$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c42da20-6726-3d1a-85d1-a6d776837620.roa File: 8c42da20-6726-3d1a-85d1-a6d776837620.roa (raw, json) Hash identifier: k9PDaapqiaWVYZY3DBRxzyDIdwDYOPAGDwsw9cUYqI0= Subject key identifier: F2:B6:88:D1:A7:9A:3A:ED:5A:D6:8F:FC:4F:64:AC:32:89:F5:8E:4D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5E131A0519A6FB20EB9AC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c42da20-6726-3d1a-85d1-a6d776837620.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 98.234.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:13:1a:05:19:a6:fb:20:eb:9a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=39c224f5-dfe4-4d2e-beef-99cb0225dcb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:dc:43:8f:87:af:d9:5c:95:62:cb:b3:ef:d6: 6f:e2:7a:ee:53:09:1e:4d:6f:b4:2e:4c:a1:c1:ed: 78:68:18:4e:ae:e5:64:6d:00:57:27:e1:01:e1:cb: 12:0a:3a:46:7a:e3:39:c2:00:b2:d5:dd:bf:67:13: d3:95:a9:86:db:38:2d:26:85:4b:18:db:26:ef:6d: 95:5f:c1:d0:e5:f2:1f:20:c7:10:fa:7e:9b:42:ff: 18:16:97:3e:8d:ca:12:29:01:10:0e:96:a2:74:ed: aa:ac:ea:b4:39:ad:45:d0:a2:e3:ef:91:55:80:a3: 2c:1e:37:f1:63:ba:53:80:97:8a:48:39:ce:30:7a: 78:78:a4:a7:bb:5f:66:cc:03:f5:2b:f2:d5:70:92: f7:b8:ef:75:d6:18:22:fe:eb:a3:52:01:08:8e:32: 48:c7:d7:b6:41:f7:5d:48:10:ef:83:55:88:92:e7: f6:60:68:eb:da:8a:52:5b:ca:40:e7:e6:fd:5a:c2: f8:47:49:de:f0:3e:81:d2:a9:6e:ff:ba:48:e4:bb: 09:4e:17:72:6e:b7:d7:bd:94:69:4c:17:08:24:fa: b3:e1:e5:ae:d7:b1:ac:8f:38:ab:bd:77:18:d6:79: 33:a4:d7:5b:33:93:dc:c4:98:5c:71:5a:b4:f3:74: 60:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B6:88:D1:A7:9A:3A:ED:5A:D6:8F:FC:4F:64:AC:32:89:F5:8E:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c42da20-6726-3d1a-85d1-a6d776837620.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.234.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:01:54:d0:cc:d4:4a:37:57:41:7e:e0:bc:79:99:2f:af:f4: 89:52:70:82:0e:db:fa:a5:37:35:f6:8a:ce:bc:81:ae:36:3d: 7c:40:d0:38:34:0b:52:a7:c4:6f:3b:01:76:24:40:08:69:18: b1:01:b4:96:5b:3b:3f:44:8e:aa:cd:b7:09:33:fa:f0:06:4c: 26:8d:98:27:24:75:a2:19:f5:ae:3f:3d:80:a2:c3:84:67:18: 7c:5f:f8:16:b8:06:ee:2f:47:0e:37:19:e9:55:c7:13:81:16: 1b:d8:87:5b:89:51:ab:51:24:15:f1:a2:c5:69:50:e7:59:ad: 76:2c:ea:4e:ca:a4:aa:e7:34:bc:f2:79:a3:d0:36:79:89:af: d3:78:24:61:84:bc:0a:9c:a6:d1:8e:be:ac:e4:ff:56:1a:3b: 24:06:6c:a4:c0:80:7c:15:bf:15:c2:5f:33:85:3d:63:2e:37: de:80:58:d3:57:86:96:d0:96:2c:4d:f2:1c:ac:c3:72:49:77: 37:12:b3:09:19:1d:fd:78:53:79:9e:7b:41:47:92:aa:81:bb: b6:67:d8:c0:fd:e3:15:5a:bc:c8:91:94:4f:30:a9:b5:cf:15: 78:bd:8a:64:76:da:a0:59:47:1a:15:f2:62:2c:25:1d:93:a2: 81:43:0e:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXhMaBRmm+yDrmsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MzljMjI0ZjUtZGZlNC00ZDJlLWJlZWYtOTljYjAyMjVkY2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dxDj4ev2VyVYsuz79Zv4nruUwkeTW+0Lkyh we14aBhOruVkbQBXJ+EB4csSCjpGeuM5wgCy1d2/ZxPTlamG2zgtJoVLGNsm722V X8HQ5fIfIMcQ+n6bQv8YFpc+jcoSKQEQDpaidO2qrOq0Oa1F0KLj75FVgKMsHjfx Y7pTgJeKSDnOMHp4eKSnu19mzAP1K/LVcJL3uO911hgi/uujUgEIjjJIx9e2Qfdd SBDvg1WIkuf2YGjr2opSW8pA5+b9WsL4R0ne8D6B0qlu/7pI5LsJThdybrfXvZRp TBcIJPqz4eWu17GsjzirvXcY1nkzpNdbM5PcxJhccVq083RgewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPK2iNGnmjrtWtaP/E9krDKJ9Y5NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGM0MmRhMjAtNjcyNi0z ZDFhLTg1ZDEtYTZkNzc2ODM3NjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYurwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwBVNDM1Eo3V0F+4Lx5mS+v9IlScIIO2/qlNzX2is68ga42PXxA0Dg0 C1KnxG87AXYkQAhpGLEBtJZbOz9EjqrNtwkz+vAGTCaNmCckdaIZ9a4/PYCiw4Rn GHxf+Ba4Bu4vRw43GelVxxOBFhvYh1uJUatRJBXxosVpUOdZrXYs6k7KpKrnNLzy eaPQNnmJr9N4JGGEvAqcptGOvqzk/1YaOyQGbKTAgHwVvxXCXzOFPWMuN96AWNNX hpbQlixN8hysw3JJdzcSswkZHf14U3mee0FHkqqBu7Zn2MD94xVavMiRlE8wqbXP FXi9imR22qBZRxoV8mIsJR2TooFDDnw= -----END CERTIFICATE-----Generated at Mon Mar 2 01:17:39 2026 by rpki-client