$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21bf9adf-4b3a-3f18-9d0b-c9ba9f0ecea7.roa File: 21bf9adf-4b3a-3f18-9d0b-c9ba9f0ecea7.roa (raw, json) Hash identifier: mSVor2T//JJKdlE7HIAk0MnO++Dx0t6xF1v96+7JBrU= Subject key identifier: 61:CD:B3:85:6D:F5:22:EE:ED:AE:BF:61:08:7B:F8:33:37:24:01:FF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5E0FEBC7B58C0DC6774280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21bf9adf-4b3a-3f18-9d0b-c9ba9f0ecea7.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 98.234.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:0f:eb:c7:b5:8c:0d:c6:77:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=46f66ffd-3847-446f-a27c-59bc2cde5974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:57:a4:fa:ae:e4:b7:13:75:ca:50:ce:56:94: 07:98:8a:22:17:cc:af:d9:06:3b:42:0e:3c:41:04: ac:91:d1:ae:01:83:f9:bf:51:1e:6d:5d:b1:c3:ed: f0:e7:54:4a:6a:9e:fd:26:00:be:19:61:c3:3b:48: 38:f2:ed:34:91:90:1b:7a:4d:6a:fa:92:a4:da:0d: e5:c2:fb:3a:08:90:05:56:0e:ae:38:30:ad:15:5f: c6:f6:cc:f2:99:b5:ae:99:4d:3d:c4:17:4e:b8:e2: 61:6e:9c:82:d0:00:2d:9f:4e:a1:c7:0d:cf:d5:da: 7b:66:08:00:78:b3:68:50:00:1d:8e:60:94:de:1a: 7a:50:eb:6c:a0:14:49:bd:27:68:78:5b:e1:29:f4: 91:d0:db:12:3f:61:aa:f2:dc:14:38:c8:c9:e3:4a: 11:2e:45:c3:ff:fb:9e:66:c2:f0:67:88:ad:07:cd: 89:c2:03:bb:d2:af:7c:54:d1:5d:68:1a:c2:41:15: 39:1d:2d:4b:03:55:44:02:80:23:ae:3e:60:97:37: f0:a8:0f:1f:99:f4:81:d9:79:42:2a:f0:8f:b4:95: 64:08:92:c6:33:8b:d9:98:c1:61:58:e0:c2:4a:64: 42:08:78:ec:76:e4:26:70:e3:7b:87:9b:af:b4:bc: 5c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:CD:B3:85:6D:F5:22:EE:ED:AE:BF:61:08:7B:F8:33:37:24:01:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21bf9adf-4b3a-3f18-9d0b-c9ba9f0ecea7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.234.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:f4:4c:f3:ee:4a:50:56:91:05:7b:c3:51:d8:4a:c7:d6:81: c4:78:3a:27:f5:27:c8:d7:34:bd:d2:6a:2d:cf:f8:e0:f5:be: dc:4b:89:cf:9c:3b:c3:c1:a4:a7:bb:50:24:10:33:74:be:cb: 9b:d1:1c:47:77:c5:fb:dd:81:e4:ed:d6:bb:29:15:54:6f:6d: 0c:c1:f7:a8:16:fc:64:52:f1:eb:db:c2:93:16:ce:48:13:44: 6b:24:67:ee:8b:76:76:1d:5f:31:3c:7b:07:9b:7e:08:4a:e2: 8c:54:13:fb:ff:3f:e5:6d:a3:0d:db:5b:db:6d:1f:31:19:a9: c9:3f:17:57:fb:6e:1e:e2:68:8d:41:35:01:ca:d5:45:f1:9f: 48:2e:3d:65:1b:0d:bf:c1:54:79:8c:45:fc:2b:13:4f:18:2c: a4:bd:32:82:0d:3e:84:2e:ec:f8:73:a1:4a:3e:67:f8:c7:a7: 6b:3f:a7:20:a5:a1:a0:97:44:98:30:66:12:3b:0c:a1:9d:e1: 1c:66:09:7a:95:25:5c:72:dd:05:fb:8a:09:15:b2:7e:9b:59: 48:67:fc:c2:81:c9:06:2f:6f:1a:72:42:59:b4:65:49:95:6a: 5d:e9:a7:4b:72:51:61:ae:0d:a6:96:9a:67:40:fb:e7:d5:55: 31:75:f9:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXg/rx7WMDcZ3QoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NDZmNjZmZmQtMzg0Ny00NDZmLWEyN2MtNTliYzJjZGU1OTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVek+q7ktxN1ylDOVpQHmIoiF8yv2QY7Qg48 QQSskdGuAYP5v1EebV2xw+3w51RKap79JgC+GWHDO0g48u00kZAbek1q+pKk2g3l wvs6CJAFVg6uODCtFV/G9szymbWumU09xBdOuOJhbpyC0AAtn06hxw3P1dp7ZggA eLNoUAAdjmCU3hp6UOtsoBRJvSdoeFvhKfSR0NsSP2Gq8twUOMjJ40oRLkXD//ue ZsLwZ4itB82JwgO70q98VNFdaBrCQRU5HS1LA1VEAoAjrj5glzfwqA8fmfSB2XlC KvCPtJVkCJLGM4vZmMFhWODCSmRCCHjsduQmcON7h5uvtLxcQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGHNs4Vt9SLu7a6/YQh7+DM3JAH/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjFiZjlhZGYtNGIzYS0z ZjE4LTlkMGItYzliYTlmMGVjZWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYuqIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANH0TPPuSlBWkQV7w1HYSsfWgcR4Oif1J8jXNL3Sai3P+OD1vtxLic+c O8PBpKe7UCQQM3S+y5vRHEd3xfvdgeTt1rspFVRvbQzB96gW/GRS8evbwpMWzkgT RGskZ+6LdnYdXzE8ewebfghK4oxUE/v/P+Vtow3bW9ttHzEZqck/F1f7bh7iaI1B NQHK1UXxn0guPWUbDb/BVHmMRfwrE08YLKS9MoINPoQu7PhzoUo+Z/jHp2s/pyCl oaCXRJgwZhI7DKGd4RxmCXqVJVxy3QX7igkVsn6bWUhn/MKByQYvbxpyQlm0ZUmV al3pp0tyUWGuDaaWmmdA++fVVTF1+cA= -----END CERTIFICATE-----Generated at Sun Mar 1 18:30:01 2026 by rpki-client