$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89a010ce-2495-3a26-9229-1b71d4d713a5.roa File: 89a010ce-2495-3a26-9229-1b71d4d713a5.roa (raw, json) Hash identifier: lPIT6oqbygG9FD/KOkigqMc512ohDTmTn2ExFjSWsYI= Subject key identifier: 33:1E:AA:75:BA:1A:FD:F8:A1:1E:77:AF:38:F8:DB:50:F2:8F:41:AA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE58965F28B8EC845D3E3580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89a010ce-2495-3a26-9229-1b71d4d713a5.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 98.220.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:96:5f:28:b8:ec:84:5d:3e:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=fa84b81c-6b50-49c7-9272-37a0e07ebf24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4a:d6:7d:5c:87:6f:7a:ca:f3:94:f4:80:8d: 06:bb:77:15:67:36:8c:f6:97:c6:2c:69:8f:88:15: 75:e2:70:3f:59:77:83:b3:d2:5b:97:bf:af:d1:f3: c7:58:fe:a1:2d:08:e6:18:93:5d:59:4c:ec:60:6e: 7c:dd:0c:c0:c0:ba:2e:b5:4a:1f:1d:3e:33:37:41: 15:88:5c:9d:3f:48:fc:46:f5:4b:88:2f:c3:8c:45: db:4f:fc:a5:9f:58:52:41:6b:1d:ae:e1:47:a7:a3: 74:78:ab:5f:a4:fe:c2:10:d0:76:e4:1c:ce:c7:23: c9:df:24:71:cb:c5:00:2d:f0:32:88:8e:e5:48:df: 1c:8c:b8:27:3d:cc:21:f3:3d:ce:70:29:cc:5f:0d: 7f:af:3f:cb:73:72:e3:a1:3a:bf:f5:ab:49:95:a1: fa:0e:99:89:8d:c2:39:bc:84:f1:0e:9a:49:81:3e: 85:41:99:eb:fa:5b:67:77:cf:70:82:ef:62:aa:9c: 1b:4b:77:13:0f:95:09:51:af:fc:24:f7:7e:33:92: d3:5f:d1:9f:4d:b9:e4:d9:52:f2:81:2e:29:98:71: c2:2a:4c:2d:5d:ae:0c:d5:08:f2:87:63:77:59:0d: 79:33:0e:d5:d3:b2:a2:7a:7e:90:5f:db:68:54:ff: 89:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:1E:AA:75:BA:1A:FD:F8:A1:1E:77:AF:38:F8:DB:50:F2:8F:41:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89a010ce-2495-3a26-9229-1b71d4d713a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.220.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:69:8a:c0:a4:91:99:a8:71:03:de:77:d3:d8:c2:72:e2:a0: 6c:d8:3c:de:46:66:36:88:dd:11:77:78:fc:39:f3:e0:3a:7f: cf:3c:5e:f3:09:86:f1:ec:72:84:3c:7a:82:e0:e3:89:6b:09: f1:ec:dd:1d:91:1f:60:a9:6f:53:8a:53:ba:2a:85:ad:6e:93: 61:15:51:cc:9d:61:b9:33:4e:2b:dd:c5:2f:44:41:7f:eb:13: c8:be:4c:49:4e:16:90:dd:ac:5b:07:9f:76:9a:e3:4e:80:b8: f6:b9:ee:aa:36:1f:ef:7f:cd:9f:fc:db:99:fe:fa:2e:92:1d: 55:da:4c:95:a9:00:c1:62:df:ef:35:55:c2:a3:ae:ca:66:b6: 28:98:d4:52:b9:c4:46:69:12:1a:ba:9a:9c:2c:75:45:a7:6e: 4e:b1:42:cb:6f:4a:1d:b4:3a:7e:42:15:f9:c5:a0:9d:65:68: a7:c4:0f:36:e4:c5:78:35:54:04:5e:9f:bb:7b:33:f1:c7:a8: 00:87:ce:fa:55:71:7d:a9:77:34:1d:ab:75:9a:b0:5f:36:41: b4:e4:8b:2f:21:02:aa:94:4a:11:b5:52:77:be:16:f5:67:85: 7a:1c:59:e6:f1:7f:43:4f:b1:45:dd:fa:10:77:40:8d:a1:ac: 41:69:a2:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWJZfKLjshF0+NYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZmE4NGI4MWMtNmI1MC00OWM3LTkyNzItMzdhMGUwN2ViZjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1krWfVyHb3rK85T0gI0Gu3cVZzaM9pfGLGmP iBV14nA/WXeDs9Jbl7+v0fPHWP6hLQjmGJNdWUzsYG583QzAwLoutUofHT4zN0EV iFydP0j8RvVLiC/DjEXbT/yln1hSQWsdruFHp6N0eKtfpP7CENB25BzOxyPJ3yRx y8UALfAyiI7lSN8cjLgnPcwh8z3OcCnMXw1/rz/Lc3LjoTq/9atJlaH6DpmJjcI5 vITxDppJgT6FQZnr+ltnd89wgu9iqpwbS3cTD5UJUa/8JPd+M5LTX9GfTbnk2VLy gS4pmHHCKkwtXa4M1Qjyh2N3WQ15Mw7V07Kien6QX9toVP+JCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMeqnW6Gv34oR53rzj421Dyj0GqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODlhMDEwY2UtMjQ5NS0z YTI2LTkyMjktMWI3MWQ0ZDcxM2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYtwQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZpisCkkZmocQPed9PYwnLioGzYPN5GZjaI3RF3ePw58+A6f888XvMJ hvHscoQ8eoLg44lrCfHs3R2RH2Cpb1OKU7oqha1uk2EVUcydYbkzTivdxS9EQX/r E8i+TElOFpDdrFsHn3aa406AuPa57qo2H+9/zZ/825n++i6SHVXaTJWpAMFi3+81 VcKjrspmtiiY1FK5xEZpEhq6mpwsdUWnbk6xQstvSh20On5CFfnFoJ1laKfEDzbk xXg1VARen7t7M/HHqACHzvpVcX2pdzQdq3WasF82QbTkiy8hAqqUShG1Une+FvVn hXocWebxf0NPsUXd+hB3QI2hrEFpokE= -----END CERTIFICATE-----Generated at Mon Mar 2 16:11:59 2026 by rpki-client