$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/780d41a7-19ca-3da3-8df2-2479cba4f477.roa File: 780d41a7-19ca-3da3-8df2-2479cba4f477.roa (raw, json) Hash identifier: 49om4VtidmKeL+TNPYyjJ90bnJXAGmQNLOoNvXifgs0= Subject key identifier: 8D:54:FE:F4:A4:E9:27:58:D2:AA:13:EB:07:A9:01:CD:A9:38:5F:D0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F11A0F7AB10DEA7A35D943B00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/780d41a7-19ca-3da3-8df2-2479cba4f477.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33651 IP address blocks: 98.207.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a0:f7:ab:10:de:a7:a3:5d:94:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=23a12361-4ef4-49df-94d9-8f753ac45977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:49:a7:2b:aa:04:21:82:d6:27:cf:9b:b9:60: b4:f0:bf:0d:79:25:f9:af:69:de:98:55:5b:7f:7d: a6:7d:5b:e8:85:b3:e3:3c:94:bf:84:e1:f5:89:e9: 90:6e:74:63:7a:41:e4:89:04:a7:06:09:68:9a:74: b1:10:b5:98:77:b7:19:54:6b:32:8d:08:ed:8c:94: e7:73:90:ee:3d:60:03:b7:fa:f9:51:c5:92:37:da: 68:53:ed:e7:16:1c:6c:b5:55:fe:4d:75:7c:80:8d: 3a:d1:67:57:71:ae:ba:2a:fe:5b:ec:ff:d5:67:71: e5:9c:27:a7:a2:13:7c:e3:93:8e:36:f8:c4:49:59: 22:4b:2a:99:79:06:f8:c5:5f:c2:0a:8c:0b:49:fe: cf:ad:8a:59:16:86:98:70:f8:5a:cc:bd:be:9e:cd: 8f:b3:fd:77:cc:9f:30:35:7e:fd:cd:e1:32:b8:f7: 46:d7:08:cb:ec:87:62:5e:db:10:e9:d4:d8:45:53: c2:da:d7:3b:98:8e:ea:8e:81:26:a1:38:c1:08:80: 9a:b0:2b:e3:f3:5e:28:fa:18:d3:7a:e9:58:d1:7f: d9:96:bd:50:3f:81:1a:5d:6e:f7:7b:44:9f:97:63: 38:a2:21:0e:af:10:93:3f:93:07:e4:4f:22:45:d9: 7d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:54:FE:F4:A4:E9:27:58:D2:AA:13:EB:07:A9:01:CD:A9:38:5F:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/780d41a7-19ca-3da3-8df2-2479cba4f477.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.207.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:8c:de:09:97:e5:60:8b:55:64:25:32:45:39:be:a3:f7:38: b7:b6:fe:12:e9:e8:4e:3f:99:83:94:d4:99:14:41:2a:5a:2a: 5e:0d:71:e8:47:eb:e6:59:97:f3:ac:97:54:f4:a6:a1:b2:dc: 24:5f:fb:8a:9f:23:67:a2:7d:83:ef:10:a2:7c:6e:98:9c:3e: a9:ef:3d:0e:8b:95:0d:0a:30:1f:d5:93:0b:c2:38:c9:fe:5f: ca:db:ef:ae:b5:98:fa:eb:78:60:81:4e:b5:8a:d6:fc:08:5e: 37:5e:5b:53:3c:1f:33:52:bc:fd:18:6b:79:f7:77:5b:cd:54: 3d:fb:66:7f:19:fc:40:87:04:25:12:85:76:0d:7b:ed:07:f5: 77:ea:33:a1:99:c4:33:c0:f5:d8:aa:c9:50:df:6d:a8:4e:20: ed:29:27:23:6b:bb:00:49:61:4c:b3:a1:3f:6c:ff:38:93:0d: b3:b5:09:09:21:c9:03:02:17:7f:df:05:ac:28:10:92:41:d8: 78:ad:97:2d:4c:bd:57:71:ff:e5:10:ea:fd:5d:da:4d:0a:e5: 80:dd:da:28:8c:e4:85:8c:2b:1e:51:f2:8b:f8:e1:92:de:93: 05:39:99:7f:69:40:a7:2a:b2:f7:be:37:a7:a7:d7:33:00:f8: 3d:45:03:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoPerEN6no12UOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MjNhMTIzNjEtNGVmNC00OWRmLTk0ZDktOGY3NTNhYzQ1OTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUmnK6oEIYLWJ8+buWC08L8NeSX5r2nemFVb f32mfVvohbPjPJS/hOH1iemQbnRjekHkiQSnBglomnSxELWYd7cZVGsyjQjtjJTn c5DuPWADt/r5UcWSN9poU+3nFhxstVX+TXV8gI060WdXca66Kv5b7P/VZ3HlnCen ohN845OONvjESVkiSyqZeQb4xV/CCowLSf7PrYpZFoaYcPhazL2+ns2Ps/13zJ8w NX79zeEyuPdG1wjL7IdiXtsQ6dTYRVPC2tc7mI7qjoEmoTjBCICasCvj814o+hjT eulY0X/Zlr1QP4EaXW73e0Sfl2M4oiEOrxCTP5MH5E8iRdl98wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1U/vSk6SdY0qoT6wepAc2pOF/QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzgwZDQxYTctMTljYS0z ZGEzLThkZjItMjQ3OWNiYTRmNDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYs9gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIeM3gmX5WCLVWQlMkU5vqP3OLe2/hLp6E4/mYOU1JkUQSpaKl4NcehH 6+ZZl/Osl1T0pqGy3CRf+4qfI2eifYPvEKJ8bpicPqnvPQ6LlQ0KMB/VkwvCOMn+ X8rb7661mPrreGCBTrWK1vwIXjdeW1M8HzNSvP0Ya3n3d1vNVD37Zn8Z/ECHBCUS hXYNe+0H9XfqM6GZxDPA9diqyVDfbahOIO0pJyNruwBJYUyzoT9s/ziTDbO1CQkh yQMCF3/fBawoEJJB2Hitly1MvVdx/+UQ6v1d2k0K5YDd2iiM5IWMKx5R8ov44ZLe kwU5mX9pQKcqsve+N6en1zMA+D1FA3U= -----END CERTIFICATE-----Generated at Wed Sep 23 12:04:00 2026 by rpki-client