$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3319c230-c10c-3153-8c46-0efff7d0e119.roa File: 3319c230-c10c-3153-8c46-0efff7d0e119.roa (raw, json) Hash identifier: VtP9U7wFoZLqZCIRO+GDVcAu6PbIODKy95//F2zg77w= Subject key identifier: 3A:75:8C:75:A0:6B:DF:35:F3:A1:9C:8B:CE:B1:5E:B9:AA:42:D3:74 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE590DE8361615D0B16B4280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3319c230-c10c-3153-8c46-0efff7d0e119.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 98.248.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:59:0d:e8:36:16:15:d0:b1:6b:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=d4a7947c-5098-4610-ab54-90a5591a769d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:00:6d:16:cf:af:0b:d4:08:a7:3b:82:b1:09: f1:37:41:13:fc:dc:51:b2:b9:f7:76:a0:36:d8:b5: 25:64:0a:0c:ad:01:64:3b:51:9a:a9:c0:57:87:4d: c7:0a:e6:39:14:d5:8e:ff:b6:f3:73:81:77:6a:4d: ad:5f:77:99:0b:dd:38:62:85:9c:99:69:93:91:79: 77:e0:14:89:8c:3b:60:5c:af:cc:dc:c9:28:14:70: 03:32:f0:3d:a9:ba:1c:b0:ee:1c:42:51:79:7c:44: 25:5e:f8:d9:c0:61:4a:d0:16:7c:2c:d8:76:ff:80: 8f:51:26:37:9f:6c:a3:3a:a4:14:be:dc:8e:8c:60: 71:fb:38:c0:0f:35:f4:2e:ff:57:7a:8b:71:7c:8f: e0:36:3d:89:73:5b:7a:f8:dc:bc:36:52:30:69:6f: 3b:9f:99:bc:d8:98:ec:15:8d:84:d0:65:7e:9f:59: e4:01:48:48:4f:b2:90:4c:0a:23:f5:00:1c:93:b1: bc:0e:52:d7:bc:4f:51:33:6f:5b:ec:bc:16:bb:b9: 39:35:1f:db:c0:c7:52:95:8f:22:c2:5f:c6:1d:51: a0:fe:e2:0f:f1:c0:34:b5:55:2d:a1:ba:25:41:73: 85:91:1a:29:f2:36:29:9a:95:bb:10:f5:bb:29:d9: 9b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:75:8C:75:A0:6B:DF:35:F3:A1:9C:8B:CE:B1:5E:B9:AA:42:D3:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3319c230-c10c-3153-8c46-0efff7d0e119.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.248.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:56:cb:24:43:36:ee:e9:b7:e1:23:9b:42:59:6c:a6:ce:66: 93:b2:a9:bb:a1:f8:f7:5f:eb:a1:17:df:aa:e1:ea:17:13:88: 9d:95:de:5b:d0:a5:3a:3a:a2:49:76:cc:4d:50:eb:7c:80:74: 22:3f:11:bb:b0:39:6b:2a:bd:c9:0c:26:d3:d0:af:31:68:4a: b4:07:8f:a2:31:51:f9:63:b9:3c:75:2d:c0:30:69:15:08:0b: 3f:0b:a9:c0:d7:65:ee:78:26:f4:96:38:63:54:a3:01:d6:d6: 88:c4:71:c1:89:ca:6b:e6:42:ad:4e:6f:2a:b9:8a:e7:b9:5e: fc:d2:e6:bd:ec:a6:6e:36:f8:57:eb:36:e5:8c:51:b7:bb:d5: bd:cf:ac:a7:76:8e:f0:4e:75:f9:ea:a6:49:5f:59:9a:0f:82: 29:3e:0d:aa:f8:9f:1b:3b:fe:b5:7f:4a:ab:8c:10:d9:56:a2: bf:8c:53:d5:5b:70:2d:4c:82:5b:69:9f:c5:a0:20:c9:ca:a0: 0e:29:fb:59:d5:36:d2:5c:b8:ad:ff:4b:c1:25:49:a6:55:bb: f2:69:fb:91:05:80:96:10:05:e9:ee:e0:83:8f:d4:03:ef:f7: c1:74:a0:98:f6:a1:17:43:c9:84:5c:3d:66:ee:0e:85:75:32: e5:25:b4:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWQ3oNhYV0LFrQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZDRhNzk0N2MtNTA5OC00NjEwLWFiNTQtOTBhNTU5MWE3NjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwBtFs+vC9QIpzuCsQnxN0ET/NxRsrn3dqA2 2LUlZAoMrQFkO1GaqcBXh03HCuY5FNWO/7bzc4F3ak2tX3eZC904YoWcmWmTkXl3 4BSJjDtgXK/M3MkoFHADMvA9qbocsO4cQlF5fEQlXvjZwGFK0BZ8LNh2/4CPUSY3 n2yjOqQUvtyOjGBx+zjADzX0Lv9XeotxfI/gNj2Jc1t6+Ny8NlIwaW87n5m82Jjs FY2E0GV+n1nkAUhIT7KQTAoj9QAck7G8DlLXvE9RM29b7LwWu7k5NR/bwMdSlY8i wl/GHVGg/uIP8cA0tVUtobolQXOFkRop8jYpmpW7EPW7KdmbbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDp1jHWga98186Gci86xXrmqQtN0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzMxOWMyMzAtYzEwYy0z MTUzLThjNDYtMGVmZmY3ZDBlMTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYviYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALNWyyRDNu7pt+Ejm0JZbKbOZpOyqbuh+Pdf66EX36rh6hcTiJ2V3lvQ pTo6okl2zE1Q63yAdCI/EbuwOWsqvckMJtPQrzFoSrQHj6IxUfljuTx1LcAwaRUI Cz8LqcDXZe54JvSWOGNUowHW1ojEccGJymvmQq1Obyq5iue5XvzS5r3spm42+Ffr NuWMUbe71b3PrKd2jvBOdfnqpklfWZoPgik+Dar4nxs7/rV/SquMENlWor+MU9Vb cC1Mgltpn8WgIMnKoA4p+1nVNtJcuK3/S8ElSaZVu/Jp+5EFgJYQBenu4IOP1APv 98F0oJj2oRdDyYRcPWbuDoV1MuUltOA= -----END CERTIFICATE-----Generated at Sun Mar 1 19:14:44 2026 by rpki-client