$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b23d896-492a-325b-924d-e5837a2630e5.roa File: 2b23d896-492a-325b-924d-e5837a2630e5.roa (raw, json) Hash identifier: Q843XQoIlXJ/N2D4JF58UY5kKnV/Ch5MKvBRM7T0qDg= Subject key identifier: 09:63:4F:88:3E:52:DB:58:D7:A0:90:6C:19:DF:5A:5D:E5:55:46:35 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F11A1282F2871379ED1B7D580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b23d896-492a-325b-924d-e5837a2630e5.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33651 IP address blocks: 98.51.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a1:28:2f:28:71:37:9e:d1:b7:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=0031d838-d4d0-41d6-8b7d-395b3607ac7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fd:08:e9:0a:fb:60:c2:6c:ab:c3:d5:46:8c: 4b:3f:e7:87:84:5f:0e:dd:e4:46:f5:6b:83:4f:5b: 77:cc:31:53:43:89:ba:f1:35:af:5c:46:5a:24:4d: 1d:c6:a4:3e:3b:3d:83:c7:20:05:e3:40:17:51:76: 71:a9:fb:2d:0e:5a:83:12:af:3a:a0:ab:75:6b:25: 73:e3:3a:2e:bc:3a:b4:66:a0:4c:08:2f:46:88:fd: 21:46:74:73:a7:72:0e:07:1a:22:b9:0a:bd:ca:f9: 9b:bd:1e:83:46:18:87:93:bf:ee:b3:82:0b:c2:ec: 88:bc:30:d2:b8:73:ed:fd:5a:22:ad:6f:c6:77:c7: f9:70:a8:d6:f0:ca:a5:b7:8b:1b:17:47:a3:4d:15: 87:8e:95:fb:1d:d9:7c:c1:7f:03:50:db:32:47:9f: 95:97:2d:8f:dd:d0:f8:6d:86:77:73:bd:14:b8:12: 16:be:42:18:12:74:6d:17:6e:e1:32:2b:18:74:8e: ca:52:99:d3:63:c2:9f:52:a6:29:d2:2a:e3:80:d2: 5d:2d:1e:c9:6d:28:9b:c4:c5:5a:31:80:6f:c3:5a: 0e:a6:3f:03:d9:bc:ef:bf:e0:1d:ac:31:53:c4:d9: 98:a4:c1:a1:92:cf:21:3f:a0:15:bb:eb:e4:1c:3d: 21:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:63:4F:88:3E:52:DB:58:D7:A0:90:6C:19:DF:5A:5D:E5:55:46:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b23d896-492a-325b-924d-e5837a2630e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.51.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:02:f9:04:c9:0e:aa:5e:cd:15:c3:03:92:ed:d5:88:96:11: 9d:cc:76:d3:07:21:b7:41:f1:94:5e:4f:b9:4b:b7:0f:09:65: 5d:89:10:9d:7b:d6:ef:13:0a:ff:78:d4:ed:f6:58:78:fc:4d: 75:dd:0b:93:2f:19:f8:90:e8:2d:67:d3:50:67:fa:13:1e:92: 22:e3:29:7d:50:a9:d9:a7:ee:0b:7a:91:01:a5:a1:63:47:de: 36:3b:c4:39:06:38:fe:52:db:a8:22:3a:6f:7f:17:61:e1:ee: 3c:46:5b:fa:2b:3d:00:9f:e1:8a:00:6d:4a:50:7e:e6:26:7b: 72:90:6d:18:47:73:44:fc:4b:b2:16:b2:32:b8:f3:38:8c:2e: 30:84:48:18:6b:d2:d0:ec:30:85:9b:44:df:86:57:ea:8b:39: 6d:22:64:72:1e:58:61:ec:80:7b:97:eb:a4:ce:a6:bc:a2:41: 33:bf:c5:2a:40:37:6d:1c:be:55:87:10:08:01:42:9a:b6:ed: 42:1c:f0:6e:65:7c:fb:8e:d6:95:fe:86:39:54:ab:b8:9d:89: 24:c9:ff:87:81:24:b7:b3:ff:b4:7b:6b:37:86:f4:6b:20:bb: 2b:2e:28:6d:6b:e8:e1:00:44:1f:4e:6d:82:58:0b:c6:e3:12: 8f:03:11:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoSgvKHE3ntG31YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MDAzMWQ4MzgtZDRkMC00MWQ2LThiN2QtMzk1YjM2MDdhYzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArv0I6Qr7YMJsq8PVRoxLP+eHhF8O3eRG9WuD T1t3zDFTQ4m68TWvXEZaJE0dxqQ+Oz2DxyAF40AXUXZxqfstDlqDEq86oKt1ayVz 4zouvDq0ZqBMCC9GiP0hRnRzp3IOBxoiuQq9yvmbvR6DRhiHk7/us4ILwuyIvDDS uHPt/VoirW/Gd8f5cKjW8Mqlt4sbF0ejTRWHjpX7Hdl8wX8DUNsyR5+Vly2P3dD4 bYZ3c70UuBIWvkIYEnRtF27hMisYdI7KUpnTY8KfUqYp0irjgNJdLR7JbSibxMVa MYBvw1oOpj8D2bzvv+AdrDFTxNmYpMGhks8hP6AVu+vkHD0h9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAljT4g+UttY16CQbBnfWl3lVUY1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmIyM2Q4OTYtNDkyYS0z MjViLTkyNGQtZTU4MzdhMjYzMGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYjOwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4C+QTJDqpezRXDA5Lt1YiWEZ3MdtMHIbdB8ZReT7lLtw8JZV2JEJ17 1u8TCv941O32WHj8TXXdC5MvGfiQ6C1n01Bn+hMekiLjKX1Qqdmn7gt6kQGloWNH 3jY7xDkGOP5S26giOm9/F2Hh7jxGW/orPQCf4YoAbUpQfuYme3KQbRhHc0T8S7IW sjK48ziMLjCESBhr0tDsMIWbRN+GV+qLOW0iZHIeWGHsgHuX66TOpryiQTO/xSpA N20cvlWHEAgBQpq27UIc8G5lfPuO1pX+hjlUq7idiSTJ/4eBJLez/7R7azeG9Gsg uysuKG1r6OEARB9ObYJYC8bjEo8DEbM= -----END CERTIFICATE-----Generated at Sun Sep 20 23:20:44 2026 by rpki-client