$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/01f7551c-c4f8-32b3-8473-fd122cbbc363.roa File: 01f7551c-c4f8-32b3-8473-fd122cbbc363.roa (raw, json) Hash identifier: p4Ak2RkhAv5fneg6vsKep1r/7BnCKkgEgf9DWpCZZNA= Subject key identifier: 72:DC:EB:7F:B8:B6:8E:4D:06:24:CF:2C:18:13:79:86:5D:5F:8A:77 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5892A366EEFE7AF2D5A3E0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/01f7551c-c4f8-32b3-8473-fd122cbbc363.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 98.213.180.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:92:a3:66:ee:fe:7a:f2:d5:a3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=106d9ffe-2b49-485b-9e5f-4b613aa3a1b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:0f:bf:01:36:0b:51:1f:46:97:20:14:a3:2d: 4f:19:f2:31:25:74:da:8b:85:81:31:41:cf:fa:54: a9:aa:c7:9a:5a:65:cf:1f:e7:8e:ae:9d:9f:f6:6b: 0e:bf:57:d2:68:63:13:cc:52:e0:c5:d3:c2:29:97: 02:bf:4e:36:6f:1c:c8:81:73:e7:5f:f3:7a:1b:89: 75:d2:b5:57:e9:7c:60:da:11:e3:c6:e7:5c:99:09: 95:07:5b:4b:aa:2e:a1:eb:8b:95:39:ea:1b:86:34: ff:06:f4:90:13:25:cc:40:9a:5c:5c:94:73:7f:33: 46:43:ef:b9:34:44:83:b6:87:bf:0d:c2:4e:24:e1: 41:fd:e6:07:41:6e:65:7e:3a:e5:c1:8c:16:21:5a: a6:46:db:f8:80:40:98:67:2c:4a:9b:24:47:64:71: 0d:ae:44:2a:e2:6b:53:9e:9c:85:d0:c8:c0:2a:9f: 0c:c4:c4:95:e6:df:de:fc:12:a3:6d:5d:0e:2b:e9: 90:64:80:91:f2:6b:3a:bf:46:7b:f9:2d:5c:e2:02: 3f:b4:11:c9:c5:d1:c7:65:a8:9a:63:20:9f:62:58: 71:53:3e:47:bd:52:e8:44:e3:f2:a6:9b:ac:93:23: a7:35:26:04:1e:6b:06:2f:e3:02:b9:47:d5:f3:16: d3:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:DC:EB:7F:B8:B6:8E:4D:06:24:CF:2C:18:13:79:86:5D:5F:8A:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/01f7551c-c4f8-32b3-8473-fd122cbbc363.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.213.180.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:2f:33:fb:87:9e:da:2b:25:64:14:56:d5:38:ef:7e:9e:1f: 1c:7b:04:e0:d9:28:5f:db:bc:c8:85:73:56:14:f9:e2:49:6d: a7:24:f7:f5:96:0d:65:f4:8e:e7:df:21:33:52:8d:52:f0:2c: 12:56:2e:86:1b:f0:ba:b9:13:42:f4:5b:79:e2:c2:95:c4:c4: 91:58:7b:71:30:79:35:dc:58:e0:61:3b:dd:06:24:2f:cf:00: 24:e4:c1:df:f9:bb:32:68:ae:b0:a8:7d:aa:09:a5:81:2f:f2: f4:b3:5f:47:91:37:d6:ba:7d:ed:29:9d:d2:ac:4d:39:bd:d0: 3c:c4:30:dc:5e:99:a4:7c:33:62:4a:62:33:64:37:59:d6:fa: 78:5c:38:9f:be:72:19:b0:de:29:68:2e:22:25:72:80:b2:33: 0a:17:5b:3d:35:42:65:fe:6b:46:1d:a1:27:79:c5:3c:5a:7c: ca:72:77:5d:4c:82:ee:79:60:92:2e:90:6c:ed:23:9e:dd:f4: 0d:41:69:56:5c:54:d7:ff:f1:c5:97:b5:aa:a6:d6:f8:b5:cd: 64:ec:0c:c0:fb:22:7c:57:bc:9a:47:a5:c3:8b:8e:c0:9c:8e: 65:3e:b6:27:e1:cc:b2:52:3b:59:3f:43:98:91:92:26:06:df: 4f:48:3f:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWJKjZu7+evLVo+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MTA2ZDlmZmUtMmI0OS00ODViLTllNWYtNGI2MTNhYTNhMWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQ+/ATYLUR9GlyAUoy1PGfIxJXTai4WBMUHP +lSpqseaWmXPH+eOrp2f9msOv1fSaGMTzFLgxdPCKZcCv042bxzIgXPnX/N6G4l1 0rVX6Xxg2hHjxudcmQmVB1tLqi6h64uVOeobhjT/BvSQEyXMQJpcXJRzfzNGQ++5 NESDtoe/DcJOJOFB/eYHQW5lfjrlwYwWIVqmRtv4gECYZyxKmyRHZHENrkQq4mtT npyF0MjAKp8MxMSV5t/e/BKjbV0OK+mQZICR8ms6v0Z7+S1c4gI/tBHJxdHHZaia YyCfYlhxUz5HvVLoROPyppuskyOnNSYEHmsGL+MCuUfV8xbToQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHLc63+4to5NBiTPLBgTeYZdX4p3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDFmNzU1MWMtYzRmOC0z MmIzLTg0NzMtZmQxMjJjYmJjMzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYtW0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYvM/uHntorJWQUVtU4736eHxx7BODZKF/bvMiFc1YU+eJJback9/WW DWX0juffITNSjVLwLBJWLoYb8Lq5E0L0W3niwpXExJFYe3EweTXcWOBhO90GJC/P ACTkwd/5uzJorrCofaoJpYEv8vSzX0eRN9a6fe0pndKsTTm90DzEMNxemaR8M2JK YjNkN1nW+nhcOJ++chmw3iloLiIlcoCyMwoXWz01QmX+a0YdoSd5xTxafMpyd11M gu55YJIukGztI57d9A1BaVZcVNf/8cWXtaqm1vi1zWTsDMD7InxXvJpHpcOLjsCc jmU+tifhzLJSO1k/Q5iRkiYG309IP78= -----END CERTIFICATE-----Generated at Sun Mar 1 18:52:26 2026 by rpki-client