$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88585f7b-251b-375f-a03a-9790b97fd93a.roa File: 88585f7b-251b-375f-a03a-9790b97fd93a.roa (raw, json) Hash identifier: KHLgsnEogTgu5rrfXm3i8IBZtQlVpwfYq/tzrfHrprs= Subject key identifier: 32:BB:32:FC:41:96:6F:AA:96:C6:7F:D6:E3:1E:AC:AA:2F:36:A2:9F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F4977CEE5E615769EDEC75180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88585f7b-251b-375f-a03a-9790b97fd93a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 22909 IP address blocks: 98.193.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:ce:e5:e6:15:76:9e:de:c7:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0e3aeccc-e1e5-4488-8eb4-19aa4cee05d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:14:ba:4f:31:70:cf:05:97:bf:69:e9:93:2d: bd:04:5d:69:65:fd:3c:98:74:11:8c:0e:22:d8:cc: 22:17:38:bd:dd:8b:cf:67:ea:b5:27:ca:68:f9:51: 6d:fd:96:28:3d:80:aa:4e:c1:ac:15:b5:20:3f:e0: e4:f7:1f:7a:21:d0:63:51:a5:30:18:05:4f:a8:87: f4:a0:ae:37:69:16:4e:5d:13:c5:03:5a:17:15:31: 24:f6:b4:d3:f2:36:fe:4d:20:4f:3b:cd:4d:00:2d: 05:6b:a2:d8:2f:e9:d5:7b:42:ab:92:be:c1:c2:c2: a0:df:18:b2:58:12:d4:ee:7c:93:fb:4b:d1:c9:49: f0:df:2e:4c:73:22:c7:01:15:71:ed:7d:1c:ba:90: 62:66:e1:62:3c:8c:d9:a0:9b:b8:46:42:22:c8:26: 21:be:ed:81:24:bf:2d:9e:c5:eb:a9:62:69:d7:6f: 8f:a0:b5:be:7d:74:3d:8e:3d:dc:73:01:a3:d8:c9: 5c:0b:9d:ef:87:e1:f4:aa:df:8f:41:e4:86:23:52: 0f:af:c1:a8:cb:e0:cc:70:db:33:04:14:c2:93:53: 8a:87:33:21:69:a9:24:69:02:1f:cd:f6:38:06:e6: 2a:05:66:1b:e7:30:d4:d9:a0:5a:59:53:cb:95:c0: f1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:BB:32:FC:41:96:6F:AA:96:C6:7F:D6:E3:1E:AC:AA:2F:36:A2:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88585f7b-251b-375f-a03a-9790b97fd93a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.193.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:cb:1f:97:53:0b:62:3d:5f:39:8a:53:5d:e9:13:c8:f9:94: 53:60:01:70:cf:a7:a0:af:77:89:96:7c:dd:2f:75:9f:ef:69: f1:9b:03:c5:d1:09:15:e8:3f:37:d4:5d:33:0a:10:3e:01:58: e5:7d:2e:14:28:d6:38:d9:6b:e8:c0:47:78:c0:60:1d:11:f3: ec:d9:ae:10:5f:fd:fe:e6:ab:b4:ff:d9:5c:98:c8:bf:b1:30: 00:34:d1:f9:06:c4:09:5d:5d:8a:cc:cb:9b:e8:f2:45:98:43: b5:3d:34:98:ba:1f:e9:c7:38:70:5d:66:06:86:69:4e:0d:f6: 89:0c:48:33:72:fe:c7:ab:bd:72:10:3c:f5:94:d2:4f:a7:0e: 1d:27:f9:ee:72:ea:12:75:89:fd:c1:b3:90:47:a6:a8:97:e9: 1d:22:8d:5a:3e:ca:db:45:43:38:ed:1e:9d:82:c9:3d:7c:12: cf:b6:2f:4e:f3:fc:61:4f:90:6a:53:40:76:40:f8:ad:aa:d4: db:a3:41:0d:5d:14:de:14:d3:c4:fb:bd:5f:fc:bf:99:16:42: e8:57:86:d0:aa:41:55:e9:33:65:2b:52:8d:3d:2f:67:3d:3f: b9:24:13:f2:a8:32:cd:40:b9:11:fd:b6:6a:4f:91:e9:f2:55: 8e:6d:05:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jd87l5hV2nt7HUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGUzYWVjY2MtZTFlNS00NDg4LThlYjQtMTlhYTRjZWUwNWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRS6TzFwzwWXv2npky29BF1pZf08mHQRjA4i 2MwiFzi93YvPZ+q1J8po+VFt/ZYoPYCqTsGsFbUgP+Dk9x96IdBjUaUwGAVPqIf0 oK43aRZOXRPFA1oXFTEk9rTT8jb+TSBPO81NAC0Fa6LYL+nVe0Krkr7BwsKg3xiy WBLU7nyT+0vRyUnw3y5McyLHARVx7X0cupBiZuFiPIzZoJu4RkIiyCYhvu2BJL8t nsXrqWJp12+PoLW+fXQ9jj3ccwGj2MlcC53vh+H0qt+PQeSGI1IPr8Goy+DMcNsz BBTCk1OKhzMhaakkaQIfzfY4BuYqBWYb5zDU2aBaWVPLlcDx7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDK7MvxBlm+qlsZ/1uMerKovNqKfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODg1ODVmN2ItMjUxYi0z NzVmLWEwM2EtOTc5MGI5N2ZkOTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYsHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKPLH5dTC2I9XzmKU13pE8j5lFNgAXDPp6Cvd4mWfN0vdZ/vafGbA8XR CRXoPzfUXTMKED4BWOV9LhQo1jjZa+jAR3jAYB0R8+zZrhBf/f7mq7T/2VyYyL+x MAA00fkGxAldXYrMy5vo8kWYQ7U9NJi6H+nHOHBdZgaGaU4N9okMSDNy/servXIQ PPWU0k+nDh0n+e5y6hJ1if3Bs5BHpqiX6R0ijVo+yttFQzjtHp2CyT18Es+2L07z /GFPkGpTQHZA+K2q1NujQQ1dFN4U08T7vV/8v5kWQuhXhtCqQVXpM2UrUo09L2c9 P7kkE/KoMs1AuRH9tmpPkenyVY5tBSM= -----END CERTIFICATE-----Generated at Sat Oct 3 08:41:06 2026 by rpki-client