$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4af6b0a1-1b60-3ed8-ab80-841945ca81f3.roa File: 4af6b0a1-1b60-3ed8-ab80-841945ca81f3.roa (raw, json) Hash identifier: AmMb5P4SWFsu7ak7jqayCOIc9Bp1CbtrU2SIRJ2a6TQ= Subject key identifier: 1A:38:D0:3A:16:E6:8F:F7:6D:7F:DA:88:79:DE:E4:78:15:1A:F7:5A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5E05D652190A8D6AA2A000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4af6b0a1-1b60-3ed8-ab80-841945ca81f3.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 98.207.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:05:d6:52:19:0a:8d:6a:a2:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=316a3477-b25f-416c-8743-517758831e5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e1:47:2f:a8:ce:f8:0a:d3:f4:c8:ce:2e:a1: 15:86:e8:a2:c3:a5:ef:47:47:12:72:49:9c:94:4d: 9e:58:12:f2:cd:dd:47:7b:85:5b:97:40:90:09:b1: f9:29:b5:4f:2d:a0:c0:3a:3a:32:e5:ba:27:26:e7: c5:9e:cd:ef:b9:f3:06:16:f2:6c:d4:f5:3c:08:14: 43:13:3f:30:a5:e5:ad:b0:75:32:e9:35:ff:ec:08: fb:64:17:14:4a:1a:85:9c:2d:5f:b5:bf:68:ec:57: e2:39:3a:52:cd:d3:d9:44:9e:40:f4:fe:b5:72:0a: f4:fc:13:e9:04:aa:0d:1c:f3:40:9a:db:1d:63:05: ad:41:42:f7:f2:63:48:f0:df:4b:7d:46:3f:31:eb: 23:ab:d1:99:53:d6:95:53:eb:ae:b0:ff:cc:28:45: eb:18:96:af:dd:b0:bb:fe:bb:bc:6a:f0:1b:90:a3: 53:cb:08:fc:66:f4:dd:5c:93:da:8b:1e:fb:e6:d4: ab:ff:59:9c:13:79:fe:6a:34:ef:6d:08:9d:92:ab: 09:ab:5e:46:53:b1:7f:11:72:96:af:da:17:41:ac: 76:ca:f8:be:d6:1b:48:d3:24:83:dc:ee:73:cf:ad: 68:20:ac:53:80:8e:30:9e:61:15:25:2c:ec:39:0a: d3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:38:D0:3A:16:E6:8F:F7:6D:7F:DA:88:79:DE:E4:78:15:1A:F7:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4af6b0a1-1b60-3ed8-ab80-841945ca81f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.207.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:13:06:56:4c:9e:d3:08:af:a6:80:73:17:2c:7f:83:c3:91: ce:7e:dd:cf:e9:f4:ec:41:38:2a:a9:3d:28:d5:4c:3f:7b:16: 52:bb:38:31:4c:c2:4a:10:8e:10:87:ee:23:7a:13:31:8c:14: 1b:e4:a5:e4:9b:2e:17:8b:49:e1:0c:0d:4a:8d:af:cd:fc:d4: 29:a7:53:e9:55:42:e3:db:1d:63:c5:f0:a7:17:9b:7a:e9:3a: ac:66:c9:f4:8e:ab:05:28:19:4f:b6:86:7f:fa:a0:7b:87:e4: 69:b7:b0:e1:9a:01:43:ae:fd:a1:fc:fc:fd:e3:0d:5f:85:4a: 3e:03:eb:bb:ee:30:44:a4:d3:ce:e5:6b:28:43:23:73:55:79: 7a:26:69:ff:15:07:61:33:ab:7e:2a:7a:73:4f:90:bc:5d:17: b0:0a:88:ca:0f:d5:a3:ce:83:f9:69:95:c1:8c:c4:3d:ea:dc: 4d:f3:39:cf:73:29:d0:9a:15:d3:17:f9:c5:db:2a:63:c5:bd: 2e:53:a9:99:c9:d1:04:47:1e:7c:6f:0d:40:03:ae:85:69:c9: 63:e7:2d:95:6e:e8:88:99:15:f6:ff:da:ae:d3:d2:94:d5:07: aa:d5:5d:81:2a:75:f7:a4:68:aa:26:d4:23:0b:9e:c1:b3:d1: a7:53:23:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXgXWUhkKjWqioAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MzE2YTM0NzctYjI1Zi00MTZjLTg3NDMtNTE3NzU4ODMxZTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneFHL6jO+ArT9MjOLqEVhuiiw6XvR0cSckmc lE2eWBLyzd1He4Vbl0CQCbH5KbVPLaDAOjoy5bonJufFns3vufMGFvJs1PU8CBRD Ez8wpeWtsHUy6TX/7Aj7ZBcUShqFnC1ftb9o7FfiOTpSzdPZRJ5A9P61cgr0/BPp BKoNHPNAmtsdYwWtQUL38mNI8N9LfUY/Mesjq9GZU9aVU+uusP/MKEXrGJav3bC7 /ru8avAbkKNTywj8ZvTdXJPaix775tSr/1mcE3n+ajTvbQidkqsJq15GU7F/EXKW r9oXQax2yvi+1htI0ySD3O5zz61oIKxTgI4wnmEVJSzsOQrTwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBo40DoW5o/3bX/aiHne5HgVGvdaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGFmNmIwYTEtMWI2MC0z ZWQ4LWFiODAtODQxOTQ1Y2E4MWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYs+MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALgTBlZMntMIr6aAcxcsf4PDkc5+3c/p9OxBOCqpPSjVTD97FlK7ODFM wkoQjhCH7iN6EzGMFBvkpeSbLheLSeEMDUqNr8381CmnU+lVQuPbHWPF8KcXm3rp OqxmyfSOqwUoGU+2hn/6oHuH5Gm3sOGaAUOu/aH8/P3jDV+FSj4D67vuMESk087l ayhDI3NVeXomaf8VB2Ezq34qenNPkLxdF7AKiMoP1aPOg/lplcGMxD3q3E3zOc9z KdCaFdMX+cXbKmPFvS5TqZnJ0QRHHnxvDUADroVpyWPnLZVu6IiZFfb/2q7T0pTV B6rVXYEqdfekaKom1CMLnsGz0adTI3Q= -----END CERTIFICATE-----Generated at Sun Mar 1 23:12:20 2026 by rpki-client