$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aaa5dcdb-0d9f-3dad-8910-eaf2c2e7e143.roa File: aaa5dcdb-0d9f-3dad-8910-eaf2c2e7e143.roa (raw, json) Hash identifier: 6t8rkIYJtDWmTdImzBEopNA+CBGldRI79TMvmVM25wA= Subject key identifier: 45:D6:F7:4A:28:7F:13:34:1C:ED:65:C6:5C:D5:41:95:C4:EE:2B:D3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D143D1614CBF00743BB71EB00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aaa5dcdb-0d9f-3dad-8910-eaf2c2e7e143.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 33651 IP address blocks: 98.35.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Mar 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:16:14:cb:f0:07:43:bb:71:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=384930d1-efb1-4b53-bf31-ff16bed48b5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c1:91:98:d9:ce:a7:db:51:bf:c9:f8:7e:48: 40:ff:e2:01:ed:8f:82:3c:90:d6:a2:e5:93:d1:32: f1:fb:79:8d:e7:3e:67:19:fd:f7:e3:c4:f8:bb:05: f0:26:82:87:ea:b0:a3:b9:fa:70:ff:a2:24:2b:9b: 8f:7f:df:fa:47:db:6e:de:67:2a:8a:13:82:fa:61: cc:55:f4:77:39:55:8f:12:71:01:38:f2:be:70:90: de:0c:d6:d2:0a:13:bb:e8:cc:1c:f1:b5:85:b6:02: fa:0d:0d:47:91:b4:d0:47:cf:55:39:23:96:e3:7f: 1c:db:1d:12:a2:b7:a2:50:35:e0:4c:4c:fb:06:c6: 12:a5:5f:af:e5:a0:71:3f:25:ec:90:f6:18:01:a4: 2a:9d:81:97:ad:1d:25:c1:ce:b5:55:6c:33:b4:76: 87:48:7f:f8:37:32:a0:6c:07:77:e3:00:c1:b7:8b: c6:5f:cb:af:47:66:f0:8d:cd:fb:25:0d:d4:77:d8: 96:a4:34:ce:e3:7c:61:d0:f7:fb:1d:99:dd:11:cc: d0:f4:5a:c0:e4:9d:c1:ef:ae:16:fb:69:a2:d1:9a: 79:a1:8d:32:b6:23:1d:c4:e5:0c:48:b9:7d:7d:be: 93:c8:da:ee:c3:cf:74:d6:47:9d:1e:6c:23:57:ba: e8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D6:F7:4A:28:7F:13:34:1C:ED:65:C6:5C:D5:41:95:C4:EE:2B:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aaa5dcdb-0d9f-3dad-8910-eaf2c2e7e143.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.35.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:cb:d6:8f:b4:5b:6d:d5:86:af:47:a2:19:3f:7b:a6:a9:07: a7:0e:f4:44:1f:d1:9b:38:76:ea:97:0e:41:f2:cb:67:75:d1: 51:7c:ea:96:91:19:0c:31:70:1f:35:01:30:9a:73:cc:f3:92: cc:80:3c:02:00:36:00:f6:cf:6e:59:ae:63:49:5d:d1:5f:71: 81:ac:bc:89:a0:43:b9:0c:90:f8:77:1b:ff:68:54:04:96:cc: e2:cb:6f:5d:de:cb:95:7c:69:6c:6e:9c:72:2b:d8:b3:36:c2: a4:98:14:be:86:d1:4d:86:ea:18:60:11:40:5a:7d:77:8c:b0: 0f:ae:7d:91:13:bd:5d:0b:42:2b:9b:96:6d:e7:c7:88:51:dd: a0:ac:a5:63:90:68:58:6d:f9:aa:03:4b:39:83:0a:18:07:53: 7c:d9:f2:cd:41:33:a3:61:4b:1e:85:71:10:18:46:aa:c4:fd: ec:83:30:82:f9:7d:6f:0a:91:38:b9:de:9d:af:7b:d3:0a:34: df:41:42:b2:19:36:87:07:aa:42:5b:65:3b:a7:9b:52:4b:21: b1:2f:bf:32:d2:32:20:6c:81:84:2a:a7:26:a7:96:43:d3:08: 42:96:a0:b5:88:5a:70:c2:c0:eb:30:84:46:27:5c:72:58:93: 48:81:39:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPRYUy/AHQ7tx6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk Mzg0OTMwZDEtZWZiMS00YjUzLWJmMzEtZmYxNmJlZDQ4YjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMGRmNnOp9tRv8n4fkhA/+IB7Y+CPJDWouWT 0TLx+3mN5z5nGf3348T4uwXwJoKH6rCjufpw/6IkK5uPf9/6R9tu3mcqihOC+mHM VfR3OVWPEnEBOPK+cJDeDNbSChO76Mwc8bWFtgL6DQ1HkbTQR89VOSOW438c2x0S oreiUDXgTEz7BsYSpV+v5aBxPyXskPYYAaQqnYGXrR0lwc61VWwztHaHSH/4NzKg bAd34wDBt4vGX8uvR2bwjc37JQ3Ud9iWpDTO43xh0Pf7HZndEczQ9FrA5J3B764W +2mi0Zp5oY0ytiMdxOUMSLl9fb6TyNruw8901kedHmwjV7roiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXW90oofxM0HO1lxlzVQZXE7ivTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWFhNWRjZGItMGQ5Zi0z ZGFkLTg5MTAtZWFmMmMyZTdlMTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYiMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7L1o+0W23Vhq9Hohk/e6apB6cO9EQf0Zs4duqXDkHyy2d10VF86paR GQwxcB81ATCac8zzksyAPAIANgD2z25ZrmNJXdFfcYGsvImgQ7kMkPh3G/9oVASW zOLLb13ey5V8aWxunHIr2LM2wqSYFL6G0U2G6hhgEUBafXeMsA+ufZETvV0LQiub lm3nx4hR3aCspWOQaFht+aoDSzmDChgHU3zZ8s1BM6NhSx6FcRAYRqrE/eyDMIL5 fW8KkTi53p2ve9MKNN9BQrIZNocHqkJbZTunm1JLIbEvvzLSMiBsgYQqpyanlkPT CEKWoLWIWnDCwOswhEYnXHJYk0iBOX4= -----END CERTIFICATE-----Generated at Sat Mar 7 11:39:07 2026 by rpki-client