$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c40e7350-1096-3eab-a931-f5d963547d9d.roa File: c40e7350-1096-3eab-a931-f5d963547d9d.roa (raw, json) Hash identifier: 8eAcryb0Ennnes4S/eQdA+ayf8DqX6kMrMJj4DLaZXs= Subject key identifier: CB:82:58:1B:03:D0:7F:80:FD:8F:0E:DD:DE:80:B0:11:F7:D7:2F:54 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE594F3D1FDF673DD04F7680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c40e7350-1096-3eab-a931-f5d963547d9d.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33660 IP address blocks: 98.33.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:59:4f:3d:1f:df:67:3d:d0:4f:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=6d0dea4c-1966-4ef3-9d17-1835a80c6f17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d6:91:df:b5:f8:73:80:e2:d9:c1:11:e3:62: 54:e5:28:24:2a:ff:e0:e6:98:3e:b3:06:f4:3e:10: a7:64:39:a4:ce:f3:39:3f:25:9f:58:2c:63:e5:5c: af:4a:c6:b5:42:4c:ce:20:e4:94:7b:ec:32:04:33: de:22:ea:3a:a1:e0:94:f7:e1:b1:6e:72:c7:fd:87: e1:3a:c0:bf:dd:43:86:5b:ac:73:0f:4f:a9:2c:ac: 0e:d5:aa:08:f4:eb:dc:62:aa:54:e5:9b:b4:fd:0c: a7:ac:38:93:01:0f:d8:e6:bd:59:bb:c6:63:a9:2b: ac:94:75:d0:2e:c1:0b:26:33:5d:d9:c2:9b:4a:9d: 58:07:34:3c:4a:c5:6c:2a:62:16:44:81:1a:57:12: 08:62:85:2e:7c:ff:6c:87:de:e2:01:87:0c:0a:e2: 9a:66:73:87:19:63:64:fa:33:5e:23:a5:03:5f:ff: a4:1a:cd:72:d2:94:0e:0e:75:c9:01:f6:90:74:25: 98:94:74:00:72:a6:a3:bf:62:80:11:cc:17:fd:94: b3:82:77:15:83:b5:97:b2:08:1c:88:42:39:16:bc: 66:14:5a:a1:e0:63:e0:6e:83:92:05:67:90:e6:93: 9f:9f:bd:55:a8:d5:da:a7:1a:59:7b:ce:a0:3d:e7: 18:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:82:58:1B:03:D0:7F:80:FD:8F:0E:DD:DE:80:B0:11:F7:D7:2F:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c40e7350-1096-3eab-a931-f5d963547d9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.33.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:44:5e:d6:18:2a:69:3d:d9:b4:26:03:27:4f:da:05:a4:80: b4:c9:10:98:1a:ed:ca:ed:dc:2c:d8:53:5b:4f:04:1b:54:40: 7c:55:87:c0:80:13:ef:a8:d0:45:df:97:52:0b:dd:41:a8:5c: 84:d8:e2:d9:5c:d9:01:7c:e0:7a:cc:a0:86:9e:1e:3a:31:07: 77:2e:ee:b1:49:8c:27:d0:98:68:9d:ff:89:4a:e6:ac:25:ba: ba:fc:e9:91:2a:14:fd:00:ae:57:07:78:82:b5:71:2b:0a:a1: 44:ae:af:bc:96:9d:36:35:4b:b2:68:04:bd:7a:a3:e8:16:d0: 71:a9:26:27:4f:91:08:57:61:f4:01:59:59:07:f8:d1:a4:0e: 15:21:e5:4d:83:54:0e:7d:4e:d0:54:27:9a:ce:26:3a:f9:ff: 03:16:18:2a:63:ed:dd:96:f7:58:97:ba:a5:49:06:0b:ff:d7: 21:a4:61:7c:d9:57:a5:9c:bb:7d:a0:f7:9f:2b:3a:f8:03:ad: f6:bd:0a:a5:53:b2:5b:78:51:a8:b9:2c:f3:42:7a:f4:af:da: 7d:c3:94:2b:26:da:31:0f:7a:0a:b7:8e:93:c2:6d:45:bf:bf: c0:8a:1f:c9:c1:fe:33:7d:9d:b6:27:f4:ab:2a:a7:48:b1:a3: 03:56:4d:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWU89H99nPdBPdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NmQwZGVhNGMtMTk2Ni00ZWYzLTlkMTctMTgzNWE4MGM2ZjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9aR37X4c4Di2cER42JU5SgkKv/g5pg+swb0 PhCnZDmkzvM5PyWfWCxj5VyvSsa1QkzOIOSUe+wyBDPeIuo6oeCU9+GxbnLH/Yfh OsC/3UOGW6xzD0+pLKwO1aoI9OvcYqpU5Zu0/QynrDiTAQ/Y5r1Zu8ZjqSuslHXQ LsELJjNd2cKbSp1YBzQ8SsVsKmIWRIEaVxIIYoUufP9sh97iAYcMCuKaZnOHGWNk +jNeI6UDX/+kGs1y0pQODnXJAfaQdCWYlHQAcqajv2KAEcwX/ZSzgncVg7WXsggc iEI5FrxmFFqh4GPgboOSBWeQ5pOfn71VqNXapxpZe86gPecYiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMuCWBsD0H+A/Y8O3d6AsBH31y9UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzQwZTczNTAtMTA5Ni0z ZWFiLWE5MzEtZjVkOTYzNTQ3ZDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYiHhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMNEXtYYKmk92bQmAydP2gWkgLTJEJga7crt3CzYU1tPBBtUQHxVh8CA E++o0EXfl1IL3UGoXITY4tlc2QF84HrMoIaeHjoxB3cu7rFJjCfQmGid/4lK5qwl urr86ZEqFP0ArlcHeIK1cSsKoUSur7yWnTY1S7JoBL16o+gW0HGpJidPkQhXYfQB WVkH+NGkDhUh5U2DVA59TtBUJ5rOJjr5/wMWGCpj7d2W91iXuqVJBgv/1yGkYXzZ V6Wcu32g958rOvgDrfa9CqVTslt4Uai5LPNCevSv2n3DlCsm2jEPegq3jpPCbUW/ v8CKH8nB/jN9nbYn9Ksqp0ixowNWTQA= -----END CERTIFICATE-----Generated at Sun Mar 1 19:13:59 2026 by rpki-client