$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/970d804d-141c-3282-87de-d9eb776cff68.roa File: 970d804d-141c-3282-87de-d9eb776cff68.roa (raw, json) Hash identifier: pKtpO0OcZ6qPWEH0ZG7x+thsyVjE7mc9zm1vud7/iX4= Subject key identifier: FA:9C:7E:4D:34:5C:E6:13:5D:7A:03:E3:FA:BC:66:9D:B6:D1:4A:D0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE575E202B2972AAF3CFE0C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/970d804d-141c-3282-87de-d9eb776cff68.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33660 IP address blocks: 98.202.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:5e:20:2b:29:72:aa:f3:cf:e0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=c2b10f78-8fc1-48dd-97f2-8d1052eced9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:50:cc:de:15:d1:62:b3:f6:43:06:55:8d:b9: f6:36:5e:02:f8:58:a0:75:e5:5c:4e:4b:0c:28:01: c0:ee:dc:73:e2:00:0b:da:92:d9:cd:13:f9:65:53: 52:e9:36:69:80:48:5a:1b:cb:2d:94:26:ab:80:f0: 3d:cd:8b:d5:f9:f7:e4:7d:c1:16:f4:7e:ee:e8:05: a4:fc:4a:e7:79:1d:61:5b:ca:94:ca:64:24:86:60: 82:11:af:fd:8b:7b:b3:87:e4:5e:04:44:d8:90:ec: da:f2:05:4c:59:8a:f6:c1:b3:3b:86:6f:51:5b:f2: 07:2e:f8:80:99:87:d2:d9:78:df:d9:e4:0e:2b:58: ab:89:f6:3a:f1:41:7e:63:c8:b1:90:43:fc:9a:9c: 2d:1b:a0:81:29:96:b1:35:19:e1:43:76:ce:fe:7e: 29:6a:18:23:3a:b6:85:9a:e1:40:3f:29:07:80:8b: 75:d6:cc:17:f0:22:97:3f:db:37:a1:99:d3:d9:68: c2:6a:c0:c6:99:06:85:9e:b7:b0:6d:db:c5:69:9f: e0:7c:0b:8b:1c:12:e3:86:60:da:be:6f:70:7a:cc: 16:36:1e:ae:42:e8:e3:59:16:37:db:30:ce:a3:b3: 04:4d:8d:34:31:aa:ba:52:6a:84:32:2f:2c:b6:b4: 46:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:9C:7E:4D:34:5C:E6:13:5D:7A:03:E3:FA:BC:66:9D:B6:D1:4A:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/970d804d-141c-3282-87de-d9eb776cff68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.202.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:40:8e:ea:c1:3d:09:a7:34:98:40:a5:90:c0:33:3b:2b:8f: 44:3f:62:5f:41:c9:3d:99:b8:71:c9:76:a9:5b:15:b1:40:b2: 81:a1:2f:8c:63:5b:cf:5b:2d:4b:22:38:41:c4:6c:68:a5:bd: 50:a3:18:f1:bd:6e:f6:6d:69:5f:94:8c:b4:4e:93:aa:04:04: f8:70:0e:7e:8f:79:e3:3d:1b:b9:82:ea:7f:bb:f0:2d:7d:bb: c1:ec:a0:5b:a6:a4:ce:8e:a3:9d:2d:4b:c2:a2:d7:70:6a:fc: 62:16:86:02:72:8b:f1:af:9b:e0:12:14:f6:01:83:75:d3:85: d5:ba:be:9f:f8:8d:4a:c2:8c:57:14:36:4c:ce:e4:92:95:cf: 4e:4e:cc:9a:ea:d0:19:53:f3:e6:26:32:4b:35:47:0f:aa:16: 98:f4:e9:e2:4a:9b:6d:df:a0:9b:2c:f1:ec:12:72:b8:a5:92: c8:4d:ad:e6:27:3c:60:b6:04:a9:8c:d3:50:64:7a:2f:40:c7: a1:f5:90:af:e9:d4:7b:ed:f5:21:d2:5f:3b:c4:6f:30:ab:38: f2:6c:03:d6:c9:49:94:d4:ce:ce:1d:30:5d:e2:95:04:55:cd: 72:c7:96:83:23:8a:0c:99:0e:48:3c:32:fc:e9:aa:3f:9f:71: b4:65:e9:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuV14gKylyqvPP4MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YzJiMTBmNzgtOGZjMS00OGRkLTk3ZjItOGQxMDUyZWNlZDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlDM3hXRYrP2QwZVjbn2Nl4C+FigdeVcTksM KAHA7txz4gAL2pLZzRP5ZVNS6TZpgEhaG8stlCargPA9zYvV+ffkfcEW9H7u6AWk /ErneR1hW8qUymQkhmCCEa/9i3uzh+ReBETYkOza8gVMWYr2wbM7hm9RW/IHLviA mYfS2Xjf2eQOK1irifY68UF+Y8ixkEP8mpwtG6CBKZaxNRnhQ3bO/n4pahgjOraF muFAPykHgIt11swX8CKXP9s3oZnT2WjCasDGmQaFnrewbdvFaZ/gfAuLHBLjhmDa vm9weswWNh6uQujjWRY32zDOo7METY00Maq6UmqEMi8strRGWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqcfk00XOYTXXoD4/q8Zp220UrQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTcwZDgwNGQtMTQxYy0z MjgyLTg3ZGUtZDllYjc3NmNmZjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYsrkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVAjurBPQmnNJhApZDAMzsrj0Q/Yl9ByT2ZuHHJdqlbFbFAsoGhL4xj W89bLUsiOEHEbGilvVCjGPG9bvZtaV+UjLROk6oEBPhwDn6PeeM9G7mC6n+78C19 u8HsoFumpM6Oo50tS8Ki13Bq/GIWhgJyi/Gvm+ASFPYBg3XThdW6vp/4jUrCjFcU NkzO5JKVz05OzJrq0BlT8+YmMks1Rw+qFpj06eJKm23foJss8ewScrilkshNreYn PGC2BKmM01Bkei9Ax6H1kK/p1Hvt9SHSXzvEbzCrOPJsA9bJSZTUzs4dMF3ilQRV zXLHloMjigyZDkg8Mvzpqj+fcbRl6XI= -----END CERTIFICATE-----Generated at Sun Mar 1 18:56:12 2026 by rpki-client