$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/94b68b07-06bf-32f8-817e-2cfcd45968be.roa File: 94b68b07-06bf-32f8-817e-2cfcd45968be.roa (raw, json) Hash identifier: xSp/pRTbRfz+AtrAWOQlYi+pz0iIb2CiKDE51MjyrUE= Subject key identifier: F8:D4:AD:E7:76:51:61:9F:B0:3B:01:BF:1D:C0:E8:B7:4B:50:52:C6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE590F6C56FB06F4E5731E00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/94b68b07-06bf-32f8-817e-2cfcd45968be.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 98.248.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:59:0f:6c:56:fb:06:f4:e5:73:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=300c26be-6b66-4f67-8b84-ea4459be1bf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4b:40:e1:e0:31:56:c4:0d:69:ed:cf:cf:d1: 8c:0f:64:86:a6:6e:4c:9d:6a:46:c8:37:f7:a4:90: b2:a6:1a:ac:c4:a7:27:a1:3a:94:18:c3:80:53:53: 79:bf:68:d1:c2:eb:fd:e9:87:7b:23:c2:f8:ef:66: b3:59:35:44:f1:ef:6d:74:6c:08:ed:9b:56:f2:4c: 27:a1:4e:a7:bb:fc:60:fb:89:53:70:dd:54:ab:0d: ac:fd:37:06:e8:5c:9b:b8:3f:fd:cd:4b:b2:01:c6: a5:05:54:a0:ee:17:b0:4e:06:5f:41:55:48:95:51: 8b:9d:b1:73:44:ef:e5:2f:a6:25:b2:27:4f:c0:d1: 36:c4:3a:0c:99:e5:ba:f2:73:f6:c9:3c:8d:ef:0e: 87:ff:4f:19:59:9e:35:2a:cc:20:7b:61:31:27:99: 56:f0:d4:bc:d0:86:c2:7c:69:ae:d1:6f:ce:4a:ba: 2f:b0:a0:8a:66:01:23:b6:72:58:3f:3e:32:b1:aa: c9:32:e6:fe:6c:93:16:65:aa:57:ba:b9:9e:46:0f: 84:06:3b:5a:2c:f6:c5:d6:7d:34:ad:89:06:a5:03: 82:76:ab:7e:a9:03:d2:28:ab:c6:7d:5e:54:cb:47: 2b:34:ff:47:5a:0f:03:02:d8:d4:16:1c:49:4f:ec: 20:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D4:AD:E7:76:51:61:9F:B0:3B:01:BF:1D:C0:E8:B7:4B:50:52:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/94b68b07-06bf-32f8-817e-2cfcd45968be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.248.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d7:e3:be:5f:14:1b:46:74:20:7a:67:79:85:7e:f4:2b:32:ab: 3b:ac:c3:bb:7b:09:a8:a7:79:db:00:6d:7f:80:f6:d6:71:aa: d6:b6:d2:db:ea:4e:dd:94:02:f5:9f:4e:a9:1c:7d:b2:77:6f: 97:74:ad:fd:fc:ab:0a:cd:93:5c:4c:67:cd:60:b1:90:b2:f4: 40:54:53:71:1c:5f:8d:2d:b1:d8:35:f3:fc:b8:60:ee:03:2f: 94:0c:3b:de:c0:aa:19:d2:c8:3a:fb:a0:eb:44:4b:74:2c:fd: bc:4f:68:8d:cd:a6:c3:c3:7e:da:51:ec:76:06:9e:e0:20:53: 27:1b:22:64:54:cc:23:b5:5b:75:9f:4f:14:c8:03:31:ac:dd: 4b:db:40:9c:97:26:aa:f5:d3:d3:3e:a2:57:9c:99:ec:6b:39: 87:f7:0e:b4:b5:0d:93:1d:de:ee:88:7d:3e:c9:6b:05:26:6c: 36:d9:bc:0a:f6:1f:8b:21:d2:ef:cb:f5:26:0e:ca:59:94:4b: 42:78:94:72:e0:15:34:ef:86:28:8a:15:3b:fd:d1:48:82:96: a8:28:a8:d7:7a:22:78:27:98:82:0f:35:ac:68:00:23:b0:72: 8e:51:5e:b5:c8:5f:94:ea:f2:90:9e:7f:dc:80:ee:8e:fb:a3: 18:33:a0:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWQ9sVvsG9OVzHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MzAwYzI2YmUtNmI2Ni00ZjY3LThiODQtZWE0NDU5YmUxYmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEtA4eAxVsQNae3Pz9GMD2SGpm5MnWpGyDf3 pJCyphqsxKcnoTqUGMOAU1N5v2jRwuv96Yd7I8L472azWTVE8e9tdGwI7ZtW8kwn oU6nu/xg+4lTcN1Uqw2s/TcG6FybuD/9zUuyAcalBVSg7hewTgZfQVVIlVGLnbFz RO/lL6YlsidPwNE2xDoMmeW68nP2yTyN7w6H/08ZWZ41Kswge2ExJ5lW8NS80IbC fGmu0W/OSrovsKCKZgEjtnJYPz4ysarJMub+bJMWZapXurmeRg+EBjtaLPbF1n00 rYkGpQOCdqt+qQPSKKvGfV5Uy0crNP9HWg8DAtjUFhxJT+wg2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPjUred2UWGfsDsBvx3A6LdLUFLGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTRiNjhiMDctMDZiZi0z MmY4LTgxN2UtMmNmY2Q0NTk2OGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYvjwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANfjvl8UG0Z0IHpneYV+9Csyqzusw7t7CainedsAbX+A9tZxqta20tvq Tt2UAvWfTqkcfbJ3b5d0rf38qwrNk1xMZ81gsZCy9EBUU3EcX40tsdg18/y4YO4D L5QMO97AqhnSyDr7oOtES3Qs/bxPaI3NpsPDftpR7HYGnuAgUycbImRUzCO1W3Wf TxTIAzGs3UvbQJyXJqr109M+olecmexrOYf3DrS1DZMd3u6IfT7JawUmbDbZvAr2 H4sh0u/L9SYOylmUS0J4lHLgFTTvhiiKFTv90UiClqgoqNd6IngnmIIPNaxoACOw co5RXrXIX5Tq8pCef9yA7o77oxgzoCM= -----END CERTIFICATE-----Generated at Sun Mar 1 22:47:34 2026 by rpki-client