$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e7a123f-a52a-379e-80a0-7f8433a7c9c0.roa File: 3e7a123f-a52a-379e-80a0-7f8433a7c9c0.roa (raw, json) Hash identifier: 7Xx4AyFdSQ9ZOgkaGmss9o01C7yH1/WpzG1wav27fhY= Subject key identifier: 3C:93:D7:2A:78:03:83:B5:60:72:B1:85:92:11:2C:B6:76:53:36:4F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE58A3C8D58603BC977BB280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e7a123f-a52a-379e-80a0-7f8433a7c9c0.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 98.32.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:a3:c8:d5:86:03:bc:97:7b:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=4426c147-13ea-4790-9db9-75386294c0fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:9e:3f:eb:53:fc:1b:2c:8a:15:32:c7:c8:f3: 40:47:74:0c:04:a0:e9:63:de:e0:59:3e:c4:db:da: 44:9a:f9:fe:b1:5f:e0:55:cd:fd:4b:9e:e4:04:49: 5f:a8:a4:26:8d:38:77:21:32:21:07:1e:40:14:4f: 96:1a:64:b3:6b:c5:ca:5a:c7:78:18:93:5a:8c:e8: 68:40:aa:bb:aa:96:c9:72:d6:c8:42:20:c5:93:db: 29:44:bf:da:e5:e2:a1:eb:13:23:c1:43:60:65:3d: f7:63:b8:3f:74:0a:4b:d9:6b:93:6b:b4:08:52:bf: 01:ef:a8:76:fe:64:83:36:b0:a8:4c:b0:e6:b1:c2: f7:57:9a:12:77:3a:e1:c9:ea:ac:2e:08:51:e3:bf: 17:ef:67:b9:fe:6a:d7:63:95:78:15:de:86:e5:92: f7:09:54:0f:2f:11:26:06:2d:4d:ba:a6:ec:15:45: 0a:9f:fa:6c:fc:f7:bc:38:f7:4b:1d:b0:62:27:1c: cb:14:60:f1:15:fe:b2:71:ea:40:ff:a2:9d:30:9c: 50:38:b9:bf:54:eb:c5:66:e2:fe:57:f4:53:e7:18: 99:f4:06:f4:82:a9:53:ad:a6:1c:fc:21:8c:f9:04: 18:80:9f:6b:1f:11:e9:ef:d5:f4:66:2c:c3:28:54: 1b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:93:D7:2A:78:03:83:B5:60:72:B1:85:92:11:2C:B6:76:53:36:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e7a123f-a52a-379e-80a0-7f8433a7c9c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.32.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:fe:9b:1b:7c:30:52:69:20:b7:c9:8e:53:07:9f:0c:87:47: a4:02:d1:2a:f5:5b:68:f2:33:4a:e6:e6:fb:50:2f:72:ff:be: 96:dd:ae:c2:a3:0b:68:7b:31:85:a5:5c:32:8c:60:5e:f8:9a: 8d:b0:db:01:a6:0d:73:09:e8:e9:e8:cf:4d:ba:c2:77:32:cc: cb:34:c0:20:cd:9e:56:16:cf:56:ec:7b:d2:25:77:67:04:0c: 9f:aa:bb:ff:cb:10:6f:b3:4f:90:af:24:f8:d9:e9:06:40:f4: f2:72:89:43:60:21:f9:a3:a7:de:ed:5a:3a:32:63:f1:ec:f0: cb:20:db:aa:49:0a:cd:71:70:bc:df:c9:93:63:82:5e:f4:ca: 70:d2:3a:52:44:3e:e9:66:a0:8e:f6:23:6f:62:b0:85:12:61: 0a:ed:b1:c3:7c:27:95:67:03:5d:47:a5:61:44:af:34:83:83: 65:62:33:3b:79:30:04:c7:72:a9:3c:f4:56:69:62:06:21:9a: 6d:bf:4e:ab:1f:7c:ce:8f:ac:56:a2:ea:75:f8:9a:ca:7f:4c: 6f:99:ca:91:ed:f7:a3:64:ec:33:3d:04:b8:15:be:11:47:0f: 25:80:9d:ea:65:7a:65:86:96:ac:33:12:45:14:bc:8a:8c:87: 2b:0c:c7:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWKPI1YYDvJd7soAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NDQyNmMxNDctMTNlYS00NzkwLTlkYjktNzUzODYyOTRjMGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZ4/61P8GyyKFTLHyPNAR3QMBKDpY97gWT7E 29pEmvn+sV/gVc39S57kBElfqKQmjTh3ITIhBx5AFE+WGmSza8XKWsd4GJNajOho QKq7qpbJctbIQiDFk9spRL/a5eKh6xMjwUNgZT33Y7g/dApL2WuTa7QIUr8B76h2 /mSDNrCoTLDmscL3V5oSdzrhyeqsLghR478X72e5/mrXY5V4Fd6G5ZL3CVQPLxEm Bi1NuqbsFUUKn/ps/Pe8OPdLHbBiJxzLFGDxFf6ycepA/6KdMJxQOLm/VOvFZuL+ V/RT5xiZ9Ab0gqlTraYc/CGM+QQYgJ9rHxHp79X0ZizDKFQbYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDyT1yp4A4O1YHKxhZIRLLZ2UzZPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2U3YTEyM2YtYTUyYS0z NzllLTgwYTAtN2Y4NDMzYTdjOWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYiDIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3+mxt8MFJpILfJjlMHnwyHR6QC0Sr1W2jyM0rm5vtQL3L/vpbdrsKj C2h7MYWlXDKMYF74mo2w2wGmDXMJ6Onoz026wncyzMs0wCDNnlYWz1bse9Ild2cE DJ+qu//LEG+zT5CvJPjZ6QZA9PJyiUNgIfmjp97tWjoyY/Hs8Msg26pJCs1xcLzf yZNjgl70ynDSOlJEPulmoI72I29isIUSYQrtscN8J5VnA11HpWFErzSDg2ViMzt5 MATHcqk89FZpYgYhmm2/TqsffM6PrFai6nX4msp/TG+ZypHt96Nk7DM9BLgVvhFH DyWAneplemWGlqwzEkUUvIqMhysMx9g= -----END CERTIFICATE-----Generated at Sun Mar 1 18:45:26 2026 by rpki-client