$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3bcad0a0-7227-3962-8512-9dbba3bff5b8.roa File: 3bcad0a0-7227-3962-8512-9dbba3bff5b8.roa (raw, json) Hash identifier: BTYLgq/J/d9ApICCdpiaGPmDVC1PJzkRcSjhvhj9wfk= Subject key identifier: B1:4F:0A:9B:2F:D9:00:93:35:76:E0:24:08:3C:9C:68:5D:8C:72:1E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE590F4E8C08325EDBC30280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3bcad0a0-7227-3962-8512-9dbba3bff5b8.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 98.248.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:59:0f:4e:8c:08:32:5e:db:c3:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=24382abf-3013-497b-b384-97f86069992f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:48:24:98:18:72:89:ea:90:89:a0:4b:0d:54: 61:9a:a6:66:49:a4:08:2d:d7:91:c8:25:05:b8:fb: 60:1f:2d:b4:8b:d7:28:88:3b:0c:79:04:34:37:a8: aa:c2:37:8d:8c:bf:60:22:37:a5:b8:18:8a:f0:f3: 0c:f4:f5:18:56:ee:1f:d3:fd:d9:a1:33:d1:a4:d0: 91:22:f3:7d:93:f1:26:f8:0e:8d:c8:27:a0:7e:63: 61:90:05:1a:1e:b0:87:9d:3b:05:25:d4:c1:96:24: cb:e3:e6:cc:6b:ad:dd:d4:f2:ff:fd:98:92:79:84: db:de:7a:7d:61:de:64:71:b3:77:c3:ba:3a:f9:f2: 38:d0:9f:eb:64:6d:71:f2:7d:4e:6b:08:26:ad:55: 45:a2:42:b4:27:5b:6b:01:b5:79:84:52:80:73:24: 50:03:4b:ad:d8:97:fa:2a:0e:a6:6c:3b:22:91:44: 8a:0b:82:41:2d:24:a7:89:58:77:75:30:49:4f:a5: cf:a7:98:ea:79:a3:01:8a:fb:fd:b5:35:ab:2f:d1: 50:23:48:7a:19:62:d6:af:41:53:62:7c:b4:6e:b1: b4:f9:f0:7b:ca:be:f5:c2:02:9d:ee:69:aa:29:f2: f4:a1:b3:2e:0b:22:f3:22:41:13:92:eb:5e:e7:9a: 9e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:4F:0A:9B:2F:D9:00:93:35:76:E0:24:08:3C:9C:68:5D:8C:72:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3bcad0a0-7227-3962-8512-9dbba3bff5b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.248.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:31:8f:60:86:c2:a6:ff:bc:6c:48:0f:ca:1e:83:9b:8b:f6: af:87:79:7e:a6:38:68:51:ee:94:76:83:0d:c4:f6:c9:e9:a4: d1:07:c3:82:c8:04:05:7e:98:78:63:27:a2:ca:47:8c:7b:81: 1c:f8:f2:e2:02:77:70:27:f9:87:20:6a:47:eb:18:cd:5a:18: 2d:5a:9e:86:96:ba:d1:68:67:d5:c4:e9:66:a6:35:f9:52:ff: d4:c3:b9:cf:58:99:8b:7d:4a:85:c7:e0:fb:62:e1:17:01:f0: b6:ad:4d:db:e2:fa:30:66:f3:0a:cf:0b:de:e2:b0:98:d5:fe: 97:f6:d7:50:5b:30:cc:b8:e3:9f:d0:79:50:16:2e:df:4c:34: 98:b5:7a:ce:e2:2f:2a:e2:77:5e:42:2d:4d:de:8e:a5:f4:6c: 8c:f1:fb:40:c3:7d:37:00:64:32:50:d6:0f:2c:ee:f7:f2:5d: aa:71:bd:4f:f8:47:53:f2:b1:4d:4f:db:96:ac:af:69:4d:9b: 38:ea:ba:a8:b2:42:0e:1d:16:be:aa:6e:c3:50:5e:54:f7:a0: 53:b1:af:c6:17:e9:58:b8:ac:48:c0:d1:c5:9c:fe:28:87:c2: df:9c:10:4e:be:f3:b0:91:b0:bd:9e:ca:5b:8d:ea:e2:46:04: 66:7e:dc:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWQ9OjAgyXtvDAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MjQzODJhYmYtMzAxMy00OTdiLWIzODQtOTdmODYwNjk5OTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkgkmBhyieqQiaBLDVRhmqZmSaQILdeRyCUF uPtgHy20i9coiDsMeQQ0N6iqwjeNjL9gIjeluBiK8PMM9PUYVu4f0/3ZoTPRpNCR IvN9k/Em+A6NyCegfmNhkAUaHrCHnTsFJdTBliTL4+bMa63d1PL//ZiSeYTb3np9 Yd5kcbN3w7o6+fI40J/rZG1x8n1OawgmrVVFokK0J1trAbV5hFKAcyRQA0ut2Jf6 Kg6mbDsikUSKC4JBLSSniVh3dTBJT6XPp5jqeaMBivv9tTWrL9FQI0h6GWLWr0FT Yny0brG0+fB7yr71wgKd7mmqKfL0obMuCyLzIkETkute55qeKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLFPCpsv2QCTNXbgJAg8nGhdjHIeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2JjYWQwYTAtNzIyNy0z OTYyLTg1MTItOWRiYmEzYmZmNWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYvjsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJMxj2CGwqb/vGxID8oeg5uL9q+HeX6mOGhR7pR2gw3E9snppNEHw4LI BAV+mHhjJ6LKR4x7gRz48uICd3An+YcgakfrGM1aGC1anoaWutFoZ9XE6WamNflS /9TDuc9YmYt9SoXH4Pti4RcB8LatTdvi+jBm8wrPC97isJjV/pf211BbMMy445/Q eVAWLt9MNJi1es7iLyrid15CLU3ejqX0bIzx+0DDfTcAZDJQ1g8s7vfyXapxvU/4 R1PysU1P25asr2lNmzjquqiyQg4dFr6qbsNQXlT3oFOxr8YX6Vi4rEjA0cWc/iiH wt+cEE6+87CRsL2eyluN6uJGBGZ+3JE= -----END CERTIFICATE-----Generated at Mon Mar 2 12:17:18 2026 by rpki-client