$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/04c4ff3f-33aa-3550-8e99-e3c724d7c968.roa File: 04c4ff3f-33aa-3550-8e99-e3c724d7c968.roa (raw, json) Hash identifier: Ly3RR9SolwjfAnWxRg8792yAJv8czFLX2lBspGY8bMA= Subject key identifier: C2:8D:ED:6F:53:70:98:37:F0:01:E6:A8:08:0B:41:F6:A1:2C:28:A9 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584CC34740D1DDD9481B5CB0E700 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/04c4ff3f-33aa-3550-8e99-e3c724d7c968.roa Signing time: Thu 05 Feb 2026 14:00:40 +0000 ROA not before: Thu 05 Feb 2026 14:00:40 +0000 ROA not after: Wed 06 May 2026 13:00:40 +0000 asID: 22781 IP address blocks: 98.158.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c3:47:40:d1:dd:d9:48:1b:5c:b0:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Feb 5 14:00:40 2026 GMT Not After : May 6 13:00:40 2026 GMT Subject: CN=c591cc74-a0eb-4a9a-bc16-27f54e6655b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:3b:71:72:0b:96:13:0e:4d:45:a5:f3:76:75: b9:67:bb:e6:99:07:b2:37:30:a3:dc:a5:ed:4b:1c: 77:1e:06:cc:89:5a:60:54:c3:41:8d:38:03:ae:d1: 3d:ff:9a:62:bf:4c:e4:13:74:8e:c4:3f:d0:fb:0c: 15:dd:eb:45:c3:b0:13:55:70:34:40:b0:90:d1:54: 58:3d:01:a1:9f:22:23:ea:d2:8f:4f:74:1a:2f:23: ad:54:fc:eb:4d:a4:25:70:4d:c8:d8:ec:12:79:d3: 96:a6:0f:5e:9d:9a:cf:e3:d0:c5:5d:0b:b2:0d:90: 92:8b:54:9c:42:9a:bb:4a:bd:1b:d9:b1:f4:69:5a: 20:39:54:1f:23:5a:dc:46:57:c4:bd:be:6d:d0:d7: 32:d3:bc:65:88:0f:54:6d:6c:b5:2a:86:a6:ea:ea: 90:5a:e1:41:6d:94:7c:43:52:c6:ad:de:49:05:81: e6:57:a8:1f:9f:03:c6:da:78:80:d2:b3:be:3e:82: 6b:61:85:64:1d:32:c8:c5:21:52:8e:d5:0d:73:65: d3:ba:22:1f:80:78:d2:2e:8e:82:bc:b5:d6:4c:18: 33:8b:08:16:6f:06:9f:c6:0b:27:60:94:58:61:e3: 11:49:2a:38:13:4a:ef:3f:16:d7:a0:49:f1:32:2d: 04:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:8D:ED:6F:53:70:98:37:F0:01:E6:A8:08:0B:41:F6:A1:2C:28:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/04c4ff3f-33aa-3550-8e99-e3c724d7c968.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 98.158.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:87:17:87:a4:ed:c1:fc:43:0f:74:0f:aa:d9:fc:31:8a:cb: 9d:aa:b5:4c:0b:e4:42:7c:be:d2:3d:c5:8f:9c:14:16:2c:a3: d3:0b:fa:43:3c:d4:41:09:00:a7:41:e3:c6:7f:fc:b0:1f:2f: 12:69:67:cf:c1:41:f0:5a:99:15:16:8a:cd:ff:9f:3d:e9:7b: 3c:31:4c:9d:35:f9:92:17:d1:ad:d6:69:0d:d6:e6:89:3f:9e: 2f:f2:e5:35:8b:d6:00:0c:9c:ea:dc:4b:7f:a1:22:f9:16:55: fe:71:51:14:1d:bf:35:bf:b7:4a:f1:18:94:d8:80:b7:98:c7: 88:c7:9f:80:4f:49:e9:0c:8b:f1:05:4e:0f:ef:47:62:3e:d6: 65:a4:37:3c:9c:1d:79:c0:95:b8:de:7b:15:55:6f:69:c7:80: 1e:8b:d4:91:09:e8:98:41:24:78:78:4b:70:9c:8e:83:a4:3e: 95:e5:8c:57:32:52:5e:1c:74:7a:fb:fe:7b:ce:3b:03:d2:15: 55:77:32:8d:a7:68:c4:59:bb:4b:2d:3a:a2:58:a6:27:61:9a: 6c:24:15:37:f2:c8:21:a4:09:b0:5f:98:e3:4d:ce:79:ab:62: f5:9c:bb:2f:74:a9:64:57:1a:82:fe:21:74:a3:91:70:0a:a5: ec:85:98:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzDR0DR3dlIG1yw5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI2MDIwNTE0MDA0MFoXDTI2MDUwNjEzMDA0MFowLzEtMCsGA1UEAxMk YzU5MWNjNzQtYTBlYi00YTlhLWJjMTYtMjdmNTRlNjY1NWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDtxcguWEw5NRaXzdnW5Z7vmmQeyNzCj3KXt Sxx3HgbMiVpgVMNBjTgDrtE9/5piv0zkE3SOxD/Q+wwV3etFw7ATVXA0QLCQ0VRY PQGhnyIj6tKPT3QaLyOtVPzrTaQlcE3I2OwSedOWpg9enZrP49DFXQuyDZCSi1Sc Qpq7Sr0b2bH0aVogOVQfI1rcRlfEvb5t0Ncy07xliA9UbWy1Koam6uqQWuFBbZR8 Q1LGrd5JBYHmV6gfnwPG2niA0rO+PoJrYYVkHTLIxSFSjtUNc2XTuiIfgHjSLo6C vLXWTBgziwgWbwafxgsnYJRYYeMRSSo4E0rvPxbXoEnxMi0ElwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKN7W9TcJg38AHmqAgLQfahLCipMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMDRjNGZmM2YtMzNhYS0z NTUwLThlOTktZTNjNzI0ZDdjOTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYp5wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOHF4ek7cH8Qw90D6rZ/DGKy52qtUwL5EJ8vtI9xY+cFBYso9ML+kM8 1EEJAKdB48Z//LAfLxJpZ8/BQfBamRUWis3/nz3pezwxTJ01+ZIX0a3WaQ3W5ok/ ni/y5TWL1gAMnOrcS3+hIvkWVf5xURQdvzW/t0rxGJTYgLeYx4jHn4BPSekMi/EF Tg/vR2I+1mWkNzycHXnAlbjeexVVb2nHgB6L1JEJ6JhBJHh4S3CcjoOkPpXljFcy Ul4cdHr7/nvOOwPSFVV3Mo2naMRZu0stOqJYpidhmmwkFTfyyCGkCbBfmONNznmr YvWcuy90qWRXGoL+IXSjkXAKpeyFmFU= -----END CERTIFICATE-----Generated at Mon Mar 2 19:09:59 2026 by rpki-client