$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/554c0994-1063-3ae8-b3d3-afe04be5f221.roa File: 554c0994-1063-3ae8-b3d3-afe04be5f221.roa (raw, json) Hash identifier: lrZTcps3dIl85yjM45zU06YENK1TEptDqjXbNyg4v94= Subject key identifier: 72:FB:2E:C7:AF:46:8E:7F:5F:2C:6A:EB:FA:D8:09:96:DA:BA:96:8D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE58A1A5432634A1181F3B00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/554c0994-1063-3ae8-b3d3-afe04be5f221.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 98.253.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:a1:a5:43:26:34:a1:18:1f:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=879ddfb7-6be3-4e09-9935-5c134ace01f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:06:79:32:dc:17:ae:dd:f4:eb:ea:10:b7:87: 83:71:5b:29:ef:eb:48:dd:86:44:f9:bd:d8:10:ad: b8:00:60:0d:04:9a:32:bb:64:08:d9:53:8d:d6:9a: 88:2f:7e:68:bf:98:8d:01:ad:2c:64:d4:11:25:de: a8:fe:da:15:53:81:8a:66:cf:87:6d:cb:c4:65:3b: 11:01:dd:75:34:d4:57:e1:f9:c3:7c:c9:e5:8b:ff: e2:ea:ef:64:2b:b5:bb:01:fc:cd:43:29:f7:c3:37: 33:ec:7e:33:cf:04:60:77:c8:ea:0d:87:df:20:ac: 28:55:5d:cf:cd:5a:1d:a7:19:98:4d:fd:ac:aa:47: 48:02:56:9d:dc:68:32:44:b7:bf:ce:3d:f0:6a:1b: 0a:d4:6c:f1:65:ff:6b:58:b7:33:59:c5:ab:4c:f0: 06:5d:5f:1f:5d:51:d6:0b:05:3b:b1:de:6c:8c:44: f9:b9:e1:25:06:75:9e:aa:87:8f:9d:da:a3:cb:29: 45:0a:0f:48:34:7f:82:1e:ed:16:8d:75:00:93:a3: b9:4e:61:84:91:0b:67:88:25:f1:41:c1:52:5a:0a: 40:fb:1d:f1:ea:4c:d6:3a:9f:2e:b8:33:1c:1f:a7: ed:f2:63:92:17:57:4c:2d:8d:bc:c4:bd:b0:80:e7: d0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:FB:2E:C7:AF:46:8E:7F:5F:2C:6A:EB:FA:D8:09:96:DA:BA:96:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/554c0994-1063-3ae8-b3d3-afe04be5f221.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.253.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:a3:50:5d:e0:97:1a:4b:c8:fb:1d:aa:84:ab:da:56:b8:22: e4:63:4e:15:d0:74:64:de:cf:c7:c1:0b:55:76:d3:61:7d:b2: d2:07:29:53:9e:95:a7:85:6f:8a:a7:9a:d8:e9:90:8b:e7:54: 94:dd:a4:df:ca:ff:44:bf:3a:90:7d:07:fe:86:7d:95:10:e1: 3b:c9:6d:d3:69:44:78:4f:2b:7c:4e:4a:55:b4:55:bd:e0:a8: 0c:54:45:63:26:a9:c0:8a:a9:a0:a8:a5:f1:2a:19:60:40:15: 0c:d6:d7:19:a7:24:e7:02:d2:88:29:22:0f:25:0e:d3:5e:aa: e6:12:d1:00:f6:b2:2e:82:dd:13:38:70:c6:65:6a:df:cd:f8: 33:6f:24:00:5b:e8:b0:63:be:81:d6:5d:a1:1d:ab:7e:ae:35: aa:48:13:80:96:dd:c7:f5:ee:ac:ed:14:30:eb:81:21:46:7e: d0:2c:f4:37:fd:b7:bc:fc:49:ef:4c:38:a6:6b:1c:73:c8:56: 0b:e9:af:30:3c:cd:5f:c6:82:75:02:b7:57:12:05:19:1a:b3: 60:8c:43:89:b3:28:a1:73:b4:b8:bb:6d:9b:56:2d:45:b6:b3: 9a:e4:90:9c:7b:4f:0a:a5:2b:eb:ab:06:69:ce:34:28:bd:52: 83:ee:6e:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWKGlQyY0oRgfOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ODc5ZGRmYjctNmJlMy00ZTA5LTk5MzUtNWMxMzRhY2UwMWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAZ5MtwXrt306+oQt4eDcVsp7+tI3YZE+b3Y EK24AGANBJoyu2QI2VON1pqIL35ov5iNAa0sZNQRJd6o/toVU4GKZs+HbcvEZTsR Ad11NNRX4fnDfMnli//i6u9kK7W7AfzNQyn3wzcz7H4zzwRgd8jqDYffIKwoVV3P zVodpxmYTf2sqkdIAlad3GgyRLe/zj3wahsK1GzxZf9rWLczWcWrTPAGXV8fXVHW CwU7sd5sjET5ueElBnWeqoePndqjyylFCg9INH+CHu0WjXUAk6O5TmGEkQtniCXx QcFSWgpA+x3x6kzWOp8uuDMcH6ft8mOSF1dMLY28xL2wgOfQMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHL7LsevRo5/Xyxq6/rYCZbaupaNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTU0YzA5OTQtMTA2My0z YWU4LWIzZDMtYWZlMDRiZTVmMjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYv1sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ6jUF3glxpLyPsdqoSr2la4IuRjThXQdGTez8fBC1V202F9stIHKVOe laeFb4qnmtjpkIvnVJTdpN/K/0S/OpB9B/6GfZUQ4TvJbdNpRHhPK3xOSlW0Vb3g qAxURWMmqcCKqaCopfEqGWBAFQzW1xmnJOcC0ogpIg8lDtNequYS0QD2si6C3RM4 cMZlat/N+DNvJABb6LBjvoHWXaEdq36uNapIE4CW3cf17qztFDDrgSFGftAs9Df9 t7z8Se9MOKZrHHPIVgvprzA8zV/GgnUCt1cSBRkas2CMQ4mzKKFztLi7bZtWLUW2 s5rkkJx7TwqlK+urBmnONCi9UoPubuE= -----END CERTIFICATE-----Generated at Mon Mar 2 09:33:30 2026 by rpki-client