$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a74c477-66d1-30a8-b826-7d1131264793.roa File: 9a74c477-66d1-30a8-b826-7d1131264793.roa (raw, json) Hash identifier: Y5i3W2BUCp8DYHxeYIKZZDuE9NGbwJTG9jx3rStErbk= Subject key identifier: 61:83:0F:DC:EE:88:EF:FC:9F:DA:BB:32:C5:4F:F7:B5:04:53:DD:09 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5E2792857C799C5C8D6280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a74c477-66d1-30a8-b826-7d1131264793.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 98.42.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:27:92:85:7c:79:9c:5c:8d:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=2c7453ad-d47b-417c-9c17-a2fa9e35ad97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:57:a1:f8:a0:5f:e1:60:6d:64:ef:f9:c1:74: d1:50:d9:7b:e3:e5:fe:9f:42:76:0b:24:e8:af:ec: 01:c3:05:9b:3d:92:47:dd:9e:2b:79:d4:96:57:ef: 2d:1a:21:a1:3e:47:3f:69:c0:33:f0:96:ed:27:e7: d3:c1:a8:d7:7c:0a:98:4d:d5:9d:8c:96:92:31:84: b5:47:35:c7:1c:43:cd:1d:58:1c:8f:bc:55:62:7d: 6d:b7:61:43:c3:1d:ce:ff:dd:f7:57:d9:3c:3a:11: 5c:b5:4d:2b:56:28:f0:bf:09:a2:cf:8a:34:68:12: ad:32:4d:90:e1:11:23:52:6b:fc:d3:55:33:6a:2f: bf:4f:64:9a:f4:64:b2:72:08:36:05:81:c0:93:33: 1c:4d:4f:89:2d:42:b5:6d:2a:57:df:58:43:68:54: a7:85:47:c0:fe:73:0e:90:0c:75:76:18:a4:33:0f: b5:36:c7:1e:3d:d2:91:25:c5:d3:1d:bb:de:38:e8: 2f:d5:75:35:a0:30:b9:86:bf:5a:cb:cc:24:60:79: 3b:c0:75:79:e5:05:91:51:97:18:0a:f2:19:e5:85: a5:6c:35:37:f4:0a:cb:d7:ad:e0:cc:da:d3:cb:fe: d0:fa:1e:b3:f4:18:14:26:e5:3b:bd:69:05:2d:a3: ab:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:83:0F:DC:EE:88:EF:FC:9F:DA:BB:32:C5:4F:F7:B5:04:53:DD:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a74c477-66d1-30a8-b826-7d1131264793.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.42.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:9a:11:cd:61:20:68:19:c8:2c:4c:5e:69:d3:15:6d:67:8e: e9:17:7f:65:1c:70:b7:83:85:9c:72:d8:56:34:67:c4:0a:df: 28:fe:a9:33:89:cd:0c:af:72:3f:49:61:00:54:4b:64:39:7d: bf:73:37:9c:84:aa:4b:da:3f:a8:5c:55:b7:62:ed:97:20:39: 3e:01:5e:3c:6b:06:49:97:4f:b1:10:fc:93:54:fd:16:7c:52: 25:d0:05:e5:12:e3:5d:6f:11:8e:44:93:11:6f:d6:c8:43:38: c9:7d:64:9b:0a:61:44:4d:ab:8e:9e:2e:5a:ef:17:3f:45:ea: b7:ac:58:da:e2:a9:dd:79:cd:85:a4:82:c7:ca:aa:89:7b:de: d4:38:9d:be:48:da:ac:d4:be:38:28:01:b9:d4:2c:f3:8e:42: 93:80:90:35:c8:5a:88:26:5d:28:81:b9:e5:47:13:cb:51:2b: 7b:78:48:74:8c:95:1e:d2:2e:31:24:17:53:25:a8:c6:b5:a1: b0:51:7e:02:fc:7b:87:88:2f:95:b5:75:62:20:80:ff:bd:a5: 78:f8:e4:05:ee:1d:5d:24:d2:f6:ef:54:79:c3:ba:8d:38:8d: c6:ee:0d:9a:c4:98:63:e3:31:45:29:c7:1f:5e:3f:1a:c0:9f: 0b:18:9d:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXieShXx5nFyNYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MmM3NDUzYWQtZDQ3Yi00MTdjLTljMTctYTJmYTllMzVhZDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVeh+KBf4WBtZO/5wXTRUNl74+X+n0J2CyTo r+wBwwWbPZJH3Z4redSWV+8tGiGhPkc/acAz8JbtJ+fTwajXfAqYTdWdjJaSMYS1 RzXHHEPNHVgcj7xVYn1tt2FDwx3O/933V9k8OhFctU0rVijwvwmiz4o0aBKtMk2Q 4REjUmv801Uzai+/T2Sa9GSycgg2BYHAkzMcTU+JLUK1bSpX31hDaFSnhUfA/nMO kAx1dhikMw+1NscePdKRJcXTHbveOOgv1XU1oDC5hr9ay8wkYHk7wHV55QWRUZcY CvIZ5YWlbDU39ArL163gzNrTy/7Q+h6z9BgUJuU7vWkFLaOrGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGGDD9zuiO/8n9q7MsVP97UEU90JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWE3NGM0NzctNjZkMS0z MGE4LWI4MjYtN2QxMTMxMjY0NzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYipEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK2aEc1hIGgZyCxMXmnTFW1njukXf2UccLeDhZxy2FY0Z8QK3yj+qTOJ zQyvcj9JYQBUS2Q5fb9zN5yEqkvaP6hcVbdi7ZcgOT4BXjxrBkmXT7EQ/JNU/RZ8 UiXQBeUS411vEY5EkxFv1shDOMl9ZJsKYURNq46eLlrvFz9F6resWNriqd15zYWk gsfKqol73tQ4nb5I2qzUvjgoAbnULPOOQpOAkDXIWogmXSiBueVHE8tRK3t4SHSM lR7SLjEkF1MlqMa1obBRfgL8e4eIL5W1dWIggP+9pXj45AXuHV0k0vbvVHnDuo04 jcbuDZrEmGPjMUUpxx9ePxrAnwsYnfQ= -----END CERTIFICATE-----Generated at Sun Mar 1 19:12:45 2026 by rpki-client