$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5172e30-ec18-3603-92f1-079f327c5622.roa File: b5172e30-ec18-3603-92f1-079f327c5622.roa (raw, json) Hash identifier: INL9qo0lLKBxIkRlZp0Jl4djSVCPaf1sxc1xK7fO/bw= Subject key identifier: 40:7B:28:3C:A4:3B:ED:63:FF:41:CB:AE:A7:ED:B0:B8:21:EC:7A:C2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5CF9676785DD350CCE73C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5172e30-ec18-3603-92f1-079f327c5622.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 98.228.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5c:f9:67:67:85:dd:35:0c:ce:73:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=ecd40ee2-54d2-4f3c-8f65-1fb63bee7b51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a5:ed:31:67:78:20:e6:aa:56:d8:72:8f:31: 74:76:f2:be:c2:95:12:9f:ee:f1:c5:19:94:b7:05: 3f:6f:ec:ce:c6:ae:d7:bd:42:3f:ee:14:85:57:a6: cb:6c:2b:90:a7:cc:6a:57:4b:ec:68:bf:16:0d:a4: 91:0b:a5:36:e8:b0:11:6c:e0:49:71:7c:1e:6c:83: c3:40:9a:ce:eb:71:4a:5e:8c:60:28:aa:0a:67:8b: d6:bd:fa:3b:55:b4:a6:10:93:59:c7:da:60:eb:56: 3d:ee:c4:97:0d:07:d4:dd:e3:83:ef:35:fe:35:65: cd:67:55:f7:83:8f:92:e0:8a:e1:24:c7:84:23:92: af:94:22:ff:b8:06:a1:94:6e:c3:c4:47:a6:1d:18: 73:31:1b:8e:a0:94:08:4e:52:f8:d9:8f:6b:f0:a4: 18:1f:a4:67:5c:5f:03:db:7c:16:ae:9c:5b:44:d7: cc:5b:3d:4b:9a:c2:ab:1e:25:78:b7:68:e0:90:da: 3b:2e:15:87:48:2c:c3:c2:cb:2e:f8:07:4e:48:20: a4:cf:16:95:aa:b0:8b:4a:59:46:72:35:91:6e:ed: ec:a9:de:71:ed:a4:d2:ff:bc:69:25:7b:93:e6:bb: c4:4f:b0:a2:f8:8e:79:3a:23:85:e9:70:6b:73:e1: 8f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:7B:28:3C:A4:3B:ED:63:FF:41:CB:AE:A7:ED:B0:B8:21:EC:7A:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5172e30-ec18-3603-92f1-079f327c5622.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.228.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:48:94:6d:c6:f8:de:eb:6c:77:d5:97:ad:71:cc:83:6a:b8: c9:31:52:16:13:65:22:e8:3a:11:75:71:10:61:6b:0d:5c:c9: d9:2d:04:61:c9:90:41:62:dc:49:43:4a:5c:12:75:d6:6d:2a: 66:5f:12:24:6d:d3:89:d3:94:5b:e6:2c:9a:70:ff:6c:eb:c1: 6e:fe:bf:63:82:18:5b:8e:93:2d:84:45:e0:fa:66:64:79:21: 31:94:42:cf:bd:76:68:36:6f:67:e0:3b:13:29:41:f1:5c:8e: 67:5b:ce:4c:e5:51:dc:58:91:ca:b7:de:27:e0:dc:f5:a5:a4: 56:40:42:8d:f1:d0:2e:fb:72:29:58:f4:bd:db:ca:9d:98:34: 2c:4f:ff:09:09:02:de:7a:4a:a5:05:fc:be:4e:f0:57:29:6b: 0c:19:02:35:49:77:71:ec:29:ae:de:f8:e8:65:b6:c4:9e:a0: 13:45:ae:73:a3:4e:47:67:56:dd:a0:a9:fe:91:82:e5:a4:6f: de:94:88:96:05:ac:26:c7:0b:8d:df:68:d1:72:a7:87:8c:ab: dc:18:30:f1:fd:d4:5f:85:43:6c:97:de:7b:b7:fa:8b:3c:0b: e6:17:b1:e6:fa:4a:78:53:24:d9:ea:d5:20:5e:32:4e:32:02: 3b:69:b1:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXPlnZ4XdNQzOc8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZWNkNDBlZTItNTRkMi00ZjNjLThmNjUtMWZiNjNiZWU3YjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaXtMWd4IOaqVthyjzF0dvK+wpUSn+7xxRmU twU/b+zOxq7XvUI/7hSFV6bLbCuQp8xqV0vsaL8WDaSRC6U26LARbOBJcXwebIPD QJrO63FKXoxgKKoKZ4vWvfo7VbSmEJNZx9pg61Y97sSXDQfU3eOD7zX+NWXNZ1X3 g4+S4IrhJMeEI5KvlCL/uAahlG7DxEemHRhzMRuOoJQITlL42Y9r8KQYH6RnXF8D 23wWrpxbRNfMWz1LmsKrHiV4t2jgkNo7LhWHSCzDwssu+AdOSCCkzxaVqrCLSllG cjWRbu3sqd5x7aTS/7xpJXuT5rvET7Ci+I55OiOF6XBrc+GPOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEB7KDykO+1j/0HLrqftsLgh7HrCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjUxNzJlMzAtZWMxOC0z NjAzLTkyZjEtMDc5ZjMyN2M1NjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYuTIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ9IlG3G+N7rbHfVl61xzINquMkxUhYTZSLoOhF1cRBhaw1cydktBGHJ kEFi3ElDSlwSddZtKmZfEiRt04nTlFvmLJpw/2zrwW7+v2OCGFuOky2EReD6ZmR5 ITGUQs+9dmg2b2fgOxMpQfFcjmdbzkzlUdxYkcq33ifg3PWlpFZAQo3x0C77cilY 9L3byp2YNCxP/wkJAt56SqUF/L5O8FcpawwZAjVJd3HsKa7e+OhltsSeoBNFrnOj TkdnVt2gqf6RguWkb96UiJYFrCbHC43faNFyp4eMq9wYMPH91F+FQ2yX3nu3+os8 C+YXseb6SnhTJNnq1SBeMk4yAjtpsZI= -----END CERTIFICATE-----Generated at Sun Mar 1 19:08:51 2026 by rpki-client