$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/463fdd8c-9a1b-3152-b8e0-e6ba9e8f201b.roa File: 463fdd8c-9a1b-3152-b8e0-e6ba9e8f201b.roa (raw, json) Hash identifier: R6qMrN4rXsKuqn/zQ2rqPFJC5JKguHqxt+r5Q9XJ9rM= Subject key identifier: 6E:D9:32:46:CC:64:14:E8:7B:BA:6C:84:5C:EB:C2:F4:75:96:71:67 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE58A0E9B47ACF4B675E6DC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/463fdd8c-9a1b-3152-b8e0-e6ba9e8f201b.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 98.228.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:a0:e9:b4:7a:cf:4b:67:5e:6d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=4c8dd1cc-0a94-461b-bae7-8fbf44db0d1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:09:bf:45:91:3c:09:b8:94:26:2f:be:28:7c: 62:e9:65:a2:7e:75:40:ac:1f:e6:f8:42:09:ee:2e: c0:19:63:65:17:43:20:9f:3c:be:b8:df:a2:1b:ae: cb:6c:03:b9:fb:c7:c7:ec:de:82:19:32:d8:dd:48: b1:b9:a8:2c:e7:1b:96:54:a8:dd:31:68:32:02:3f: 2c:fc:ab:db:27:e2:b7:9c:f2:20:0b:44:a9:01:cb: b6:b8:a8:03:cd:34:ec:bc:3b:24:77:23:de:7c:33: 47:a6:50:08:a2:77:ec:69:cf:9e:af:f4:d8:4f:b8: 4f:13:c6:61:f0:de:80:e4:50:65:7f:4e:61:79:4d: 3a:00:22:a9:1f:f0:f3:6e:97:94:81:33:03:77:6b: 22:81:e8:41:cd:0e:8d:12:ea:ac:ce:00:cd:2b:32: 63:63:31:36:ef:4d:82:c8:20:2f:00:19:24:16:47: da:5f:88:d6:ba:8a:75:3d:65:d5:13:8a:a1:2f:ab: 2e:b2:39:f0:27:15:17:c3:67:84:65:af:c0:cf:be: 13:26:ed:dc:73:8f:0a:d0:04:1b:19:15:7c:42:6b: e3:77:3e:98:76:45:fa:c5:f9:3d:94:79:01:c8:83: d9:de:25:69:87:7f:c7:63:32:79:17:72:98:af:e9: 85:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:D9:32:46:CC:64:14:E8:7B:BA:6C:84:5C:EB:C2:F4:75:96:71:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/463fdd8c-9a1b-3152-b8e0-e6ba9e8f201b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.228.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:9b:bc:6c:53:f0:25:be:d7:d8:38:fc:3e:a5:f2:15:5c:1f: e6:36:71:fd:5f:a8:8e:f6:d9:95:75:97:c6:69:dd:cd:14:23: ee:8b:9f:ae:1e:d8:79:5a:03:24:6e:09:73:f6:76:10:02:9a: de:fc:94:b1:02:41:b5:e6:1c:30:b3:cb:a8:8d:18:ae:af:60: 13:bb:f2:57:e7:ad:b9:5b:0b:5e:9c:d5:6b:4f:98:e8:26:32: 6d:9c:54:a0:e2:11:d9:5e:bf:37:73:14:07:dd:7f:4f:6a:1a: f3:a7:ed:52:15:8c:92:d2:61:0a:82:83:8f:98:60:e4:55:72: 48:57:5b:df:6d:38:52:6a:45:ff:a0:0f:b9:20:5b:bf:3b:d3: 5a:7d:c8:1c:7c:c4:69:36:3e:2f:a6:12:7f:03:62:81:d0:bb: 9f:f1:9b:ff:cc:a6:03:d9:7c:93:8a:20:c1:2a:b8:86:51:d8: f6:c0:2b:45:d5:91:3f:37:fa:14:2e:90:1c:48:80:ae:4e:f2: 4f:3a:b8:29:ee:76:66:1d:6a:ab:ef:e2:1f:9a:7b:0a:43:41: e7:93:e4:3a:c3:74:a5:e4:3d:a7:da:3e:4e:4f:fe:0a:86:93: 58:90:77:24:ab:d4:fd:0e:6c:af:ff:05:da:03:3f:d5:ef:64: 19:f3:6b:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWKDptHrPS2debcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NGM4ZGQxY2MtMGE5NC00NjFiLWJhZTctOGZiZjQ0ZGIwZDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgm/RZE8CbiUJi++KHxi6WWifnVArB/m+EIJ 7i7AGWNlF0Mgnzy+uN+iG67LbAO5+8fH7N6CGTLY3Uixuags5xuWVKjdMWgyAj8s /KvbJ+K3nPIgC0SpAcu2uKgDzTTsvDskdyPefDNHplAIonfsac+er/TYT7hPE8Zh 8N6A5FBlf05heU06ACKpH/DzbpeUgTMDd2sigehBzQ6NEuqszgDNKzJjYzE2702C yCAvABkkFkfaX4jWuop1PWXVE4qhL6susjnwJxUXw2eEZa/Az74TJu3cc48K0AQb GRV8Qmvjdz6YdkX6xfk9lHkByIPZ3iVph3/HYzJ5F3KYr+mFywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG7ZMkbMZBToe7pshFzrwvR1lnFnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDYzZmRkOGMtOWExYi0z MTUyLWI4ZTAtZTZiYTllOGYyMDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYuQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWbvGxT8CW+19g4/D6l8hVcH+Y2cf1fqI722ZV1l8Zp3c0UI+6Ln64e 2HlaAyRuCXP2dhACmt78lLECQbXmHDCzy6iNGK6vYBO78lfnrblbC16c1WtPmOgm Mm2cVKDiEdlevzdzFAfdf09qGvOn7VIVjJLSYQqCg4+YYORVckhXW99tOFJqRf+g D7kgW78701p9yBx8xGk2Pi+mEn8DYoHQu5/xm//MpgPZfJOKIMEquIZR2PbAK0XV kT83+hQukBxIgK5O8k86uCnudmYdaqvv4h+aewpDQeeT5DrDdKXkPafaPk5P/gqG k1iQdySr1P0ObK//BdoDP9XvZBnza30= -----END CERTIFICATE-----Generated at Sun Mar 1 18:28:13 2026 by rpki-client