$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6025c2ac-4ced-3912-945d-5720f3a01e10.roa File: 6025c2ac-4ced-3912-945d-5720f3a01e10.roa (raw, json) Hash identifier: ec06txOfQrvhg1dmFCrawH4cD0VIezIofH+r1RhWirU= Subject key identifier: D0:FD:52:13:7D:57:62:21:48:D5:9A:32:8D:FA:BD:81:BA:3B:A3:19 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE58AC0CA29B3D96EAEF1900 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6025c2ac-4ced-3912-945d-5720f3a01e10.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 98.63.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:ac:0c:a2:9b:3d:96:ea:ef:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=fa12d9f5-9edb-471b-b30c-055ebb895b3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d4:9e:8e:30:b5:4c:11:7a:ea:b0:00:6a:76: 30:5b:8e:52:41:96:a9:f5:ed:b9:a8:11:a1:e6:2d: 8f:1d:3b:f7:73:d7:8f:6e:b9:f2:1f:0b:7f:51:32: 97:8f:e1:be:a5:eb:1f:57:48:41:2f:57:f8:2d:56: f6:b6:e2:2a:bb:ab:3f:c4:32:fa:e8:e1:5e:d4:92: a3:a7:77:9f:fe:5e:02:48:93:11:05:b9:d1:f2:e2: b0:67:79:82:1c:49:70:e2:70:35:59:a7:ff:e4:92: 0a:4b:df:d9:31:b8:e7:3e:c4:67:8f:00:59:39:14: af:d7:54:b9:4a:43:00:05:27:50:51:ff:76:28:b6: 35:1a:fb:77:01:51:4e:7e:e7:e3:f6:ee:38:46:14: c1:63:c9:bb:40:34:5f:27:13:48:9f:c1:fe:c3:14: 13:96:4d:9a:36:56:29:13:81:5b:ad:11:da:87:34: 90:11:3e:cc:16:4a:b5:7b:95:06:49:30:b2:a0:bc: af:8b:6e:0a:b3:68:3f:83:e2:b0:05:d0:64:35:e2: 21:84:d2:7b:67:59:39:bd:a8:43:53:bb:cb:32:15: 6c:d4:ba:89:2e:50:ec:e5:07:b6:3c:ce:bd:d8:99: d7:b2:b6:a3:db:e8:21:6d:ec:10:cb:f7:c3:52:4a: f8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:FD:52:13:7D:57:62:21:48:D5:9A:32:8D:FA:BD:81:BA:3B:A3:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6025c2ac-4ced-3912-945d-5720f3a01e10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.63.60.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:49:58:b6:13:52:ee:6d:db:6d:75:57:68:ef:a4:62:4f:88: 29:ef:bd:d7:cb:d1:93:61:98:52:29:09:54:70:42:0f:b3:87: 0e:8e:cd:5a:a4:35:6a:bc:5d:27:d5:06:f1:dd:0e:48:fc:73: a9:70:0c:4d:bc:41:e6:bb:a6:d6:ef:7e:a1:c6:36:74:af:ac: 12:7c:8c:c9:b5:63:38:cb:e6:22:77:12:21:12:24:e0:b8:ae: 6c:c5:b0:0b:75:db:5a:42:08:2d:c2:f0:e9:45:b2:a5:3b:2b: 0e:0c:f6:0d:13:66:84:1d:24:54:fc:0e:73:b7:73:0b:29:bc: 97:ba:2f:d5:f2:c6:42:84:63:70:7b:a3:f4:4e:b5:5c:7d:7b: 36:ae:78:3e:e3:c1:c7:74:a8:e1:23:f2:94:b7:4e:16:4a:fa: 77:33:3d:a2:ee:28:4d:d4:62:94:ef:42:b9:db:f4:02:7d:71: d4:25:2b:37:c2:80:e5:43:a1:d6:c3:62:c1:7f:56:b6:5f:f6: a0:02:4d:8e:23:0f:14:2f:53:82:c4:40:04:b6:db:05:54:f1: 71:8d:01:4d:49:98:f8:b9:c9:23:22:6f:4a:49:cd:43:ff:88: c2:86:99:57:a1:ea:3b:62:a3:a4:64:39:64:ef:43:52:27:33: fb:26:64:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWKwMops9lurvGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZmExMmQ5ZjUtOWVkYi00NzFiLWIzMGMtMDU1ZWJiODk1YjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9SejjC1TBF66rAAanYwW45SQZap9e25qBGh 5i2PHTv3c9ePbrnyHwt/UTKXj+G+pesfV0hBL1f4LVb2tuIqu6s/xDL66OFe1JKj p3ef/l4CSJMRBbnR8uKwZ3mCHElw4nA1Waf/5JIKS9/ZMbjnPsRnjwBZORSv11S5 SkMABSdQUf92KLY1Gvt3AVFOfufj9u44RhTBY8m7QDRfJxNIn8H+wxQTlk2aNlYp E4FbrRHahzSQET7MFkq1e5UGSTCyoLyvi24Ks2g/g+KwBdBkNeIhhNJ7Z1k5vahD U7vLMhVs1LqJLlDs5Qe2PM692JnXsraj2+ghbewQy/fDUkr4XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFND9UhN9V2IhSNWaMo36vYG6O6MZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjAyNWMyYWMtNGNlZC0z OTEyLTk0NWQtNTcyMGYzYTAxZTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYj88MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZJWLYTUu5t2211V2jvpGJPiCnvvdfL0ZNhmFIpCVRwQg+zhw6OzVqk NWq8XSfVBvHdDkj8c6lwDE28Qea7ptbvfqHGNnSvrBJ8jMm1YzjL5iJ3EiESJOC4 rmzFsAt121pCCC3C8OlFsqU7Kw4M9g0TZoQdJFT8DnO3cwspvJe6L9XyxkKEY3B7 o/ROtVx9ezaueD7jwcd0qOEj8pS3ThZK+nczPaLuKE3UYpTvQrnb9AJ9cdQlKzfC gOVDodbDYsF/VrZf9qACTY4jDxQvU4LEQAS22wVU8XGNAU1JmPi5ySMib0pJzUP/ iMKGmVeh6jtio6RkOWTvQ1InM/smZIo= -----END CERTIFICATE-----Generated at Sun Mar 1 23:24:32 2026 by rpki-client