$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/691872c2-deed-3c19-be7f-d32a6e187b96.roa File: 691872c2-deed-3c19-be7f-d32a6e187b96.roa (raw, json) Hash identifier: CaHSmpMZ5OYHBG+3zpwAPb6DuFpId+1amXd+7J8n67w= Subject key identifier: 47:ED:5C:30:07:64:A9:F8:63:EC:CF:44:CC:7D:5F:17:BE:BA:6B:20 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE58AAC38BC98035BB56EC70 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/691872c2-deed-3c19-be7f-d32a6e187b96.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 98.63.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:aa:c3:8b:c9:80:35:bb:56:ec:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=eae5fba5-2889-43aa-a0a3-cead353ab04a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cd:a2:4c:0d:17:71:ce:a6:b5:4e:37:27:6e: d0:ed:e7:a4:89:9b:a9:73:98:34:c7:f7:60:b4:ac: 71:40:5b:6f:fd:99:d6:a2:92:bc:d3:da:b4:19:40: 08:56:7d:60:81:69:91:3c:9b:45:6d:37:96:70:94: ca:66:9c:bf:5b:89:c2:b4:f5:4d:bb:f5:08:06:c2: e6:4c:b9:6a:9d:43:9e:42:dc:51:5b:4c:cf:9f:da: 7e:a3:c9:09:3c:05:88:1c:d2:57:e8:ad:66:b2:12: f8:96:15:b7:f4:03:5e:83:6f:1d:2b:f7:d8:f4:10: 36:4e:39:0b:cf:ac:bb:67:03:e7:a0:e1:fc:6d:62: 15:49:a7:26:7b:38:cc:a0:79:fa:92:08:3f:fb:3a: f9:f1:e8:e5:82:c2:76:94:e2:86:59:53:db:23:9a: 97:0e:a1:cc:63:f4:90:38:c7:39:74:8a:5c:66:ea: 34:66:cf:f4:21:d5:2e:26:9b:27:9d:4b:66:31:d1: c3:b1:a8:61:58:df:96:40:17:fb:20:5b:01:91:26: 49:83:04:6a:d0:15:3d:c8:94:05:cc:4b:23:1b:ab: 85:a3:20:d4:53:85:a9:cb:94:58:f5:0a:18:17:7c: 3d:73:23:dc:2b:b6:ba:e7:a9:31:e1:33:21:38:a9: b1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:ED:5C:30:07:64:A9:F8:63:EC:CF:44:CC:7D:5F:17:BE:BA:6B:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/691872c2-deed-3c19-be7f-d32a6e187b96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.63.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ce:eb:bf:e5:23:c0:20:8c:87:98:1a:10:0c:15:08:56:91:25: e1:39:1a:a5:7d:f8:46:52:20:99:8b:05:96:cd:c8:a1:28:96: 8e:94:61:4d:78:29:a3:cd:e7:f5:a8:c4:9d:72:2d:20:98:9e: 80:ca:b9:4a:9d:ea:59:1d:b1:5a:41:c1:6d:ce:9d:a6:6f:df: c2:b3:7b:43:d0:df:da:d6:ff:7d:cf:22:e6:4c:2b:d9:7f:dd: 4f:46:e7:21:4a:a4:65:ba:6e:bd:10:8a:f5:c8:2b:85:6c:6a: 5d:10:d1:00:79:c6:72:33:01:e0:28:c8:f0:4b:b1:6d:b7:68: b6:b1:6c:17:8b:1e:ae:54:61:4b:e6:1b:69:ec:42:b3:db:1a: b0:8c:eb:bd:a3:f1:d8:30:0e:f6:c9:2c:58:d6:10:dd:04:6a: 82:83:37:24:6f:fd:79:17:80:fd:30:e5:23:d8:6d:08:b0:05: 73:68:a3:1c:d4:0c:f2:af:ba:05:fd:e2:a1:9e:a1:e8:9c:94: 48:98:fb:26:cd:8b:9f:37:00:fc:9d:1e:7b:f3:3a:f0:d9:29: 90:ea:44:66:2f:cf:62:fb:db:b5:4a:79:01:37:22:d2:9d:b0: 42:68:a0:3e:65:3e:78:05:ba:5c:01:d6:60:59:9c:24:c0:f9: d9:d3:0c:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWKrDi8mANbtW7HAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZWFlNWZiYTUtMjg4OS00M2FhLWEwYTMtY2VhZDM1M2FiMDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsc2iTA0Xcc6mtU43J27Q7eekiZupc5g0x/dg tKxxQFtv/ZnWopK809q0GUAIVn1ggWmRPJtFbTeWcJTKZpy/W4nCtPVNu/UIBsLm TLlqnUOeQtxRW0zPn9p+o8kJPAWIHNJX6K1mshL4lhW39ANeg28dK/fY9BA2TjkL z6y7ZwPnoOH8bWIVSacmezjMoHn6kgg/+zr58ejlgsJ2lOKGWVPbI5qXDqHMY/SQ OMc5dIpcZuo0Zs/0IdUuJpsnnUtmMdHDsahhWN+WQBf7IFsBkSZJgwRq0BU9yJQF zEsjG6uFoyDUU4Wpy5RY9QoYF3w9cyPcK7a656kx4TMhOKmxVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEftXDAHZKn4Y+zPRMx9Xxe+umsgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjkxODcyYzItZGVlZC0z YzE5LWJlN2YtZDMyYTZlMTg3Yjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYj/MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM7rv+UjwCCMh5gaEAwVCFaRJeE5GqV9+EZSIJmLBZbNyKEolo6UYU14 KaPN5/WoxJ1yLSCYnoDKuUqd6lkdsVpBwW3OnaZv38Kze0PQ39rW/33PIuZMK9l/ 3U9G5yFKpGW6br0QivXIK4Vsal0Q0QB5xnIzAeAoyPBLsW23aLaxbBeLHq5UYUvm G2nsQrPbGrCM672j8dgwDvbJLFjWEN0EaoKDNyRv/XkXgP0w5SPYbQiwBXNooxzU DPKvugX94qGeoeiclEiY+ybNi583APydHnvzOvDZKZDqRGYvz2L727VKeQE3ItKd sEJooD5lPngFulwB1mBZnCTA+dnTDBo= -----END CERTIFICATE-----Generated at Sun Mar 1 18:28:55 2026 by rpki-client