$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8973f589-3de9-3667-a73e-45c947f2eb72.roa File: 8973f589-3de9-3667-a73e-45c947f2eb72.roa (raw, json) Hash identifier: 21v44ZTrWQ73YTYWHqS3qHKb/B8cwPWMsH+kvfKmDjc= Subject key identifier: 82:E8:1F:64:A8:38:E7:2D:F9:2C:84:F8:8B:D3:17:BC:B7:34:EB:54 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5E24E06EB815CACDFA0500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8973f589-3de9-3667-a73e-45c947f2eb72.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 98.42.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:24:e0:6e:b8:15:ca:cd:fa:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=ba9cda0a-48c7-4ff4-99bf-286e4a558ac7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bc:83:13:3d:c8:1a:bd:e2:d5:1a:77:02:bd: 71:36:a3:18:80:39:57:91:59:35:27:67:aa:f7:ed: 2c:98:4f:e8:41:c9:98:40:2f:7c:5c:3f:6e:65:b8: 26:00:93:87:2d:57:cb:fa:a9:2e:b0:2a:a1:1f:f0: 9f:29:50:b0:ce:52:f6:26:3c:ee:47:1a:b9:37:d1: e3:5b:ce:bf:1e:fb:fd:35:81:76:08:46:1e:7d:aa: 41:ac:9c:f3:22:c9:79:c9:09:2c:45:73:06:ef:cf: f0:e1:2c:d6:5b:06:35:cd:97:9e:6d:38:51:01:69: 68:b6:f4:e1:f1:d5:0c:1d:c1:18:7b:88:96:43:19: 2e:51:15:bb:0a:37:4f:dd:09:16:8d:41:72:59:5c: d3:78:05:7d:94:45:6f:23:f7:d6:b2:02:1a:e7:c7: 3d:c3:01:39:72:fd:24:9b:55:eb:2a:84:16:2b:16: 56:7e:e1:8e:e3:f2:84:15:8d:09:30:49:bd:d3:a6: 05:fb:d2:88:e5:7b:a5:a2:b5:a9:6c:79:a6:12:80: c4:b0:af:c4:68:31:19:75:51:5d:e9:e6:d8:c3:46: d0:51:aa:9c:e3:c6:d2:54:ae:b6:dc:34:20:5d:c3: 21:2e:1f:7e:39:36:d9:df:18:1c:ac:02:d9:57:e9: 67:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:E8:1F:64:A8:38:E7:2D:F9:2C:84:F8:8B:D3:17:BC:B7:34:EB:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8973f589-3de9-3667-a73e-45c947f2eb72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.42.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:e0:d8:19:60:1c:6c:73:9d:63:87:f2:02:e5:1c:25:14:1f: c6:3e:34:80:dd:34:1e:59:d1:c2:bf:30:db:01:eb:4f:8b:32: da:a2:11:20:58:f5:20:cc:18:88:0c:8d:12:b3:42:ca:82:fd: ee:a5:c5:95:b8:89:2c:bc:97:60:a3:63:13:1c:7e:1c:de:f7: 30:a0:4c:5f:b6:5c:f1:bf:ec:6e:78:80:9a:1f:4f:8a:2e:00: 0c:e2:8c:e0:e8:0f:1c:04:49:f9:53:68:16:39:48:0a:a7:ad: 22:98:46:f1:bd:07:3f:f5:0d:83:29:8d:9d:98:3e:70:09:3e: c8:2e:7f:68:85:f5:ba:7a:1c:aa:fe:fc:02:20:ca:03:69:2f: cd:ca:87:66:7d:10:f4:69:dc:e4:1d:b0:46:be:ff:e4:5d:8a: c6:d2:e7:48:c3:ec:8a:a2:fd:3d:b2:ae:ca:90:d3:8f:98:00: f6:76:cb:6c:b4:2a:51:58:ae:27:26:70:12:03:68:3e:cd:f4: 66:d3:72:64:f6:89:22:9b:c6:d4:09:11:be:fc:ad:c3:59:ad: c8:2f:ee:23:04:dd:34:20:52:9f:7d:65:78:cc:03:a5:bb:88: 26:9b:99:b5:73:26:c5:05:13:c6:bb:32:10:7c:66:52:6c:ae: ce:9f:b4:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXiTgbrgVys36BQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YmE5Y2RhMGEtNDhjNy00ZmY0LTk5YmYtMjg2ZTRhNTU4YWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbyDEz3IGr3i1Rp3Ar1xNqMYgDlXkVk1J2eq 9+0smE/oQcmYQC98XD9uZbgmAJOHLVfL+qkusCqhH/CfKVCwzlL2JjzuRxq5N9Hj W86/Hvv9NYF2CEYefapBrJzzIsl5yQksRXMG78/w4SzWWwY1zZeebThRAWlotvTh 8dUMHcEYe4iWQxkuURW7CjdP3QkWjUFyWVzTeAV9lEVvI/fWsgIa58c9wwE5cv0k m1XrKoQWKxZWfuGO4/KEFY0JMEm906YF+9KI5XulorWpbHmmEoDEsK/EaDEZdVFd 6ebYw0bQUaqc48bSVK623DQgXcMhLh9+OTbZ3xgcrALZV+lnAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFILoH2SoOOct+SyE+IvTF7y3NOtUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODk3M2Y1ODktM2RlOS0z NjY3LWE3M2UtNDVjOTQ3ZjJlYjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYipkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzg2BlgHGxznWOH8gLlHCUUH8Y+NIDdNB5Z0cK/MNsB60+LMtqiESBY 9SDMGIgMjRKzQsqC/e6lxZW4iSy8l2CjYxMcfhze9zCgTF+2XPG/7G54gJofT4ou AAzijODoDxwESflTaBY5SAqnrSKYRvG9Bz/1DYMpjZ2YPnAJPsguf2iF9bp6HKr+ /AIgygNpL83Kh2Z9EPRp3OQdsEa+/+RdisbS50jD7Iqi/T2yrsqQ04+YAPZ2y2y0 KlFYricmcBIDaD7N9GbTcmT2iSKbxtQJEb78rcNZrcgv7iME3TQgUp99ZXjMA6W7 iCabmbVzJsUFE8a7MhB8ZlJsrs6ftCc= -----END CERTIFICATE-----Generated at Sun Mar 1 18:51:48 2026 by rpki-client