$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f8ee927b-42b4-300c-9ead-d7012b88d360.roa File: f8ee927b-42b4-300c-9ead-d7012b88d360.roa (raw, json) Hash identifier: Jy8CARqkR2f4Wl3z6UrrqdzdooOU8zTBmdcCYrJaAAU= Subject key identifier: F8:2F:BC:CB:93:11:9C:E6:AA:7F:F5:F9:26:48:E5:91:C4:B2:03:75 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5E1D4B2949786A8D511E80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f8ee927b-42b4-300c-9ead-d7012b88d360.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 98.35.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:1d:4b:29:49:78:6a:8d:51:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=000fc51c-b300-437e-af1a-01413b97fc47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:13:0c:4b:1a:ce:b8:55:19:1e:f9:ab:f7:94: e9:88:c9:49:24:1a:aa:0a:09:0e:0a:59:91:92:b1: c9:2e:42:c5:d5:fa:80:a6:2f:cb:65:d6:c3:a1:ae: 40:7f:57:da:fc:3f:3a:8f:78:89:16:dc:1b:ab:c8: aa:74:56:d7:52:f4:6f:89:b5:db:66:dd:9a:f4:0f: ab:b6:92:b4:cf:d1:da:95:e5:3f:c6:19:cc:48:09: c5:26:1d:89:5b:3b:50:d3:64:af:72:28:4e:b5:23: 32:8b:95:50:15:cc:c4:e6:c3:3b:c1:33:b2:1b:12: 19:35:1e:12:d4:2b:d5:11:7b:44:16:be:ff:c7:4f: 0c:61:50:b4:24:87:30:4c:d4:47:26:bb:eb:47:6f: 4d:4d:59:9a:70:bb:9b:aa:06:14:02:a1:ba:62:a2: e8:2e:87:bf:b6:17:68:9c:b0:38:f1:82:f2:49:51: b6:13:2b:21:6b:72:a0:45:09:bb:40:e7:32:26:33: 2f:fd:b5:27:81:34:97:ea:44:7d:56:a4:10:dc:45: 7a:d7:0d:80:51:3d:c2:9b:85:c6:b5:7d:f6:ea:60: df:de:c0:36:65:4f:18:ff:e6:3a:c0:bf:bd:05:7a: 1e:f7:22:db:5e:ac:0a:4a:7d:66:b4:a3:51:63:b7: 0f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:2F:BC:CB:93:11:9C:E6:AA:7F:F5:F9:26:48:E5:91:C4:B2:03:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f8ee927b-42b4-300c-9ead-d7012b88d360.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.35.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:ad:2f:0b:80:59:08:1b:c0:28:0d:82:5c:e5:39:f0:0b:3e: 63:35:6b:05:7f:3c:c6:2d:1b:06:0c:63:e1:aa:e6:a0:5e:f1: 77:fa:a0:eb:a5:13:c0:93:b0:d8:aa:e8:24:e2:d5:81:17:4a: b8:e6:b5:42:67:8d:18:1e:02:e5:fe:53:0a:33:26:98:61:42: 67:02:16:a9:51:4f:f5:07:00:7b:de:03:11:e1:48:9e:78:7d: bc:3b:88:1d:12:91:b5:63:4a:ce:59:06:fe:36:ab:a4:48:6f: 95:74:9e:e4:1f:07:f1:cc:b2:8b:0e:0e:3d:83:91:b1:6e:40: 83:ce:da:a8:83:e6:7a:31:6c:7d:e9:1c:75:49:66:a7:57:04: 7a:7e:43:12:4e:42:ff:22:67:53:03:18:90:08:cf:69:9f:bb: 2a:8d:62:ee:b6:10:0d:97:25:1b:45:0f:ec:25:4d:20:63:88: c5:2f:46:b7:19:7e:7b:e3:c5:70:7a:1c:42:37:60:76:a2:f1: bf:8e:12:08:3a:66:58:48:72:fa:56:a9:11:db:04:eb:fe:9b: 58:24:21:1f:b9:b2:a3:28:ca:b4:92:e9:9a:2d:00:b1:98:95: 52:1e:c9:71:ae:bd:96:b2:d1:44:08:d5:05:cf:89:b9:60:29: 32:d7:b3:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXh1LKUl4ao1RHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MDAwZmM1MWMtYjMwMC00MzdlLWFmMWEtMDE0MTNiOTdmYzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xMMSxrOuFUZHvmr95TpiMlJJBqqCgkOClmR krHJLkLF1fqApi/LZdbDoa5Af1fa/D86j3iJFtwbq8iqdFbXUvRvibXbZt2a9A+r tpK0z9HaleU/xhnMSAnFJh2JWztQ02SvcihOtSMyi5VQFczE5sM7wTOyGxIZNR4S 1CvVEXtEFr7/x08MYVC0JIcwTNRHJrvrR29NTVmacLubqgYUAqG6YqLoLoe/thdo nLA48YLySVG2Eysha3KgRQm7QOcyJjMv/bUngTSX6kR9VqQQ3EV61w2AUT3Cm4XG tX326mDf3sA2ZU8Y/+Y6wL+9BXoe9yLbXqwKSn1mtKNRY7cPCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPgvvMuTEZzmqn/1+SZI5ZHEsgN1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjhlZTkyN2ItNDJiNC0z MDBjLTllYWQtZDcwMTJiODhkMzYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYiPdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+tLwuAWQgbwCgNglzlOfALPmM1awV/PMYtGwYMY+Gq5qBe8Xf6oOul E8CTsNiq6CTi1YEXSrjmtUJnjRgeAuX+UwozJphhQmcCFqlRT/UHAHveAxHhSJ54 fbw7iB0SkbVjSs5ZBv42q6RIb5V0nuQfB/HMsosODj2DkbFuQIPO2qiD5noxbH3p HHVJZqdXBHp+QxJOQv8iZ1MDGJAIz2mfuyqNYu62EA2XJRtFD+wlTSBjiMUvRrcZ fnvjxXB6HEI3YHai8b+OEgg6ZlhIcvpWqRHbBOv+m1gkIR+5sqMoyrSS6ZotALGY lVIeyXGuvZay0UQI1QXPiblgKTLXs4k= -----END CERTIFICATE-----Generated at Sun Mar 1 18:58:34 2026 by rpki-client