$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b4b3ea8-8570-3a1d-9db5-a4bf1fc739d2.roa File: 5b4b3ea8-8570-3a1d-9db5-a4bf1fc739d2.roa (raw, json) Hash identifier: I1k0uTQRsDBGeRzneBzf9DWf5kVsFylSyf2t1aeQuyI= Subject key identifier: CA:6A:D0:1D:1A:9E:45:63:11:03:56:D8:00:5E:51:92:4F:67:3D:F2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE58A27FC430DA1DE6F38180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b4b3ea8-8570-3a1d-9db5-a4bf1fc739d2.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 98.253.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:a2:7f:c4:30:da:1d:e6:f3:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=0ae1635d-fbf4-461b-9b30-f945097b49f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:37:5f:5a:5e:c5:48:51:b5:ba:41:86:78:19: 25:25:36:ef:9b:99:e2:8d:69:58:11:c6:44:06:66: cf:c7:1b:b6:d7:04:6b:0d:5c:b0:90:af:76:34:b9: 9d:55:8e:d2:8a:10:0a:b3:ca:82:90:c1:db:e4:80: 48:ec:d0:dc:97:48:29:77:1e:e1:2b:49:f3:09:03: 84:6a:a0:53:2e:dc:6e:b7:32:98:29:b3:8b:04:96: e6:34:d8:a0:7f:70:b6:45:72:6a:25:9f:19:ce:7c: f5:de:98:28:59:5e:7d:67:56:08:21:ce:a2:29:a1: a4:32:b4:3d:8d:ec:72:12:7b:7e:92:17:02:7d:62: 5a:3e:a8:83:0c:1e:69:ce:0d:9a:1e:82:38:c4:35: 39:8c:f5:4f:60:82:4d:af:f0:5f:e8:e4:85:d6:37: af:b3:8a:3f:92:49:3e:7a:70:bc:53:14:d6:75:03: ef:f5:23:83:41:47:88:af:38:c1:a7:e2:b5:42:01: 38:86:ea:99:2e:c9:70:cf:f0:36:ef:d9:87:8d:71: dd:70:44:3c:3a:96:74:f6:7a:dd:cb:9c:6b:36:60: 6f:4b:25:e4:07:f4:f5:d0:8b:03:6f:b2:d6:39:28: 0b:49:db:c5:eb:c4:d7:09:df:96:f4:3f:61:0c:9d: 7f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:6A:D0:1D:1A:9E:45:63:11:03:56:D8:00:5E:51:92:4F:67:3D:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b4b3ea8-8570-3a1d-9db5-a4bf1fc739d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.253.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:01:54:2f:5e:ed:e0:ba:39:57:1e:7e:76:8c:3b:10:e6:dc: 9f:73:8e:af:e7:b0:96:8e:5a:04:83:99:f9:ed:bc:12:c4:32: b3:ed:c2:0c:15:a4:c8:a2:db:ef:52:2b:1a:dd:21:df:9a:7e: dc:4e:8a:02:f3:2b:00:65:fc:29:58:bd:0e:b7:ed:60:d5:57: 9c:5e:30:74:29:51:ad:6e:41:ac:50:fc:1d:fe:66:c6:80:3c: 1d:95:a0:9b:4b:23:7c:77:eb:a9:73:5f:64:6d:80:73:f3:33: f1:68:ff:77:04:dc:1c:c9:6d:46:25:e7:0a:b8:1b:b6:bf:ba: 83:4c:eb:a5:ab:4e:98:c6:de:a1:3d:65:a5:cc:7e:40:84:f8: b6:f8:4d:3a:a4:33:24:35:8f:58:55:b7:5a:07:35:19:6f:4f: 34:22:06:7e:89:86:7a:ed:03:a1:c9:d5:0f:f7:6f:8f:c9:0b: 3f:2a:0b:44:8a:39:84:e8:e5:14:36:d1:0f:49:a5:39:61:d4: 58:ec:07:63:a4:2d:29:b9:5c:d1:96:ff:19:d9:94:60:07:f9: e6:4a:3c:6d:04:d7:c2:f6:5a:5a:71:ee:4d:5b:3a:86:9c:ac: 88:cc:9c:20:8f:6d:d9:8e:0a:85:bb:77:7b:ca:f9:a6:34:35: 5a:2e:c5:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWKJ/xDDaHebzgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MGFlMTYzNWQtZmJmNC00NjFiLTliMzAtZjk0NTA5N2I0OWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTdfWl7FSFG1ukGGeBklJTbvm5nijWlYEcZE BmbPxxu21wRrDVywkK92NLmdVY7SihAKs8qCkMHb5IBI7NDcl0gpdx7hK0nzCQOE aqBTLtxutzKYKbOLBJbmNNigf3C2RXJqJZ8Zznz13pgoWV59Z1YIIc6iKaGkMrQ9 jexyEnt+khcCfWJaPqiDDB5pzg2aHoI4xDU5jPVPYIJNr/Bf6OSF1jevs4o/kkk+ enC8UxTWdQPv9SODQUeIrzjBp+K1QgE4huqZLslwz/A279mHjXHdcEQ8OpZ09nrd y5xrNmBvSyXkB/T10IsDb7LWOSgLSdvF68TXCd+W9D9hDJ1/VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMpq0B0ankVjEQNW2ABeUZJPZz3yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWI0YjNlYTgtODU3MC0z YTFkLTlkYjUtYTRiZjFmYzczOWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYv3MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJsBVC9e7eC6OVcefnaMOxDm3J9zjq/nsJaOWgSDmfntvBLEMrPtwgwV pMii2+9SKxrdId+aftxOigLzKwBl/ClYvQ637WDVV5xeMHQpUa1uQaxQ/B3+ZsaA PB2VoJtLI3x366lzX2RtgHPzM/Fo/3cE3BzJbUYl5wq4G7a/uoNM66WrTpjG3qE9 ZaXMfkCE+Lb4TTqkMyQ1j1hVt1oHNRlvTzQiBn6JhnrtA6HJ1Q/3b4/JCz8qC0SK OYTo5RQ20Q9JpTlh1FjsB2OkLSm5XNGW/xnZlGAH+eZKPG0E18L2Wlpx7k1bOoac rIjMnCCPbdmOCoW7d3vK+aY0NVouxVk= -----END CERTIFICATE-----Generated at Sun Mar 1 18:27:58 2026 by rpki-client