$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5329653-d5a5-39c2-ac29-cab54151f031.roa File: c5329653-d5a5-39c2-ac29-cab54151f031.roa (raw, json) Hash identifier: b0aBzwu++FEK75kgFrLJrISllf5T8H131mPcGBnTcgw= Subject key identifier: 3B:E1:89:B4:0B:3B:44:2E:44:65:E3:B8:94:59:49:4D:7A:F4:A4:E9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5CE6BDE2B74D5405530600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5329653-d5a5-39c2-ac29-cab54151f031.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 98.222.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5c:e6:bd:e2:b7:4d:54:05:53:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=579f4594-fc31-4284-8004-1f535cc612dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1d:17:31:3c:24:c7:64:38:39:36:a6:4b:5c: de:eb:f0:7f:39:fe:5f:0e:30:f1:bc:9c:ca:05:3c: af:ea:1a:35:ff:b5:03:7d:77:d6:5d:a5:48:61:47: 57:2d:04:e4:24:9a:e4:3a:5c:08:bc:44:ec:e0:b9: 72:30:1d:e6:2c:5e:46:77:84:7c:63:c2:68:e4:7d: 81:d4:ae:d3:f1:fe:8f:6c:c4:3b:0f:c5:86:57:cf: 87:4c:8a:3f:32:9a:c2:61:50:ae:08:cf:9e:8d:0e: a5:3a:24:c5:7c:26:38:06:a0:c8:94:8c:2a:51:38: c4:b8:e9:5c:80:4e:61:4b:39:70:13:7b:96:f9:1a: cb:8a:b2:13:67:a3:50:49:c9:e2:10:12:12:5f:f9: fa:3d:6b:b5:04:13:5b:03:80:46:e9:90:93:be:98: 0d:06:af:25:fb:fd:df:a3:9e:b6:32:9a:d7:d3:de: 99:b9:3c:5e:45:31:15:40:05:53:dd:1d:21:04:ab: 55:ca:6c:b3:f4:f0:8b:22:e0:be:16:0c:e1:cd:2c: b5:73:eb:f0:d6:00:e7:27:2b:c7:8f:c6:7b:64:9a: 73:ee:9f:49:32:bb:05:bd:29:80:38:2f:de:52:06: bd:56:78:8e:18:a5:07:c8:73:a7:06:c0:bf:75:ce: 57:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E1:89:B4:0B:3B:44:2E:44:65:E3:B8:94:59:49:4D:7A:F4:A4:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5329653-d5a5-39c2-ac29-cab54151f031.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.222.160.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:73:33:b6:32:f2:ee:a8:3e:67:e0:61:b4:6a:a8:d1:a0:f3: dd:be:6f:df:d5:2d:58:9f:c1:16:89:1f:59:32:4f:b6:61:10: 79:3e:b4:e1:9e:8d:8d:d8:f1:9d:d1:cf:db:0b:41:db:29:8e: 15:fe:fa:a9:24:c5:1f:ec:10:a4:d4:d5:65:b9:5b:9b:48:bc: 1b:69:07:2f:6f:b9:a4:cb:0e:d7:33:97:20:1b:3e:5f:79:08: 81:dd:f7:3b:b9:6d:31:f4:10:18:b0:f0:6e:4f:29:dd:8f:1d: 00:87:68:79:58:71:e3:8d:a7:b7:1c:7a:2a:f0:2c:22:72:0f: 08:81:47:d0:9b:b9:6c:00:ad:46:e1:06:2c:85:8b:7b:5b:84: 5a:5b:33:4c:f6:84:cd:4a:07:35:5f:42:a0:5b:90:f6:05:48: 6c:d4:73:30:24:a2:c2:6f:4f:ad:80:a5:f5:b3:75:3c:60:1b: ee:83:68:a4:ac:69:de:22:f9:57:ea:b0:d5:f2:a5:97:6c:be: a4:3c:b7:a3:19:3c:ab:6a:e2:f4:66:ba:64:69:0f:45:01:40: fb:c6:77:ab:20:4d:81:e5:09:60:6a:d9:fc:f5:b2:71:10:99: d1:a9:5e:76:01:d5:4b:a6:c7:55:8a:cf:2e:bf:22:2e:7e:68: f8:a9:5f:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXOa94rdNVAVTBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NTc5ZjQ1OTQtZmMzMS00Mjg0LTgwMDQtMWY1MzVjYzYxMmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmB0XMTwkx2Q4OTamS1ze6/B/Of5fDjDxvJzK BTyv6ho1/7UDfXfWXaVIYUdXLQTkJJrkOlwIvETs4LlyMB3mLF5Gd4R8Y8Jo5H2B 1K7T8f6PbMQ7D8WGV8+HTIo/MprCYVCuCM+ejQ6lOiTFfCY4BqDIlIwqUTjEuOlc gE5hSzlwE3uW+RrLirITZ6NQScniEBISX/n6PWu1BBNbA4BG6ZCTvpgNBq8l+/3f o562MprX096ZuTxeRTEVQAVT3R0hBKtVymyz9PCLIuC+FgzhzSy1c+vw1gDnJyvH j8Z7ZJpz7p9JMrsFvSmAOC/eUga9VniOGKUHyHOnBsC/dc5XjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDvhibQLO0QuRGXjuJRZSU169KTpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzUzMjk2NTMtZDVhNS0z OWMyLWFjMjktY2FiNTQxNTFmMDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYt6gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALdzM7Yy8u6oPmfgYbRqqNGg892+b9/VLVifwRaJH1kyT7ZhEHk+tOGe jY3Y8Z3Rz9sLQdspjhX++qkkxR/sEKTU1WW5W5tIvBtpBy9vuaTLDtczlyAbPl95 CIHd9zu5bTH0EBiw8G5PKd2PHQCHaHlYceONp7cceirwLCJyDwiBR9CbuWwArUbh BiyFi3tbhFpbM0z2hM1KBzVfQqBbkPYFSGzUczAkosJvT62ApfWzdTxgG+6DaKSs ad4i+VfqsNXypZdsvqQ8t6MZPKtq4vRmumRpD0UBQPvGd6sgTYHlCWBq2fz1snEQ mdGpXnYB1Uumx1WKzy6/Ii5+aPipX+g= -----END CERTIFICATE-----Generated at Sun Mar 1 20:48:45 2026 by rpki-client