$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d0e97e6-9eae-32db-a2a2-e6200a762ae0.roa File: 8d0e97e6-9eae-32db-a2a2-e6200a762ae0.roa (raw, json) Hash identifier: UWm2Kp+o8hTpG4T3hb86zKU1FnskvZoyRQfjz7+1E0s= Subject key identifier: 0C:F2:21:A8:13:75:A3:23:DC:03:02:3E:9E:BA:CE:EC:73:48:9E:91 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE58966CABEA0B61EA9AFA10 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d0e97e6-9eae-32db-a2a2-e6200a762ae0.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 98.220.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:96:6c:ab:ea:0b:61:ea:9a:fa:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=26b05af4-f304-4a0e-8138-c0f24be47c85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:24:a0:51:a1:da:d6:b3:57:ea:b6:fa:b5:c5: 4d:cc:ec:f1:b1:7c:e6:dc:82:4b:61:a7:d8:d5:d0: b6:27:f9:ca:45:67:8d:a6:b8:7d:06:15:7a:04:dd: 53:e5:78:ee:40:aa:f0:cc:01:67:98:67:c6:5d:24: ca:97:75:dc:b3:b5:d2:27:0e:87:a3:6a:5a:4f:be: 32:17:e8:05:d9:14:4c:59:bb:a8:2f:1c:cd:a4:17: 2f:70:20:a2:b6:9b:a2:d3:69:1c:f8:2b:8d:ca:f7: a7:53:08:5c:8c:14:da:80:e0:a7:3e:48:39:af:e2: 97:d6:bd:c9:ea:36:95:db:0e:47:e7:17:b6:ec:7a: 57:47:0b:e0:21:30:96:7c:71:00:7b:d6:e4:e2:16: 65:b6:4c:5d:49:76:a2:81:b9:df:37:4d:f1:b7:a7: fd:ea:cc:86:76:8c:b4:4c:5c:da:f3:8b:bb:1d:4a: 03:97:29:a0:91:b7:69:96:54:6e:89:ed:37:45:05: 45:f5:72:e2:ff:0f:ba:d5:22:22:9f:7b:0e:8b:f6: 6d:de:95:2c:09:fa:4f:0a:cd:b8:c9:df:fa:70:0d: df:06:6b:66:95:fa:b3:d8:33:8e:62:4a:80:8e:ed: 65:3b:06:f1:90:d3:dd:bf:a4:62:eb:ba:3a:29:d3: 16:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:F2:21:A8:13:75:A3:23:DC:03:02:3E:9E:BA:CE:EC:73:48:9E:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d0e97e6-9eae-32db-a2a2-e6200a762ae0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.220.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:30:a3:6b:ee:9a:5f:07:f4:3f:d3:a0:36:26:0d:96:a2:71: 0d:ca:1e:c6:95:e7:b6:5a:1b:97:99:5c:6d:ec:43:6b:c3:e4: e7:45:34:85:94:9d:f8:96:89:af:b8:d2:6a:93:28:2c:b6:6d: d7:5f:25:90:19:23:b0:47:a4:93:dc:79:3d:7f:0c:31:b6:6d: 81:39:c1:8e:85:86:c8:de:4e:99:9a:43:9d:8b:20:20:14:e8: d8:c2:a6:e4:cd:86:9c:8a:01:0d:0c:0d:b8:44:4d:02:f5:b0: 70:e1:82:13:6c:35:3c:e6:f5:45:40:c9:e1:3d:75:0b:af:89: 77:5f:49:7c:53:00:00:ef:08:ca:5a:81:7b:10:89:b2:4f:ea: 9d:2d:d1:92:55:2e:5f:76:46:a8:35:49:e6:67:5e:dc:23:57: 12:f8:4a:8f:2c:1c:69:eb:ad:b5:40:e8:83:10:c5:43:1c:cb: 78:ac:dd:3a:77:73:7e:70:61:e5:d4:d0:d6:79:43:67:98:68: 34:89:38:88:9d:95:20:19:4f:fe:95:91:d6:ca:ed:80:fb:4e: 36:31:61:19:bd:a3:a6:21:bc:dc:6f:be:03:f8:15:54:23:ba: 6a:1e:d7:97:3d:6c:7f:c5:7e:94:89:00:68:09:55:7d:81:72: 5d:ba:87:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWJZsq+oLYeqa+hAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MjZiMDVhZjQtZjMwNC00YTBlLTgxMzgtYzBmMjRiZTQ3Yzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CSgUaHa1rNX6rb6tcVNzOzxsXzm3IJLYafY 1dC2J/nKRWeNprh9BhV6BN1T5XjuQKrwzAFnmGfGXSTKl3Xcs7XSJw6Ho2paT74y F+gF2RRMWbuoLxzNpBcvcCCitpui02kc+CuNyvenUwhcjBTagOCnPkg5r+KX1r3J 6jaV2w5H5xe27HpXRwvgITCWfHEAe9bk4hZltkxdSXaigbnfN03xt6f96syGdoy0 TFza84u7HUoDlymgkbdpllRuie03RQVF9XLi/w+61SIin3sOi/Zt3pUsCfpPCs24 yd/6cA3fBmtmlfqz2DOOYkqAju1lOwbxkNPdv6Ri67o6KdMWWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzyIagTdaMj3AMCPp66zuxzSJ6RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGQwZTk3ZTYtOWVhZS0z MmRiLWEyYTItZTYyMDBhNzYyYWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYtyqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMwo2vuml8H9D/ToDYmDZaicQ3KHsaV57ZaG5eZXG3sQ2vD5OdFNIWU nfiWia+40mqTKCy2bddfJZAZI7BHpJPceT1/DDG2bYE5wY6FhsjeTpmaQ52LICAU 6NjCpuTNhpyKAQ0MDbhETQL1sHDhghNsNTzm9UVAyeE9dQuviXdfSXxTAADvCMpa gXsQibJP6p0t0ZJVLl92Rqg1SeZnXtwjVxL4So8sHGnrrbVA6IMQxUMcy3is3Tp3 c35wYeXU0NZ5Q2eYaDSJOIidlSAZT/6VkdbK7YD7TjYxYRm9o6YhvNxvvgP4FVQj umoe15c9bH/FfpSJAGgJVX2Bcl26h7A= -----END CERTIFICATE-----Generated at Mon Mar 2 09:04:17 2026 by rpki-client