$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3295432b-77b7-3702-b537-f1c752e22a40.roa File: 3295432b-77b7-3702-b537-f1c752e22a40.roa (raw, json) Hash identifier: CHMZd1XkB2BMhVTjEmW83+IMEYNMcdj2+yoDWzyKZRg= Subject key identifier: E9:CB:7A:20:FA:BC:38:75:AE:85:8D:06:89:8D:FC:4B:16:EC:5B:4F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5E36AD56C5B56E6A67D600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3295432b-77b7-3702-b537-f1c752e22a40.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 98.47.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:36:ad:56:c5:b5:6e:6a:67:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=838eb59b-ab16-4ee6-9d56-39ee8fdfcf54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:9d:dd:e3:b8:c6:e7:4d:df:c2:1d:8b:f3:c8: 15:9e:85:1f:95:07:de:c1:9a:c5:85:8e:f0:d2:46: 31:42:7f:37:16:ee:80:98:13:8f:e0:43:d1:2b:c2: b5:9e:fd:90:73:e1:0e:59:9b:c9:2b:db:e3:96:6e: cc:b4:e7:18:83:b1:dd:47:8c:6b:95:97:6a:99:7b: bf:cc:a2:34:a1:5f:84:45:cb:fd:b4:a1:51:65:be: 3a:18:fb:6a:e1:54:91:de:7d:0c:1d:98:55:c3:d6: c5:3b:43:95:e7:c3:21:4d:68:b1:5a:25:8c:6f:d2: 37:c2:28:64:8e:3d:83:7c:f8:b4:de:f9:07:53:0a: a0:5d:0e:64:ef:76:e8:af:d7:19:9d:0e:f7:cb:8d: ee:ad:8c:1e:7c:b6:88:06:b7:a3:94:77:2e:b8:d4: 19:24:32:d8:59:55:31:8e:85:10:0b:8c:d9:e1:80: e5:5b:45:b0:bf:c1:01:56:c5:f6:a3:cc:b7:50:9c: a2:3f:21:81:47:53:83:18:25:65:43:fe:94:c1:87: 27:73:7c:3c:fa:45:ad:38:67:d2:21:08:2b:a4:18: bd:98:dd:27:16:2c:4d:59:09:8c:88:cd:61:25:08: fa:72:e3:02:70:18:1c:96:63:a7:9f:8d:1f:1e:a8: a7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:CB:7A:20:FA:BC:38:75:AE:85:8D:06:89:8D:FC:4B:16:EC:5B:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3295432b-77b7-3702-b537-f1c752e22a40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.47.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:77:6d:ad:42:68:91:a2:b5:1b:73:29:c1:52:5b:c8:79:61: 0b:d9:78:1b:a4:ed:28:ad:ab:ec:ff:f9:ac:53:ac:44:92:f4: e5:66:e9:82:31:fb:75:26:98:07:e1:9b:9b:9c:3a:14:e2:fd: 53:2b:30:a3:7d:38:e6:06:c6:a7:0a:33:58:ce:69:33:b0:57: c2:8a:98:89:a3:25:e5:1d:27:20:26:bb:dc:42:94:f1:0b:2c: b4:30:3b:2b:5c:21:d0:d9:5e:29:84:ec:d7:e3:0c:db:6d:36: a0:48:6a:06:c2:4c:a3:2c:7a:3b:33:3d:94:38:63:99:46:f7: ef:81:7a:cf:a1:00:2d:8c:54:6b:a0:17:a1:8a:d4:8d:1e:ee: 51:c2:72:f5:46:13:6b:fd:35:41:58:bf:b8:0a:51:26:95:1f: ce:99:cf:77:c9:9b:91:82:6f:c5:0a:6d:55:a6:82:5d:b4:e1: 74:44:56:ce:07:09:e8:c2:64:3b:84:c3:91:3e:7b:c5:1f:d6: 67:64:fd:10:bc:da:e3:4e:7e:20:59:ac:81:f8:a1:ce:7f:b9: e0:e6:7e:5c:68:43:5c:82:6c:23:8c:4f:09:cc:fc:4a:5a:5a: 49:9d:6b:4d:70:1f:65:b9:37:39:ee:25:6e:49:f4:33:d7:02: ad:3d:85:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXjatVsW1bmpn1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ODM4ZWI1OWItYWIxNi00ZWU2LTlkNTYtMzllZThmZGZjZjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg53d47jG503fwh2L88gVnoUflQfewZrFhY7w 0kYxQn83Fu6AmBOP4EPRK8K1nv2Qc+EOWZvJK9vjlm7MtOcYg7HdR4xrlZdqmXu/ zKI0oV+ERcv9tKFRZb46GPtq4VSR3n0MHZhVw9bFO0OV58MhTWixWiWMb9I3wihk jj2DfPi03vkHUwqgXQ5k73bor9cZnQ73y43urYwefLaIBrejlHcuuNQZJDLYWVUx joUQC4zZ4YDlW0Wwv8EBVsX2o8y3UJyiPyGBR1ODGCVlQ/6UwYcnc3w8+kWtOGfS IQgrpBi9mN0nFixNWQmMiM1hJQj6cuMCcBgclmOnn40fHqinnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOnLeiD6vDh1roWNBomN/EsW7FtPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzI5NTQzMmItNzdiNy0z NzAyLWI1MzctZjFjNzUyZTIyYTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYi/8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALt3ba1CaJGitRtzKcFSW8h5YQvZeBuk7Sitq+z/+axTrESS9OVm6YIx +3UmmAfhm5ucOhTi/VMrMKN9OOYGxqcKM1jOaTOwV8KKmImjJeUdJyAmu9xClPEL LLQwOytcIdDZXimE7NfjDNttNqBIagbCTKMsejszPZQ4Y5lG9++Bes+hAC2MVGug F6GK1I0e7lHCcvVGE2v9NUFYv7gKUSaVH86Zz3fJm5GCb8UKbVWmgl204XREVs4H CejCZDuEw5E+e8Uf1mdk/RC82uNOfiBZrIH4oc5/ueDmflxoQ1yCbCOMTwnM/Epa Wkmda01wH2W5NznuJW5J9DPXAq09hc0= -----END CERTIFICATE-----Generated at Sun Mar 1 21:08:22 2026 by rpki-client