$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/65153142-e3b9-31b6-8e1c-dac9b51f4111.roa File: 65153142-e3b9-31b6-8e1c-dac9b51f4111.roa (raw, json) Hash identifier: dfNU93N3pyCA5+r2R4KXtpcny9JhrsoKyJe+AX1H32E= Subject key identifier: 29:05:17:B3:CE:F6:1A:5F:C4:0B:F7:E1:4F:BD:66:E1:42:DE:CC:34 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5E28797298A2D9D0CF9000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/65153142-e3b9-31b6-8e1c-dac9b51f4111.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 98.42.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:28:79:72:98:a2:d9:d0:cf:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=1d89a46e-11ca-4fc1-849c-ce28a93615e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:24:a7:24:26:b8:35:a0:57:9c:42:9e:8e:39: 90:fc:8b:25:61:1a:4d:a3:a0:3f:62:8d:14:85:fe: fc:1e:f5:18:9c:f5:a4:cf:da:9a:90:75:d1:28:ef: ad:ca:ec:d4:0d:f0:eb:c1:ce:ee:99:c1:6e:c1:c2: 2f:de:ec:7e:a3:1b:3a:36:e3:5a:ba:04:95:7f:38: b6:a7:0c:8e:f9:80:f3:5c:13:47:93:f9:9b:80:8a: 8c:d9:97:6f:03:7b:77:8f:0b:99:e7:28:8e:5b:11: 62:26:aa:e9:35:a1:f3:b6:3a:b3:d5:20:2f:7c:ed: 8c:44:fb:9b:07:77:da:6b:82:cd:e8:63:d0:4e:00: 29:a9:53:19:20:fe:9c:31:42:26:9a:75:94:12:49: a5:63:a5:9d:75:63:cf:cb:7b:89:fe:4a:ac:f5:f9: 9e:41:d9:b5:9e:da:c8:71:30:c2:16:b9:36:5c:f5: c4:77:5e:7d:b3:fa:d0:06:76:08:6f:e0:ab:3f:22: 13:a3:86:a7:36:28:fc:04:fc:d9:25:3b:e0:2e:a5: 2f:dc:71:60:7e:b3:24:56:be:34:6a:18:da:49:c4: ad:e1:5e:d5:ba:6b:67:83:e0:5b:a9:93:cf:6a:80: c2:e4:ef:7e:53:42:e4:c4:81:3c:e3:67:3e:a8:8a: 89:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:05:17:B3:CE:F6:1A:5F:C4:0B:F7:E1:4F:BD:66:E1:42:DE:CC:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/65153142-e3b9-31b6-8e1c-dac9b51f4111.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.42.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d5:13:e3:f0:0b:c6:7d:86:ff:65:66:c2:74:92:9f:28:40:39: a3:45:bf:65:f0:a0:f6:41:d0:ea:2a:cd:2e:07:5b:76:9e:81: d0:8b:aa:db:1d:da:8d:16:36:f4:43:c5:1b:74:cd:f8:64:53: 27:3b:24:1b:96:27:1e:a1:db:2f:ba:dd:79:33:87:e1:bf:86: c8:b2:56:8e:55:50:14:60:09:7e:55:03:d9:99:93:d5:51:81: 6b:bc:4b:bc:fc:1c:c8:45:c9:98:44:61:1d:c9:28:c3:9c:0e: a2:6b:54:1c:65:a0:f7:5c:e7:65:4f:60:b5:22:34:f9:47:8b: 4e:6b:21:19:5c:59:18:a0:05:01:a6:43:42:9f:94:03:bb:c5: 0c:32:30:3d:55:c3:d3:28:76:5f:71:94:05:6d:a0:5a:0f:de: 40:05:ef:ed:5d:1b:18:43:9c:0c:4d:93:72:42:98:7c:10:a1: 2d:31:6f:ce:37:ff:25:1e:c2:ac:b0:78:b5:72:b2:90:cf:73: 77:ca:64:d0:53:8b:b0:e5:77:e8:87:93:ed:08:d4:27:79:0e: a7:1e:ed:87:19:97:7b:e9:cb:92:c8:40:e4:a7:49:5b:47:97: 53:40:58:c2:6c:22:5f:70:22:cc:17:fc:f3:44:9b:7e:7f:ba: 40:62:d6:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXih5cpii2dDPkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MWQ4OWE0NmUtMTFjYS00ZmMxLTg0OWMtY2UyOGE5MzYxNWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwySnJCa4NaBXnEKejjmQ/IslYRpNo6A/Yo0U hf78HvUYnPWkz9qakHXRKO+tyuzUDfDrwc7umcFuwcIv3ux+oxs6NuNaugSVfzi2 pwyO+YDzXBNHk/mbgIqM2ZdvA3t3jwuZ5yiOWxFiJqrpNaHztjqz1SAvfO2MRPub B3faa4LN6GPQTgApqVMZIP6cMUImmnWUEkmlY6WddWPPy3uJ/kqs9fmeQdm1ntrI cTDCFrk2XPXEd159s/rQBnYIb+CrPyITo4anNij8BPzZJTvgLqUv3HFgfrMkVr40 ahjaScSt4V7Vumtng+BbqZPPaoDC5O9+U0LkxIE842c+qIqJ9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkFF7PO9hpfxAv34U+9ZuFC3sw0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjUxNTMxNDItZTNiOS0z MWI2LThlMWMtZGFjOWI1MWY0MTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYipUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANUT4/ALxn2G/2VmwnSSnyhAOaNFv2XwoPZB0OoqzS4HW3aegdCLqtsd 2o0WNvRDxRt0zfhkUyc7JBuWJx6h2y+63Xkzh+G/hsiyVo5VUBRgCX5VA9mZk9VR gWu8S7z8HMhFyZhEYR3JKMOcDqJrVBxloPdc52VPYLUiNPlHi05rIRlcWRigBQGm Q0KflAO7xQwyMD1Vw9Modl9xlAVtoFoP3kAF7+1dGxhDnAxNk3JCmHwQoS0xb843 /yUewqyweLVyspDPc3fKZNBTi7Dld+iHk+0I1Cd5Dqce7YcZl3vpy5LIQOSnSVtH l1NAWMJsIl9wIswX/PNEm35/ukBi1og= -----END CERTIFICATE-----Generated at Sun Mar 1 18:41:46 2026 by rpki-client