$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b30dba3-0c55-3d2e-96ee-a768d2c4a219.roa File: 6b30dba3-0c55-3d2e-96ee-a768d2c4a219.roa (raw, json) Hash identifier: qXNsLUEqFecLz7ToegbhW00Pbv6CU17K15jTfZyo+w4= Subject key identifier: 4D:D0:05:D8:E6:14:1B:45:FC:2C:AB:60:DB:D9:97:08:7B:F1:6C:32 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE57A5BC67AEC40201A96200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b30dba3-0c55-3d2e-96ee-a768d2c4a219.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33659 IP address blocks: 98.221.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:a5:bc:67:ae:c4:02:01:a9:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=db7ab8cc-51fe-449f-955f-ff31feb71dcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a6:55:c8:57:9a:d7:39:9d:63:97:2d:08:fb: 41:dd:f6:94:d2:35:0f:98:6d:b5:56:4b:4b:0e:4c: f6:86:29:20:13:60:bd:a2:2a:7d:94:98:a8:2a:c1: fd:90:2f:31:a3:ce:89:27:55:4e:7e:6f:8b:dd:9d: c4:ed:4e:f5:8e:7f:35:a6:39:0b:8b:32:70:bc:1e: 44:ae:26:43:bf:da:1f:b7:9d:f2:75:f7:d3:6b:95: b2:ab:e1:62:62:e1:b4:0b:70:87:fd:c2:cd:12:79: b6:8d:81:28:66:58:0b:96:63:ee:0c:9e:85:72:7b: 02:a2:7c:e8:1a:62:5f:75:a0:96:a2:11:51:bd:4c: 02:34:10:34:ae:9e:84:9a:93:7e:71:99:50:38:49: 87:57:34:f9:b9:2b:ca:05:c8:4f:b6:0a:0e:57:82: 99:8e:7a:dc:6d:3f:9e:23:2b:6d:b4:5f:bd:64:ed: 6f:9e:b4:51:5a:b5:7d:19:18:2c:90:4a:63:40:b0: e5:f7:94:d5:95:f0:80:5f:cf:c6:ae:d4:df:13:72: 88:ea:03:39:1c:3d:75:10:8f:22:1f:8d:07:80:99: 45:38:ac:f5:eb:d5:23:e3:c0:e2:90:bd:a2:02:25: c2:e7:40:5c:43:91:2c:18:84:a7:d5:1f:26:31:e4: 02:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:D0:05:D8:E6:14:1B:45:FC:2C:AB:60:DB:D9:97:08:7B:F1:6C:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b30dba3-0c55-3d2e-96ee-a768d2c4a219.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.221.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:28:36:f0:07:97:1b:83:88:8e:f9:26:1e:3f:d0:88:a0:bd: 60:a9:aa:d6:e8:07:14:d6:51:8e:fe:5f:5d:7d:7a:c5:26:aa: 27:2a:06:b1:4c:4e:71:83:0b:75:41:67:81:4d:7e:08:07:ff: a1:4b:bc:5c:bb:53:8a:2e:8c:97:e4:88:03:35:f4:bf:57:0b: 66:14:db:9b:ec:90:c3:b5:83:a5:ac:fd:ae:f8:49:08:c7:51: 06:89:f1:ce:bb:0c:e1:e2:7c:1b:52:db:12:01:6c:0c:8e:73: 04:47:9b:d6:95:4d:3a:0e:17:18:59:39:5b:42:b0:25:af:b1: 87:5f:64:95:03:02:cf:35:60:9e:42:cc:03:4f:0b:da:c4:27: df:4b:c7:43:21:1e:83:c8:06:ec:c7:33:5d:a4:c4:95:60:29: 46:56:ea:fb:c2:fa:b1:3a:45:c7:a3:57:b3:75:6b:a4:91:ab: ca:01:a3:73:ce:bd:a8:07:b4:70:2c:0f:e9:15:22:bb:ed:bf: d5:72:f0:1c:65:7c:65:a0:4f:26:52:79:56:b4:21:91:52:b5: b8:32:4a:22:d5:e0:0b:76:e9:a2:57:0f:8b:f7:e6:18:d6:e5: 17:70:59:c6:3d:1b:47:66:3f:12:cf:3a:80:32:64:7f:93:f9: 0b:a4:fc:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuV6W8Z67EAgGpYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZGI3YWI4Y2MtNTFmZS00NDlmLTk1NWYtZmYzMWZlYjcxZGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqZVyFea1zmdY5ctCPtB3faU0jUPmG21VktL Dkz2hikgE2C9oip9lJioKsH9kC8xo86JJ1VOfm+L3Z3E7U71jn81pjkLizJwvB5E riZDv9oft53ydffTa5Wyq+FiYuG0C3CH/cLNEnm2jYEoZlgLlmPuDJ6FcnsConzo GmJfdaCWohFRvUwCNBA0rp6EmpN+cZlQOEmHVzT5uSvKBchPtgoOV4KZjnrcbT+e IytttF+9ZO1vnrRRWrV9GRgskEpjQLDl95TVlfCAX8/GrtTfE3KI6gM5HD11EI8i H40HgJlFOKz169Uj48DikL2iAiXC50BcQ5EsGISn1R8mMeQC7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE3QBdjmFBtF/CyrYNvZlwh78WwyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNmIzMGRiYTMtMGM1NS0z ZDJlLTk2ZWUtYTc2OGQyYzRhMjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYt38MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEoNvAHlxuDiI75Jh4/0IigvWCpqtboBxTWUY7+X119esUmqicqBrFM TnGDC3VBZ4FNfggH/6FLvFy7U4oujJfkiAM19L9XC2YU25vskMO1g6Ws/a74SQjH UQaJ8c67DOHifBtS2xIBbAyOcwRHm9aVTToOFxhZOVtCsCWvsYdfZJUDAs81YJ5C zANPC9rEJ99Lx0MhHoPIBuzHM12kxJVgKUZW6vvC+rE6RcejV7N1a6SRq8oBo3PO vagHtHAsD+kVIrvtv9Vy8BxlfGWgTyZSeVa0IZFStbgySiLV4At26aJXD4v35hjW 5RdwWcY9G0dmPxLPOoAyZH+T+Quk/N0= -----END CERTIFICATE-----Generated at Mon Mar 2 00:00:14 2026 by rpki-client