$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f2d3e95-60e1-35ed-94ba-b0890e40cbfc.roa File: 8f2d3e95-60e1-35ed-94ba-b0890e40cbfc.roa (raw, json) Hash identifier: eFh6QzIh09SEN1d/F/PRDNQq9Ib6xM7i7IwjwzXjUCY= Subject key identifier: 2D:49:B2:DD:3F:AD:3C:18:26:02:BB:4A:2A:77:D7:7F:4E:43:91:98 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119E8F31866524EDC484F200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f2d3e95-60e1-35ed-94ba-b0890e40cbfc.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33660 IP address blocks: 98.202.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9e:8f:31:86:65:24:ed:c4:84:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=e8e34411-b3e2-42bd-a9a5-0e3304f4a22b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2e:df:cd:2a:ae:4c:02:cf:39:08:79:86:a7: f5:d2:f2:64:db:b9:52:cf:57:3b:87:39:0e:86:8f: 86:39:62:74:8a:63:a5:5b:79:83:ac:b5:58:0a:45: 93:64:9e:d5:f6:75:d9:09:7b:02:98:8e:ab:93:ba: 23:9d:de:8c:00:86:7b:2d:09:c9:a1:76:5e:a3:a9: 57:d5:86:d3:79:bb:55:be:84:80:d4:fe:9e:23:c6: 0b:7c:a0:cd:40:ac:12:ca:fc:b8:9c:96:1e:ae:46: 1a:16:9a:99:4b:91:db:67:36:ad:1e:69:13:93:b1: f8:de:90:d7:df:dd:83:01:bb:bc:e4:f5:74:45:63: a7:cd:10:f6:db:44:4a:e2:48:7b:83:cc:01:c6:9e: 5b:76:0b:cb:36:a2:b8:ba:28:e2:6e:75:ba:5a:4e: 08:45:79:9e:80:2d:74:08:42:8a:5d:de:bd:5b:9c: 16:53:c3:c9:98:f4:fa:7e:6e:0b:65:83:2e:3b:eb: 8e:dc:f9:da:70:02:b0:04:f9:2b:d3:8d:73:5e:3e: 93:ad:63:b8:08:af:6f:94:2b:71:15:aa:ae:af:b5: 1e:e2:2f:a7:8c:0d:26:38:51:bc:e1:10:60:30:d1: d7:47:81:b2:76:05:21:c3:80:7f:d9:59:15:2e:35: 08:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:49:B2:DD:3F:AD:3C:18:26:02:BB:4A:2A:77:D7:7F:4E:43:91:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f2d3e95-60e1-35ed-94ba-b0890e40cbfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.202.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:04:25:6f:d3:44:a7:4a:4e:a6:1a:7b:a0:c2:73:1c:ae:19: 74:a9:db:d2:31:83:5e:61:d1:e5:82:ae:f9:2b:97:67:d7:e2: 58:4d:a5:ee:93:8f:ab:8b:13:9b:7b:3d:24:ff:d9:3a:c7:5e: 8f:95:26:64:99:79:3e:b1:6a:4b:98:14:15:2e:e7:8a:99:b4: 3d:bd:51:76:d6:d2:80:87:c5:62:2f:ee:01:12:e0:85:00:bc: 53:18:21:13:fe:67:5a:7d:33:15:8a:fb:f4:38:b0:67:0d:df: 5c:88:3d:78:3e:a5:c4:47:cf:1c:69:f9:8b:ec:65:ef:a6:75: 45:be:db:3f:a3:3b:3f:9e:47:2b:dd:c9:5c:b6:7d:49:34:c1: 59:c8:3b:d2:e8:63:fe:3f:37:ac:b8:e7:80:60:ca:47:53:4a: 89:42:f0:f1:79:39:2b:72:39:00:cd:13:81:09:69:35:fe:99: 8f:e0:04:39:1d:af:04:b4:1e:11:68:78:ce:35:f7:85:df:56: 00:68:69:4c:b5:fa:9a:62:9b:13:37:9e:e8:ff:76:24:d3:e1: 28:f2:32:64:c9:fe:af:63:cd:e1:b7:ad:a8:ae:12:6b:3a:a1: 0b:5c:c3:5e:c9:1b:31:75:cf:2d:4f:e5:a0:a7:eb:41:6b:2b: bd:7b:84:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Rno8xhmUk7cSE8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZThlMzQ0MTEtYjNlMi00MmJkLWE5YTUtMGUzMzA0ZjRhMjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArC7fzSquTALPOQh5hqf10vJk27lSz1c7hzkO ho+GOWJ0imOlW3mDrLVYCkWTZJ7V9nXZCXsCmI6rk7ojnd6MAIZ7LQnJoXZeo6lX 1YbTebtVvoSA1P6eI8YLfKDNQKwSyvy4nJYerkYaFpqZS5HbZzatHmkTk7H43pDX 392DAbu85PV0RWOnzRD220RK4kh7g8wBxp5bdgvLNqK4uijibnW6Wk4IRXmegC10 CEKKXd69W5wWU8PJmPT6fm4LZYMuO+uO3PnacAKwBPkr041zXj6TrWO4CK9vlCtx Faqur7Ue4i+njA0mOFG84RBgMNHXR4GydgUhw4B/2VkVLjUIVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1Jst0/rTwYJgK7Sip3139OQ5GYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGYyZDNlOTUtNjBlMS0z NWVkLTk0YmEtYjA4OTBlNDBjYmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYsr8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsEJW/TRKdKTqYae6DCcxyuGXSp29Ixg15h0eWCrvkrl2fX4lhNpe6T j6uLE5t7PST/2TrHXo+VJmSZeT6xakuYFBUu54qZtD29UXbW0oCHxWIv7gES4IUA vFMYIRP+Z1p9MxWK+/Q4sGcN31yIPXg+pcRHzxxp+YvsZe+mdUW+2z+jOz+eRyvd yVy2fUk0wVnIO9LoY/4/N6y454BgykdTSolC8PF5OStyOQDNE4EJaTX+mY/gBDkd rwS0HhFoeM4194XfVgBoaUy1+ppimxM3nuj/diTT4SjyMmTJ/q9jzeG3raiuEms6 oQtcw17JGzF1zy1P5aCn60FrK717hIM= -----END CERTIFICATE-----Generated at Sat Sep 26 10:29:08 2026 by rpki-client