$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5853ad0d-cf21-3f4f-8889-cc217f517371.roa File: 5853ad0d-cf21-3f4f-8889-cc217f517371.roa (raw, json) Hash identifier: hjdLZ8oJTWTyGF7GhxnMGEFm+dpeneI9I4QsiFKucqE= Subject key identifier: B4:4E:B0:C8:82:EC:B9:9B:0F:83:15:12:07:CB:D8:EC:B1:E3:7B:F9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5CE20F4C3C02FCD3BB0F80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5853ad0d-cf21-3f4f-8889-cc217f517371.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 98.215.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5c:e2:0f:4c:3c:02:fc:d3:bb:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=f87e4b91-15a8-4905-9b3f-e05a84799f48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:cb:0e:9c:b8:7a:da:f6:82:f0:a8:80:22:dc: 29:ac:be:6e:b7:9f:f7:c3:58:fd:c8:1c:e3:2a:51: 36:1d:9d:95:d7:c3:40:76:b2:6a:4c:50:ac:b2:49: 66:96:ac:55:80:14:8a:4a:bd:92:c1:e9:7e:c9:20: 2a:3f:b8:ee:b8:b0:db:00:32:b6:c4:b0:34:a4:28: 4a:86:1e:b9:3b:7a:ad:b9:48:3b:5e:ff:1d:0d:b5: 36:dc:7d:1b:00:16:51:cf:8d:6f:d4:68:0d:a4:10: f6:67:c1:60:19:b8:76:bd:00:80:3e:54:fa:44:74: 78:fe:20:d6:00:39:ea:a4:6b:ee:a4:ab:40:5c:c5: b4:cd:f8:17:b4:80:54:48:07:eb:3d:6b:82:ea:6f: aa:f1:5a:68:b4:fb:92:f6:83:e2:e3:65:0d:53:65: a7:d2:e4:c3:09:a7:11:b4:96:94:64:e8:92:4e:23: e8:d1:00:69:a2:f5:dc:87:38:8c:01:bf:f9:af:5d: 45:65:2f:b3:b6:eb:fa:1a:74:b8:e9:7f:e5:35:dd: 7d:bc:06:aa:82:3b:9f:49:bf:a3:51:64:e0:bd:70: ca:f2:1d:29:51:e3:ad:1f:16:c1:3a:90:2e:f6:b7: c0:37:67:31:5d:83:7e:c7:6b:df:c3:ae:df:71:9a: c5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:4E:B0:C8:82:EC:B9:9B:0F:83:15:12:07:CB:D8:EC:B1:E3:7B:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5853ad0d-cf21-3f4f-8889-cc217f517371.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.215.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:be:21:e6:90:94:91:b8:21:e3:68:ff:2b:8b:00:ef:12:f8: e0:0c:4e:81:a9:7c:63:a2:a2:98:85:ed:02:ec:d8:5f:e8:21: c0:47:23:e8:93:ce:93:c7:8c:79:a0:9c:6c:e2:7b:8f:c5:05: 03:f2:2e:0d:11:26:e4:c0:5c:f1:74:22:06:ce:a7:e4:9d:45: 0e:56:63:27:c8:95:23:81:07:28:15:1d:65:5c:30:8b:7e:61: 02:5a:c9:48:aa:b6:da:a3:0a:d6:39:d1:dd:51:64:c2:53:ee: bc:2e:36:26:fd:1f:9e:5d:f7:3d:27:bc:78:b7:b3:c0:ce:1b: dc:2e:ad:92:ef:7f:60:d3:27:8e:3d:4c:63:8e:50:b9:cd:2d: 4e:f0:69:5f:e7:a8:96:7f:c7:4c:95:8f:1c:8b:2d:b7:e8:f1: 9a:59:a3:89:1f:3f:c2:42:55:b8:12:ca:55:ec:15:aa:5a:5c: ae:1a:3e:bc:6a:56:e2:37:19:a5:58:1e:4d:0a:79:02:93:38: ae:de:a5:ec:e3:11:ce:1c:e6:26:40:11:d4:f8:fd:41:c1:67: 14:a1:78:a8:68:95:82:14:bf:48:4f:f0:ac:07:9f:a1:90:cc: bb:77:cf:a1:c9:b5:15:97:7a:9a:79:2f:f4:5a:47:5f:d5:45: 62:15:db:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXOIPTDwC/NO7D4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk Zjg3ZTRiOTEtMTVhOC00OTA1LTliM2YtZTA1YTg0Nzk5ZjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicsOnLh62vaC8KiAItwprL5ut5/3w1j9yBzj KlE2HZ2V18NAdrJqTFCssklmlqxVgBSKSr2Swel+ySAqP7juuLDbADK2xLA0pChK hh65O3qtuUg7Xv8dDbU23H0bABZRz41v1GgNpBD2Z8FgGbh2vQCAPlT6RHR4/iDW ADnqpGvupKtAXMW0zfgXtIBUSAfrPWuC6m+q8VpotPuS9oPi42UNU2Wn0uTDCacR tJaUZOiSTiPo0QBpovXchziMAb/5r11FZS+ztuv6GnS46X/lNd19vAaqgjufSb+j UWTgvXDK8h0pUeOtHxbBOpAu9rfAN2cxXYN+x2vfw67fcZrF9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLROsMiC7LmbD4MVEgfL2Oyx43v5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTg1M2FkMGQtY2YyMS0z ZjRmLTg4ODktY2MyMTdmNTE3MzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYtdwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEu+IeaQlJG4IeNo/yuLAO8S+OAMToGpfGOiopiF7QLs2F/oIcBHI+iT zpPHjHmgnGzie4/FBQPyLg0RJuTAXPF0IgbOp+SdRQ5WYyfIlSOBBygVHWVcMIt+ YQJayUiqttqjCtY50d1RZMJT7rwuNib9H55d9z0nvHi3s8DOG9wurZLvf2DTJ449 TGOOULnNLU7waV/nqJZ/x0yVjxyLLbfo8ZpZo4kfP8JCVbgSylXsFapaXK4aPrxq VuI3GaVYHk0KeQKTOK7epezjEc4c5iZAEdT4/UHBZxSheKholYIUv0hP8KwHn6GQ zLt3z6HJtRWXepp5L/RaR1/VRWIV2yQ= -----END CERTIFICATE-----Generated at Sun Mar 1 19:11:39 2026 by rpki-client