$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33214625-c354-3765-a786-94bca5a4c72a.roa File: 33214625-c354-3765-a786-94bca5a4c72a.roa (raw, json) Hash identifier: kBiXVFGiRhO5eBXE/paPKHlIyKTQQZElyJCcO2N1DME= Subject key identifier: 8D:2F:39:DA:FD:A0:6B:3D:32:CD:43:22:28:DC:20:50:B1:B2:EE:1D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE57A5AC1ED942AE2B2C3B40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33214625-c354-3765-a786-94bca5a4c72a.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33659 IP address blocks: 98.221.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:a5:ac:1e:d9:42:ae:2b:2c:3b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=f888d115-276b-4950-8cf7-e8cc6511d693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:50:5b:0f:f4:c8:ef:bc:10:cf:60:c3:f9:d0: c0:9a:1c:ae:35:cb:5c:b8:a6:ff:83:02:91:62:0a: cc:75:d2:2a:a7:63:69:67:39:fb:af:66:5a:4d:43: 42:1a:33:3a:7d:56:0c:82:91:60:cb:40:ef:c4:bb: 8a:d3:92:87:b9:7e:92:b1:73:a1:15:b9:57:38:4b: e4:dc:54:89:5b:09:3f:0a:3e:45:f0:0c:32:0b:86: 25:10:2b:6f:f5:4c:2a:10:2c:c8:2a:e2:66:4f:51: 10:bf:c1:35:f9:26:ca:7a:16:9d:63:d7:fc:8a:1c: 86:1a:1e:ef:b3:97:b2:f0:74:c6:e0:2c:4d:7f:16: 75:71:33:aa:d1:99:04:01:44:8b:4e:9a:68:7f:87: 05:9d:23:e4:13:e9:fa:14:ee:1d:c0:de:fa:12:26: 9c:f4:4e:46:06:78:98:d7:d9:37:2a:89:47:c3:5e: e0:cb:31:63:d0:4f:96:b3:94:79:47:9b:9e:95:33: 96:8c:a9:9c:a6:95:f8:07:47:38:85:41:2c:a6:90: c0:b2:d0:cf:19:61:cf:6b:01:84:fd:f0:57:45:11: 82:c1:1d:17:12:0d:34:ec:d2:a7:ec:10:86:28:72: 43:fe:6c:0d:c8:98:0a:b2:b5:cf:ad:1c:05:99:4a: 1b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:2F:39:DA:FD:A0:6B:3D:32:CD:43:22:28:DC:20:50:B1:B2:EE:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33214625-c354-3765-a786-94bca5a4c72a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.221.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:b0:17:a8:d3:b3:0d:51:7a:34:19:ae:72:ed:f3:c6:fe:54: af:f5:b2:57:07:f8:c7:6e:4b:b2:99:21:43:3b:a7:cd:f7:f9: 3d:d8:0f:6d:58:1a:f0:a8:58:bd:b8:63:4f:1a:3b:ad:2f:9d: d5:c2:c3:4c:ce:a5:6e:7a:53:f2:b8:b3:7e:fe:e8:7b:60:86: c5:2b:59:a4:ff:a6:ac:92:9d:9c:b5:41:fd:1b:6c:2a:2c:cd: 6a:d7:ff:48:f6:a8:6a:fb:17:5e:8e:5e:53:80:ee:ac:9f:d5: 59:87:05:6c:cc:ad:4c:28:c7:61:7a:bb:09:e8:fc:2a:96:0e: c7:22:6f:f6:61:b4:a7:d7:32:f1:ce:4b:b2:53:55:1d:a2:7e: c0:00:9f:97:7d:14:ec:9a:c1:c3:b1:d8:3c:cc:30:26:6c:4e: a5:2b:e1:6d:95:69:fe:f3:61:0f:a6:89:6e:99:95:81:d7:e0: 0d:f5:e6:51:cd:57:57:ef:a4:62:9c:bb:2a:08:40:ef:a1:db: 18:72:30:95:50:39:1e:96:80:73:bb:72:e5:86:2d:99:c6:35: 7e:be:81:95:d8:15:ae:6f:cb:36:1e:ab:11:42:d4:ff:8b:38: a2:f7:7d:5c:ff:38:e3:6c:ea:c5:f4:1b:08:96:0f:09:35:51: 73:ec:49:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuV6WsHtlCrissO0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk Zjg4OGQxMTUtMjc2Yi00OTUwLThjZjctZThjYzY1MTFkNjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01BbD/TI77wQz2DD+dDAmhyuNctcuKb/gwKR YgrMddIqp2NpZzn7r2ZaTUNCGjM6fVYMgpFgy0DvxLuK05KHuX6SsXOhFblXOEvk 3FSJWwk/Cj5F8AwyC4YlECtv9UwqECzIKuJmT1EQv8E1+SbKehadY9f8ihyGGh7v s5ey8HTG4CxNfxZ1cTOq0ZkEAUSLTppof4cFnSPkE+n6FO4dwN76Eiac9E5GBniY 19k3KolHw17gyzFj0E+Ws5R5R5uelTOWjKmcppX4B0c4hUEsppDAstDPGWHPawGE /fBXRRGCwR0XEg007NKn7BCGKHJD/mwNyJgKsrXPrRwFmUob3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0vOdr9oGs9Ms1DIijcIFCxsu4dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzMyMTQ2MjUtYzM1NC0z NzY1LWE3ODYtOTRiY2E1YTRjNzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYt36MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmwF6jTsw1RejQZrnLt88b+VK/1slcH+MduS7KZIUM7p833+T3YD21Y GvCoWL24Y08aO60vndXCw0zOpW56U/K4s37+6HtghsUrWaT/pqySnZy1Qf0bbCos zWrX/0j2qGr7F16OXlOA7qyf1VmHBWzMrUwox2F6uwno/CqWDscib/ZhtKfXMvHO S7JTVR2ifsAAn5d9FOyawcOx2DzMMCZsTqUr4W2Vaf7zYQ+miW6ZlYHX4A315lHN V1fvpGKcuyoIQO+h2xhyMJVQOR6WgHO7cuWGLZnGNX6+gZXYFa5vyzYeqxFC1P+L OKL3fVz/OONs6sX0GwiWDwk1UXPsSVw= -----END CERTIFICATE-----Generated at Mon Mar 2 10:22:53 2026 by rpki-client