$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7c74aff8-9aac-32e3-aa63-3b3b27d58bca.roa File: 7c74aff8-9aac-32e3-aa63-3b3b27d58bca.roa (raw, json) Hash identifier: nkZyTbpNzm+UDYPiuxtgY5JGQI7O5oDW+O/fXtCN3ns= Subject key identifier: 39:A9:BB:63:CB:21:C6:02:AF:0C:0C:11:24:07:06:CF:F9:79:92:46 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5D039065BFD3AFF86BA900 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7c74aff8-9aac-32e3-aa63-3b3b27d58bca.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 98.32.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5d:03:90:65:bf:d3:af:f8:6b:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=baacb6d6-cd17-4a96-b13d-ae82b45f4fdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0a:35:75:15:96:8e:d2:20:f0:ef:f7:ac:2c: b4:f6:d8:47:37:a1:d5:f0:74:ee:75:96:19:75:e1: 04:73:03:12:41:8a:55:42:7b:c5:4c:1d:e6:de:f3: c7:30:79:05:7b:ce:6a:e2:ab:0b:b5:c8:de:62:ca: 86:1e:e1:68:2f:51:f7:7b:62:e6:c5:3a:d5:96:1a: 20:ec:40:c3:c3:d2:0e:3c:e8:59:77:cb:4f:48:35: 86:d9:89:ef:5e:39:a2:eb:aa:bd:e2:a2:30:f7:23: 2a:f1:e2:cf:2a:2c:b9:ef:3a:0c:c8:00:3f:8c:d4: 20:eb:1d:92:dd:b2:5b:0a:0b:e2:af:00:ec:e8:68: 65:be:c5:c3:11:0c:8b:3b:ca:02:0f:b5:08:47:cc: d8:21:4d:d1:0a:2f:21:1f:c4:a4:c3:48:ad:fa:8b: 65:82:98:62:8c:6c:a8:74:4f:64:bb:82:40:3c:9a: 2b:6f:9d:1b:31:07:d9:ea:62:33:92:11:b3:9c:b5: 95:2f:06:b5:d6:c5:b2:d5:b7:7b:64:70:38:b8:58: 56:b3:e6:7f:06:a3:aa:39:fb:c4:85:6f:08:0f:7c: 0d:88:ee:c8:c1:fc:74:b9:f6:94:1e:b8:2b:f8:a5: 81:4c:a7:a4:76:18:9d:24:68:8a:60:b5:03:54:40: 6f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:A9:BB:63:CB:21:C6:02:AF:0C:0C:11:24:07:06:CF:F9:79:92:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7c74aff8-9aac-32e3-aa63-3b3b27d58bca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.32.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:10:ce:a7:6d:c3:11:49:09:0c:e9:82:a6:84:4d:9e:8d:ee: 98:c6:b5:98:67:d0:10:56:ca:87:08:43:83:59:c2:51:2e:e3: 51:b0:d5:82:97:29:ea:8a:be:65:0f:b2:7d:27:6d:6c:a4:61: 51:48:56:d0:d7:b2:b4:76:1e:3d:19:0c:27:19:7e:0d:6e:44: 0e:df:1b:f4:c9:d0:7f:5f:7f:b5:73:9b:6b:b6:d6:87:65:88: ec:ce:9d:d0:1b:4f:17:01:9a:69:70:f5:3e:8a:5c:0c:2d:76: e1:57:fe:e0:13:8a:4e:39:f3:56:54:53:c2:a3:0a:d7:bd:94: 38:74:0c:64:fe:94:ef:86:f7:69:ab:31:72:11:b7:c9:0d:ef: 28:63:7d:0b:2a:17:b0:dd:3f:34:fd:36:1f:41:4e:ec:2e:d5: 9f:df:2d:96:38:8b:ce:03:91:b3:92:e2:bd:2d:c4:8e:96:1c: 44:8a:55:db:e9:d8:40:5a:39:a3:57:f1:30:ba:29:d0:fc:e3: 3e:a7:11:e7:09:16:39:e4:2a:03:c3:fe:f1:98:9d:69:93:62: 08:1a:1c:2b:21:c1:fa:c7:17:c2:48:64:85:3b:3f:85:cf:e4: 0a:80:f3:0f:d1:4c:e2:c0:b2:0d:fb:af:b9:80:15:7a:6b:00: 36:3d:fd:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXQOQZb/Tr/hrqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YmFhY2I2ZDYtY2QxNy00YTk2LWIxM2QtYWU4MmI0NWY0ZmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ao1dRWWjtIg8O/3rCy09thHN6HV8HTudZYZ deEEcwMSQYpVQnvFTB3m3vPHMHkFe85q4qsLtcjeYsqGHuFoL1H3e2LmxTrVlhog 7EDDw9IOPOhZd8tPSDWG2YnvXjmi66q94qIw9yMq8eLPKiy57zoMyAA/jNQg6x2S 3bJbCgvirwDs6GhlvsXDEQyLO8oCD7UIR8zYIU3RCi8hH8Skw0it+otlgphijGyo dE9ku4JAPJorb50bMQfZ6mIzkhGznLWVLwa11sWy1bd7ZHA4uFhWs+Z/BqOqOfvE hW8ID3wNiO7Iwfx0ufaUHrgr+KWBTKekdhidJGiKYLUDVEBv/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDmpu2PLIcYCrwwMESQHBs/5eZJGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2M3NGFmZjgtOWFhYy0z MmUzLWFhNjMtM2IzYjI3ZDU4YmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYiCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIQzqdtwxFJCQzpgqaETZ6N7pjGtZhn0BBWyocIQ4NZwlEu41Gw1YKX KeqKvmUPsn0nbWykYVFIVtDXsrR2Hj0ZDCcZfg1uRA7fG/TJ0H9ff7Vzm2u21odl iOzOndAbTxcBmmlw9T6KXAwtduFX/uATik4581ZUU8KjCte9lDh0DGT+lO+G92mr MXIRt8kN7yhjfQsqF7DdPzT9Nh9BTuwu1Z/fLZY4i84DkbOS4r0txI6WHESKVdvp 2EBaOaNX8TC6KdD84z6nEecJFjnkKgPD/vGYnWmTYggaHCshwfrHF8JIZIU7P4XP 5AqA8w/RTOLAsg37r7mAFXprADY9/dA= -----END CERTIFICATE-----Generated at Sun Mar 1 20:39:17 2026 by rpki-client