$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b6df5272-b310-3cf4-8ea5-f1b650f04293.roa File: b6df5272-b310-3cf4-8ea5-f1b650f04293.roa (raw, json) Hash identifier: aiCLyfssj2O0VH10C+h0sJd4bfADKp1TkubNTeg3w9c= Subject key identifier: 15:F5:E5:B7:EC:B4:9E:B0:69:CA:B6:27:15:6C:6F:7D:FC:58:F7:C3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE590E175F08E34B5E729800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b6df5272-b310-3cf4-8ea5-f1b650f04293.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 98.248.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:59:0e:17:5f:08:e3:4b:5e:72:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=08e1bf11-f163-492b-9ac4-e8306c563eae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ec:61:3b:7f:2a:84:72:50:35:ec:d6:b1:e9: 87:c1:2e:09:93:04:44:93:72:69:23:4f:bd:db:cc: 89:17:2a:c6:12:4f:fb:0b:64:53:f5:09:82:19:a9: 99:c0:95:71:7a:66:f7:e0:3e:29:50:52:e8:b9:f5: 0c:27:2c:08:9f:bf:79:6f:80:be:ff:aa:03:f3:e1: 25:a4:84:48:f0:f6:b7:f6:b1:6d:53:e8:fc:eb:3e: 83:77:5d:dc:fb:97:78:3f:8f:4d:7e:87:62:2c:1e: 1a:f8:ea:64:40:3f:47:01:5b:bd:a5:d4:5a:8c:36: 7d:9a:d4:7c:c1:bf:19:a6:d4:65:36:76:cf:16:07: 34:d8:99:03:5d:e4:0d:21:3c:a7:7a:5d:ec:94:46: 26:ee:ec:8b:4c:64:34:9c:65:e0:f3:91:9e:87:54: 20:90:2b:23:2f:08:64:3a:59:10:53:9c:e2:40:52: b2:81:94:e4:3b:86:30:d7:ee:8f:9a:ae:f7:13:00: b2:c7:db:4c:44:70:c7:cf:8d:e4:22:03:dd:52:44: 7b:a6:7b:5b:91:43:cb:8f:f4:6e:d9:ed:b7:95:cb: 87:26:71:b3:2a:56:b6:d7:28:9e:23:74:a4:7f:b7: ee:91:1e:40:29:69:9b:2e:b2:82:c4:fe:5c:8c:79: 4a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:F5:E5:B7:EC:B4:9E:B0:69:CA:B6:27:15:6C:6F:7D:FC:58:F7:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b6df5272-b310-3cf4-8ea5-f1b650f04293.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.248.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:d2:35:7a:d4:f2:39:e4:9b:13:23:30:36:81:66:14:bc:7c: 40:7d:a3:61:f3:51:c0:b4:17:14:07:17:fe:23:28:d1:b6:33: 4c:08:b2:19:b6:35:3c:5d:c3:49:5e:29:ba:f0:1e:98:73:3c: 02:8c:65:46:29:c5:10:73:41:32:38:df:e3:47:af:77:d0:1b: 16:1c:72:9e:9c:da:90:31:08:05:b3:11:bd:2e:e4:4d:7c:53: e9:a9:67:83:e5:2f:d3:a0:e2:7f:47:3a:cb:ed:74:3a:51:b4: d4:53:a8:cb:96:1f:cd:89:ee:28:5b:87:88:a9:05:e2:c2:c4: df:98:f6:1c:89:ba:c1:99:99:53:9a:6a:c4:03:41:0e:ef:e5: a4:7c:c0:22:9c:c4:a4:be:9d:5f:20:ab:3c:30:73:af:2f:12: 33:a4:13:dc:51:66:53:8e:55:54:8a:d8:dc:1d:7e:3c:9f:21: aa:56:f9:ed:d9:16:ca:92:64:1a:10:fd:58:90:81:9f:6a:65: 1f:46:e1:f8:12:50:4a:1b:da:7e:bb:34:81:19:7d:13:41:13: ef:6e:d0:fc:c1:c1:e5:0d:9a:ab:ea:fe:a7:a6:24:39:53:83: e4:3c:4a:76:44:a7:ce:c8:4a:79:5a:67:08:64:07:d7:ea:94: 4a:92:51:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWQ4XXwjjS15ymAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MDhlMWJmMTEtZjE2My00OTJiLTlhYzQtZTgzMDZjNTYzZWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuxhO38qhHJQNezWsemHwS4JkwREk3JpI0+9 28yJFyrGEk/7C2RT9QmCGamZwJVxemb34D4pUFLoufUMJywIn795b4C+/6oD8+El pIRI8Pa39rFtU+j86z6Dd13c+5d4P49NfodiLB4a+OpkQD9HAVu9pdRajDZ9mtR8 wb8ZptRlNnbPFgc02JkDXeQNITynel3slEYm7uyLTGQ0nGXg85Geh1QgkCsjLwhk OlkQU5ziQFKygZTkO4Yw1+6Pmq73EwCyx9tMRHDHz43kIgPdUkR7pntbkUPLj/Ru 2e23lcuHJnGzKla21yieI3Skf7fukR5AKWmbLrKCxP5cjHlKsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBX15bfstJ6wacq2JxVsb338WPfDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjZkZjUyNzItYjMxMC0z Y2Y0LThlYTUtZjFiNjUwZjA0MjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYvisMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHSNXrU8jnkmxMjMDaBZhS8fEB9o2HzUcC0FxQHF/4jKNG2M0wIshm2 NTxdw0leKbrwHphzPAKMZUYpxRBzQTI43+NHr3fQGxYccp6c2pAxCAWzEb0u5E18 U+mpZ4PlL9Og4n9HOsvtdDpRtNRTqMuWH82J7ihbh4ipBeLCxN+Y9hyJusGZmVOa asQDQQ7v5aR8wCKcxKS+nV8gqzwwc68vEjOkE9xRZlOOVVSK2NwdfjyfIapW+e3Z FsqSZBoQ/ViQgZ9qZR9G4fgSUEob2n67NIEZfRNBE+9u0PzBweUNmqvq/qemJDlT g+Q8SnZEp87ISnlaZwhkB9fqlEqSUaw= -----END CERTIFICATE-----Generated at Sun Mar 1 19:06:58 2026 by rpki-client