$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8e5dd14-dd91-33ea-968d-ae14e8ee9e41.roa File: c8e5dd14-dd91-33ea-968d-ae14e8ee9e41.roa (raw, json) Hash identifier: rIGRSiRNp+nJSMBexs6e1Fjig34gG3osrnKgzi4sQ6c= Subject key identifier: 45:FB:7C:6C:0F:EB:88:C2:95:9D:29:59:42:DE:8E:90:DD:BF:7E:FA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE589359086492BAABA5EC00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8e5dd14-dd91-33ea-968d-ae14e8ee9e41.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 98.214.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:93:59:08:64:92:ba:ab:a5:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=222769cc-40b9-4a23-b4fb-2da532153b6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:22:83:7f:4e:8a:6a:59:ad:5c:94:d0:43:05: 37:5a:52:94:4c:ab:f1:db:b1:7e:16:ec:ef:7c:29: 08:59:4f:3b:2c:ed:70:c7:d4:80:9b:4a:fb:be:50: 68:68:1e:e9:67:62:75:5f:09:69:e4:a7:eb:36:79: c2:1a:e7:51:5a:f5:c3:02:ad:c7:10:80:3a:0a:ca: 6e:93:4d:3e:69:9e:59:bb:fb:ce:fd:fd:8d:4e:ba: 44:19:80:9f:ca:94:95:ac:b7:30:c7:5d:c2:1f:57: 84:43:ce:a9:35:00:ff:14:5d:8b:36:4e:1a:02:2c: 12:37:fa:3b:ab:f3:a6:9d:cc:88:86:f0:5a:d2:7c: b9:d6:b6:ee:75:bc:92:d8:c3:29:21:11:71:05:67: b6:10:81:46:df:7d:eb:68:32:13:99:e5:03:21:6d: 34:9b:03:d8:43:60:a5:6a:93:ea:5e:2d:0d:cb:bb: a4:bd:ce:98:c0:02:c2:5d:7b:f9:46:56:28:2f:4f: 9a:2f:6b:05:6f:c6:d3:ad:0c:34:64:3c:77:34:2b: 20:3d:8d:b3:3f:2f:58:37:2c:63:5a:19:a8:5a:ac: 8c:b7:c2:95:26:64:ef:41:a4:32:b5:cb:fc:15:ac: 24:62:af:13:0a:d2:5f:56:a4:3b:d7:a7:0e:35:6b: 8e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:FB:7C:6C:0F:EB:88:C2:95:9D:29:59:42:DE:8E:90:DD:BF:7E:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8e5dd14-dd91-33ea-968d-ae14e8ee9e41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.214.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:21:b4:7f:15:b4:f7:e1:dd:cb:02:82:fd:4c:95:11:7d:5c: 1d:c7:eb:00:51:ba:6c:85:eb:de:95:e9:2a:e4:f4:19:47:b8: 05:a9:31:0c:8f:95:64:7a:98:45:ff:29:a0:4d:5e:d3:0b:14: fa:93:89:bc:01:f2:7f:ba:0d:fa:8d:ff:dc:57:fc:8c:3f:13: 2a:8f:2f:b0:da:b8:81:6f:c2:33:76:2e:38:97:b9:81:16:94: ed:58:96:aa:94:31:fd:92:17:52:2d:c3:5b:4b:26:67:e0:95: d0:38:bc:32:ce:6d:9a:75:da:7d:8f:70:48:26:bd:2e:af:04: 2f:21:25:71:b7:de:98:86:6f:d5:15:f6:2a:19:99:ee:8b:bd: dc:cb:76:7b:87:a0:0e:a0:9a:b4:c3:a8:b4:9f:04:cf:55:15: d5:bc:ec:9e:be:af:66:d8:ed:36:09:75:a8:84:62:13:ed:58: f1:78:28:2a:db:60:77:93:79:14:fd:ec:28:6f:b4:c4:94:b5: 38:fc:ce:89:60:24:17:0d:a0:9f:5f:73:e1:5c:85:06:2e:61: 38:cc:c1:66:4d:26:1e:3c:54:54:2b:4c:ba:36:52:4a:cc:4b: a1:00:8a:25:c4:9b:cf:f2:a6:09:20:4d:b4:f2:94:bf:5b:86: 90:47:7e:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWJNZCGSSuqul7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MjIyNzY5Y2MtNDBiOS00YTIzLWI0ZmItMmRhNTMyMTUzYjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiKDf06KalmtXJTQQwU3WlKUTKvx27F+Fuzv fCkIWU87LO1wx9SAm0r7vlBoaB7pZ2J1Xwlp5KfrNnnCGudRWvXDAq3HEIA6Cspu k00+aZ5Zu/vO/f2NTrpEGYCfypSVrLcwx13CH1eEQ86pNQD/FF2LNk4aAiwSN/o7 q/OmncyIhvBa0ny51rbudbyS2MMpIRFxBWe2EIFG333raDITmeUDIW00mwPYQ2Cl apPqXi0Ny7ukvc6YwALCXXv5RlYoL0+aL2sFb8bTrQw0ZDx3NCsgPY2zPy9YNyxj WhmoWqyMt8KVJmTvQaQytcv8FawkYq8TCtJfVqQ716cONWuOJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEX7fGwP64jClZ0pWULejpDdv376MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzhlNWRkMTQtZGQ5MS0z M2VhLTk2OGQtYWUxNGU4ZWU5ZTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYtaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMIhtH8VtPfh3csCgv1MlRF9XB3H6wBRumyF696V6Srk9BlHuAWpMQyP lWR6mEX/KaBNXtMLFPqTibwB8n+6DfqN/9xX/Iw/EyqPL7DauIFvwjN2LjiXuYEW lO1YlqqUMf2SF1Itw1tLJmfgldA4vDLObZp12n2PcEgmvS6vBC8hJXG33piGb9UV 9ioZme6LvdzLdnuHoA6gmrTDqLSfBM9VFdW87J6+r2bY7TYJdaiEYhPtWPF4KCrb YHeTeRT97ChvtMSUtTj8zolgJBcNoJ9fc+FchQYuYTjMwWZNJh48VFQrTLo2UkrM S6EAiiXEm8/ypgkgTbTylL9bhpBHfj8= -----END CERTIFICATE-----Generated at Sun Mar 1 18:26:46 2026 by rpki-client