$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/552100a7-0b3c-3793-9e95-8f110e22c43b.roa File: 552100a7-0b3c-3793-9e95-8f110e22c43b.roa (raw, json) Hash identifier: Bm9oU+/M0DQttjM2KpTJHSs+yhoN1v4B8EJ86Qw67mE= Subject key identifier: 76:35:BC:B6:3F:8C:39:4C:C9:EC:C1:40:5C:FF:85:9D:6E:D5:73:35 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5E1EFE710A21C328CF7A30 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/552100a7-0b3c-3793-9e95-8f110e22c43b.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 98.35.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:1e:fe:71:0a:21:c3:28:cf:7a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=81ebffb2-2a2a-45c3-8092-0bf11cc1b4ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a7:30:ff:2b:b7:6e:4b:3e:fc:86:00:f5:47: 95:63:5d:db:9b:7f:6e:a7:4f:34:0e:28:6d:76:aa: 49:7b:dd:67:f1:29:df:93:39:ae:25:35:d5:92:3c: 22:85:59:4d:5b:0a:55:dc:ab:1c:92:f9:e1:63:e2: 2e:6a:5c:be:ee:48:66:b0:c8:88:c2:b2:1d:70:80: 43:08:b1:9e:68:a8:64:91:4a:50:14:26:15:fb:86: df:a7:4a:9c:57:7e:85:c2:e1:40:25:b3:9e:a7:4a: af:19:46:4c:59:40:5f:c2:c0:ed:c7:2d:d4:15:ad: 43:ec:ac:be:d3:ad:7f:d8:0f:04:03:57:b5:e2:7c: d9:58:a6:cb:c6:7e:4e:fe:da:a8:bf:59:1e:92:29: 45:2a:be:be:47:f0:3c:d2:3c:de:6f:e5:8f:22:e1: e8:43:54:73:a0:d4:8b:ed:35:e5:13:ba:c6:05:41: a1:b2:6b:a2:59:ce:63:8c:cf:31:da:ed:ca:b1:80: e1:c2:d4:78:9f:31:93:20:78:8a:c4:4e:7a:a7:85: d0:24:e9:11:13:a2:91:b7:52:d7:d8:b0:68:88:4f: cc:c4:7f:21:4e:df:12:37:0f:17:14:95:70:25:17: 24:e0:1c:d3:aa:0c:63:8a:bf:c1:ff:11:2f:8d:7e: 27:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:35:BC:B6:3F:8C:39:4C:C9:EC:C1:40:5C:FF:85:9D:6E:D5:73:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/552100a7-0b3c-3793-9e95-8f110e22c43b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.35.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:6f:10:66:44:f8:44:7e:85:7e:b2:36:4e:ce:9b:18:6c:72: 98:4d:ad:fe:fe:25:95:5e:08:18:34:05:50:18:ac:6e:9f:f4: 71:c3:84:06:ce:0f:34:b0:75:be:06:49:3e:de:df:3f:6d:7f: 2d:10:16:ee:21:df:64:85:19:6c:70:e6:bd:c1:c4:be:d2:a7: 71:2b:db:46:0b:23:54:bf:fb:2c:a0:11:8d:10:1e:a4:05:b2: 48:0e:46:67:24:95:a2:76:64:de:61:01:a9:04:63:d3:6e:67: 38:50:4d:32:6b:8f:fd:76:e9:83:73:2e:d8:60:01:14:9a:91: 2f:00:37:17:6e:4d:a2:87:ba:bb:d7:7d:2c:6f:e8:0d:0b:8d: a7:47:93:9c:bb:5d:ac:04:e6:b2:8a:6d:c9:4e:1e:07:cc:6f: 35:ff:4f:31:35:2a:a1:69:4f:06:e3:05:60:fa:8f:b0:f8:55: b3:1f:35:e5:c9:42:72:b5:d0:0f:72:4d:aa:1a:aa:76:2f:df: db:f4:7d:aa:85:a4:8c:6b:39:7f:9a:ce:2a:2d:e8:c5:5c:04: 65:04:e0:62:f0:ba:54:7f:48:70:6d:39:4f:52:f1:fc:d5:c5: 5c:9a:5d:63:62:a7:70:8b:bb:c0:ca:f6:6a:b1:4a:f5:99:04: 8f:73:85:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXh7+cQohwyjPejAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ODFlYmZmYjItMmEyYS00NWMzLTgwOTItMGJmMTFjYzFiNGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6cw/yu3bks+/IYA9UeVY13bm39up080Diht dqpJe91n8SnfkzmuJTXVkjwihVlNWwpV3KsckvnhY+Iualy+7khmsMiIwrIdcIBD CLGeaKhkkUpQFCYV+4bfp0qcV36FwuFAJbOep0qvGUZMWUBfwsDtxy3UFa1D7Ky+ 061/2A8EA1e14nzZWKbLxn5O/tqov1kekilFKr6+R/A80jzeb+WPIuHoQ1RzoNSL 7TXlE7rGBUGhsmuiWc5jjM8x2u3KsYDhwtR4nzGTIHiKxE56p4XQJOkRE6KRt1LX 2LBoiE/MxH8hTt8SNw8XFJVwJRck4BzTqgxjir/B/xEvjX4nKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHY1vLY/jDlMyezBQFz/hZ1u1XM1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTUyMTAwYTctMGIzYy0z NzkzLTllOTUtOGYxMTBlMjJjNDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYiMmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlvEGZE+ER+hX6yNk7OmxhscphNrf7+JZVeCBg0BVAYrG6f9HHDhAbO DzSwdb4GST7e3z9tfy0QFu4h32SFGWxw5r3BxL7Sp3Er20YLI1S/+yygEY0QHqQF skgORmcklaJ2ZN5hAakEY9NuZzhQTTJrj/126YNzLthgARSakS8ANxduTaKHurvX fSxv6A0LjadHk5y7XawE5rKKbclOHgfMbzX/TzE1KqFpTwbjBWD6j7D4VbMfNeXJ QnK10A9yTaoaqnYv39v0faqFpIxrOX+aziot6MVcBGUE4GLwulR/SHBtOU9S8fzV xVyaXWNip3CLu8DK9mqxSvWZBI9zhQw= -----END CERTIFICATE-----Generated at Mon Mar 2 00:24:30 2026 by rpki-client