$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a38fe9ba-db85-3605-b808-e346e56c53e6.roa File: a38fe9ba-db85-3605-b808-e346e56c53e6.roa (raw, json) Hash identifier: cLHr+8cuhwXquYYQ+5eVUaAYI+4Q8RnZYpddSjNRZoQ= Subject key identifier: 2D:46:58:D1:1D:3F:94:07:C5:7F:4D:FC:A8:B8:51:8F:A2:49:52:64 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED8645CC67B91B73C1B5E1740 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a38fe9ba-db85-3605-b808-e346e56c53e6.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33662 IP address blocks: 98.201.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:64:5c:c6:7b:91:b7:3c:1b:5e:17:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=4b28de73-9022-4455-a997-7044f72c491a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:82:15:0b:67:83:12:e5:97:65:d4:3f:01:55: ac:a0:eb:56:9e:66:df:47:f1:e1:de:c2:c9:85:f6: d2:d2:4c:6d:64:ff:51:25:a7:2b:9b:c2:2e:77:9a: 12:f9:fd:81:63:9c:1a:ff:b3:fa:b2:8a:75:3a:03: 5e:11:49:57:87:44:d5:4e:72:19:a8:a2:b4:26:6e: 49:0c:d7:21:9b:21:4c:9d:66:e3:28:7b:33:2b:50: db:dd:6a:a3:58:98:39:62:d3:8d:13:07:b0:c4:fd: fa:f1:d6:57:a3:e6:84:63:84:16:06:2d:a8:08:0b: b3:8c:d6:89:47:c9:85:12:65:ff:81:13:a9:e1:54: a1:2b:82:6d:61:09:6f:c2:c7:32:e5:81:7a:5f:3c: eb:5c:cc:74:fc:f0:e4:8c:17:39:91:5f:b6:63:01: d7:fa:2f:62:fc:63:9f:7d:c9:eb:e2:35:4a:03:4d: cc:1c:1b:ef:1c:40:41:f9:e2:a8:70:8a:ef:82:3c: ad:6f:77:e8:80:5c:85:63:93:2b:ac:07:89:87:d8: 2c:7f:7e:c9:c0:db:2b:e3:82:69:a0:f9:e5:ab:a8: 79:82:b9:6e:51:3c:a9:72:e6:8c:24:68:97:eb:a3: f6:bd:e6:5b:bb:dc:79:db:0b:65:9e:24:4b:68:56: f2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:46:58:D1:1D:3F:94:07:C5:7F:4D:FC:A8:B8:51:8F:A2:49:52:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a38fe9ba-db85-3605-b808-e346e56c53e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.201.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:db:40:ad:ac:1b:ec:d6:31:fd:b9:12:be:4c:70:0d:6d:45: 62:9f:ba:a8:24:c7:cd:b5:c0:23:0b:32:51:a9:72:a3:23:1f: 4e:b9:e7:03:4b:50:9e:90:9d:53:47:f0:b8:60:d8:c0:10:44: 62:1a:69:87:a3:25:77:7c:b7:c3:5e:f6:7b:dd:cc:b5:78:e9: 9a:c8:ef:23:2f:ef:7f:ac:cd:0b:e0:d4:12:7d:8e:7f:e6:67: 51:0f:11:b1:ef:38:66:10:de:ed:ed:04:1c:8c:98:c7:ab:3f: a8:0e:82:01:91:5e:53:18:91:b4:ff:2d:5e:6b:ce:32:4f:1e: 4a:c5:e2:fb:ca:18:d7:93:29:69:33:ac:b1:66:8f:56:51:62: b6:6f:80:77:ea:06:9b:06:57:8e:ff:72:63:37:39:4a:d9:ce: 43:2c:c1:1c:08:ac:6e:c3:fb:03:43:21:ca:7f:2f:ee:09:67: 36:3c:a9:3d:7a:64:0d:ad:3d:db:e8:b4:b8:ba:35:3c:5c:d8: 6b:a3:77:31:76:c0:de:85:e4:e9:55:59:95:3b:67:88:9a:25: 0d:a2:b9:a7:4c:97:5a:ee:cb:3c:c8:1e:aa:c0:80:e3:94:3b: b4:0e:10:19:c8:4c:2d:13:31:57:9e:09:92:b5:3c:a0:91:42: fe:c1:67:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YZFzGe5G3PBteF0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk NGIyOGRlNzMtOTAyMi00NDU1LWE5OTctNzA0NGY3MmM0OTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYIVC2eDEuWXZdQ/AVWsoOtWnmbfR/Hh3sLJ hfbS0kxtZP9RJacrm8Iud5oS+f2BY5wa/7P6sop1OgNeEUlXh0TVTnIZqKK0Jm5J DNchmyFMnWbjKHszK1Db3WqjWJg5YtONEwewxP368dZXo+aEY4QWBi2oCAuzjNaJ R8mFEmX/gROp4VShK4JtYQlvwscy5YF6XzzrXMx0/PDkjBc5kV+2YwHX+i9i/GOf fcnr4jVKA03MHBvvHEBB+eKocIrvgjytb3fogFyFY5MrrAeJh9gsf37JwNsr44Jp oPnlq6h5grluUTypcuaMJGiX66P2veZbu9x52wtlniRLaFbybQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1GWNEdP5QHxX9N/Ki4UY+iSVJkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTM4ZmU5YmEtZGI4NS0z NjA1LWI4MDgtZTM0NmU1NmM1M2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYsmsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALXbQK2sG+zWMf25Er5McA1tRWKfuqgkx821wCMLMlGpcqMjH0655wNL UJ6QnVNH8Lhg2MAQRGIaaYejJXd8t8Ne9nvdzLV46ZrI7yMv73+szQvg1BJ9jn/m Z1EPEbHvOGYQ3u3tBByMmMerP6gOggGRXlMYkbT/LV5rzjJPHkrF4vvKGNeTKWkz rLFmj1ZRYrZvgHfqBpsGV47/cmM3OUrZzkMswRwIrG7D+wNDIcp/L+4JZzY8qT16 ZA2tPdvotLi6NTxc2GujdzF2wN6F5OlVWZU7Z4iaJQ2iuadMl1ruyzzIHqrAgOOU O7QOEBnITC0TMVeeCZK1PKCRQv7BZ3w= -----END CERTIFICATE-----Generated at Thu Sep 24 13:35:55 2026 by rpki-client