$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa843317-ad11-3214-bbd2-92bcbafc1e11.roa File: fa843317-ad11-3214-bbd2-92bcbafc1e11.roa (raw, json) Hash identifier: fLr7rxnfCErXsusOgjzQFi1C9SuS3hBLTp/KxNDEatE= Subject key identifier: 3F:F5:C8:8E:61:BE:E2:D6:D7:0A:D8:85:97:D6:4F:A4:0E:EE:B0:E9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5E159A3B7D40EA73DCD560 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa843317-ad11-3214-bbd2-92bcbafc1e11.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 98.248.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:15:9a:3b:7d:40:ea:73:dc:d5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=e548d81d-a0ab-45d7-8fc1-9ad8a7659f79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e4:7a:f2:d3:86:70:ab:49:68:eb:0e:08:19: 81:8b:5a:61:7b:8d:19:70:9e:71:d1:5d:17:a5:16: 86:45:9c:37:a6:a0:d9:53:7e:4c:1f:58:8d:25:c6: 47:da:f6:6b:0f:30:53:be:d8:cf:d2:ef:15:86:a1: 43:6e:e5:e3:65:55:fb:96:33:1a:da:79:2a:f3:f5: d6:07:7d:87:eb:26:90:3c:b5:9e:0b:b1:18:ab:e1: ae:27:36:8d:41:b9:f5:24:c7:90:69:40:a5:83:97: 9d:0d:cd:f5:d3:fd:c4:94:7c:5f:6c:38:a3:9d:8a: e2:67:a1:1a:d6:79:2c:0d:7f:e9:48:18:de:bf:50: 70:26:20:fa:45:30:41:f6:b6:8d:13:79:07:18:df: 87:f5:1e:ec:85:ec:97:8f:a5:90:23:36:b9:39:7f: bb:b6:74:9c:75:b4:ad:fb:71:47:81:e6:b0:41:22: 27:02:43:3d:44:e6:77:df:e6:b3:ff:6f:1e:f6:a0: ba:21:8c:3c:01:1a:70:87:91:a0:ba:5d:3d:6e:a5: 20:d3:23:70:66:d5:72:d7:ca:4a:1c:f7:fc:37:34: 40:ae:b4:a3:1b:e9:31:21:45:d9:5e:44:20:94:8c: eb:bc:9d:cd:a4:d0:7f:40:a8:61:ab:21:7a:da:9a: 29:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:F5:C8:8E:61:BE:E2:D6:D7:0A:D8:85:97:D6:4F:A4:0E:EE:B0:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa843317-ad11-3214-bbd2-92bcbafc1e11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.248.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:e8:1c:f8:33:db:d8:40:5f:99:d7:f6:1e:fc:9e:57:bb:e4: ad:37:2b:3e:03:94:0e:e8:ee:fa:88:85:34:06:9d:89:52:69: 0b:b9:5b:c3:ec:90:94:72:f4:6b:88:43:50:8c:7d:46:6b:32: e1:7c:6b:f8:b4:7b:c8:80:f4:83:b2:5d:3a:f5:11:61:8f:9c: 0d:10:9c:0e:b6:8b:24:8d:9c:c3:73:e6:7c:20:1c:67:25:48: 73:bb:91:9c:fc:c6:66:52:57:cc:a3:72:3c:11:4d:45:6b:ad: 14:dd:ac:f7:01:33:e3:bf:8e:98:b7:45:d3:23:5a:d5:a9:8f: 1d:7a:60:ca:4b:a4:a2:18:74:bd:c3:c1:4f:4b:d0:b4:5a:1e: 07:b6:ef:ba:53:ae:6a:30:97:6a:be:87:2d:9a:2b:02:eb:ee: 0d:4c:8b:57:af:c6:1a:c5:06:3d:51:ca:84:f9:7c:fa:f0:45: 6a:b5:3e:4b:16:0a:97:54:2f:f2:64:76:e7:80:9a:71:3d:21: 6d:11:76:88:58:19:8e:ce:f3:a1:d5:d0:49:a1:2a:fe:82:f1: 5e:8d:fa:f7:72:9f:43:25:ed:e5:97:77:51:2e:54:77:a8:6b: 9b:3a:6a:a9:4d:86:da:9b:b6:96:d5:23:d8:45:4b:71:24:b3: e6:1e:d0:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXhWaO31A6nPc1WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZTU0OGQ4MWQtYTBhYi00NWQ3LThmYzEtOWFkOGE3NjU5Zjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOR68tOGcKtJaOsOCBmBi1phe40ZcJ5x0V0X pRaGRZw3pqDZU35MH1iNJcZH2vZrDzBTvtjP0u8VhqFDbuXjZVX7ljMa2nkq8/XW B32H6yaQPLWeC7EYq+GuJzaNQbn1JMeQaUClg5edDc310/3ElHxfbDijnYriZ6Ea 1nksDX/pSBjev1BwJiD6RTBB9raNE3kHGN+H9R7sheyXj6WQIza5OX+7tnScdbSt +3FHgeawQSInAkM9ROZ33+az/28e9qC6IYw8ARpwh5Ggul09bqUg0yNwZtVy18pK HPf8NzRArrSjG+kxIUXZXkQglIzrvJ3NpNB/QKhhqyF62poplQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/1yI5hvuLW1wrYhZfWT6QO7rDpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmE4NDMzMTctYWQxMS0z MjE0LWJiZDItOTJiY2JhZmMxZTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYvh4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfoHPgz29hAX5nX9h78nle75K03Kz4DlA7o7vqIhTQGnYlSaQu5W8Ps kJRy9GuIQ1CMfUZrMuF8a/i0e8iA9IOyXTr1EWGPnA0QnA62iySNnMNz5nwgHGcl SHO7kZz8xmZSV8yjcjwRTUVrrRTdrPcBM+O/jpi3RdMjWtWpjx16YMpLpKIYdL3D wU9L0LRaHge277pTrmowl2q+hy2aKwLr7g1Mi1evxhrFBj1RyoT5fPrwRWq1PksW CpdUL/JkdueAmnE9IW0RdohYGY7O86HV0EmhKv6C8V6N+vdyn0Ml7eWXd1EuVHeo a5s6aqlNhtqbtpbVI9hFS3Eks+Ye0CA= -----END CERTIFICATE-----Generated at Sun Mar 1 20:38:39 2026 by rpki-client