$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04aff7d7-62cf-3646-9772-baf6e4f4d023.roa File: 04aff7d7-62cf-3646-9772-baf6e4f4d023.roa (raw, json) Hash identifier: bMYDtDzPFrSYFCmrIHKt/rEiiRYfaOLW7Gxl9hdUqOE= Subject key identifier: FF:F6:5B:51:76:EC:EF:A7:32:5F:30:49:93:DE:3B:9C:26:BA:C8:F8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5E14ACC8DDFD1CDF5CBD60 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04aff7d7-62cf-3646-9772-baf6e4f4d023.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 98.234.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:14:ac:c8:dd:fd:1c:df:5c:bd:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=54c576c3-9bae-4aed-b9e9-c63ff6495200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5f:df:64:c3:d9:60:de:12:fa:b2:d4:22:e8: b2:42:57:a6:b1:98:14:7a:ae:59:d6:d1:24:cb:a6: 21:72:7d:cd:74:a9:ec:41:c5:9c:43:d7:60:24:1f: fb:6d:94:68:4c:2a:0b:09:81:13:8a:e6:fd:32:0e: 31:a8:c3:c5:46:9a:59:8b:87:8d:02:e2:b6:8e:1c: b5:d1:5d:d1:d4:ed:61:ee:a1:a2:6b:cd:4d:bb:21: d1:bf:85:6d:03:1f:49:6f:92:f3:7a:73:d4:3b:61: da:af:b1:f3:3a:2b:d3:55:9f:9a:1a:6c:12:f7:df: a5:5a:ae:85:7f:6f:b6:1c:f5:a5:c7:d8:20:de:c9: d1:d4:c1:a8:5f:a6:b7:61:f4:74:c5:05:05:aa:05: 0a:29:9d:d0:b3:ef:0d:7d:26:5a:00:e2:28:57:e8: 05:40:18:ed:82:ce:ab:a1:b1:a0:ba:91:e4:66:92: 19:c3:e9:d9:b5:8f:61:9a:8d:62:62:e8:f6:ed:81: 2f:88:60:44:91:d3:2e:42:9f:1b:37:05:c1:e0:d1: 5f:2e:db:be:8c:66:6d:3b:2b:69:93:ab:c0:30:5b: df:6f:db:15:b9:66:97:ad:d5:ef:e7:04:f2:af:19: 6b:ee:9a:13:69:13:a6:3b:0b:10:84:0f:d4:98:f2: 39:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F6:5B:51:76:EC:EF:A7:32:5F:30:49:93:DE:3B:9C:26:BA:C8:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04aff7d7-62cf-3646-9772-baf6e4f4d023.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.234.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:8b:ec:1b:3b:34:68:d2:f8:df:e5:63:e9:0d:b5:9e:5a:c0: 74:e2:1e:5c:1e:fc:81:eb:da:81:38:ba:85:00:e0:33:b9:66: 03:ad:ca:0d:fd:f7:c6:05:6c:05:9e:2f:7c:7c:16:e5:a8:0a: e8:55:d6:c1:7a:1f:18:a6:5a:a1:76:10:52:7a:d8:5e:99:17: d2:a2:32:e1:ab:af:3f:24:23:87:81:b1:7b:92:ac:3d:90:9e: b5:9d:15:c5:e2:1f:74:e8:c0:c6:7c:54:ca:80:0a:de:a4:9b: 93:00:85:de:94:86:0b:47:27:15:85:9c:af:4c:6f:4c:6e:7c: 2b:a0:1b:55:b8:ea:9f:8d:fa:f8:e8:ab:8c:8b:cb:fd:1f:d0: 28:d2:96:49:fa:da:b3:58:c1:a5:dc:04:4b:7c:85:12:07:2b: 81:1f:68:8a:a6:92:b8:17:29:37:80:ec:f1:01:0f:e5:75:1c: 9e:8e:a3:0b:49:4a:33:d9:06:9a:cd:cc:44:7f:b8:33:b6:ac: d3:12:a4:28:a8:b8:48:a3:5d:9c:5f:bc:ff:86:1e:7b:32:98: d0:10:ab:70:13:ce:75:77:93:e4:e2:ff:8b:72:93:48:eb:46: 38:d4:ad:22:bc:0e:92:61:00:e3:1f:32:44:f5:eb:b7:64:8b: b1:7a:a4:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXhSsyN39HN9cvWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NTRjNTc2YzMtOWJhZS00YWVkLWI5ZTktYzYzZmY2NDk1MjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1/fZMPZYN4S+rLUIuiyQlemsZgUeq5Z1tEk y6Yhcn3NdKnsQcWcQ9dgJB/7bZRoTCoLCYETiub9Mg4xqMPFRppZi4eNAuK2jhy1 0V3R1O1h7qGia81NuyHRv4VtAx9Jb5LzenPUO2Har7HzOivTVZ+aGmwS99+lWq6F f2+2HPWlx9gg3snR1MGoX6a3YfR0xQUFqgUKKZ3Qs+8NfSZaAOIoV+gFQBjtgs6r obGgupHkZpIZw+nZtY9hmo1iYuj27YEviGBEkdMuQp8bNwXB4NFfLtu+jGZtOytp k6vAMFvfb9sVuWaXrdXv5wTyrxlr7poTaROmOwsQhA/UmPI5/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/2W1F27O+nMl8wSZPeO5wmusj4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDRhZmY3ZDctNjJjZi0z NjQ2LTk3NzItYmFmNmU0ZjRkMDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYuo8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMuL7Bs7NGjS+N/lY+kNtZ5awHTiHlwe/IHr2oE4uoUA4DO5ZgOtyg39 98YFbAWeL3x8FuWoCuhV1sF6HximWqF2EFJ62F6ZF9KiMuGrrz8kI4eBsXuSrD2Q nrWdFcXiH3TowMZ8VMqACt6km5MAhd6UhgtHJxWFnK9Mb0xufCugG1W46p+N+vjo q4yLy/0f0CjSlkn62rNYwaXcBEt8hRIHK4EfaIqmkrgXKTeA7PEBD+V1HJ6OowtJ SjPZBprNzER/uDO2rNMSpCiouEijXZxfvP+GHnsymNAQq3ATznV3k+Ti/4tyk0jr RjjUrSK8DpJhAOMfMkT167dki7F6pJs= -----END CERTIFICATE-----Generated at Mon Mar 2 09:25:28 2026 by rpki-client