$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4ef708a-c054-3e3a-b1a2-b5320ed9a14f.roa File: b4ef708a-c054-3e3a-b1a2-b5320ed9a14f.roa (raw, json) Hash identifier: dBP2K/9n+kg2V0CXBZ6GuLkwo97SThM3ZCuvjJ1FMhw= Subject key identifier: C7:FC:2F:A6:E8:26:DD:63:2D:60:84:E2:F9:2D:04:CD:FC:F4:02:EF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE58957693A455CDCD512340 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4ef708a-c054-3e3a-b1a2-b5320ed9a14f.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 98.215.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:95:76:93:a4:55:cd:cd:51:23:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=2893ca5e-9c77-46e2-a95d-216964c70adb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:db:37:89:d6:13:e6:88:f5:fb:91:44:5d:7a: 98:0b:09:43:e2:bc:68:5b:5f:e0:3e:a2:a2:f1:22: 5a:7e:f1:e0:da:d6:ab:30:55:fa:40:e0:b4:3c:82: 25:68:4b:c7:8a:84:9e:5d:af:42:5e:f3:a2:03:9b: d4:fc:2f:81:a0:6e:f6:7a:e8:ee:e0:8c:5b:02:d1: 68:06:2f:9b:31:bc:68:14:af:06:5c:22:6f:0c:4f: 86:00:53:0f:92:e6:97:a3:23:8c:64:34:a9:84:0e: 18:91:ac:85:bb:f4:42:d7:67:f9:f1:14:32:9b:52: 79:95:95:49:8b:ed:37:5b:71:a4:37:c5:8a:fc:33: dc:e2:af:33:68:13:71:1c:e0:78:23:2a:b3:79:17: c0:c6:21:1d:4f:81:18:72:c6:5c:d3:89:6c:e7:fc: 39:e2:bb:07:d4:92:3c:7a:f2:8d:a2:87:26:69:98: a4:4e:88:2c:0a:b7:47:06:7e:f4:d0:ab:20:bd:41: de:99:c0:43:e4:1b:44:60:1d:11:6d:fb:01:23:9a: 98:8e:80:f7:bb:f2:e0:7e:8b:3e:d9:1d:8e:f0:1d: ef:60:07:ec:8c:7c:59:e5:23:56:84:25:c7:ef:49: a0:d8:ab:bb:fb:2f:21:24:ed:17:9b:77:01:5f:62: 22:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:FC:2F:A6:E8:26:DD:63:2D:60:84:E2:F9:2D:04:CD:FC:F4:02:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4ef708a-c054-3e3a-b1a2-b5320ed9a14f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.215.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:e4:2c:0f:2a:0b:02:d5:11:cf:72:a2:1b:20:51:b5:2e:1b: 84:13:f5:84:9c:ab:17:88:ae:95:42:37:9e:83:b6:70:69:20: 8c:f9:30:7a:db:82:35:c3:d8:51:c5:1f:c9:76:e8:82:54:14: a3:14:ae:f6:4f:29:ca:2a:0e:79:e5:04:98:c5:22:2a:48:a3: d4:33:eb:c7:8d:e4:a9:e5:69:f6:ee:47:f0:81:a6:95:12:c2: f0:88:98:0c:76:1d:ab:fb:1a:e3:dc:41:2f:e0:9f:19:3e:4b: 30:51:1b:7f:6f:8c:7f:7c:24:85:54:65:85:19:78:50:54:55: c7:5f:43:6a:59:0a:a4:90:1e:0f:1b:f9:d4:d4:b9:07:2d:8e: d6:c1:4d:d9:5d:44:d0:83:04:86:62:58:06:17:37:50:b0:b2: d3:a7:ac:de:be:3d:b9:f1:e9:31:cd:10:73:59:f5:da:07:84: 63:8c:eb:e8:0d:14:b7:74:ae:9f:60:aa:34:90:89:fd:ba:64: 45:ec:ac:39:6b:9d:3a:fb:71:3e:97:4a:a5:ed:e2:cb:36:40: e5:09:8b:16:2a:4c:69:39:85:f7:79:04:e9:41:a5:f8:fb:fe: d4:f1:40:81:b0:fb:31:d4:d5:66:5c:58:2f:9c:4e:85:4a:06: d3:0b:d5:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWJV2k6RVzc1RI0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk Mjg5M2NhNWUtOWM3Ny00NmUyLWE5NWQtMjE2OTY0YzcwYWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApts3idYT5oj1+5FEXXqYCwlD4rxoW1/gPqKi 8SJafvHg2tarMFX6QOC0PIIlaEvHioSeXa9CXvOiA5vU/C+BoG72euju4IxbAtFo Bi+bMbxoFK8GXCJvDE+GAFMPkuaXoyOMZDSphA4YkayFu/RC12f58RQym1J5lZVJ i+03W3GkN8WK/DPc4q8zaBNxHOB4IyqzeRfAxiEdT4EYcsZc04ls5/w54rsH1JI8 evKNoocmaZikTogsCrdHBn700KsgvUHemcBD5BtEYB0RbfsBI5qYjoD3u/Lgfos+ 2R2O8B3vYAfsjHxZ5SNWhCXH70mg2Ku7+y8hJO0Xm3cBX2IiWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMf8L6boJt1jLWCE4vktBM389ALvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjRlZjcwOGEtYzA1NC0z ZTNhLWIxYTItYjUzMjBlZDlhMTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYtcoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALvkLA8qCwLVEc9yohsgUbUuG4QT9YScqxeIrpVCN56DtnBpIIz5MHrb gjXD2FHFH8l26IJUFKMUrvZPKcoqDnnlBJjFIipIo9Qz68eN5KnlafbuR/CBppUS wvCImAx2Hav7GuPcQS/gnxk+SzBRG39vjH98JIVUZYUZeFBUVcdfQ2pZCqSQHg8b +dTUuQctjtbBTdldRNCDBIZiWAYXN1CwstOnrN6+Pbnx6THNEHNZ9doHhGOM6+gN FLd0rp9gqjSQif26ZEXsrDlrnTr7cT6XSqXt4ss2QOUJixYqTGk5hfd5BOlBpfj7 /tTxQIGw+zHU1WZcWC+cToVKBtML1XM= -----END CERTIFICATE-----Generated at Sun Mar 1 22:53:50 2026 by rpki-client