$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9818985f-9c2c-33ab-b78b-991734de29e1.roa File: 9818985f-9c2c-33ab-b78b-991734de29e1.roa (raw, json) Hash identifier: vUzTrrZjnJaZiXZHecF35jHIxLM3IDN+4DziIl7zQRU= Subject key identifier: 2F:E3:73:61:BD:7D:F4:98:B8:22:70:3E:96:82:84:40:72:11:A0:C1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE59102DE362B3467CD83F80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9818985f-9c2c-33ab-b78b-991734de29e1.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 98.248.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:59:10:2d:e3:62:b3:46:7c:d8:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=9ff11f88-a02c-4178-948f-09e1426476ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:10:a5:b0:7e:09:cd:37:55:d7:2f:be:45:c4: 4b:ca:80:39:7f:10:e7:64:df:b8:1a:08:f2:8d:0b: 69:1c:b6:93:99:01:da:f2:0a:7d:a1:14:92:c2:0f: c8:31:31:08:21:fd:30:98:fb:bf:6f:d2:40:90:90: 22:4b:c3:a8:b1:e2:e5:9c:bb:61:19:6c:bd:f1:c4: 48:15:4c:f7:39:87:c5:d5:dd:9f:de:23:bc:c5:e1: 8e:d6:ad:ae:0e:5c:8c:50:f9:63:8b:ae:56:22:72: 41:4e:bd:b1:de:91:f1:38:3b:34:12:98:16:9d:34: 49:6a:4d:76:66:22:cc:2b:5b:95:3d:83:72:a0:22: c9:61:a2:ea:2f:07:c0:93:20:a0:68:9b:45:c5:41: c1:9d:e5:8c:1a:cb:f5:6e:8d:f2:45:22:b9:6b:47: b6:03:8e:5d:fd:c8:c3:58:ea:2d:00:01:5d:3a:0a: 00:2f:c2:ae:3d:7e:be:04:51:8e:23:72:2d:87:a0: 98:d2:55:ac:f4:72:8d:99:ab:32:12:00:83:5b:ed: a2:30:86:46:27:af:f9:6b:67:42:f1:7b:9f:99:3c: 45:37:22:54:7f:cf:d1:b0:78:f7:c0:2a:32:be:06: f1:b5:c1:5c:f2:d8:9b:79:ab:6e:3b:e5:b2:5a:2a: c0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:E3:73:61:BD:7D:F4:98:B8:22:70:3E:96:82:84:40:72:11:A0:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9818985f-9c2c-33ab-b78b-991734de29e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.248.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:91:c1:59:a1:1b:2b:bb:b9:ae:80:01:59:d5:b5:4b:a9:3a: 2c:2d:65:d2:5b:40:db:85:db:83:1a:41:49:bb:3f:e1:6a:f3: 82:2d:f4:83:f4:6b:00:59:97:0e:63:af:2c:72:21:7a:97:35: 0c:05:5e:49:fb:b8:0d:e9:1b:f3:db:e9:9f:d1:40:5a:5c:de: cf:6e:70:4b:f7:ba:4e:34:c8:1b:78:9a:95:ad:5e:de:14:e1: 17:14:c0:66:eb:d1:ac:6e:08:d3:9c:bb:ed:a5:5e:19:80:d6: e0:0b:1d:ce:bc:1f:b9:ec:d0:a5:61:20:5a:43:5a:f1:cd:50: 15:ad:1f:4b:22:7f:4f:da:f0:1f:27:35:6d:fd:d9:bd:46:15: d2:06:e9:4f:5c:24:6d:c0:f4:61:16:d4:68:0b:59:40:fb:77: b2:37:46:bf:06:1a:c9:ae:6c:b3:39:12:19:bd:c3:ed:8a:e0: 41:fc:f8:7e:d4:91:7e:df:64:68:b3:0d:42:33:4e:55:0e:2a: e6:b5:8e:77:9e:33:e3:12:92:a9:57:87:f4:01:9f:62:9e:3f: 75:5c:b4:74:b9:74:f0:02:c2:ad:da:c5:5b:3f:09:0e:07:c4: 94:02:bf:91:e1:b0:c0:c9:af:ad:43:94:6f:a3:48:3b:66:40: f4:19:a6:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWRAt42KzRnzYP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk OWZmMTFmODgtYTAyYy00MTc4LTk0OGYtMDllMTQyNjQ3NmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBClsH4JzTdV1y++RcRLyoA5fxDnZN+4Ggjy jQtpHLaTmQHa8gp9oRSSwg/IMTEIIf0wmPu/b9JAkJAiS8OoseLlnLthGWy98cRI FUz3OYfF1d2f3iO8xeGO1q2uDlyMUPlji65WInJBTr2x3pHxODs0EpgWnTRJak12 ZiLMK1uVPYNyoCLJYaLqLwfAkyCgaJtFxUHBneWMGsv1bo3yRSK5a0e2A45d/cjD WOotAAFdOgoAL8KuPX6+BFGOI3Ith6CY0lWs9HKNmasyEgCDW+2iMIZGJ6/5a2dC 8XufmTxFNyJUf8/RsHj3wCoyvgbxtcFc8tibeatuO+WyWirAeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/jc2G9ffSYuCJwPpaChEByEaDBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTgxODk4NWYtOWMyYy0z M2FiLWI3OGItOTkxNzM0ZGUyOWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYvhYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+RwVmhGyu7ua6AAVnVtUupOiwtZdJbQNuF24MaQUm7P+Fq84It9IP0 awBZlw5jryxyIXqXNQwFXkn7uA3pG/Pb6Z/RQFpc3s9ucEv3uk40yBt4mpWtXt4U 4RcUwGbr0axuCNOcu+2lXhmA1uALHc68H7ns0KVhIFpDWvHNUBWtH0sif0/a8B8n NW392b1GFdIG6U9cJG3A9GEW1GgLWUD7d7I3Rr8GGsmubLM5Ehm9w+2K4EH8+H7U kX7fZGizDUIzTlUOKua1jneeM+MSkqlXh/QBn2KeP3VctHS5dPACwq3axVs/CQ4H xJQCv5HhsMDJr61DlG+jSDtmQPQZpno= -----END CERTIFICATE-----Generated at Sun Mar 1 18:57:23 2026 by rpki-client