$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e4c17cf1-466d-33fb-8eb5-f11592a21f03.roa File: e4c17cf1-466d-33fb-8eb5-f11592a21f03.roa (raw, json) Hash identifier: xmJS64UZv+MGtM14i68xtrUi5Y5RR91iF6c3VTMdJBI= Subject key identifier: 0D:19:19:50:C0:70:7F:09:FA:FE:39:75:42:CD:F9:40:76:9C:E6:A2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5CFAF54CA4FE04D72A1980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e4c17cf1-466d-33fb-8eb5-f11592a21f03.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 98.228.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5c:fa:f5:4c:a4:fe:04:d7:2a:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=0fe51f2c-8f8d-4e31-a54f-ba5230581457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:5b:6a:36:a2:e0:67:24:c7:83:7d:7b:81:0c: 21:7f:5f:5e:21:54:a1:a5:f7:ff:bb:7b:76:2d:0f: da:91:3e:9d:5c:c6:97:b5:92:b1:e0:27:0e:35:56: 33:0b:69:28:d1:21:2a:2f:f1:d9:c8:6b:99:df:0d: a6:9a:66:73:1f:fd:60:98:be:47:ec:c5:eb:10:8b: 22:ab:36:a4:00:c2:10:91:d4:68:0f:a6:9e:14:61: 09:3e:a4:2d:f0:02:76:5e:d0:09:da:ee:ac:54:c6: 18:99:fa:fc:9b:53:7c:28:d8:33:66:15:7a:38:0c: 7b:3a:b7:43:75:53:dc:1d:0e:04:b9:14:54:c5:06: 1f:ca:67:c2:66:ff:59:a3:af:b6:e5:e6:5f:61:e6: 9f:2f:63:d4:d1:7a:cb:c7:1a:5e:dc:a9:a8:bf:d6: e1:50:ed:b8:e9:98:54:c6:77:eb:f3:17:34:9e:47: 14:e4:13:92:ce:b7:3e:4b:94:bc:9b:a3:47:98:5c: f9:b0:da:52:20:a9:9f:d1:96:7d:e6:40:37:d6:68: ac:f1:60:15:fc:78:d8:ea:3d:69:4e:05:cb:37:ab: 03:71:65:52:d8:2c:29:e2:71:7b:af:c1:9b:4b:27: 49:b8:0c:72:43:6f:ed:3a:b3:e6:a3:6c:9e:e9:f9: ba:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:19:19:50:C0:70:7F:09:FA:FE:39:75:42:CD:F9:40:76:9C:E6:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e4c17cf1-466d-33fb-8eb5-f11592a21f03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.228.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:b0:8c:84:35:35:22:87:e1:9b:49:d1:b9:43:f0:66:f4:d4: 75:22:cb:db:35:c9:14:75:8e:37:04:3a:c6:01:98:cf:87:42: c0:f6:fc:c6:91:7f:76:7c:d6:4e:2e:64:ea:8b:0a:9c:91:de: 60:a2:d1:eb:6b:f9:2e:95:f2:08:9e:51:fa:30:48:1e:10:b6: be:a8:ce:f2:31:c7:0c:d4:e8:8d:10:b6:1e:6b:00:c9:a4:41: f4:b4:17:7d:12:15:c7:c7:14:b1:e6:e7:3c:6a:c8:2f:58:33: 99:5a:b1:c0:a2:fc:3a:00:26:24:66:d4:d3:28:42:29:1f:9e: 23:8b:5b:ad:e6:ad:9a:51:8c:3a:fc:0c:45:69:dc:5f:24:97: 3a:6a:63:38:f6:1b:29:73:ae:41:f5:0e:37:a2:c2:b2:50:37: 27:32:ad:ed:2f:0b:b5:1d:5c:b5:84:eb:28:07:7e:f9:76:a1: 45:c9:77:05:6c:04:e5:31:80:75:f0:30:ed:29:10:3c:3e:07: 29:3a:96:98:93:31:82:64:e7:3b:42:0f:90:8c:23:b7:7f:d4: 22:f3:3c:3c:a4:79:9e:5f:74:79:b4:6b:db:6b:3f:11:34:1e: 48:37:f7:ff:43:90:09:1f:1b:04:66:20:99:f1:ad:ab:a3:97: 2a:20:b6:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXPr1TKT+BNcqGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MGZlNTFmMmMtOGY4ZC00ZTMxLWE1NGYtYmE1MjMwNTgxNDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVtqNqLgZyTHg317gQwhf19eIVShpff/u3t2 LQ/akT6dXMaXtZKx4CcONVYzC2ko0SEqL/HZyGuZ3w2mmmZzH/1gmL5H7MXrEIsi qzakAMIQkdRoD6aeFGEJPqQt8AJ2XtAJ2u6sVMYYmfr8m1N8KNgzZhV6OAx7OrdD dVPcHQ4EuRRUxQYfymfCZv9Zo6+25eZfYeafL2PU0XrLxxpe3Kmov9bhUO246ZhU xnfr8xc0nkcU5BOSzrc+S5S8m6NHmFz5sNpSIKmf0ZZ95kA31mis8WAV/HjY6j1p TgXLN6sDcWVS2Cwp4nF7r8GbSydJuAxyQ2/tOrPmo2ye6fm60QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA0ZGVDAcH8J+v45dULN+UB2nOaiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTRjMTdjZjEtNDY2ZC0z M2ZiLThlYjUtZjExNTkyYTIxZjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYuQnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANCwjIQ1NSKH4ZtJ0blD8Gb01HUiy9s1yRR1jjcEOsYBmM+HQsD2/MaR f3Z81k4uZOqLCpyR3mCi0etr+S6V8gieUfowSB4Qtr6ozvIxxwzU6I0Qth5rAMmk QfS0F30SFcfHFLHm5zxqyC9YM5lascCi/DoAJiRm1NMoQikfniOLW63mrZpRjDr8 DEVp3F8klzpqYzj2GylzrkH1DjeiwrJQNycyre0vC7UdXLWE6ygHfvl2oUXJdwVs BOUxgHXwMO0pEDw+Byk6lpiTMYJk5ztCD5CMI7d/1CLzPDykeZ5fdHm0a9trPxE0 Hkg39/9DkAkfGwRmIJnxraujlyogtjQ= -----END CERTIFICATE-----Generated at Sun Mar 1 19:14:58 2026 by rpki-client