$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a24695e0-2098-3001-97ae-1f88642b07d4.roa File: a24695e0-2098-3001-97ae-1f88642b07d4.roa (raw, json) Hash identifier: 9gFRw1uib3FE3PBM0323hIaVW8Hm0UMHr8IwdxedRD8= Subject key identifier: CC:38:78:F6:39:E7:63:80:E9:9F:0E:96:8A:28:F1:33:AC:C5:14:CC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE575BA222156C90FD030500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a24695e0-2098-3001-97ae-1f88642b07d4.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33660 IP address blocks: 98.33.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:5b:a2:22:15:6c:90:fd:03:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=d60796b2-2921-4f5c-bf27-eb2909fd9554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b1:ac:95:1d:94:08:9a:d8:68:0d:e6:e2:3a: 95:7f:5d:9f:c4:99:2e:db:fb:e6:78:97:6e:85:be: 8d:63:55:d4:f5:65:18:3b:bd:81:f9:2d:a2:58:4d: 68:f9:55:ed:de:87:ab:4e:59:f3:3a:e8:fa:83:3c: 1e:4b:55:b0:34:e7:dc:b3:bd:6e:57:97:3f:05:9f: 95:16:2a:78:98:57:7c:c4:e3:84:a8:81:a8:5f:31: 2a:98:1e:aa:95:7a:3b:66:c9:98:7b:fd:89:b8:72: 13:50:c4:12:4e:31:a5:b3:ae:33:01:05:3f:1f:b8: eb:29:e6:29:fe:69:b9:f8:8f:bc:52:0d:d2:73:af: d4:c5:e7:a5:52:23:c1:f6:08:a6:50:a6:92:a0:4d: cd:f1:23:7c:e7:42:14:f3:4e:27:44:3c:65:0b:88: df:0a:75:38:fa:20:17:2b:7c:92:c6:0a:4f:03:14: 54:50:7c:ee:d4:4c:9e:15:16:17:7b:65:dc:08:c6: 83:42:2a:53:1e:b4:5f:7b:59:cc:f7:fd:de:0d:b5: fb:be:9e:5c:1e:cc:07:81:42:88:dc:09:9f:3f:9e: c9:e8:cc:b7:8b:8c:20:bc:06:ad:fb:a9:59:ec:41: 18:c5:87:36:18:c1:ff:be:a9:e7:47:80:b9:a8:4f: 26:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:38:78:F6:39:E7:63:80:E9:9F:0E:96:8A:28:F1:33:AC:C5:14:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a24695e0-2098-3001-97ae-1f88642b07d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.33.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:85:8b:3b:43:9b:c5:05:86:49:4b:c6:f9:5e:11:97:6c:0a: 3f:3d:ee:b7:97:21:30:5a:58:99:75:6b:51:69:1e:c0:5b:26: bc:03:4d:28:77:93:b4:3c:81:0e:63:17:93:a9:55:c8:2a:c9: c7:2c:4a:77:c9:22:e9:95:13:ae:bc:7f:11:84:da:91:03:1f: bf:b1:40:ab:4c:86:1a:f5:2e:7f:21:81:04:34:c9:cb:fc:2b: c4:67:e5:ff:d5:4b:2d:39:eb:9c:df:36:62:09:2b:31:d9:e1: f7:40:9c:d6:21:1d:b3:65:36:b7:bc:d9:25:51:a4:64:c4:d1: ca:bc:30:60:e3:6f:29:e0:b4:ce:bd:bf:2f:f6:fd:6c:78:d1: 68:7c:4f:bb:89:f0:22:1f:09:1a:53:66:77:6a:fe:a4:42:76: 96:d2:f8:c2:53:a5:75:93:bf:a9:b9:d0:00:07:0a:da:3e:91: 7f:b3:c7:82:2c:22:20:f7:7c:a9:bf:87:25:02:e9:0a:fa:8b: 2c:2c:1d:6b:3a:f3:97:8d:7d:87:dd:8f:07:ef:bf:14:62:e7: 40:78:eb:49:47:d0:2d:53:6f:ea:ac:1e:7f:cf:0a:fd:4d:b9: 6a:54:fd:39:c7:05:24:16:91:cd:c8:af:9a:18:7a:43:02:9a: 93:d2:70:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuV1uiIhVskP0DBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZDYwNzk2YjItMjkyMS00ZjVjLWJmMjctZWIyOTA5ZmQ5NTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbGslR2UCJrYaA3m4jqVf12fxJku2/vmeJdu hb6NY1XU9WUYO72B+S2iWE1o+VXt3oerTlnzOuj6gzweS1WwNOfcs71uV5c/BZ+V Fip4mFd8xOOEqIGoXzEqmB6qlXo7ZsmYe/2JuHITUMQSTjGls64zAQU/H7jrKeYp /mm5+I+8Ug3Sc6/UxeelUiPB9gimUKaSoE3N8SN850IU804nRDxlC4jfCnU4+iAX K3ySxgpPAxRUUHzu1EyeFRYXe2XcCMaDQipTHrRfe1nM9/3eDbX7vp5cHswHgUKI 3AmfP57J6My3i4wgvAat+6lZ7EEYxYc2GMH/vqnnR4C5qE8m8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMw4ePY552OA6Z8Olooo8TOsxRTMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTI0Njk1ZTAtMjA5OC0z MDAxLTk3YWUtMWY4ODY0MmIwN2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYiHEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKmFiztDm8UFhklLxvleEZdsCj897reXITBaWJl1a1FpHsBbJrwDTSh3 k7Q8gQ5jF5OpVcgqyccsSnfJIumVE668fxGE2pEDH7+xQKtMhhr1Ln8hgQQ0ycv8 K8Rn5f/VSy0565zfNmIJKzHZ4fdAnNYhHbNlNre82SVRpGTE0cq8MGDjbyngtM69 vy/2/Wx40Wh8T7uJ8CIfCRpTZndq/qRCdpbS+MJTpXWTv6m50AAHCto+kX+zx4Is IiD3fKm/hyUC6Qr6iywsHWs685eNfYfdjwfvvxRi50B460lH0C1Tb+qsHn/PCv1N uWpU/TnHBSQWkc3Ir5oYekMCmpPScMg= -----END CERTIFICATE-----Generated at Sun Mar 1 19:17:12 2026 by rpki-client