$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f873178-9d10-3d38-b608-cd3047ad83a4.roa File: 4f873178-9d10-3d38-b608-cd3047ad83a4.roa (raw, json) Hash identifier: oCAnSKNKr09cFUi+cvJXbs33tQ3UfI6R979AM6+t0ME= Subject key identifier: D7:B5:13:45:FD:83:A3:EF:17:DE:9F:1C:4C:EF:45:11:E2:78:56:83 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5E0B6442F249C98F400B00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f873178-9d10-3d38-b608-cd3047ad83a4.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 98.210.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:0b:64:42:f2:49:c9:8f:40:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=8796f43d-9c60-45c8-8d37-df4a818392b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ce:ff:e4:c5:f7:2e:0a:50:de:8d:65:62:06: 12:e8:63:47:51:62:1f:6d:a6:69:af:8c:12:95:1e: 1b:1f:cf:ab:1a:ef:a6:db:a7:6f:ba:76:46:18:4a: 8c:27:85:69:06:a1:12:b6:33:4a:9a:dc:5d:07:a8: 51:11:03:a8:40:22:f1:89:f7:30:98:a5:0a:c6:e4: c7:bf:b8:d4:d8:ed:3c:83:8a:ab:5c:37:61:76:32: e8:df:a1:90:2f:f6:4e:63:80:b3:d1:07:24:31:79: af:de:1e:75:6e:44:f9:fb:81:0e:f3:52:c9:ab:b5: fb:7a:e1:8d:7a:38:0f:dc:e9:43:d5:91:ad:c1:8b: fb:a3:bf:e6:25:3a:61:91:25:24:f6:68:36:8f:38: 37:ac:f5:a0:76:ed:77:98:9b:65:1f:cb:41:79:78: 52:ef:35:42:bc:ad:4d:32:66:9a:d8:58:b7:0b:09: f2:97:6c:a3:55:3d:ca:b8:9b:1b:2f:b5:e8:c8:ed: 84:5b:87:f2:e9:4d:e6:ca:a6:02:d4:71:11:9e:46: ed:6b:35:83:42:1f:c3:69:b7:48:e8:a2:7a:be:b9: 20:19:21:e7:07:9f:7e:e0:d7:76:fc:0c:72:8f:38: 25:a2:59:c6:c2:f1:a5:9f:c3:3e:70:72:55:52:85: 35:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:B5:13:45:FD:83:A3:EF:17:DE:9F:1C:4C:EF:45:11:E2:78:56:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f873178-9d10-3d38-b608-cd3047ad83a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.210.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d4:fa:c1:04:91:c6:d6:c0:b6:81:b7:3e:b6:8b:29:9e:19:20: 74:84:6e:77:2b:47:de:28:fe:9d:8b:29:00:cd:27:ac:56:04: 86:bd:26:05:08:bb:be:3b:f7:eb:00:26:2f:e0:d3:26:8e:fc: b7:a3:15:a9:9d:e3:a4:3c:0d:94:2f:fd:b1:da:fd:5f:34:c5: 6f:5a:de:70:5f:0c:24:34:62:aa:e8:59:4c:57:f1:aa:47:0a: 3b:3e:e9:aa:bb:a9:da:70:3a:0e:51:6a:33:18:e3:66:a7:3e: 49:cc:7e:fb:e1:1f:17:fd:33:c7:f2:f9:72:1b:3f:77:69:d9: 27:b0:51:46:fd:1c:bf:42:60:aa:f6:d7:e5:ca:6b:d2:8e:ce: 3c:62:de:31:2c:74:04:66:d6:77:bf:27:5e:c1:b4:93:90:78: 70:03:e1:aa:bf:06:e7:5a:02:3d:c3:6a:90:b1:12:e5:c7:da: 39:b5:15:22:c6:56:31:4d:f0:ae:df:8e:6a:eb:57:6e:1c:3e: 93:1f:7a:1d:74:d9:c2:4b:04:84:e5:40:02:b2:57:b5:e6:0b: 29:d0:ec:bb:cd:12:48:72:91:e9:71:04:0d:d9:b7:44:d3:bd: bd:a1:71:b8:7d:a6:5d:5d:a3:cd:4d:c0:0e:68:fd:00:1f:69: d2:4e:39:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXgtkQvJJyY9ACwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ODc5NmY0M2QtOWM2MC00NWM4LThkMzctZGY0YTgxODM5MmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkM7/5MX3LgpQ3o1lYgYS6GNHUWIfbaZpr4wS lR4bH8+rGu+m26dvunZGGEqMJ4VpBqEStjNKmtxdB6hREQOoQCLxifcwmKUKxuTH v7jU2O08g4qrXDdhdjLo36GQL/ZOY4Cz0QckMXmv3h51bkT5+4EO81LJq7X7euGN ejgP3OlD1ZGtwYv7o7/mJTphkSUk9mg2jzg3rPWgdu13mJtlH8tBeXhS7zVCvK1N Mmaa2Fi3Cwnyl2yjVT3KuJsbL7XoyO2EW4fy6U3myqYC1HERnkbtazWDQh/DabdI 6KJ6vrkgGSHnB59+4Nd2/AxyjzglolnGwvGln8M+cHJVUoU1fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNe1E0X9g6PvF96fHEzvRRHieFaDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGY4NzMxNzgtOWQxMC0z ZDM4LWI2MDgtY2QzMDQ3YWQ4M2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYtJsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANT6wQSRxtbAtoG3PraLKZ4ZIHSEbncrR94o/p2LKQDNJ6xWBIa9JgUI u7479+sAJi/g0yaO/LejFamd46Q8DZQv/bHa/V80xW9a3nBfDCQ0YqroWUxX8apH Cjs+6aq7qdpwOg5RajMY42anPknMfvvhHxf9M8fy+XIbP3dp2SewUUb9HL9CYKr2 1+XKa9KOzjxi3jEsdARm1ne/J17BtJOQeHAD4aq/BudaAj3DapCxEuXH2jm1FSLG VjFN8K7fjmrrV24cPpMfeh102cJLBITlQAKyV7XmCynQ7LvNEkhykelxBA3Zt0TT vb2hcbh9pl1do81NwA5o/QAfadJOOeM= -----END CERTIFICATE-----Generated at Sun Mar 1 23:16:27 2026 by rpki-client