$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/541b3d8f-017c-3319-8ef3-49caf2013de3.roa File: 541b3d8f-017c-3319-8ef3-49caf2013de3.roa (raw, json) Hash identifier: MQIkJNeKUsBKMa2/NVvET77CP3+CBlNv8hlJmQy1X/M= Subject key identifier: 81:87:FB:F7:A1:E3:5F:10:EB:8B:ED:9A:08:60:DB:D4:07:71:22:B5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F4981196F3296C55B7A617F40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/541b3d8f-017c-3319-8ef3-49caf2013de3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33652 IP address blocks: 98.43.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:81:19:6f:32:96:c5:5b:7a:61:7f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1bee2a2c-00c1-4b17-a1ae-d4c9b7a705f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:31:b9:ed:0b:e9:e2:78:29:a4:01:6e:da:f7: 87:6a:0c:dd:a8:dc:a9:a5:73:55:d5:b4:de:20:48: e0:07:83:f1:55:3d:67:4f:a3:b9:e7:03:36:fa:0e: 2e:b2:ed:0f:01:84:2a:8c:3d:c7:f7:2a:2f:45:dc: 7c:53:90:fd:a7:3c:0f:7f:a4:74:4d:5b:dd:ab:ee: c3:07:54:79:0c:ab:57:08:f2:0c:06:b9:91:8d:fb: 7d:e4:1c:62:87:da:ca:49:a2:45:b0:41:48:24:41: a7:bf:e4:ff:af:e0:3b:c4:df:97:a5:a0:da:1a:49: 20:fa:81:0a:51:96:70:c2:4a:8e:36:5d:e8:6d:c9: f2:c6:e4:fa:cf:e7:a1:aa:ae:e1:68:18:d8:03:ca: bb:ca:3a:23:1b:fc:de:f9:ad:00:02:f7:a6:92:4d: ee:b4:40:da:4d:aa:75:76:9d:a8:06:0f:33:4a:77: 49:b2:b5:f9:0a:fc:c3:a6:fb:04:9a:48:92:3b:01: 47:b6:16:22:5b:7e:ae:22:ad:fd:85:b9:0c:ee:c3: 05:7d:e3:87:e6:83:e0:b4:44:2b:6e:f4:ce:ee:d6: db:05:0f:03:74:2f:23:1a:a9:29:8c:20:df:e3:de: 74:3d:66:85:d9:ce:56:be:22:44:a2:42:e5:6d:be: f2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:87:FB:F7:A1:E3:5F:10:EB:8B:ED:9A:08:60:DB:D4:07:71:22:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/541b3d8f-017c-3319-8ef3-49caf2013de3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.43.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:3c:b0:4b:d7:c9:7d:4b:9e:1a:ad:48:ec:da:e3:39:c6:ab: 35:22:9d:5e:ce:a1:ae:0d:aa:50:4d:86:39:69:b9:93:c1:f1: 5d:9a:00:d9:5e:c7:8e:c5:7d:aa:7a:60:a1:d4:aa:2b:e2:23: 17:ed:7c:57:2b:53:98:24:5e:ea:70:3d:39:43:39:21:a6:1e: b3:a2:49:4e:04:67:16:e1:7b:35:57:19:22:57:8c:20:63:22: 53:d4:69:2a:db:4a:18:3b:77:a1:4f:56:71:14:79:8d:59:be: c8:ef:3a:2d:70:24:55:d4:38:f5:9b:7d:19:2b:d6:d6:ee:e5: e2:b0:1a:e5:85:2a:7e:be:8e:10:7a:2b:b9:42:e0:23:23:e8: 9f:dc:d4:ba:1d:34:a4:13:87:48:81:04:bd:8d:06:39:9b:09: 5c:9d:be:be:7a:fd:3c:98:63:0f:b1:02:da:8e:7e:62:22:97: d1:2b:6e:61:55:66:0a:59:47:69:a5:6c:31:ec:3b:f5:09:1f: e3:a8:f5:32:c2:86:a0:b4:7b:c9:db:a9:6d:79:e1:cc:cb:31: c3:f5:41:68:fe:9b:55:3b:46:06:da:04:ae:7c:14:82:99:eb: fd:ca:20:f8:20:73:b1:4a:2d:25:f7:a2:95:f9:c9:2b:22:1b: f0:db:4a:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JgRlvMpbFW3phf0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWJlZTJhMmMtMDBjMS00YjE3LWExYWUtZDRjOWI3YTcwNWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDG57Qvp4ngppAFu2veHagzdqNyppXNV1bTe IEjgB4PxVT1nT6O55wM2+g4usu0PAYQqjD3H9yovRdx8U5D9pzwPf6R0TVvdq+7D B1R5DKtXCPIMBrmRjft95Bxih9rKSaJFsEFIJEGnv+T/r+A7xN+XpaDaGkkg+oEK UZZwwkqONl3obcnyxuT6z+ehqq7haBjYA8q7yjojG/ze+a0AAvemkk3utEDaTap1 dp2oBg8zSndJsrX5CvzDpvsEmkiSOwFHthYiW36uIq39hbkM7sMFfeOH5oPgtEQr bvTO7tbbBQ8DdC8jGqkpjCDf4950PWaF2c5WviJEokLlbb7yYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIGH+/eh418Q64vtmghg29QHcSK1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTQxYjNkOGYtMDE3Yy0z MzE5LThlZjMtNDljYWYyMDEzZGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHYisAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIM8sEvXyX1LnhqtSOza4znGqzUinV7Ooa4NqlBNhjlpuZPB8V2aANle x47Ffap6YKHUqiviIxftfFcrU5gkXupwPTlDOSGmHrOiSU4EZxbhezVXGSJXjCBj IlPUaSrbShg7d6FPVnEUeY1ZvsjvOi1wJFXUOPWbfRkr1tbu5eKwGuWFKn6+jhB6 K7lC4CMj6J/c1LodNKQTh0iBBL2NBjmbCVydvr56/TyYYw+xAtqOfmIil9ErbmFV ZgpZR2mlbDHsO/UJH+Oo9TLChqC0e8nbqW154czLMcP1QWj+m1U7RgbaBK58FIKZ 6/3KIPggc7FKLSX3opX5ySsiG/DbSh8= -----END CERTIFICATE-----Generated at Fri Sep 25 18:23:32 2026 by rpki-client