$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0524fec6-f6dc-369b-bf78-44850d70e013.roa File: 0524fec6-f6dc-369b-bf78-44850d70e013.roa (raw, json) Hash identifier: hprw5oyY6CDf02PhmP8j0OFt2+/nA+hIe3BB4rz8Sww= Subject key identifier: 73:CC:B4:0F:5D:C4:49:6B:F2:6D:36:29:C9:00:BA:9C:96:81:83:D0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5E38C8B4DE7D0669E428C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0524fec6-f6dc-369b-bf78-44850d70e013.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 98.47.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:38:c8:b4:de:7d:06:69:e4:28:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=99e13218-0dc4-40d7-af32-f3af13dd3e40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:76:c4:93:61:32:72:ed:73:42:48:06:0f:2e: 8f:dd:79:3f:dd:31:50:9e:ca:1c:16:40:69:7d:43: b3:76:31:d1:67:09:41:3a:72:95:c9:76:84:6b:cf: 43:4c:24:32:17:4d:16:11:d0:f4:b4:4d:01:fc:d8: 05:32:25:9f:1c:3e:8a:83:46:a3:8e:d2:1d:49:fa: 72:2c:83:e5:96:0f:f7:3c:e2:fd:b3:e7:ca:3e:93: a8:76:bf:d8:76:8d:47:24:60:f3:af:0d:14:19:00: be:dd:dc:b2:9f:fd:54:36:d0:bc:ee:21:8d:02:2a: f7:1d:88:3a:5b:de:3d:8d:c3:1e:1e:bf:20:42:62: 7f:ab:71:89:02:dc:41:c1:af:d2:d1:af:c6:df:54: a7:ae:e6:53:39:51:9c:77:37:04:ec:21:d5:6b:bb: 21:be:e3:58:67:7b:cc:eb:61:8d:8d:cc:dd:83:4e: 76:e5:77:b6:5e:43:d0:6b:c2:c2:5a:20:a8:ef:8b: 10:8b:da:ed:76:1e:fa:32:dd:ab:eb:ef:4d:11:13: 3d:cf:18:c9:f3:92:04:96:32:ca:c7:e3:e0:d6:6f: fd:0c:e1:b2:be:c3:04:37:dd:b7:01:16:89:c8:9e: 6c:c3:c8:fa:bd:5f:0a:25:ab:c3:7f:b1:8e:31:bb: 22:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:CC:B4:0F:5D:C4:49:6B:F2:6D:36:29:C9:00:BA:9C:96:81:83:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0524fec6-f6dc-369b-bf78-44850d70e013.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.47.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:b1:83:4e:13:aa:31:b2:da:88:59:a4:98:68:02:cd:79:c3: 6e:a8:38:ea:d4:ef:69:25:de:17:b2:78:0b:41:31:05:ea:6b: 42:40:04:32:34:32:90:fe:ba:b4:22:fb:29:4e:4c:d7:3c:4d: 02:1f:f2:8e:81:a7:5a:0c:8c:b1:f5:80:26:08:e6:c2:c0:e8: 6f:94:7f:5e:c0:1d:56:e4:70:98:6a:48:89:6a:e8:69:3b:22: a3:c3:0f:6c:d2:77:54:00:c2:a3:3b:0a:c0:9d:3f:70:22:48: 17:03:91:0f:01:cc:ec:c1:8c:86:71:45:de:ee:61:03:83:67: ba:bd:21:54:35:0f:eb:a3:0d:31:83:e4:fb:49:86:17:56:8a: f7:6c:71:f1:e8:54:57:a5:61:41:0a:5c:b6:30:5f:23:29:91: 00:8c:bf:30:40:86:1f:e1:7a:a5:d4:fb:e9:9c:7d:9d:66:e9: b8:e2:67:5f:fb:78:2d:85:4a:eb:52:76:01:7b:d1:7e:0c:04: 7a:7c:6b:8e:67:12:5e:ad:b9:a5:3d:02:8a:9b:70:e3:82:03: f9:1c:f2:06:f9:d9:1c:e3:65:32:52:b6:38:a3:39:cb:c8:b9: 56:00:b2:ce:08:53:a8:39:f9:19:91:a9:dd:d3:b4:28:e6:18: eb:65:e1:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXjjItN59BmnkKMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk OTllMTMyMTgtMGRjNC00MGQ3LWFmMzItZjNhZjEzZGQzZTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXbEk2Eycu1zQkgGDy6P3Xk/3TFQnsocFkBp fUOzdjHRZwlBOnKVyXaEa89DTCQyF00WEdD0tE0B/NgFMiWfHD6Kg0ajjtIdSfpy LIPllg/3POL9s+fKPpOodr/Ydo1HJGDzrw0UGQC+3dyyn/1UNtC87iGNAir3HYg6 W949jcMeHr8gQmJ/q3GJAtxBwa/S0a/G31SnruZTOVGcdzcE7CHVa7shvuNYZ3vM 62GNjczdg0525Xe2XkPQa8LCWiCo74sQi9rtdh76Mt2r6+9NERM9zxjJ85IEljLK x+Pg1m/9DOGyvsMEN923ARaJyJ5sw8j6vV8KJavDf7GOMbsiNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHPMtA9dxElr8m02KckAupyWgYPQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDUyNGZlYzYtZjZkYy0z NjliLWJmNzgtNDQ4NTBkNzBlMDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYi8IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6xg04TqjGy2ohZpJhoAs15w26oOOrU72kl3heyeAtBMQXqa0JABDI0 MpD+urQi+ylOTNc8TQIf8o6Bp1oMjLH1gCYI5sLA6G+Uf17AHVbkcJhqSIlq6Gk7 IqPDD2zSd1QAwqM7CsCdP3AiSBcDkQ8BzOzBjIZxRd7uYQODZ7q9IVQ1D+ujDTGD 5PtJhhdWivdscfHoVFelYUEKXLYwXyMpkQCMvzBAhh/heqXU++mcfZ1m6bjiZ1/7 eC2FSutSdgF70X4MBHp8a45nEl6tuaU9AoqbcOOCA/kc8gb52RzjZTJStjijOcvI uVYAss4IU6g5+RmRqd3TtCjmGOtl4XU= -----END CERTIFICATE-----Generated at Mon Mar 2 11:25:03 2026 by rpki-client