$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f5c6f2c-1366-3020-9144-9e6f0f2bf800.roa File: 2f5c6f2c-1366-3020-9144-9e6f0f2bf800.roa (raw, json) Hash identifier: WXqgzFi4wZb31LM+57r62tE6P4vL2IXkSw5vJ9MiCec= Subject key identifier: 23:F9:2C:9C:94:D9:A0:1A:46:3C:1D:CC:3C:2A:39:83:C6:DC:73:CD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119D64740FB7EBD1F1FC0040 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f5c6f2c-1366-3020-9144-9e6f0f2bf800.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33659 IP address blocks: 98.221.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:64:74:0f:b7:eb:d1:f1:fc:00:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=f2dd1618-addb-4245-ad1c-b4fdb6e6ac18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:06:a9:47:46:c3:28:b4:9d:84:f8:1b:54:87: 03:b4:df:8d:6b:1b:7c:9e:3d:51:c8:93:c8:53:26: a8:dd:ab:ac:81:6c:0b:3d:cf:4a:31:e3:4f:21:c1: 33:cb:be:1b:6b:8d:0c:c4:ed:6d:01:d6:42:33:ac: 2b:82:0e:84:b6:2b:d2:ee:6a:a8:1d:e3:e7:bf:cf: 07:e7:aa:47:80:f3:cf:3f:33:e6:20:4f:3a:27:9a: f1:82:65:9e:54:87:3c:8e:74:f7:90:42:98:3c:32: 3e:9d:80:67:be:f7:45:06:c0:bf:e4:6e:f6:ae:a4: 4a:0f:c3:6d:47:3f:96:b0:31:03:49:5f:6a:f5:ea: 32:5a:7b:01:7b:00:9b:7b:68:4f:1a:69:92:04:a4: 54:91:cf:67:fb:29:8b:ef:46:fc:bb:f5:3c:8e:60: c5:3f:ae:f1:9a:af:ee:3a:bd:4d:b5:cf:92:e3:10: 94:2b:ed:86:e4:a2:e8:fb:ed:af:2d:82:df:ba:88: d6:9f:31:fc:39:f1:df:7f:ac:d9:92:92:db:ad:a5: 74:01:91:07:a1:b7:59:7d:52:96:79:ee:47:86:bf: 94:58:d2:ce:c1:56:1a:b8:8b:b0:2f:74:bc:7f:65: e3:17:1d:94:90:18:b5:75:33:b7:c2:f5:bc:fe:fd: fa:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:F9:2C:9C:94:D9:A0:1A:46:3C:1D:CC:3C:2A:39:83:C6:DC:73:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f5c6f2c-1366-3020-9144-9e6f0f2bf800.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.221.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:66:30:6d:44:8e:5f:6a:26:00:8b:92:e0:ac:7e:7c:94:43: 1e:bc:1a:39:11:9b:d1:8d:5d:91:e0:9f:50:b9:ac:78:6d:00: 44:cb:16:59:61:c1:75:33:41:6e:92:e0:47:75:78:7f:be:a3: 38:fc:f6:a8:e0:2e:d8:39:3c:86:61:46:a1:09:73:76:bc:e5: a4:19:ad:e2:47:7d:2c:ee:b4:a9:b1:45:89:f2:7f:54:e7:c7: b3:08:99:ed:58:29:b0:ed:f7:09:c3:69:c0:88:67:46:2f:f1: 36:de:c8:28:1c:8b:5e:37:24:10:05:b1:b4:b4:ad:b5:61:35: b3:8c:cc:bf:df:df:27:ac:e7:46:21:53:27:ee:79:e1:75:89: 81:80:20:57:ca:b4:c8:40:26:56:42:16:f3:78:e0:c3:c0:ea: 81:e5:17:32:c1:ff:60:c2:c1:c7:2f:0a:c1:f5:cf:7d:5c:f8: 37:fa:26:13:7a:74:f7:9d:0d:3c:da:6e:04:69:23:e8:1a:5d: 78:9f:06:15:7e:c0:ea:a3:00:ce:70:4b:28:c6:6b:38:8c:20: 12:18:4d:21:bd:91:29:45:28:28:2f:ad:60:44:f9:0e:a0:99: a8:43:c1:81:78:3d:a5:ff:c0:04:bb:91:38:ab:62:a0:57:92: 29:f8:ae:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnWR0D7fr0fH8AEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjJkZDE2MTgtYWRkYi00MjQ1LWFkMWMtYjRmZGI2ZTZhYzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgapR0bDKLSdhPgbVIcDtN+Naxt8nj1RyJPI Uyao3ausgWwLPc9KMeNPIcEzy74ba40MxO1tAdZCM6wrgg6EtivS7mqoHePnv88H 56pHgPPPPzPmIE86J5rxgmWeVIc8jnT3kEKYPDI+nYBnvvdFBsC/5G72rqRKD8Nt Rz+WsDEDSV9q9eoyWnsBewCbe2hPGmmSBKRUkc9n+ymL70b8u/U8jmDFP67xmq/u Or1Ntc+S4xCUK+2G5KLo++2vLYLfuojWnzH8OfHff6zZkpLbraV0AZEHobdZfVKW ee5Hhr+UWNLOwVYauIuwL3S8f2XjFx2UkBi1dTO3wvW8/v36ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCP5LJyU2aAaRjwdzDwqOYPG3HPNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmY1YzZmMmMtMTM2Ni0z MDIwLTkxNDQtOWU2ZjBmMmJmODAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYt3AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdmMG1Ejl9qJgCLkuCsfnyUQx68GjkRm9GNXZHgn1C5rHhtAETLFllh wXUzQW6S4Ed1eH++ozj89qjgLtg5PIZhRqEJc3a85aQZreJHfSzutKmxRYnyf1Tn x7MIme1YKbDt9wnDacCIZ0Yv8TbeyCgci143JBAFsbS0rbVhNbOMzL/f3yes50Yh UyfueeF1iYGAIFfKtMhAJlZCFvN44MPA6oHlFzLB/2DCwccvCsH1z31c+Df6JhN6 dPedDTzabgRpI+gaXXifBhV+wOqjAM5wSyjGaziMIBIYTSG9kSlFKCgvrWBE+Q6g mahDwYF4PaX/wAS7kTirYqBXkin4rpA= -----END CERTIFICATE-----Generated at Tue Sep 22 12:39:17 2026 by rpki-client