$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d804d108-dfac-3511-9059-ba1a106e5c73.roa File: d804d108-dfac-3511-9059-ba1a106e5c73.roa (raw, json) Hash identifier: Qi+CXvz3uQ6XtNAoXntfQwPgKNTgyvsOM7N9BTd6uQ4= Subject key identifier: 74:9A:DB:4A:00:2B:F3:6E:29:56:83:81:5E:F5:0B:42:FE:0F:CC:8D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5E1F70D95BFD99A53411C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d804d108-dfac-3511-9059-ba1a106e5c73.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 98.35.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:1f:70:d9:5b:fd:99:a5:34:11:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=96e725cc-b504-4ee2-86f1-ab66f9c6b1e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:32:d0:98:45:7d:54:bf:9f:99:80:a9:28:7c: b9:77:aa:e4:aa:da:78:0d:14:f3:6d:fb:f1:1e:66: 3a:34:0a:d2:29:98:64:fe:90:10:25:57:28:14:81: 0b:5c:cf:eb:07:b5:c7:bb:37:1e:7f:28:0d:36:63: da:d9:2b:c1:17:da:87:56:0a:29:57:eb:1c:3b:e6: 59:15:75:f4:8b:ee:8a:29:ff:40:6b:0d:0c:0b:bd: 42:e1:43:a7:a1:36:a2:6e:88:59:01:67:f7:0b:4f: 22:c8:1f:79:33:ba:7e:42:57:da:02:08:54:42:76: 47:70:51:1c:ab:ac:03:7e:a7:da:f9:66:d6:65:a6: 74:3d:09:46:51:7b:2b:b0:b1:d6:da:14:ca:f1:49: 7a:fe:54:17:50:1e:1c:6c:d0:03:a8:91:de:b9:55: 34:5c:d7:1d:ee:b9:93:b6:9b:2f:22:24:d6:ae:2c: 13:ed:67:12:97:19:88:08:29:b3:52:3b:67:3d:96: 2b:0f:7f:5b:01:84:77:af:9c:59:a0:72:f0:6a:13: a2:c6:be:db:8a:fe:16:8b:96:fd:1c:f2:94:94:f3: 55:a5:d1:bb:99:30:35:a3:b5:72:4f:c6:59:9c:0e: fb:ca:e8:02:8c:e8:3e:06:66:72:07:fb:a3:1a:c0: 75:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:9A:DB:4A:00:2B:F3:6E:29:56:83:81:5E:F5:0B:42:FE:0F:CC:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d804d108-dfac-3511-9059-ba1a106e5c73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.35.82.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:09:03:24:e8:8e:cb:96:4c:85:9e:a3:38:6f:30:ba:88:1d: 0c:29:7e:00:1a:94:ea:b0:36:08:e7:f2:26:8f:fc:f8:33:eb: 26:c9:7f:a8:9d:7b:cc:3f:46:b1:64:28:06:47:6d:0d:88:d4: ba:eb:20:0f:12:33:ba:ee:68:83:2c:aa:53:97:e5:de:70:21: 51:07:b7:15:d6:88:ca:62:ff:cb:2c:3e:bc:26:43:21:20:bf: d6:90:c6:c1:72:9a:1f:47:c2:91:dc:ce:68:23:5d:9f:ca:e4: 1a:77:59:f0:fd:da:b2:61:82:04:12:84:47:16:09:af:33:8b: 26:ff:37:58:33:f9:4f:0f:f1:5b:73:1f:99:92:de:65:07:1c: 79:91:61:80:4b:0a:73:3d:7a:11:28:50:60:5e:67:f2:1f:fc: 37:5d:bc:37:89:d7:8b:9e:90:b2:e8:74:d0:1d:32:b4:c3:31: b6:18:07:f7:a3:3e:ca:1b:88:3f:61:05:d9:a3:e5:58:fa:7e: 2f:63:48:71:d4:ec:a8:93:d1:ae:0d:80:35:10:13:a5:6b:f3: 1f:01:e2:ca:0d:af:fb:eb:41:e7:09:82:df:ff:83:8f:7d:2f: 59:c2:54:9a:05:6d:74:30:cb:cb:fa:63:f6:ac:74:b8:ea:4a: 60:f9:b0:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXh9w2Vv9maU0EcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk OTZlNzI1Y2MtYjUwNC00ZWUyLTg2ZjEtYWI2NmY5YzZiMWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7jLQmEV9VL+fmYCpKHy5d6rkqtp4DRTzbfvx HmY6NArSKZhk/pAQJVcoFIELXM/rB7XHuzcefygNNmPa2SvBF9qHVgopV+scO+ZZ FXX0i+6KKf9Aaw0MC71C4UOnoTaibohZAWf3C08iyB95M7p+QlfaAghUQnZHcFEc q6wDfqfa+WbWZaZ0PQlGUXsrsLHW2hTK8Ul6/lQXUB4cbNADqJHeuVU0XNcd7rmT tpsvIiTWriwT7WcSlxmICCmzUjtnPZYrD39bAYR3r5xZoHLwahOixr7biv4Wi5b9 HPKUlPNVpdG7mTA1o7VyT8ZZnA77yugCjOg+BmZyB/ujGsB1xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHSa20oAK/NuKVaDgV71C0L+D8yNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDgwNGQxMDgtZGZhYy0z NTExLTkwNTktYmExYTEwNmU1YzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYiNSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4JAyTojsuWTIWeozhvMLqIHQwpfgAalOqwNgjn8iaP/Pgz6ybJf6id e8w/RrFkKAZHbQ2I1LrrIA8SM7ruaIMsqlOX5d5wIVEHtxXWiMpi/8ssPrwmQyEg v9aQxsFymh9HwpHczmgjXZ/K5Bp3WfD92rJhggQShEcWCa8ziyb/N1gz+U8P8Vtz H5mS3mUHHHmRYYBLCnM9ehEoUGBeZ/If/DddvDeJ14uekLLodNAdMrTDMbYYB/ej PsobiD9hBdmj5Vj6fi9jSHHU7KiT0a4NgDUQE6Vr8x8B4soNr/vrQecJgt//g499 L1nCVJoFbXQwy8v6Y/asdLjqSmD5sK8= -----END CERTIFICATE-----Generated at Mon Mar 2 16:45:49 2026 by rpki-client