f:7d:12:89:f2: 73:72:ba:cf:1c:44:42:c9:8f:32:41:ec:f3:48:ea: 1e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:81:04:34:13:FF:71:56:0E:F0:1E:2D:4D:A1:94:0E:F5:45:CB:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/003dda49-677c-39c0-a27f-c7c0635dae3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.52.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:f1:20:dc:8e:24:c7:8d:18:bb:b8:27:cf:a3:0d:19:01:be: 9f:ea:f5:90:cf:a9:a9:08:7d:09:e4:e1:34:14:c2:3f:3f:7f: fa:6e:49:0c:d1:f5:9d:33:28:28:f2:89:89:fd:39:7a:54:71: 98:b8:b6:8c:ce:16:d4:86:41:85:07:ca:00:b2:1d:5a:d8:c7: 89:08:ca:f4:2f:a6:4a:73:28:b7:25:e3:7f:8f:1c:82:4a:f4: 98:5d:e7:27:c9:81:66:a5:be:e7:b9:1e:99:21:3a:4b:44:22: 46:30:60:18:71:45:c8:4e:1f:23:86:87:da:81:53:af:28:0b: b4:13:17:93:b7:91:d9:c0:ce:40:3b:65:da:0a:1f:e8:96:c5: 69:98:45:36:59:71:24:a9:fe:28:7b:c9:84:f2:3d:50:be:e4: 46:89:75:27:e0:eb:4e:7c:e7:79:7a:0e:b6:a6:12:38:3e:b5: dc:f5:e8:33:c6:70:64:75:d6:5a:e0:00:92:50:13:ec:84:9f: 5a:5d:3e:07:69:24:03:ad:ac:ff:fb:3c:a3:4e:79:1d:fb:5e: c3:41:62:95:95:9b:ca:0d:18:32:1f:a2:b0:f4:87:f5:2f:e2: cc:60:68:ac:a7:f7:e5:36:8a:9d:08:f1:87:ad:91:f8:a1:14: 0c:b3:0f:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXRcHY2qBnWzxHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YzAxNzdhZTktMmE2NC00MmQyLWE5NjUtMTQ1ZTI3MDA3ZWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn90p61vqJK0wERrUtxYO4qd5MU9zvnkazLjh dHPXfCfdPDQWYxeIM68CiCQG1I/woSuhLVqbvKK98rSUTR64ZleMzVcIO2CODdqZ ewgK39im7m5w63CF7Q6tB/8j0hJD0szGrSPEckaAfj6qBADORKCNurLaZY5He9vm ntdUpbxcdtGCCmCTiLUgnioECzZ5qAqpsFpsOo8dttsJUg4R1J8KatASADgmSlPn PP7Zpk5NxCpXGGIFfAx2ybfseqK3L5xdb0QZxjcWDe/Yrhc3Szbv+tYyF3G4an/6 MzJbzqZguwPg3c5CvdrqL30SifJzcrrPHERCyY8yQezzSOoeuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFaBBDQT/3FWDvAeLU2hlA71RcuqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDAzZGRhNDktNjc3Yy0z OWMwLWEyN2YtYzdjMDYzNWRhZTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYjTYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrxINyOJMeNGLu4J8+jDRkBvp/q9ZDPqakIfQnk4TQUwj8/f/puSQzR 9Z0zKCjyiYn9OXpUcZi4tozOFtSGQYUHygCyHVrYx4kIyvQvpkpzKLcl43+PHIJK 9Jhd5yfJgWalvue5HpkhOktEIkYwYBhxRchOHyOGh9qBU68oC7QTF5O3kdnAzkA7 ZdoKH+iWxWmYRTZZcSSp/ih7yYTyPVC+5EaJdSfg605853l6DramEjg+tdz16DPG cGR11lrgAJJQE+yEn1pdPgdpJAOtrP/7PKNOeR37XsNBYpWVm8oNGDIforD0h/Uv 4sxgaKyn9+U2ip0I8YetkfihFAyzD+8= -----END CERTIFICATE-----Generated at Sun Mar 1 20:48:35 2026 by rpki-client