$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0b1e923b-1642-3ca6-a2b2-477d4ca86890.roa File: 0b1e923b-1642-3ca6-a2b2-477d4ca86890.roa (raw, json) Hash identifier: k0gkaMmqsnSZKdJHWOusbzwBtgXU1AcQP4/Z2PlXlmE= Subject key identifier: D0:95:99:1A:49:97:36:C4:CA:CA:5D:30:74:60:22:AC:00:20:7B:37 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE58A2A0D18A6EB67EACF240 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0b1e923b-1642-3ca6-a2b2-477d4ca86890.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 98.253.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:a2:a0:d1:8a:6e:b6:7e:ac:f2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=839496b6-53cf-406c-a0d6-63c8a0aaba2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:13:a9:01:a0:75:66:9d:33:f6:f7:9b:95:c9: 6d:3d:e4:ed:92:50:0f:9f:ac:6b:0d:3e:20:6c:ef: 81:b6:54:ef:15:62:82:76:a3:20:b3:50:0b:63:c6: 6d:dc:86:2f:db:ff:60:c1:1f:0e:66:4a:0b:22:87: 1e:35:0b:df:de:30:6f:0b:e3:fc:8c:d7:c7:e2:c9: fc:8a:f5:e1:47:c6:02:ed:42:09:39:de:f5:a4:7c: ee:e8:22:99:83:be:2f:a3:be:36:df:54:cd:98:7c: 3d:ef:0c:c8:35:90:0d:a6:6e:1c:39:f2:19:04:1e: ea:e0:ca:dc:0e:9a:13:cf:a7:a4:11:88:b8:72:52: 9c:03:eb:43:c3:b0:23:82:27:93:3d:3f:95:89:8e: d9:fe:83:8e:c1:7f:fd:a3:26:f6:90:b4:53:97:5a: be:fc:77:d7:96:24:2a:52:17:6d:46:81:06:b6:5f: 35:a3:41:c5:ac:b5:a7:36:c7:1f:51:62:c2:12:b3: b3:fa:01:01:af:b9:84:ff:34:ce:1b:ad:c8:15:33: 3a:c6:76:74:e9:01:27:05:c8:27:56:78:7e:f8:91: d7:e1:30:e3:55:90:20:e7:01:e5:2d:26:ea:5f:f3: b4:05:c6:5a:5c:05:ac:0e:9b:df:3f:7c:e1:89:7d: 28:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:95:99:1A:49:97:36:C4:CA:CA:5D:30:74:60:22:AC:00:20:7B:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0b1e923b-1642-3ca6-a2b2-477d4ca86890.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.253.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d3:c5:f2:be:78:a0:48:2b:5c:a3:7c:0c:63:81:69:b7:e1:a1: bb:da:c8:85:af:9a:17:9d:44:6f:50:2d:2a:35:de:0b:59:fb: 0d:25:8a:11:4f:ad:8c:ae:4e:af:c6:a9:8d:5a:05:da:3c:53: c5:42:f7:ce:e4:da:aa:84:37:da:d0:c7:45:ed:f4:ee:37:37: 79:0d:83:31:40:2e:59:40:d1:81:c1:41:f3:7d:52:ae:2e:18: 77:39:ad:d1:24:65:36:71:e4:2f:16:c2:6f:37:3a:86:0d:d5: ec:15:4e:70:c0:05:09:db:6f:82:aa:6e:18:24:ed:24:40:8e: 1b:ed:1e:2f:78:8d:f2:18:64:75:ac:a1:2b:a0:a1:ba:36:69: 70:2d:62:6c:ac:c0:48:ce:4c:82:1a:fb:6b:0c:02:64:43:92: 43:c0:6d:22:65:c8:7b:b4:34:d9:77:8b:99:86:49:dc:a1:d3: b9:45:08:f0:f7:8a:f5:6f:04:0e:90:df:90:ea:27:7d:de:30: 7e:63:56:f1:36:af:10:88:9f:c9:e0:a0:0f:18:6c:3a:3c:bc: f0:e8:99:ab:d5:9f:f5:91:4c:0a:ea:c4:aa:7d:12:e3:51:1f: b3:14:49:d3:24:53:0f:79:65:26:80:fe:13:e0:62:63:63:0e: 55:a4:0e:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWKKg0Yputn6s8kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ODM5NDk2YjYtNTNjZi00MDZjLWEwZDYtNjNjOGEwYWFiYTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixOpAaB1Zp0z9veblcltPeTtklAPn6xrDT4g bO+BtlTvFWKCdqMgs1ALY8Zt3IYv2/9gwR8OZkoLIoceNQvf3jBvC+P8jNfH4sn8 ivXhR8YC7UIJOd71pHzu6CKZg74vo74231TNmHw97wzINZANpm4cOfIZBB7q4Mrc DpoTz6ekEYi4clKcA+tDw7AjgieTPT+ViY7Z/oOOwX/9oyb2kLRTl1q+/HfXliQq UhdtRoEGtl81o0HFrLWnNscfUWLCErOz+gEBr7mE/zTOG63IFTM6xnZ06QEnBcgn Vnh++JHX4TDjVZAg5wHlLSbqX/O0BcZaXAWsDpvfP3zhiX0oGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNCVmRpJlzbEyspdMHRgIqwAIHs3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGIxZTkyM2ItMTY0Mi0z Y2E2LWEyYjItNDc3ZDRjYTg2ODkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYv3XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANPF8r54oEgrXKN8DGOBabfhobvayIWvmhedRG9QLSo13gtZ+w0lihFP rYyuTq/GqY1aBdo8U8VC987k2qqEN9rQx0Xt9O43N3kNgzFALllA0YHBQfN9Uq4u GHc5rdEkZTZx5C8Wwm83OoYN1ewVTnDABQnbb4Kqbhgk7SRAjhvtHi94jfIYZHWs oSugobo2aXAtYmyswEjOTIIa+2sMAmRDkkPAbSJlyHu0NNl3i5mGSdyh07lFCPD3 ivVvBA6Q35DqJ33eMH5jVvE2rxCIn8ngoA8YbDo8vPDomavVn/WRTArqxKp9EuNR H7MUSdMkUw95ZSaA/hPgYmNjDlWkDiQ= -----END CERTIFICATE-----Generated at Sun Mar 1 23:14:13 2026 by rpki-client