$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/06f35a55-50b9-3f11-9798-ea70830a1111.roa File: 06f35a55-50b9-3f11-9798-ea70830a1111.roa (raw, json) Hash identifier: aGjOzP9I0Fc36qjWvzCrN5Ll53sHeJSLmeGIZ8tGHKU= Subject key identifier: D3:EA:85:3D:06:6B:A3:95:62:D9:01:84:05:8A:32:D9:E0:6C:14:B6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5CE4BB64F4577E21A0DFA0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/06f35a55-50b9-3f11-9798-ea70830a1111.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 98.220.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5c:e4:bb:64:f4:57:7e:21:a0:df:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=ca235a64-067b-4eb8-8889-78dccb7e234d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a5:c7:89:1d:33:4a:8e:31:85:f7:0f:28:3f: 83:05:17:a0:d9:ea:63:64:a9:5a:65:51:71:55:5e: a2:0e:3a:2f:40:b4:c0:3c:0b:01:5d:1b:2c:1c:a5: 62:dd:97:1f:94:5d:85:67:06:bf:84:5f:89:57:23: 57:4b:95:5c:0e:25:2d:a7:21:9c:52:32:6c:70:f1: 14:3b:d9:d4:fd:62:ca:31:d7:51:e4:46:2e:8e:5a: 12:b3:cb:ad:8d:5f:23:a6:62:da:47:de:c9:91:8b: 0b:c9:48:b5:a1:82:38:e2:4d:4d:5e:8d:db:60:a5: df:e3:c8:90:f4:93:45:10:2c:67:2b:11:f5:ba:c6: 74:57:b4:ff:62:6a:50:73:e4:1a:9a:3f:92:5e:12: ed:98:3c:48:98:bc:23:57:95:28:47:32:16:71:64: a1:25:47:9e:3b:01:72:e5:c0:4d:64:5e:d9:52:db: e9:87:0b:b9:f2:4d:ec:12:72:8a:55:5c:a0:8c:d8: 03:c3:d1:b5:8a:00:ec:aa:02:52:a4:81:70:0f:a4: f9:8f:17:65:aa:c7:77:2f:08:f9:3e:30:d8:e0:d4: 77:67:58:f2:4d:26:f7:24:d1:9a:ea:e6:e2:91:75: ee:f2:63:6f:ea:38:b8:cc:30:c8:ae:7f:d5:ad:54: 58:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:EA:85:3D:06:6B:A3:95:62:D9:01:84:05:8A:32:D9:E0:6C:14:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/06f35a55-50b9-3f11-9798-ea70830a1111.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.220.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:d2:0a:9e:20:87:d4:02:e6:d2:68:6c:c1:15:82:0c:6d:0f: 81:56:27:4a:90:93:24:e0:08:dc:58:7a:97:4c:51:21:3d:b0: 9e:e8:d4:d0:8c:11:5e:49:60:32:8d:d9:2a:d0:55:73:78:9e: 46:1c:dd:99:f9:0b:e8:a7:5b:e1:6f:06:ba:9d:64:c6:4a:7d: 24:60:a9:30:6b:ec:e7:20:5d:2d:c6:0a:91:ff:ae:93:74:e0: 06:fe:39:66:81:09:5d:e5:09:04:d0:27:8c:0c:5d:d9:6f:27: b8:62:4b:e9:93:fc:20:e4:fe:a9:af:9f:78:40:10:32:12:0e: e5:fe:37:7f:91:b4:b4:dd:45:fc:cb:8e:b6:7e:4c:63:a7:21: 84:2c:a5:2f:5c:88:a3:18:46:db:25:33:c1:06:5e:ec:a7:db: 77:90:83:10:6f:f2:de:86:37:ea:b0:e0:ad:c8:11:b0:b9:31: 97:aa:1c:ff:b1:ab:46:68:60:a6:03:1e:65:2e:89:23:67:c3: 43:1f:d9:f9:19:6c:2a:5f:2e:53:a0:61:d9:1f:1a:60:80:f4: 42:9c:4e:33:03:6a:33:e7:91:80:99:12:72:23:83:43:29:67: 15:14:5a:e4:d7:a7:69:c8:0d:ea:3e:4f:e8:ec:4e:2c:6b:91: 60:9f:5e:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXOS7ZPRXfiGg36AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk Y2EyMzVhNjQtMDY3Yi00ZWI4LTg4ODktNzhkY2NiN2UyMzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKXHiR0zSo4xhfcPKD+DBReg2epjZKlaZVFx VV6iDjovQLTAPAsBXRssHKVi3ZcflF2FZwa/hF+JVyNXS5VcDiUtpyGcUjJscPEU O9nU/WLKMddR5EYujloSs8utjV8jpmLaR97JkYsLyUi1oYI44k1NXo3bYKXf48iQ 9JNFECxnKxH1usZ0V7T/YmpQc+Qamj+SXhLtmDxImLwjV5UoRzIWcWShJUeeOwFy 5cBNZF7ZUtvphwu58k3sEnKKVVygjNgDw9G1igDsqgJSpIFwD6T5jxdlqsd3Lwj5 PjDY4NR3Z1jyTSb3JNGa6ubikXXu8mNv6ji4zDDIrn/VrVRYeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPqhT0Ga6OVYtkBhAWKMtngbBS2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDZmMzVhNTUtNTBiOS0z ZjExLTk3OTgtZWE3MDgzMGExMTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYtyoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3SCp4gh9QC5tJobMEVggxtD4FWJ0qQkyTgCNxYepdMUSE9sJ7o1NCM EV5JYDKN2SrQVXN4nkYc3Zn5C+inW+FvBrqdZMZKfSRgqTBr7OcgXS3GCpH/rpN0 4Ab+OWaBCV3lCQTQJ4wMXdlvJ7hiS+mT/CDk/qmvn3hAEDISDuX+N3+RtLTdRfzL jrZ+TGOnIYQspS9ciKMYRtslM8EGXuyn23eQgxBv8t6GN+qw4K3IEbC5MZeqHP+x q0ZoYKYDHmUuiSNnw0Mf2fkZbCpfLlOgYdkfGmCA9EKcTjMDajPnkYCZEnIjg0Mp ZxUUWuTXp2nIDeo+T+jsTixrkWCfXro= -----END CERTIFICATE-----Generated at Sun Mar 1 18:53:36 2026 by rpki-client