$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0fea55ec-f3ca-38c9-85cd-8a06b28f5e30.roa File: 0fea55ec-f3ca-38c9-85cd-8a06b28f5e30.roa (raw, json) Hash identifier: HPm1YqVuMOotwFWQZofpGc0p52FeYCU67sBrgm0y9g0= Subject key identifier: BE:EC:21:28:B3:8D:F4:4F:C3:2F:B6:D4:02:54:E7:FE:30:E3:16:1A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE588E2A827EB89854317E80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0fea55ec-f3ca-38c9-85cd-8a06b28f5e30.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 98.193.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:8e:2a:82:7e:b8:98:54:31:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=a4de9730-fc89-4cea-8395-1c1759c40fa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:fd:d2:a0:95:14:33:8c:f7:94:1c:78:30:ce: ba:80:a6:85:d2:24:53:37:47:6a:70:6d:e5:78:de: 84:48:0d:3b:b1:1c:ec:c5:f9:84:6e:a8:ec:44:12: b7:14:ae:d2:2a:ec:46:d3:75:b7:15:91:5d:27:06: 1a:26:c6:81:4f:e3:11:ca:f7:89:c9:81:98:6f:41: 7d:48:e6:ba:45:47:69:5f:02:f5:f8:ae:20:71:7f: 49:7f:72:bc:88:55:2b:24:90:49:c4:a1:a9:ca:06: 23:1c:fd:6d:8a:ac:11:ab:81:70:56:fe:30:55:8e: cb:11:e6:60:c8:0c:26:20:c0:42:97:58:22:ff:8a: a1:0d:73:15:35:1b:c1:9d:22:29:6f:84:7f:b6:e7: 98:3f:c1:0d:8f:2f:78:8d:00:88:87:09:71:d5:79: 2f:6b:21:17:e6:45:16:f1:16:1f:05:e3:b4:89:a6: e9:8c:bb:e4:f0:77:05:90:dc:27:75:e5:72:37:fb: 64:86:17:1b:56:1e:d8:23:58:bd:3e:2c:54:5d:1d: d5:81:1c:a4:7a:aa:97:b5:39:e1:b3:33:ee:ce:22: 94:6f:e8:0d:af:e3:82:3f:70:60:22:f9:00:b9:7b: 95:8a:83:30:b1:f8:31:51:d6:ba:6c:2e:2b:33:a8: 42:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:EC:21:28:B3:8D:F4:4F:C3:2F:B6:D4:02:54:E7:FE:30:E3:16:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0fea55ec-f3ca-38c9-85cd-8a06b28f5e30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.193.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:98:10:b7:b8:7b:b7:6f:0f:19:28:1a:22:b3:4a:56:c3:c0: 1b:55:be:f7:02:e1:bc:c2:ad:fd:9d:60:d8:f2:ac:dd:50:0f: 12:39:dd:fd:01:65:72:3e:4f:b7:a0:08:8c:c3:c0:33:a7:07: d6:ef:0b:f4:84:03:89:e4:1b:45:2d:a0:2e:bd:f4:cc:81:be: 7a:ac:33:89:b2:b2:4f:d7:22:91:f9:24:bb:13:32:97:e8:af: a5:11:02:c7:48:cf:c7:ae:24:2a:a2:d6:50:9d:10:50:60:e3: 37:ad:6b:9a:b9:c4:ca:01:b5:2e:13:11:d7:83:94:1f:96:6c: 1a:62:d6:fc:10:46:ec:90:c6:7b:46:42:e0:82:38:b8:c4:90: ba:e7:6f:2a:c0:3c:54:90:74:f0:33:cc:f3:ad:5f:3c:50:43: 6b:8a:b0:c4:60:9e:df:f1:e0:d2:85:ae:d9:c2:25:cd:b4:93: a2:11:58:1d:b4:29:31:b8:42:d2:b5:3f:94:75:16:6d:98:55: 0d:c2:d2:0c:dd:46:54:f9:08:88:32:3b:3d:80:5a:0a:14:fa: c5:de:98:84:65:d7:b7:33:7d:e2:84:84:c6:28:56:c6:50:97: 60:c8:80:43:4d:5d:41:f7:38:70:ed:01:dc:14:f5:98:fa:07: 2f:63:99:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWI4qgn64mFQxfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YTRkZTk3MzAtZmM4OS00Y2VhLTgzOTUtMWMxNzU5YzQwZmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmv3SoJUUM4z3lBx4MM66gKaF0iRTN0dqcG3l eN6ESA07sRzsxfmEbqjsRBK3FK7SKuxG03W3FZFdJwYaJsaBT+MRyveJyYGYb0F9 SOa6RUdpXwL1+K4gcX9Jf3K8iFUrJJBJxKGpygYjHP1tiqwRq4FwVv4wVY7LEeZg yAwmIMBCl1gi/4qhDXMVNRvBnSIpb4R/tueYP8ENjy94jQCIhwlx1XkvayEX5kUW 8RYfBeO0iabpjLvk8HcFkNwndeVyN/tkhhcbVh7YI1i9PixUXR3VgRykeqqXtTnh szPuziKUb+gNr+OCP3BgIvkAuXuVioMwsfgxUda6bC4rM6hCAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7sISizjfRPwy+21AJU5/4w4xYaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGZlYTU1ZWMtZjNjYS0z OGM5LTg1Y2QtOGEwNmIyOGY1ZTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYsFYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMWYELe4e7dvDxkoGiKzSlbDwBtVvvcC4bzCrf2dYNjyrN1QDxI53f0B ZXI+T7egCIzDwDOnB9bvC/SEA4nkG0UtoC699MyBvnqsM4mysk/XIpH5JLsTMpfo r6URAsdIz8euJCqi1lCdEFBg4zeta5q5xMoBtS4TEdeDlB+WbBpi1vwQRuyQxntG QuCCOLjEkLrnbyrAPFSQdPAzzPOtXzxQQ2uKsMRgnt/x4NKFrtnCJc20k6IRWB20 KTG4QtK1P5R1Fm2YVQ3C0gzdRlT5CIgyOz2AWgoU+sXemIRl17czfeKEhMYoVsZQ l2DIgENNXUH3OHDtAdwU9Zj6By9jmZY= -----END CERTIFICATE-----Generated at Mon Mar 2 02:36:22 2026 by rpki-client