$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/15be2530-030a-33f8-ad34-9b3733dd7822.roa File: 15be2530-030a-33f8-ad34-9b3733dd7822.roa (raw, json) Hash identifier: erQPzkZF8SavtMM5t+aswhURp4sz7xTmRD1zzd6IJ6o= Subject key identifier: E3:03:95:D0:3D:62:AD:C1:AF:76:DD:2B:3B:BD:30:4B:08:35:94:9D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE589677000245FBF2201E00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/15be2530-030a-33f8-ad34-9b3733dd7822.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 98.220.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:96:77:00:02:45:fb:f2:20:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=86f3c0ec-c6e7-45e7-8e54-d9cc92973b8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d1:20:4d:f9:79:12:5f:4e:f0:e1:41:46:ef: ae:69:58:8d:84:36:ce:48:8a:9b:a1:92:36:cb:6d: b8:93:93:44:16:c6:ac:df:f3:80:21:f5:e2:c0:f1: 87:c1:e3:a4:b8:4a:1d:df:d4:2f:26:ed:67:ff:ce: 02:f6:d2:d9:9c:b2:c8:a7:1d:fc:81:54:a0:5e:31: 1a:cb:15:a4:e7:be:24:8d:31:8f:6f:74:c0:29:bc: 08:82:70:18:e2:2f:3c:26:ee:bb:ef:86:7d:56:49: 06:3f:42:65:ae:7e:8c:01:88:27:03:0f:80:d3:e0: ad:cd:cc:7d:9d:0e:4b:20:cb:65:7a:35:cd:b4:b3: e7:42:49:b3:27:b9:b2:cf:a2:68:ec:9c:b4:f6:c1: 5e:fe:c4:58:eb:34:71:7e:cc:ba:61:d2:00:dd:e4: 12:c7:2b:1f:fc:fb:2b:38:24:a5:b8:9d:3c:68:c1: 34:61:19:c9:3f:79:3d:c4:f1:f1:74:f2:73:41:db: 4b:73:7f:ee:c1:fb:ae:af:86:3d:dd:30:a0:17:cc: 79:9e:75:aa:33:18:65:89:cc:e6:ef:5e:90:dc:8f: 7e:72:23:5c:b3:5d:fc:aa:8e:c2:38:93:9f:07:9e: f5:dd:ec:e6:d2:69:0a:74:80:bb:63:16:8d:94:80: 64:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:03:95:D0:3D:62:AD:C1:AF:76:DD:2B:3B:BD:30:4B:08:35:94:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/15be2530-030a-33f8-ad34-9b3733dd7822.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.220.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:e7:a1:a0:41:de:f3:f5:95:69:06:86:28:67:81:74:f8:a1: d0:39:b1:dd:00:7c:0a:d1:63:ba:7f:b1:91:61:88:50:06:78: 96:66:4f:de:3c:91:1d:f5:04:4d:a4:1c:78:4d:a2:af:41:22: f2:e6:11:8a:13:b2:33:e0:c5:e9:63:b1:2a:34:7a:b0:a7:4c: 4d:bc:fe:b4:ce:9e:9c:fe:4e:7b:4b:ad:6d:3e:ec:81:e1:3b: 10:f6:6b:b1:28:7a:30:c0:77:4a:42:3b:62:05:3e:14:25:49: 62:ff:4f:36:9f:f5:95:8e:ee:6d:bb:c7:38:cc:37:55:af:19: ee:20:0d:d8:9d:4d:4b:31:69:46:3e:97:8e:1a:76:46:57:11: f0:14:71:e4:fb:35:e8:d9:6e:8d:aa:41:3f:80:26:bf:75:0a: 76:26:a9:7e:e0:e0:ff:eb:72:bb:66:c1:9e:78:59:13:5d:a5: f5:38:22:e8:f6:2a:d2:d8:fc:cf:36:3a:74:3e:7e:72:cd:b9: c4:02:b5:83:68:dc:a6:9f:3f:6f:91:0b:06:97:9f:d1:b6:df: 20:2a:40:f4:b4:b6:78:69:a6:04:3d:02:d0:7b:ac:33:ed:76: 46:06:bd:37:2b:16:5f:86:7f:7a:22:02:4a:50:5f:c5:9d:97: 63:00:90:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWJZ3AAJF+/IgHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ODZmM2MwZWMtYzZlNy00NWU3LThlNTQtZDljYzkyOTczYjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitEgTfl5El9O8OFBRu+uaViNhDbOSIqboZI2 y224k5NEFsas3/OAIfXiwPGHweOkuEod39QvJu1n/84C9tLZnLLIpx38gVSgXjEa yxWk574kjTGPb3TAKbwIgnAY4i88Ju6774Z9VkkGP0Jlrn6MAYgnAw+A0+Ctzcx9 nQ5LIMtlejXNtLPnQkmzJ7myz6Jo7Jy09sFe/sRY6zRxfsy6YdIA3eQSxysf/Psr OCSluJ08aME0YRnJP3k9xPHxdPJzQdtLc3/uwfuur4Y93TCgF8x5nnWqMxhliczm 716Q3I9+ciNcs138qo7COJOfB5713ezm0mkKdIC7YxaNlIBkrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOMDldA9Yq3Br3bdKzu9MEsINZSdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTViZTI1MzAtMDMwYS0z M2Y4LWFkMzQtOWIzNzMzZGQ3ODIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYtzUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJfnoaBB3vP1lWkGhihngXT4odA5sd0AfArRY7p/sZFhiFAGeJZmT948 kR31BE2kHHhNoq9BIvLmEYoTsjPgxeljsSo0erCnTE28/rTOnpz+TntLrW0+7IHh OxD2a7EoejDAd0pCO2IFPhQlSWL/Tzaf9ZWO7m27xzjMN1WvGe4gDdidTUsxaUY+ l44adkZXEfAUceT7NejZbo2qQT+AJr91CnYmqX7g4P/rcrtmwZ54WRNdpfU4Iuj2 KtLY/M82OnQ+fnLNucQCtYNo3KafP2+RCwaXn9G23yAqQPS0tnhppgQ9AtB7rDPt dkYGvTcrFl+Gf3oiAkpQX8Wdl2MAkNM= -----END CERTIFICATE-----Generated at Sun Mar 1 19:06:19 2026 by rpki-client