$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a8c76aaf-cb8e-3e2d-8094-72df9ecd910f.roa File: a8c76aaf-cb8e-3e2d-8094-72df9ecd910f.roa (raw, json) Hash identifier: sGD4NZwv5dU10WWJK23UZvY9Q8G97RBnqub+RihZK+Y= Subject key identifier: 07:A1:4A:CF:8B:56:92:C8:3A:8F:0B:56:AC:72:C7:AC:54:E1:6A:E0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5CEC032CA3F79BB80C8A80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a8c76aaf-cb8e-3e2d-8094-72df9ecd910f.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 98.223.212.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5c:ec:03:2c:a3:f7:9b:b8:0c:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=2f6cb93a-348b-4a55-817f-057d5e8af226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:23:c9:44:4c:99:5e:fe:05:8b:28:ba:b6:bb: 9d:f3:a5:3f:63:8e:86:98:9c:4f:1d:eb:00:56:24: 5c:1e:06:02:d1:b7:e3:51:1a:a1:0f:02:4f:04:ce: 72:ce:17:a6:a6:10:92:cf:87:c4:c5:35:97:27:07: 9b:f4:e8:34:0c:c7:62:b6:cd:94:76:82:c1:49:c0: 39:9f:85:aa:15:a8:3d:99:92:86:1d:39:0d:0b:13: 79:96:94:60:4b:ae:cd:6c:ac:3d:21:0c:a7:2e:1e: 0e:d1:94:b2:92:46:80:f4:86:0f:16:73:27:a0:52: 53:4b:8d:df:a9:db:67:c0:02:99:a9:c0:3a:54:29: 38:27:80:44:f1:0d:d0:20:b7:b4:8c:fe:cb:db:01: 52:4d:c4:98:a0:ef:c8:c6:c6:36:ba:24:39:21:cf: 12:96:2f:c1:e1:e2:28:df:bf:72:ad:de:e7:46:ce: d7:82:3d:3a:a5:c4:1a:c6:20:1a:7f:91:95:fc:05: c5:b4:c8:fa:07:bb:6b:f8:f0:a3:6d:11:d4:2e:57: 69:b6:2b:20:f8:37:92:17:67:62:22:bf:25:52:29: 52:e7:d7:74:93:fb:0c:22:7d:f9:32:81:51:16:01: 42:dc:8e:1f:de:ef:6e:26:11:42:49:33:c3:ec:d3: 95:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:A1:4A:CF:8B:56:92:C8:3A:8F:0B:56:AC:72:C7:AC:54:E1:6A:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a8c76aaf-cb8e-3e2d-8094-72df9ecd910f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.223.212.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:e9:e0:45:67:8c:79:9c:24:8a:ae:7b:9b:84:a6:b6:a9:8f: 0c:04:0b:f2:f7:65:1e:6f:d1:a1:74:83:4d:64:74:2b:ba:ff: 79:0e:cf:96:24:cf:f7:c0:cc:8e:87:23:e2:71:55:96:b0:89: f9:fa:a0:e2:4f:94:b1:0e:b9:8a:c7:b6:da:2e:5d:9b:7a:54: 8f:8d:35:86:c6:6a:01:d8:da:ff:27:52:d9:d1:7a:11:1a:1d: 36:89:b1:67:ee:6e:e5:b2:89:85:39:84:64:5b:a9:82:2c:8e: 65:94:d4:2e:91:7e:4c:43:5c:7b:f8:9e:74:c4:91:20:3e:87: 31:47:bc:97:98:b1:54:3e:70:27:34:da:2d:36:37:f2:22:45: 95:dd:43:3e:db:e4:4f:54:38:99:57:fe:a0:e8:9a:d7:6b:a4: ee:ca:5a:89:ae:4b:bb:a3:fb:f6:0f:69:ad:da:31:db:3b:5c: 13:c1:24:2a:76:f5:50:61:2a:4a:e0:fd:45:e9:95:fb:16:f7: f2:66:bb:fc:d1:d6:76:8d:37:8f:20:b3:81:39:bd:f2:7e:f3: 50:12:8c:7c:1d:77:f1:00:4c:77:78:b9:33:5b:d8:70:f8:43: b8:b4:9c:0c:d0:f6:81:0e:32:8a:49:40:06:19:80:10:79:6b: c7:76:d9:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXOwDLKP3m7gMioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MmY2Y2I5M2EtMzQ4Yi00YTU1LTgxN2YtMDU3ZDVlOGFmMjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiPJREyZXv4Fiyi6trud86U/Y46GmJxPHesA ViRcHgYC0bfjURqhDwJPBM5yzhemphCSz4fExTWXJweb9Og0DMdits2UdoLBScA5 n4WqFag9mZKGHTkNCxN5lpRgS67NbKw9IQynLh4O0ZSykkaA9IYPFnMnoFJTS43f qdtnwAKZqcA6VCk4J4BE8Q3QILe0jP7L2wFSTcSYoO/IxsY2uiQ5Ic8Sli/B4eIo 379yrd7nRs7Xgj06pcQaxiAaf5GV/AXFtMj6B7tr+PCjbRHULldptisg+DeSF2di Ir8lUilS59d0k/sMIn35MoFRFgFC3I4f3u9uJhFCSTPD7NOVnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAehSs+LVpLIOo8LVqxyx6xU4WrgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYThjNzZhYWYtY2I4ZS0z ZTJkLTgwOTQtNzJkZjllY2Q5MTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYt/UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXp4EVnjHmcJIque5uEprapjwwEC/L3ZR5v0aF0g01kdCu6/3kOz5Yk z/fAzI6HI+JxVZawifn6oOJPlLEOuYrHttouXZt6VI+NNYbGagHY2v8nUtnRehEa HTaJsWfubuWyiYU5hGRbqYIsjmWU1C6RfkxDXHv4nnTEkSA+hzFHvJeYsVQ+cCc0 2i02N/IiRZXdQz7b5E9UOJlX/qDomtdrpO7KWomuS7uj+/YPaa3aMds7XBPBJCp2 9VBhKkrg/UXplfsW9/Jmu/zR1naNN48gs4E5vfJ+81ASjHwdd/EATHd4uTNb2HD4 Q7i0nAzQ9oEOMopJQAYZgBB5a8d22To= -----END CERTIFICATE-----Generated at Sun Mar 1 20:27:05 2026 by rpki-client