$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a60e42e1-fe64-3778-971c-970a2bf4710f.roa File: a60e42e1-fe64-3778-971c-970a2bf4710f.roa (raw, json) Hash identifier: 9x6IyPptnYePmx64JJ8C870NHEjmsDXXIgerSDS51oI= Subject key identifier: 60:0D:7F:62:97:0E:6B:3C:B3:12:C7:FA:76:64:10:57:63:96:E1:41 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE590AE77EF79CB15185EA80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a60e42e1-fe64-3778-971c-970a2bf4710f.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 98.210.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:59:0a:e7:7e:f7:9c:b1:51:85:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=a3dbdfcf-b821-4c63-be3d-f3673fe1b70a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:88:7b:74:60:97:06:b6:ad:b0:e1:99:cb:2a: ea:fd:69:50:a1:da:28:83:4c:07:f9:dd:cd:bf:85: ad:9d:58:53:f9:ec:f1:64:d6:a3:26:dc:2c:7c:20: b0:e1:f9:2d:9e:c9:56:ac:4e:d9:06:d8:40:33:ba: 1e:95:f5:d2:c1:c6:c8:99:c1:0c:96:ef:f4:33:a0: a1:54:f7:ad:99:7c:62:14:cc:69:0b:8d:51:ea:a5: 58:11:ab:4e:61:39:78:56:76:fc:48:7f:6d:65:fc: d8:7f:1f:f3:ae:2a:1f:36:f6:a0:3c:ce:7c:d5:b7: b5:3a:c4:15:1c:41:cb:60:a4:e0:f5:78:da:5d:24: 9f:56:02:a1:07:b3:75:a8:56:6e:d7:0c:97:6c:f5: ed:bc:13:43:d5:ba:20:e6:1a:be:3c:fc:d7:2d:22: ab:40:2f:5a:e5:c0:e6:4b:3a:3d:81:66:02:a6:ba: 92:8d:2f:33:d7:80:39:e0:8f:20:03:9d:17:89:7b: 0f:4a:4f:17:eb:d6:c6:d3:6d:48:92:11:be:34:88: 5b:43:25:fc:7c:72:44:74:0e:4b:1f:98:38:d8:bf: e2:58:66:14:7f:03:75:ed:af:4c:cd:0e:23:ef:5f: 67:17:c6:b8:c9:07:37:49:24:d8:cd:07:61:ce:ea: a6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:0D:7F:62:97:0E:6B:3C:B3:12:C7:FA:76:64:10:57:63:96:E1:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a60e42e1-fe64-3778-971c-970a2bf4710f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.210.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:b0:d6:14:ae:14:8a:b2:4c:95:15:16:56:20:f6:99:d1:a3: 34:72:8c:9f:74:41:83:2f:af:b0:65:fa:94:95:fa:30:09:da: c2:5e:f9:70:a8:c8:f0:da:ce:cf:26:89:6a:ef:c6:c3:61:bf: d6:c7:55:4d:d2:5f:38:d3:d0:57:3a:06:50:e0:98:d4:10:00: 94:c8:a4:8b:6a:eb:f6:48:59:b5:c4:c7:d8:35:cd:4e:81:81: 92:4b:4b:b6:2d:b6:69:10:88:df:56:c2:89:91:b2:1a:20:82: 61:d2:c2:e6:a3:7a:07:66:87:39:59:6f:94:ac:36:f7:ba:8e: bb:c4:2f:2a:43:a9:fc:c6:e7:a4:6f:9f:63:13:1a:e2:ad:2f: 4b:47:5b:56:8d:23:2d:15:b1:1f:3a:19:ed:22:e2:1d:8b:ab: 19:c6:02:8b:e6:ae:14:4b:7b:0f:9e:d5:9e:f7:12:e1:f1:9c: ac:da:34:c5:b3:59:df:ad:d3:89:7b:4e:5e:c3:5c:7a:e5:68: 17:80:45:2d:b3:1e:08:79:76:b7:ef:6a:1f:88:18:0a:98:c9: ab:07:cf:30:60:39:23:25:42:a9:a3:bd:85:94:43:fb:9c:6b: fb:7d:88:8f:60:5b:62:75:a4:9d:28:7d:65:81:77:a9:07:87: a9:9e:0e:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWQrnfvecsVGF6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YTNkYmRmY2YtYjgyMS00YzYzLWJlM2QtZjM2NzNmZTFiNzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIh7dGCXBratsOGZyyrq/WlQodoog0wH+d3N v4WtnVhT+ezxZNajJtwsfCCw4fktnslWrE7ZBthAM7oelfXSwcbImcEMlu/0M6Ch VPetmXxiFMxpC41R6qVYEatOYTl4Vnb8SH9tZfzYfx/zriofNvagPM581be1OsQV HEHLYKTg9XjaXSSfVgKhB7N1qFZu1wyXbPXtvBND1bog5hq+PPzXLSKrQC9a5cDm Szo9gWYCprqSjS8z14A54I8gA50XiXsPSk8X69bG021IkhG+NIhbQyX8fHJEdA5L H5g42L/iWGYUfwN17a9MzQ4j719nF8a4yQc3SSTYzQdhzuqmRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGANf2KXDms8sxLH+nZkEFdjluFBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTYwZTQyZTEtZmU2NC0z Nzc4LTk3MWMtOTcwYTJiZjQ3MTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYtKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKWw1hSuFIqyTJUVFlYg9pnRozRyjJ90QYMvr7Bl+pSV+jAJ2sJe+XCo yPDazs8miWrvxsNhv9bHVU3SXzjT0Fc6BlDgmNQQAJTIpItq6/ZIWbXEx9g1zU6B gZJLS7YttmkQiN9WwomRshoggmHSwuajegdmhzlZb5SsNve6jrvELypDqfzG56Rv n2MTGuKtL0tHW1aNIy0VsR86Ge0i4h2LqxnGAovmrhRLew+e1Z73EuHxnKzaNMWz Wd+t04l7Tl7DXHrlaBeARS2zHgh5drfvah+IGAqYyasHzzBgOSMlQqmjvYWUQ/uc a/t9iI9gW2J1pJ0ofWWBd6kHh6meDq4= -----END CERTIFICATE-----Generated at Sun Mar 1 22:42:23 2026 by rpki-client