$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2049bfc6-82cb-3ba5-b892-f43fdcb85e1b.roa File: 2049bfc6-82cb-3ba5-b892-f43fdcb85e1b.roa (raw, json) Hash identifier: 9IhM6CO9tJDldvt6NYTbLoqlXY/r3eqfCRaJwh0WQkc= Subject key identifier: 68:66:68:3F:4F:22:30:13:5F:C7:6A:65:43:F9:9E:DA:57:55:BB:3E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE59119546C843F8C6434E60 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2049bfc6-82cb-3ba5-b892-f43fdcb85e1b.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 98.35.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:59:11:95:46:c8:43:f8:c6:43:4e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=b01ca90e-ecce-493c-b8d5-6ad23c4b2f57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:06:db:e0:14:f6:42:95:dc:a2:65:8c:a2:f1: bb:26:59:c3:ef:80:e7:35:a2:94:37:b2:c7:69:38: 3a:87:ec:9d:57:78:78:6c:64:73:40:df:b9:15:0e: 1e:79:a0:f2:4a:b4:cf:05:7f:ae:e4:ce:18:05:0d: ba:c5:93:30:1e:cc:79:fe:6c:f2:e8:72:7a:c0:82: a7:e5:92:72:17:03:f4:cb:88:86:64:f5:f1:15:d4: b5:2e:2e:ad:62:a7:e0:9c:4c:74:60:c0:9e:e7:cd: ea:84:94:35:08:62:f4:2d:c4:18:ac:09:f6:d8:4f: 67:58:b0:ce:e0:e7:e9:d7:c1:45:f5:5d:1c:29:99: 25:cb:9f:41:d8:39:1e:8d:ff:bd:eb:be:4c:14:d6: 15:ca:8c:8e:6f:a4:12:9c:6d:2d:83:4e:52:76:d6: e1:2b:05:12:54:b8:e2:ba:24:bf:10:1d:73:6a:c1: 97:ec:c7:89:fe:47:91:bc:50:49:91:5b:c3:ce:93: 76:6e:c2:9c:dc:a3:ce:9d:b4:55:f1:8c:cb:99:50: 4b:56:e9:00:c1:9f:08:e9:e7:c0:c1:0d:2c:96:b2: 61:46:03:1b:8a:95:1b:4d:4d:73:f3:4d:f8:3f:bf: 25:92:82:4b:93:a1:55:0d:f8:c5:e4:c1:72:c3:3a: 3b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:66:68:3F:4F:22:30:13:5F:C7:6A:65:43:F9:9E:DA:57:55:BB:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2049bfc6-82cb-3ba5-b892-f43fdcb85e1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.35.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:6e:15:78:66:7f:a4:b1:91:a3:14:94:74:2a:1e:95:e4:cf: 61:11:66:4a:6e:4d:7f:9b:34:3e:be:70:69:9b:99:4a:6f:d9: 2a:2b:cc:81:58:a7:e3:0f:c1:2a:eb:5c:e4:82:48:41:6f:da: 51:4d:d9:f8:1c:75:ad:0e:08:68:16:d0:20:4e:52:05:fe:b9: 53:10:7f:97:f4:62:6b:15:84:37:d1:63:8e:68:f5:82:82:d1: e6:39:ac:f2:5e:f4:70:0e:2e:50:81:79:8c:2f:b2:a3:39:27: e8:25:b7:c7:dc:93:a3:0b:5f:35:18:ad:a2:57:36:ca:26:fc: f6:92:c3:a9:3a:1c:2c:b7:b7:3d:b9:8f:bc:40:3b:2c:19:ef: 85:f4:9a:0d:44:8e:a1:71:fe:fe:26:8c:57:d0:a6:00:52:81: 32:bc:69:80:4f:eb:ad:40:18:17:8e:f8:27:e2:f9:f9:d1:a1: 07:bc:b1:63:f1:a9:30:92:a8:81:ad:57:06:b9:3a:60:9a:05: a5:b3:7c:c6:79:51:ec:94:61:62:9a:8d:cb:69:39:dd:bf:e7: 0b:21:ec:ae:57:60:75:fb:11:f2:88:67:a6:b3:2f:15:94:92: 76:c0:63:9f:82:d0:e5:8d:4d:36:64:c8:42:2f:8c:9b:a0:42: d5:60:45:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWRGVRshD+MZDTmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YjAxY2E5MGUtZWNjZS00OTNjLWI4ZDUtNmFkMjNjNGIyZjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwbb4BT2QpXcomWMovG7JlnD74DnNaKUN7LH aTg6h+ydV3h4bGRzQN+5FQ4eeaDySrTPBX+u5M4YBQ26xZMwHsx5/mzy6HJ6wIKn 5ZJyFwP0y4iGZPXxFdS1Li6tYqfgnEx0YMCe583qhJQ1CGL0LcQYrAn22E9nWLDO 4Ofp18FF9V0cKZkly59B2Dkejf+9675MFNYVyoyOb6QSnG0tg05SdtbhKwUSVLji uiS/EB1zasGX7MeJ/keRvFBJkVvDzpN2bsKc3KPOnbRV8YzLmVBLVukAwZ8I6efA wQ0slrJhRgMbipUbTU1z8034P78lkoJLk6FVDfjF5MFywzo7WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhmaD9PIjATX8dqZUP5ntpXVbs+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjA0OWJmYzYtODJjYi0z YmE1LWI4OTItZjQzZmRjYjg1ZTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYiPVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK9uFXhmf6SxkaMUlHQqHpXkz2ERZkpuTX+bND6+cGmbmUpv2SorzIFY p+MPwSrrXOSCSEFv2lFN2fgcda0OCGgW0CBOUgX+uVMQf5f0YmsVhDfRY45o9YKC 0eY5rPJe9HAOLlCBeYwvsqM5J+glt8fck6MLXzUYraJXNsom/PaSw6k6HCy3tz25 j7xAOywZ74X0mg1EjqFx/v4mjFfQpgBSgTK8aYBP661AGBeO+Cfi+fnRoQe8sWPx qTCSqIGtVwa5OmCaBaWzfMZ5UeyUYWKajctpOd2/5wsh7K5XYHX7EfKIZ6azLxWU knbAY5+C0OWNTTZkyEIvjJugQtVgRZ0= -----END CERTIFICATE-----Generated at Sun Mar 1 18:55:47 2026 by rpki-client