$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3625b257-f6a8-38d6-bb6e-972783e5979a.roa File: 3625b257-f6a8-38d6-bb6e-972783e5979a.roa (raw, json) Hash identifier: x9x8EclR7aT7JySd65BsO/rnQXNK6oV2bwMqyDu1O5c= Subject key identifier: 9B:80:5A:93:02:78:3C:F3:9B:E0:25:40:61:3F:73:05:5F:A6:BD:E7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5E2C9B9E06EA41C3D6F980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3625b257-f6a8-38d6-bb6e-972783e5979a.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 98.45.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:2c:9b:9e:06:ea:41:c3:d6:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=40495b39-9e18-4cf2-b6ce-c891a7599fa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:20:aa:ab:51:dc:d3:ec:1f:37:ba:62:9f:7b: fc:47:f6:2e:00:64:6b:f5:1e:06:89:b9:29:58:b6: db:2c:be:88:ff:f8:82:21:03:dc:c2:9c:6b:29:ee: c3:8a:3a:c7:7c:c5:d2:1d:e7:ae:14:a1:e0:4f:04: 2c:fa:bf:32:41:57:ae:9a:31:2f:f9:a5:f4:e0:5f: 1d:5e:df:61:85:b5:65:6d:23:02:03:4f:27:f6:3e: 62:4f:e2:78:50:18:b4:21:a9:33:31:76:80:58:54: 7e:83:92:51:35:70:37:fd:dc:3a:e8:4d:37:c3:bc: 6b:a2:c0:09:41:3d:d1:eb:c5:49:09:02:f2:2b:95: 4d:3a:0e:f2:60:ca:a6:7e:f1:36:e4:a4:4b:d8:6b: 46:4a:e6:3b:fc:9b:3b:ca:37:49:73:bb:64:69:c1: 11:a4:8c:f7:7d:d0:68:72:14:44:eb:e8:51:77:43: d9:66:c3:ac:41:9f:27:a2:40:4e:5e:0c:47:86:0a: da:51:01:fb:65:7e:75:86:1f:55:a9:70:1b:ff:c8: c8:54:cf:ea:16:31:95:67:24:9f:7c:a1:d5:6c:6f: 2b:4e:67:1a:31:d3:24:21:68:dc:cd:2e:d6:24:2c: 9d:9e:5b:6c:21:d4:97:4b:2b:08:d9:81:b9:c5:94: 47:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:80:5A:93:02:78:3C:F3:9B:E0:25:40:61:3F:73:05:5F:A6:BD:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3625b257-f6a8-38d6-bb6e-972783e5979a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.45.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:07:3a:cc:b9:6c:4b:ed:55:04:32:1e:c9:44:38:85:52:11: 93:8f:f1:83:7a:3b:df:30:88:89:58:73:3f:ab:c1:8b:a9:4a: 3c:3c:9b:b8:c0:b5:d0:7c:b1:ec:23:9b:be:b7:92:34:c3:c1: 7f:ab:cf:0b:a4:28:3a:ee:25:9a:89:46:31:4a:01:07:d0:d4: 59:59:ba:fa:ca:5f:56:71:08:f0:fb:88:1e:70:40:c5:2b:2a: fb:0b:6b:9f:79:c0:b8:71:e3:a0:ff:cb:7d:5c:c5:c9:b2:ff: 05:d1:54:7b:55:b6:61:d4:0e:e8:dc:68:e2:28:84:1e:42:47: 57:5a:5e:a2:04:1b:06:00:8b:68:6c:a5:16:f4:2c:44:b2:c1: 7d:32:1c:45:1b:3c:6d:97:28:01:64:8b:48:5b:8e:21:03:86: 89:f7:37:41:a4:4e:a9:b8:fd:8a:b3:36:6a:d9:49:0b:3e:14: dd:0e:9c:99:9d:82:0e:c1:23:b5:ba:27:ec:1b:60:39:dd:ad: d3:9b:df:11:dd:78:f3:40:0f:9e:74:84:f4:41:f5:8b:f7:93: b2:ad:d1:f9:c9:82:bb:5f:0b:46:4f:6a:9f:e6:15:6c:f9:f8: 1a:b9:6a:35:f5:65:ee:75:a2:b0:8e:e9:5b:78:42:4a:38:69: ad:2f:25:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXiybngbqQcPW+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NDA0OTViMzktOWUxOC00Y2YyLWI2Y2UtYzg5MWE3NTk5ZmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CCqq1Hc0+wfN7pin3v8R/YuAGRr9R4Gibkp WLbbLL6I//iCIQPcwpxrKe7DijrHfMXSHeeuFKHgTwQs+r8yQVeumjEv+aX04F8d Xt9hhbVlbSMCA08n9j5iT+J4UBi0IakzMXaAWFR+g5JRNXA3/dw66E03w7xrosAJ QT3R68VJCQLyK5VNOg7yYMqmfvE25KRL2GtGSuY7/Js7yjdJc7tkacERpIz3fdBo chRE6+hRd0PZZsOsQZ8nokBOXgxHhgraUQH7ZX51hh9VqXAb/8jIVM/qFjGVZySf fKHVbG8rTmcaMdMkIWjczS7WJCydnltsIdSXSysI2YG5xZRHuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJuAWpMCeDzzm+AlQGE/cwVfpr3nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzYyNWIyNTctZjZhOC0z OGQ2LWJiNmUtOTcyNzgzZTU5NzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYi3CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwHOsy5bEvtVQQyHslEOIVSEZOP8YN6O98wiIlYcz+rwYupSjw8m7jA tdB8sewjm763kjTDwX+rzwukKDruJZqJRjFKAQfQ1FlZuvrKX1ZxCPD7iB5wQMUr KvsLa595wLhx46D/y31cxcmy/wXRVHtVtmHUDujcaOIohB5CR1daXqIEGwYAi2hs pRb0LESywX0yHEUbPG2XKAFki0hbjiEDhon3N0GkTqm4/YqzNmrZSQs+FN0OnJmd gg7BI7W6J+wbYDndrdOb3xHdePNAD550hPRB9Yv3k7Kt0fnJgrtfC0ZPap/mFWz5 +Bq5ajX1Ze51orCO6Vt4Qko4aa0vJak= -----END CERTIFICATE-----Generated at Sun Mar 1 23:28:09 2026 by rpki-client