$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35d9c34a-c47e-3ba2-80fc-3a949194b841.roa File: 35d9c34a-c47e-3ba2-80fc-3a949194b841.roa (raw, json) Hash identifier: H9BDR39elpeC+1hCnzdOE/YA9/IjEoYScloX4b3BqU8= Subject key identifier: 21:E8:DD:15:65:9A:1A:88:D9:5E:1E:D8:36:0F:4F:7C:CE:E2:A4:1D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE57DE4BECA4225ACD5D4100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35d9c34a-c47e-3ba2-80fc-3a949194b841.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33287 IP address blocks: 98.221.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:de:4b:ec:a4:22:5a:cd:5d:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=e2a3e4f8-04cd-469a-af21-2beb63b97a55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b3:98:ae:75:cd:e1:49:78:5e:95:f5:a4:24: 4a:dc:b6:13:d8:8f:03:09:a0:a5:47:91:2f:e4:37: b0:36:fb:eb:ec:d3:c0:97:da:60:56:a9:3a:da:de: f1:60:f2:a4:e9:3b:b2:b4:f2:c9:91:a5:18:ab:61: db:ec:0b:80:d0:76:91:81:26:d2:38:7b:59:60:70: 3a:3d:a4:e9:1d:b1:1f:fa:39:b6:f1:5e:b9:fc:90: 60:06:42:84:c2:b9:05:52:5e:1c:75:c3:fa:a8:e0: 9b:21:c2:a3:00:e8:54:ac:df:c9:35:8d:79:5c:ba: e4:eb:d0:b0:f4:8d:51:95:e0:91:69:e8:97:62:a8: c4:82:88:f8:55:a5:8c:38:0f:69:cf:7a:ae:9a:a7: 02:0d:55:f3:d7:7b:e1:be:d3:9a:4b:b0:71:10:73: 10:b0:80:f3:85:20:ba:70:dd:1f:68:79:c8:f9:17: 8e:5b:b4:cd:5b:b8:43:e6:03:be:7f:21:7e:53:31: 5b:f3:97:54:ff:eb:75:2e:5b:05:18:97:f3:1b:e9: 66:8d:4b:4d:54:f9:e1:66:94:3a:26:fe:9d:c4:18: 1e:89:22:83:d3:22:3c:37:fe:85:3a:f9:c5:59:fa: a9:ac:0e:7b:62:e1:66:b1:cf:fb:72:5e:2d:45:a8: c4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:E8:DD:15:65:9A:1A:88:D9:5E:1E:D8:36:0F:4F:7C:CE:E2:A4:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35d9c34a-c47e-3ba2-80fc-3a949194b841.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.221.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:4f:09:08:81:0e:1c:3f:e9:ee:65:4a:e3:6c:55:9c:7e:e2: ca:cb:1b:af:98:69:5d:06:ef:0a:f7:4b:71:37:86:1c:78:e2: 16:7c:92:f8:d1:1b:35:04:c1:83:62:15:d7:9f:56:81:fa:ca: ee:aa:c3:2e:10:de:5e:f2:11:e9:0d:95:7b:7f:e0:46:6b:33: cf:5a:00:37:f7:21:be:b4:51:c3:07:a6:6c:8e:15:76:2b:00: da:5a:a8:ce:ad:f1:52:97:78:03:81:5d:4f:44:36:40:f4:11: 64:0e:32:b5:79:e1:b7:02:22:57:4e:08:e1:18:5f:45:30:d0: 28:b8:b3:d2:73:43:4a:6b:9e:84:21:97:27:be:43:e6:b1:f2: db:21:f1:90:65:70:62:c7:84:f9:95:3d:5b:0a:7b:39:86:02: bc:cc:84:c1:5e:71:f0:a7:c6:37:01:0b:a0:7f:ca:9f:3d:13: 64:d1:0c:f7:d6:d7:d6:2c:40:7e:10:af:9b:c9:70:68:25:5d: 3c:44:9e:ae:9c:f5:4b:f1:ea:9d:65:0b:94:d3:f3:18:95:bd: 72:a8:1a:94:c0:2c:ec:39:09:67:a2:e6:1c:b1:59:2d:e0:d1: f0:52:11:1f:18:dc:94:6d:94:24:27:02:00:d6:80:65:3d:a7: d5:10:b0:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuV95L7KQiWs1dQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZTJhM2U0ZjgtMDRjZC00NjlhLWFmMjEtMmJlYjYzYjk3YTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbOYrnXN4Ul4XpX1pCRK3LYT2I8DCaClR5Ev 5DewNvvr7NPAl9pgVqk62t7xYPKk6TuytPLJkaUYq2Hb7AuA0HaRgSbSOHtZYHA6 PaTpHbEf+jm28V65/JBgBkKEwrkFUl4cdcP6qOCbIcKjAOhUrN/JNY15XLrk69Cw 9I1RleCRaeiXYqjEgoj4VaWMOA9pz3qumqcCDVXz13vhvtOaS7BxEHMQsIDzhSC6 cN0faHnI+ReOW7TNW7hD5gO+fyF+UzFb85dU/+t1LlsFGJfzG+lmjUtNVPnhZpQ6 Jv6dxBgeiSKD0yI8N/6FOvnFWfqprA57YuFmsc/7cl4tRajEEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHo3RVlmhqI2V4e2DYPT3zO4qQdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzVkOWMzNGEtYzQ3ZS0z YmEyLTgwZmMtM2E5NDkxOTRiODQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYt1oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI9PCQiBDhw/6e5lSuNsVZx+4srLG6+YaV0G7wr3S3E3hhx44hZ8kvjR GzUEwYNiFdefVoH6yu6qwy4Q3l7yEekNlXt/4EZrM89aADf3Ib60UcMHpmyOFXYr ANpaqM6t8VKXeAOBXU9ENkD0EWQOMrV54bcCIldOCOEYX0Uw0Ci4s9JzQ0prnoQh lye+Q+ax8tsh8ZBlcGLHhPmVPVsKezmGArzMhMFecfCnxjcBC6B/yp89E2TRDPfW 19YsQH4Qr5vJcGglXTxEnq6c9Uvx6p1lC5TT8xiVvXKoGpTALOw5CWei5hyxWS3g 0fBSER8Y3JRtlCQnAgDWgGU9p9UQsAY= -----END CERTIFICATE-----Generated at Sun Mar 1 18:47:09 2026 by rpki-client