$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a15ad97-aea1-3ad9-aa70-3da9d3482871.roa File: 4a15ad97-aea1-3ad9-aa70-3da9d3482871.roa (raw, json) Hash identifier: gmXk44HAGoJpUOb2zpVdfVEw+QX/E0L+cCsuybcekXA= Subject key identifier: 38:41:92:BF:F0:72:5F:FC:8B:FC:AD:04:E8:03:43:58:30:37:CB:13 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5CEBC78A6344CD5E371800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a15ad97-aea1-3ad9-aa70-3da9d3482871.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 98.223.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5c:eb:c7:8a:63:44:cd:5e:37:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=ef30ecea-ce2c-429f-94f4-92e09c98f499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4c:9d:07:a2:d6:db:6c:7a:d3:36:0f:44:fe: 61:eb:d2:3c:a1:f3:9c:29:f2:7b:82:bc:10:1f:28: 72:48:c5:9e:a1:cf:53:50:cc:b2:7f:c2:26:dd:91: 3d:b7:56:35:a7:64:ff:41:bf:e0:1c:52:e3:cf:72: 0d:2e:1f:a4:c2:f8:46:4c:52:66:72:de:36:2e:c7: f7:8c:67:81:6b:8c:3b:b8:b5:c8:29:8e:18:dd:26: 38:3c:ac:dd:4d:c8:16:30:98:a3:14:5d:00:f0:8b: 59:5e:29:16:22:dd:9f:ce:bc:5f:82:d6:31:dc:85: b8:6e:9b:b7:15:1f:f3:39:a9:ef:c7:96:c6:1f:8e: 53:f4:3c:17:59:ec:5f:35:c9:2c:6d:fa:64:f1:e6: ab:bb:94:d0:5e:da:a9:7a:e8:e5:ce:28:1f:21:36: 72:ca:d7:65:8a:5f:89:e1:50:0f:5a:e0:23:ff:de: fa:c2:dc:70:63:dc:71:cf:e4:43:5e:fd:43:e6:bd: 3a:d3:8e:fd:24:7c:7e:e7:c3:0d:ec:f4:f7:b4:89: 13:c3:d4:36:d1:3f:99:62:d0:e9:8c:4e:18:a9:ef: 6c:13:70:93:b6:9b:d8:2e:ee:8e:ae:f4:61:4a:5d: 9e:ba:b4:36:94:66:9f:58:73:03:27:c5:10:89:e2: 6d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:41:92:BF:F0:72:5F:FC:8B:FC:AD:04:E8:03:43:58:30:37:CB:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a15ad97-aea1-3ad9-aa70-3da9d3482871.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.223.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:68:85:59:87:12:4c:29:2b:67:f3:fe:8b:9c:bc:b5:16:aa: 0c:0e:ad:2a:1d:3b:f6:6e:7d:bb:a0:35:79:4c:f4:e8:0a:0b: 41:40:a4:9a:70:6f:b9:56:1b:10:1d:81:05:e3:9f:b8:b8:fc: 44:af:a2:01:92:c3:39:66:1d:98:2a:1d:af:f4:0a:cc:0f:e4: 0d:ed:30:75:03:11:3a:a0:86:bf:e3:3e:22:cf:aa:85:45:28: ec:1b:7b:7e:95:6e:84:dd:34:ee:d9:2d:5f:19:fc:e0:93:69: d7:7a:31:ca:3d:ad:3f:aa:96:45:ce:90:0e:ca:96:70:5c:d6: f8:31:18:59:9d:47:a2:14:1c:ef:dd:d2:29:e0:2c:1e:85:09: ba:9b:83:6a:ce:30:40:72:a5:2b:fd:db:fe:89:35:b6:da:58: cb:62:be:e5:0e:fe:e1:fa:76:fb:1e:11:62:83:c3:e7:9a:cb: 2b:06:b5:59:ab:c2:db:5f:92:71:22:66:9e:01:da:9b:5d:af: e7:7f:5e:06:35:23:c4:63:8f:59:29:5c:dd:ef:fa:55:b2:75: 93:57:59:f0:f4:4f:01:a0:8d:51:d6:96:90:5e:7c:09:ae:17: bd:ae:d1:9c:fd:09:24:2c:22:1f:b6:9a:b9:ac:3d:e6:ad:a9: 8e:47:77:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXOvHimNEzV43GAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZWYzMGVjZWEtY2UyYy00MjlmLTk0ZjQtOTJlMDljOThmNDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUydB6LW22x60zYPRP5h69I8ofOcKfJ7grwQ HyhySMWeoc9TUMyyf8Im3ZE9t1Y1p2T/Qb/gHFLjz3INLh+kwvhGTFJmct42Lsf3 jGeBa4w7uLXIKY4Y3SY4PKzdTcgWMJijFF0A8ItZXikWIt2fzrxfgtYx3IW4bpu3 FR/zOanvx5bGH45T9DwXWexfNcksbfpk8earu5TQXtqpeujlzigfITZyytdlil+J 4VAPWuAj/976wtxwY9xxz+RDXv1D5r060479JHx+58MN7PT3tIkTw9Q20T+ZYtDp jE4Yqe9sE3CTtpvYLu6OrvRhSl2eurQ2lGafWHMDJ8UQieJt9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDhBkr/wcl/8i/ytBOgDQ1gwN8sTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGExNWFkOTctYWVhMS0z YWQ5LWFhNzAtM2RhOWQzNDgyODcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYt+0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK5ohVmHEkwpK2fz/oucvLUWqgwOrSodO/ZufbugNXlM9OgKC0FApJpw b7lWGxAdgQXjn7i4/ESvogGSwzlmHZgqHa/0CswP5A3tMHUDETqghr/jPiLPqoVF KOwbe36VboTdNO7ZLV8Z/OCTadd6Mco9rT+qlkXOkA7KlnBc1vgxGFmdR6IUHO/d 0ingLB6FCbqbg2rOMEBypSv92/6JNbbaWMtivuUO/uH6dvseEWKDw+eayysGtVmr wttfknEiZp4B2ptdr+d/XgY1I8Rjj1kpXN3v+lWydZNXWfD0TwGgjVHWlpBefAmu F72u0Zz9CSQsIh+2mrmsPeatqY5Hdws= -----END CERTIFICATE-----Generated at Mon Mar 2 10:14:53 2026 by rpki-client