$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/832aa612-6d07-3134-ab7e-85a989c0ce63.roa File: 832aa612-6d07-3134-ab7e-85a989c0ce63.roa (raw, json) Hash identifier: MLPDaSI6FApfeYBISUdWGrPvSjup+749m0Ba54tNp7o= Subject key identifier: 28:BA:F8:84:3B:1D:E7:30:98:17:77:98:49:D1:E0:11:03:D8:79:14 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5CD79128E3DC5B3BC60200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/832aa612-6d07-3134-ab7e-85a989c0ce63.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 98.212.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5c:d7:91:28:e3:dc:5b:3b:c6:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=d20b52d6-8530-407a-be0d-fe89264fd141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a8:d8:ba:6b:70:04:b1:aa:ce:b6:17:c5:c6: 04:27:85:74:e4:36:ed:c0:87:19:b6:76:3b:d1:76: 73:5f:ce:3b:5a:de:52:64:22:ea:00:02:93:02:ba: b1:b3:91:b7:18:31:fe:f9:2f:2e:19:7d:12:34:4a: 19:40:0f:33:49:f1:39:74:fc:eb:9e:ab:f7:71:0d: ce:dd:46:75:9d:5a:e9:44:d9:70:fc:bd:1c:48:b2: 45:d4:e6:f0:9b:c6:8c:2f:e0:cd:9a:d1:b0:03:62: 33:d2:6e:40:31:e0:36:da:cd:f1:e3:6c:f0:fd:b2: 10:5a:e2:df:46:c3:b5:03:18:53:5c:e1:57:f7:15: 42:c9:ea:c5:28:88:0c:fb:a9:36:52:c2:c3:c0:27: 17:1d:95:db:41:51:37:a9:f2:b7:43:b6:57:59:a1: 90:54:73:6b:1e:4a:e7:70:3b:a6:26:de:60:8c:3f: 9e:b4:b3:81:a7:b3:8c:1f:61:51:13:45:a4:6f:7a: 80:75:13:15:af:b6:87:d4:3e:3c:0b:ba:c2:c7:17: 91:da:04:19:9d:1f:69:74:cf:2a:ab:da:c1:df:a3: 2d:f4:6f:28:95:aa:8b:74:9c:78:1f:4a:d0:6a:42: 3f:08:41:7e:11:ab:60:bd:c1:a1:6a:74:b8:4a:03: 85:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:BA:F8:84:3B:1D:E7:30:98:17:77:98:49:D1:E0:11:03:D8:79:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/832aa612-6d07-3134-ab7e-85a989c0ce63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.212.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:84:fb:d9:4d:6a:7f:63:33:5b:b8:5a:f3:29:c2:e6:c3:cc: f8:a0:06:3b:44:8d:c9:f6:50:53:67:a6:47:43:0b:7a:e4:e2: 05:d0:a9:a6:00:79:3e:54:e3:b6:5b:94:dd:3a:db:87:fb:bd: b8:d0:a9:a7:1f:7d:f2:cf:52:bc:a8:64:51:c7:b5:62:20:f5: 89:26:c0:68:70:eb:02:15:c6:c3:78:ce:e5:6b:e7:d3:37:52: f9:69:18:5f:0f:75:36:33:a7:f1:38:1a:21:31:a5:b6:d3:a3: f2:49:94:5b:a4:8d:58:39:44:a0:3e:8e:67:ce:50:90:62:bc: dd:e4:d1:ae:bb:f8:99:c0:ae:34:7f:43:e0:cc:22:e2:dc:9f: d6:15:01:1e:56:f7:24:1b:ae:42:85:bc:f0:c0:7b:5f:fb:3f: 04:8c:57:b5:b5:bf:b2:d7:c6:99:2e:b7:8f:4a:91:ae:73:46: 14:03:23:95:09:04:3e:b0:b6:86:e3:df:77:ac:00:6f:0c:05: 6b:06:50:63:2c:1b:bc:bf:7e:e8:43:2f:cd:8e:b8:ce:b4:54: f4:88:8a:16:f3:9f:27:6d:67:9e:b6:05:4d:79:2f:24:32:f9: aa:4a:f3:93:48:b6:5b:78:e7:6a:76:35:a9:64:31:9a:4a:f9: de:ad:34:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXNeRKOPcWzvGAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZDIwYjUyZDYtODUzMC00MDdhLWJlMGQtZmU4OTI2NGZkMTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnajYumtwBLGqzrYXxcYEJ4V05DbtwIcZtnY7 0XZzX847Wt5SZCLqAAKTArqxs5G3GDH++S8uGX0SNEoZQA8zSfE5dPzrnqv3cQ3O 3UZ1nVrpRNlw/L0cSLJF1Obwm8aML+DNmtGwA2Iz0m5AMeA22s3x42zw/bIQWuLf RsO1AxhTXOFX9xVCyerFKIgM+6k2UsLDwCcXHZXbQVE3qfK3Q7ZXWaGQVHNrHkrn cDumJt5gjD+etLOBp7OMH2FRE0Wkb3qAdRMVr7aH1D48C7rCxxeR2gQZnR9pdM8q q9rB36Mt9G8olaqLdJx4H0rQakI/CEF+EatgvcGhanS4SgOFrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCi6+IQ7HecwmBd3mEnR4BED2HkUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODMyYWE2MTItNmQwNy0z MTM0LWFiN2UtODVhOTg5YzBjZTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYtTcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOE+9lNan9jM1u4WvMpwubDzPigBjtEjcn2UFNnpkdDC3rk4gXQqaYA eT5U47ZblN0624f7vbjQqacfffLPUryoZFHHtWIg9YkmwGhw6wIVxsN4zuVr59M3 UvlpGF8PdTYzp/E4GiExpbbTo/JJlFukjVg5RKA+jmfOUJBivN3k0a67+JnArjR/ Q+DMIuLcn9YVAR5W9yQbrkKFvPDAe1/7PwSMV7W1v7LXxpkut49Kka5zRhQDI5UJ BD6wtobj33esAG8MBWsGUGMsG7y/fuhDL82OuM60VPSIihbznydtZ562BU15LyQy +apK85NItlt452p2NalkMZpK+d6tNFE= -----END CERTIFICATE-----Generated at Mon Mar 2 11:59:47 2026 by rpki-client