$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e10e0bc-5f32-3486-a2d6-b691b37b820e.roa File: 3e10e0bc-5f32-3486-a2d6-b691b37b820e.roa (raw, json) Hash identifier: zahQ2pzLbPBav9GJm+D3H+QK+Dae5j92c2cOpVYC9ds= Subject key identifier: D4:35:44:92:28:67:E0:22:C0:38:66:E5:88:0F:61:9C:9B:31:F0:08 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE58944E059A8D20B4F8A098 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e10e0bc-5f32-3486-a2d6-b691b37b820e.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 98.215.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:94:4e:05:9a:8d:20:b4:f8:a0:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=e0ee17b3-48c3-4a7e-9c20-d62bf0954bc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:aa:5f:b7:62:59:28:c6:82:4a:3e:1c:3a:4a: aa:0d:74:82:67:c9:30:aa:e7:a2:67:54:6f:1d:13: 49:86:89:4a:9a:64:2b:d2:8b:12:bf:b8:9c:53:8e: 69:d7:1c:aa:7a:2e:bf:18:19:49:08:4a:33:0a:ba: 32:4b:5b:ca:8a:93:53:c3:89:48:e4:da:9f:3c:ef: 96:c5:fe:26:fd:77:a3:e1:30:a5:07:9c:cf:77:1d: e8:28:fb:0a:b7:3d:b4:f8:29:2b:c9:90:6a:97:6b: d5:6d:d0:a0:c3:43:fe:fd:99:ff:63:e8:ee:80:3d: 9a:e5:d0:eb:04:36:98:f6:48:e8:d8:c0:22:8e:96: 04:6d:8f:c8:21:4e:0d:c6:82:aa:72:57:27:6e:09: 1f:e9:0d:c4:9e:d4:05:90:83:c9:6d:6e:b3:22:37: d4:76:34:ee:85:aa:60:4c:45:40:a6:2c:ad:61:3e: 7b:ae:33:99:ae:4d:3f:1a:43:bc:5a:95:f5:9b:2d: ee:71:e9:ce:5e:27:fb:e6:80:e5:f3:1b:d9:55:a1: 42:1e:e2:d4:50:31:c0:5d:88:62:63:81:7e:dc:d6: aa:98:db:09:46:b0:fc:5d:de:47:7b:a6:6c:07:08: 52:6d:8e:9a:d0:83:fc:cf:d4:a8:33:aa:64:df:49: e3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:35:44:92:28:67:E0:22:C0:38:66:E5:88:0F:61:9C:9B:31:F0:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e10e0bc-5f32-3486-a2d6-b691b37b820e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.215.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:4a:df:26:c9:8a:a4:8b:3b:0c:7d:a8:af:aa:de:5e:24:92: 5d:d2:c9:af:5e:aa:02:d2:91:94:75:bb:7c:ef:5a:74:fc:b4: a2:00:54:1c:d7:4c:18:79:2a:79:37:fd:dc:82:0b:bd:01:17: 57:fc:ca:38:f1:e7:d9:25:86:82:87:91:b4:95:99:46:59:f9: 49:67:8f:c5:d2:26:d6:e1:9c:7c:9f:fb:1c:a8:45:c4:38:58: 19:eb:e6:ae:d1:5b:9f:e7:5f:14:e1:90:5c:c4:0f:35:29:32: c3:19:af:c4:1f:a6:36:f7:33:8f:a9:e8:38:a2:4e:98:03:0b: ec:72:71:d3:63:ca:46:67:ea:88:4f:5b:5b:ca:a0:48:7e:af: 13:44:27:1c:f1:13:4a:46:6c:ea:2d:6d:19:ca:dd:43:e7:a2: 96:84:b2:11:ec:a0:c7:10:eb:8b:39:f8:d0:9f:18:5a:27:85: 27:84:5c:61:5c:05:91:24:2b:fe:48:20:da:98:f1:66:a1:48: 75:2c:7a:3c:45:e2:13:76:41:e5:b3:17:6b:c6:44:ea:ba:13: ee:72:03:df:de:08:57:5a:a1:14:e9:05:7f:ea:43:01:21:d7: 10:1f:5d:c8:5f:87:c0:d9:ea:c9:07:d4:0b:a9:d7:f7:c1:2a: d0:af:c7:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWJROBZqNILT4oJgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZTBlZTE3YjMtNDhjMy00YTdlLTljMjAtZDYyYmYwOTU0YmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuapft2JZKMaCSj4cOkqqDXSCZ8kwqueiZ1Rv HRNJholKmmQr0osSv7icU45p1xyqei6/GBlJCEozCroyS1vKipNTw4lI5NqfPO+W xf4m/Xej4TClB5zPdx3oKPsKtz20+CkryZBql2vVbdCgw0P+/Zn/Y+jugD2a5dDr BDaY9kjo2MAijpYEbY/IIU4NxoKqclcnbgkf6Q3EntQFkIPJbW6zIjfUdjTuhapg TEVApiytYT57rjOZrk0/GkO8WpX1my3ucenOXif75oDl8xvZVaFCHuLUUDHAXYhi Y4F+3NaqmNsJRrD8Xd5He6ZsBwhSbY6a0IP8z9SoM6pk30njrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNQ1RJIoZ+AiwDhm5YgPYZybMfAIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2UxMGUwYmMtNWYzMi0z NDg2LWEyZDYtYjY5MWIzN2I4MjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYtd4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9K3ybJiqSLOwx9qK+q3l4kkl3Sya9eqgLSkZR1u3zvWnT8tKIAVBzX TBh5Knk3/dyCC70BF1f8yjjx59klhoKHkbSVmUZZ+Ulnj8XSJtbhnHyf+xyoRcQ4 WBnr5q7RW5/nXxThkFzEDzUpMsMZr8Qfpjb3M4+p6DiiTpgDC+xycdNjykZn6ohP W1vKoEh+rxNEJxzxE0pGbOotbRnK3UPnopaEshHsoMcQ64s5+NCfGFonhSeEXGFc BZEkK/5IINqY8WahSHUsejxF4hN2QeWzF2vGROq6E+5yA9/eCFdaoRTpBX/qQwEh 1xAfXchfh8DZ6skH1Aup1/fBKtCvx90= -----END CERTIFICATE-----Generated at Sun Mar 1 20:47:57 2026 by rpki-client