$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35153832-2568-35a6-b1d6-d1d65dec08e2.roa File: 35153832-2568-35a6-b1d6-d1d65dec08e2.roa (raw, json) Hash identifier: kJZEOhJzXApX3LuifDoxt3dTS8kJMidTSgsJfEfpNsE= Subject key identifier: E4:5C:8C:CC:ED:AD:5A:21:D1:94:B6:1C:C3:E7:FE:5C:35:5A:10:60 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5CEBF7355C7BDE4B967CE0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35153832-2568-35a6-b1d6-d1d65dec08e2.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 98.223.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5c:eb:f7:35:5c:7b:de:4b:96:7c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=df835bfe-2abb-46bc-b62e-35715bfbae18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:eb:13:12:ca:a6:0d:a3:4d:6c:b1:79:8c:7e: 02:b3:6f:1e:bb:8d:8a:49:c3:3f:f1:10:5c:92:05: e8:b3:1f:ce:bc:e3:7e:e3:ee:68:22:81:9f:c8:0b: 26:1e:ca:d3:ff:9c:93:d5:f3:ba:04:a3:6c:1a:68: e7:59:50:87:53:85:bf:fe:df:ce:cb:f7:42:ed:4b: cd:2e:54:d9:2d:fb:50:1b:c1:07:59:e2:20:d2:3d: 4d:85:5a:58:9f:44:49:34:b1:db:e3:7b:29:7a:52: 6f:26:0e:71:12:4f:f7:0e:4c:9f:ed:96:42:5d:59: 2c:75:21:fc:c4:51:c3:12:64:65:87:78:69:3e:a9: 7b:d0:7c:78:88:11:dc:6b:1c:1f:d7:7d:0e:4c:f9: 72:62:08:cb:5a:c1:80:58:5b:7e:fe:9f:ec:18:32: 62:b4:6d:bd:02:12:fa:6a:f2:7d:10:d4:68:05:b7: 1e:f4:54:b5:90:f9:6d:2f:fd:cc:68:3e:ab:65:de: b5:3c:74:5a:f7:60:e5:0f:93:52:a3:cf:70:03:21: db:f6:a9:f7:3f:7f:49:9d:ec:6c:32:fb:61:11:70: 3d:c0:b6:6e:88:0c:e3:08:2a:43:36:a8:08:fa:8f: 96:65:e1:c0:de:2e:b2:c0:9d:72:bf:02:e3:e1:c1: 3b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:5C:8C:CC:ED:AD:5A:21:D1:94:B6:1C:C3:E7:FE:5C:35:5A:10:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35153832-2568-35a6-b1d6-d1d65dec08e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.223.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:ad:9a:15:1a:8c:1d:e0:a7:ee:61:13:ce:a2:1f:7a:84:01: 49:ff:c1:0b:c7:20:29:81:2b:20:f9:21:02:5e:fa:44:53:bc: 9d:f1:fa:4b:1f:b5:30:29:67:4e:de:4b:ed:7a:42:bf:e2:ea: 99:2c:10:0c:48:e4:85:19:56:06:6b:de:16:20:c1:13:3f:e7: 25:1a:14:ea:fa:cf:65:46:27:3c:38:15:48:86:34:97:d3:ef: a1:bd:55:18:04:d5:2d:1d:6c:78:7f:aa:24:09:ab:c5:8c:fd: 4e:5e:73:be:8c:4d:1e:39:85:e0:1e:de:c6:67:b9:7f:7f:42: 7c:bb:28:35:0f:0d:7d:76:1f:a7:ec:29:42:a5:d8:a4:26:51: 88:69:14:7b:08:73:fc:f7:d8:e7:4b:37:0b:91:18:6f:97:e2: 0b:d1:6f:49:7c:74:d6:4f:95:f8:1b:af:91:a1:10:09:7f:78: aa:b6:3e:18:e5:80:99:64:9c:9d:68:f6:33:34:68:36:8d:21: c6:71:e4:a3:41:92:38:df:57:cf:f4:24:42:a8:30:5e:ed:91: 53:a6:33:44:05:2f:f6:3d:f5:dc:9c:a5:28:b1:e8:82:08:0d: 31:6f:d6:16:2f:b8:65:68:bd:4c:34:be:15:43:a9:43:52:1d: 99:47:69:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXOv3NVx73kuWfOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZGY4MzViZmUtMmFiYi00NmJjLWI2MmUtMzU3MTViZmJhZTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3esTEsqmDaNNbLF5jH4Cs28eu42KScM/8RBc kgXosx/OvON+4+5oIoGfyAsmHsrT/5yT1fO6BKNsGmjnWVCHU4W//t/Oy/dC7UvN LlTZLftQG8EHWeIg0j1NhVpYn0RJNLHb43spelJvJg5xEk/3Dkyf7ZZCXVksdSH8 xFHDEmRlh3hpPql70Hx4iBHcaxwf130OTPlyYgjLWsGAWFt+/p/sGDJitG29AhL6 avJ9ENRoBbce9FS1kPltL/3MaD6rZd61PHRa92DlD5NSo89wAyHb9qn3P39Jnexs MvthEXA9wLZuiAzjCCpDNqgI+o+WZeHA3i6ywJ1yvwLj4cE7GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFORcjMztrVoh0ZS2HMPn/lw1WhBgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzUxNTM4MzItMjU2OC0z NWE2LWIxZDYtZDFkNjVkZWMwOGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYt/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGutmhUajB3gp+5hE86iH3qEAUn/wQvHICmBKyD5IQJe+kRTvJ3x+ksf tTApZ07eS+16Qr/i6pksEAxI5IUZVgZr3hYgwRM/5yUaFOr6z2VGJzw4FUiGNJfT 76G9VRgE1S0dbHh/qiQJq8WM/U5ec76MTR45heAe3sZnuX9/Qny7KDUPDX12H6fs KUKl2KQmUYhpFHsIc/z32OdLNwuRGG+X4gvRb0l8dNZPlfgbr5GhEAl/eKq2Phjl gJlknJ1o9jM0aDaNIcZx5KNBkjjfV8/0JEKoMF7tkVOmM0QFL/Y99dycpSix6III DTFv1hYvuGVovUw0vhVDqUNSHZlHaf0= -----END CERTIFICATE-----Generated at Mon Mar 2 06:36:26 2026 by rpki-client