$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/84b948d5-c868-3493-83a8-3522a934c14a.roa File: 84b948d5-c868-3493-83a8-3522a934c14a.roa (raw, json) Hash identifier: XoBlfVGkhRxlCLrq8Djh7EepXrkx2VPaAnwCL5LgREE= Subject key identifier: B8:14:CE:D3:1A:66:4A:65:A6:21:54:4E:A9:1D:7E:CC:81:E4:F7:43 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F11A1229CE40E1EE929DFA500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/84b948d5-c868-3493-83a8-3522a934c14a.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33651 IP address blocks: 98.47.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a1:22:9c:e4:0e:1e:e9:29:df:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=4b1b7cda-f4c9-497a-8881-df9c2499013e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:8c:bb:a5:79:e5:88:50:43:4b:b9:34:28:49: b5:85:ba:15:3f:b1:56:ae:1c:f7:b6:e4:f6:0b:d7: 26:02:83:fd:5b:ec:44:f2:9f:32:a7:28:80:d7:36: 67:1e:ac:d0:f7:d6:8f:b3:47:06:70:88:b1:a7:e9: 64:6a:ee:01:3c:fe:ad:d7:41:3d:5d:fb:7d:46:67: 10:1f:c9:e8:a9:31:92:c1:29:57:58:32:f6:5b:21: a0:f5:82:83:05:c7:55:f8:5d:18:32:eb:01:e4:0c: de:f6:2a:4f:be:3a:40:46:59:cc:f4:10:cf:76:09: 7b:6c:0b:f8:c2:cf:a0:cd:a7:d3:36:cf:32:fe:4e: b3:eb:44:ea:39:63:da:13:33:7c:6f:64:b8:76:fc: d1:60:ea:9d:94:5f:07:d3:46:24:ae:9b:08:f6:8a: 76:1b:df:f6:30:7a:90:dc:a0:fd:27:81:d1:70:2a: 06:99:70:c7:b7:db:2b:8a:94:10:2d:4d:49:35:fb: f8:ad:4d:95:10:7b:1e:a3:a3:f6:fb:fd:cb:db:1e: 4f:b7:ce:0f:2b:58:1e:17:67:75:4d:99:0d:64:78: 6a:01:b3:5b:a8:a4:4b:cf:52:3d:a9:16:37:65:d5: d2:39:c3:c0:53:9b:c4:55:f8:e7:30:d6:5d:1e:a6: 1b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:14:CE:D3:1A:66:4A:65:A6:21:54:4E:A9:1D:7E:CC:81:E4:F7:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/84b948d5-c868-3493-83a8-3522a934c14a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.47.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d8:55:20:13:ae:0c:b7:01:11:f3:16:db:5a:e8:9f:af:10:c6: 19:f0:50:1c:f5:f3:08:46:91:be:05:fc:06:e8:45:dd:80:11: e8:70:41:24:1c:67:41:d8:86:30:2c:b8:66:10:a3:5c:9d:fa: 7c:6e:dc:d5:8d:ec:37:bc:0e:97:9a:a5:af:06:dc:30:60:da: 93:6e:77:f4:5d:6d:6f:ff:c2:74:73:ac:67:33:ee:d7:ff:68: ed:1e:af:2f:dc:d6:b9:68:4d:23:1a:2a:04:5f:1a:10:66:6b: 75:96:b1:0a:ef:f0:38:84:0a:93:49:c5:ef:44:d7:e6:44:fc: dc:cd:93:6e:33:d8:11:b5:bc:78:82:df:3a:85:d6:02:b6:81: a0:ec:40:8c:66:a2:4f:23:81:d1:3e:20:21:49:02:ba:dc:f9: ce:b9:4b:42:f2:24:fa:0b:84:50:f1:cb:13:df:d2:61:ce:5d: 31:28:6c:72:48:43:29:e4:ff:c3:c9:1b:3a:f3:36:2e:57:4d: a9:7f:d4:5f:e6:27:49:9a:8d:70:ef:42:36:fe:a6:9c:ad:5d: af:51:c7:82:1c:16:17:74:f5:59:02:c6:05:33:d6:3e:e9:50: a9:22:9d:4b:41:29:78:53:0f:4b:d6:a9:1a:53:b2:14:e7:c1: 3d:fc:19:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoSKc5A4e6SnfpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk NGIxYjdjZGEtZjRjOS00OTdhLTg4ODEtZGY5YzI0OTkwMTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioy7pXnliFBDS7k0KEm1hboVP7FWrhz3tuT2 C9cmAoP9W+xE8p8ypyiA1zZnHqzQ99aPs0cGcIixp+lkau4BPP6t10E9Xft9RmcQ H8noqTGSwSlXWDL2WyGg9YKDBcdV+F0YMusB5Aze9ipPvjpARlnM9BDPdgl7bAv4 ws+gzafTNs8y/k6z60TqOWPaEzN8b2S4dvzRYOqdlF8H00YkrpsI9op2G9/2MHqQ 3KD9J4HRcCoGmXDHt9sripQQLU1JNfv4rU2VEHseo6P2+/3L2x5Pt84PK1geF2d1 TZkNZHhqAbNbqKRLz1I9qRY3ZdXSOcPAU5vEVfjnMNZdHqYb+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLgUztMaZkplpiFUTqkdfsyB5PdDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODRiOTQ4ZDUtYzg2OC0z NDkzLTgzYTgtMzUyMmE5MzRjMTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYi8UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANhVIBOuDLcBEfMW21ron68QxhnwUBz18whGkb4F/AboRd2AEehwQSQc Z0HYhjAsuGYQo1yd+nxu3NWN7De8Dpeapa8G3DBg2pNud/RdbW//wnRzrGcz7tf/ aO0ery/c1rloTSMaKgRfGhBma3WWsQrv8DiECpNJxe9E1+ZE/NzNk24z2BG1vHiC 3zqF1gK2gaDsQIxmok8jgdE+ICFJArrc+c65S0LyJPoLhFDxyxPf0mHOXTEobHJI Qynk/8PJGzrzNi5XTal/1F/mJ0majXDvQjb+ppytXa9Rx4IcFhd09VkCxgUz1j7p UKkinUtBKXhTD0vWqRpTshTnwT38GWQ= -----END CERTIFICATE-----Generated at Mon Sep 21 18:33:20 2026 by rpki-client