$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38ca4051-ae6f-379b-a604-ad5873440c88.roa File: 38ca4051-ae6f-379b-a604-ad5873440c88.roa (raw, json) Hash identifier: xpUg7B+aOn1KfbzbNwlEvDf1xSr7w5gK+yP0BSCyC1A= Subject key identifier: D8:7D:66:73:B7:11:1C:8A:03:98:A2:DD:C8:16:FA:A7:0C:0F:6D:FD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE58928969C3D40431209880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38ca4051-ae6f-379b-a604-ad5873440c88.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 98.213.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:92:89:69:c3:d4:04:31:20:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=e0d26d59-5942-4ac1-a8a7-52aa50ef2ffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:65:58:bc:3a:7a:e3:5a:b5:f9:5f:54:6e:8e: 46:ae:73:56:98:cf:ad:38:7f:53:6f:8b:56:1a:46: 2c:1d:f4:be:18:98:38:51:ba:7a:bd:8a:bf:30:f8: 63:03:36:d3:8f:9b:a5:db:3d:f6:11:f0:24:58:a6: 49:54:f7:ad:09:ef:ba:6f:92:d4:fb:fe:0f:26:19: 03:ed:cd:f8:6f:70:ab:1f:85:99:44:9f:7f:b3:73: 70:4b:56:c2:a0:6f:96:3a:55:08:52:b6:25:82:91: 0f:ef:20:ee:08:a0:6a:43:79:ba:fc:cc:e2:f6:b7: b5:56:0a:b6:81:d4:5b:a1:ac:07:12:76:19:1b:e2: ea:b8:9e:4b:89:01:7f:d8:02:24:bf:07:20:3e:21: f8:fb:fb:be:51:8b:fa:8d:81:01:30:7f:83:0e:51: e8:4e:be:6f:79:93:5f:0c:3a:ac:e0:59:61:28:b3: 83:46:b1:bd:bf:c5:e8:f1:d0:8f:ce:73:da:4c:ea: 14:25:3c:96:b4:23:ac:32:2c:49:05:54:ab:bb:f3: bd:d2:08:73:92:32:30:e8:31:fe:80:18:de:8c:84: 5c:92:e3:43:58:8c:23:55:6c:27:ef:43:91:5e:12: a7:4d:74:00:c6:2f:e4:e2:16:07:b6:3b:2c:73:e1: fa:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:7D:66:73:B7:11:1C:8A:03:98:A2:DD:C8:16:FA:A7:0C:0F:6D:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38ca4051-ae6f-379b-a604-ad5873440c88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.213.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:9d:cc:36:ea:83:d1:65:a6:95:31:20:0b:58:24:a1:a6:e1: 0f:ae:eb:4d:a1:07:f2:7a:5b:7c:26:e6:f2:1a:e6:8a:7b:74: 7a:9b:65:77:f6:08:4b:74:d6:64:3d:99:53:b0:63:c6:f8:e3: e0:e4:94:bb:aa:ce:26:50:d1:de:5b:b0:a8:28:32:4b:4a:b0: d9:4c:d3:a6:4f:54:c9:82:db:38:e5:2b:f4:38:5c:ec:b2:f5: 5d:3b:03:6f:05:fe:44:a6:cc:aa:46:2e:15:9b:44:7b:12:26: 0c:f3:2f:55:1a:2d:cc:56:73:4b:57:f8:92:40:a5:1e:1b:c8: 40:33:2d:07:dd:2e:7b:6e:b6:a3:da:d1:ec:71:9a:7a:58:7e: f3:4b:97:0e:9c:19:c4:34:00:91:86:85:19:05:d2:dc:12:06: 0e:1f:13:f3:b4:7c:b5:03:c2:c5:fe:2e:38:c5:02:8a:c6:09: 68:de:7c:fb:e8:fe:af:7d:4e:51:83:59:cd:61:df:fa:b7:f6: 55:96:a0:fa:a1:c1:39:0f:79:22:85:e2:30:bb:5a:df:09:2f: fb:aa:a4:51:e6:0e:ef:3c:06:c9:68:56:cf:bd:87:02:a0:bd: aa:37:ae:f6:a7:15:f8:a0:45:03:f5:d5:e3:aa:f2:c6:78:27: 35:0d:ed:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWJKJacPUBDEgmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZTBkMjZkNTktNTk0Mi00YWMxLWE4YTctNTJhYTUwZWYyZmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGVYvDp641q1+V9Ubo5GrnNWmM+tOH9Tb4tW GkYsHfS+GJg4Ubp6vYq/MPhjAzbTj5ul2z32EfAkWKZJVPetCe+6b5LU+/4PJhkD 7c34b3CrH4WZRJ9/s3NwS1bCoG+WOlUIUrYlgpEP7yDuCKBqQ3m6/Mzi9re1Vgq2 gdRboawHEnYZG+LquJ5LiQF/2AIkvwcgPiH4+/u+UYv6jYEBMH+DDlHoTr5veZNf DDqs4FlhKLODRrG9v8Xo8dCPznPaTOoUJTyWtCOsMixJBVSru/O90ghzkjIw6DH+ gBjejIRckuNDWIwjVWwn70ORXhKnTXQAxi/k4hYHtjssc+H6QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNh9ZnO3ERyKA5ii3cgW+qcMD239MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzhjYTQwNTEtYWU2Zi0z NzliLWE2MDQtYWQ1ODczNDQwYzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYtUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKdzDbqg9FlppUxIAtYJKGm4Q+u602hB/J6W3wm5vIa5op7dHqbZXf2 CEt01mQ9mVOwY8b44+DklLuqziZQ0d5bsKgoMktKsNlM06ZPVMmC2zjlK/Q4XOyy 9V07A28F/kSmzKpGLhWbRHsSJgzzL1UaLcxWc0tX+JJApR4byEAzLQfdLntutqPa 0exxmnpYfvNLlw6cGcQ0AJGGhRkF0twSBg4fE/O0fLUDwsX+LjjFAorGCWjefPvo /q99TlGDWc1h3/q39lWWoPqhwTkPeSKF4jC7Wt8JL/uqpFHmDu88BsloVs+9hwKg vao3rvanFfigRQP11eOq8sZ4JzUN7WY= -----END CERTIFICATE-----Generated at Sun Mar 1 19:11:57 2026 by rpki-client