$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0dfa501-8f30-31bd-9da1-4e0a786dc5c8.roa File: e0dfa501-8f30-31bd-9da1-4e0a786dc5c8.roa (raw, json) Hash identifier: 5IG8c7h7+eovvxa2pnCbqinEote7gJT4h3rZH2fDKlU= Subject key identifier: 68:07:96:89:30:27:8A:83:48:EC:87:6B:45:8A:BB:05:97:72:5E:BE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5898E329515FDDBC400F80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0dfa501-8f30-31bd-9da1-4e0a786dc5c8.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 98.222.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:98:e3:29:51:5f:dd:bc:40:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=a000ab8a-91c7-499e-b11a-08d49b9836c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:4f:04:f1:ec:13:67:03:6e:05:ef:42:71:4c: f4:9a:2c:ca:b5:4a:f0:fe:1a:94:e2:72:99:8b:1d: 63:9d:18:63:be:38:85:5b:24:c0:c0:4b:f9:96:99: 2c:65:ae:3e:be:0c:73:d0:16:41:98:a9:f1:94:af: 0c:97:d6:58:f2:4b:89:ea:64:64:58:ec:7a:01:53: 16:48:54:e7:8c:71:c8:89:12:69:71:6b:62:c5:45: de:a9:4f:b9:e8:8e:c9:99:af:0a:e3:90:91:68:b9: fb:5f:44:1c:0e:a1:3c:32:6c:0e:9a:72:06:37:98: ba:1b:ac:37:d2:1f:06:24:d2:ef:bf:4e:b7:6d:3a: d1:36:65:e1:93:e5:41:8b:ce:d0:fe:8c:87:f0:d6: f3:9f:d3:70:53:fc:0d:0f:9a:e9:22:fc:5f:3c:02: eb:80:09:02:b8:2f:d7:dc:c2:b6:28:1b:02:74:a6: 0f:b7:e9:c9:4c:16:01:27:e9:96:13:76:7b:47:5a: 47:b7:72:4f:98:47:76:b8:b3:91:6d:e0:b1:46:2d: d5:66:9c:4d:22:b8:fc:c6:ff:77:20:8c:10:b4:5b: d9:e7:38:f1:51:74:8b:e9:49:1d:d9:c1:11:c0:c4: b9:05:37:ae:62:2a:87:4a:fa:77:b0:9c:19:b0:0f: 92:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:07:96:89:30:27:8A:83:48:EC:87:6B:45:8A:BB:05:97:72:5E:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0dfa501-8f30-31bd-9da1-4e0a786dc5c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.222.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:88:5a:9e:b3:23:37:c0:8e:f5:e5:2e:de:1d:f9:b6:76:43: 5b:55:4b:3a:fd:e3:43:4c:8f:c7:ca:c8:f4:f1:fa:fd:7e:a9: 65:f1:85:61:0c:89:bd:69:e0:d3:4c:72:fb:8a:c0:60:5e:6e: 56:c5:5d:1f:70:64:2b:ce:74:d8:90:6b:89:aa:91:e4:98:5e: 56:c1:b0:fa:81:56:c8:e9:02:70:77:74:7a:cd:74:76:6e:56: 94:3d:e3:33:75:15:77:fd:38:37:da:61:23:5c:1d:7a:24:da: b4:82:9f:6b:88:58:2f:be:47:6f:0b:95:41:df:94:fe:a4:cb: 79:28:7c:71:20:99:5f:ed:9d:9c:16:8a:a1:da:65:3e:83:75: d4:9b:c7:15:90:22:02:15:ee:0a:37:45:55:4d:d6:89:cf:0e: 4e:5f:21:68:a7:07:be:df:20:10:f0:17:43:19:12:9e:3d:0b: 68:db:76:16:3d:b5:ff:eb:8e:74:96:0c:b1:58:75:bd:6e:a5: 41:93:56:3c:b9:c9:fb:95:1b:0f:db:45:7d:9c:70:8b:1a:ea: 17:15:e6:41:de:22:52:1b:33:82:5b:d7:96:25:30:ff:4f:cf: b4:d9:a9:35:7f:06:5e:44:a1:c6:08:b2:de:81:40:3d:20:be: 67:b5:b3:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWJjjKVFf3bxAD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YTAwMGFiOGEtOTFjNy00OTllLWIxMWEtMDhkNDliOTgzNmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgE8E8ewTZwNuBe9CcUz0mizKtUrw/hqU4nKZ ix1jnRhjvjiFWyTAwEv5lpksZa4+vgxz0BZBmKnxlK8Ml9ZY8kuJ6mRkWOx6AVMW SFTnjHHIiRJpcWtixUXeqU+56I7Jma8K45CRaLn7X0QcDqE8MmwOmnIGN5i6G6w3 0h8GJNLvv063bTrRNmXhk+VBi87Q/oyH8Nbzn9NwU/wND5rpIvxfPALrgAkCuC/X 3MK2KBsCdKYPt+nJTBYBJ+mWE3Z7R1pHt3JPmEd2uLORbeCxRi3VZpxNIrj8xv93 IIwQtFvZ5zjxUXSL6Ukd2cERwMS5BTeuYiqHSvp3sJwZsA+S0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgHlokwJ4qDSOyHa0WKuwWXcl6+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTBkZmE1MDEtOGYzMC0z MWJkLTlkYTEtNGUwYTc4NmRjNWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYt5EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWIWp6zIzfAjvXlLt4d+bZ2Q1tVSzr940NMj8fKyPTx+v1+qWXxhWEM ib1p4NNMcvuKwGBeblbFXR9wZCvOdNiQa4mqkeSYXlbBsPqBVsjpAnB3dHrNdHZu VpQ94zN1FXf9ODfaYSNcHXok2rSCn2uIWC++R28LlUHflP6ky3kofHEgmV/tnZwW iqHaZT6DddSbxxWQIgIV7go3RVVN1onPDk5fIWinB77fIBDwF0MZEp49C2jbdhY9 tf/rjnSWDLFYdb1upUGTVjy5yfuVGw/bRX2ccIsa6hcV5kHeIlIbM4Jb15YlMP9P z7TZqTV/Bl5EocYIst6BQD0gvme1sxA= -----END CERTIFICATE-----Generated at Sun Mar 1 20:27:56 2026 by rpki-client