$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cde3b643-0d1e-3d73-be0b-e331d1572966.roa File: cde3b643-0d1e-3d73-be0b-e331d1572966.roa (raw, json) Hash identifier: QJaj6jQy1pd/L2LDpKp8R+jJ5DqVFL7h403o4l39uqw= Subject key identifier: 44:B6:A7:3B:A0:FF:6E:D4:DB:CA:50:F9:B1:0B:3E:E8:27:7C:67:E1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F497AB4A371B8D4F69CF4C3E0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cde3b643-0d1e-3d73-be0b-e331d1572966.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33661 IP address blocks: 98.238.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7a:b4:a3:71:b8:d4:f6:9c:f4:c3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1c0b4263-41d4-4e72-ba81-6a51cbf1d535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:96:b3:d3:6d:7b:2c:2f:1d:84:14:af:f9:48: ac:63:e2:d2:53:c8:b7:cd:90:bc:eb:a0:ca:d5:1a: dc:2d:92:9f:58:31:02:14:88:d8:93:b1:9d:bc:42: e9:7e:a1:b2:e3:d0:5b:b5:5c:62:d5:ed:b7:4f:be: 2a:b2:62:ec:b6:b2:56:c8:10:4e:20:80:25:1c:c6: b6:bb:a5:a1:47:1f:f3:e3:07:3f:8c:ca:89:05:f3: d3:6c:ff:f8:bd:79:47:56:e7:fd:bb:b6:63:84:9c: 65:b3:7d:f7:84:d1:f9:f2:73:1b:db:6a:74:65:af: 33:76:1c:b8:c1:82:01:39:ce:23:9c:c3:89:08:af: bd:d3:01:ce:de:e1:1a:ce:f0:dc:6c:84:97:68:59: d0:ba:40:ad:8a:e8:13:00:b6:b4:f7:84:0c:b6:fa: 4b:93:7f:73:20:bd:57:cf:d7:0b:91:88:17:c7:c3: cd:7f:0d:34:ad:2c:63:fb:55:d9:38:36:40:41:a9: da:8e:15:20:90:15:6f:51:62:37:6f:61:6f:c3:15: 1e:15:a3:63:5d:66:bb:45:bc:f1:46:28:02:45:63: d7:54:c3:85:e1:7b:67:2c:57:b5:70:89:c4:eb:d2: f4:9e:fc:25:55:f5:08:c2:55:eb:56:ca:74:3f:fa: de:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:B6:A7:3B:A0:FF:6E:D4:DB:CA:50:F9:B1:0B:3E:E8:27:7C:67:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cde3b643-0d1e-3d73-be0b-e331d1572966.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.238.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:55:db:69:ac:6b:21:53:e5:4b:66:88:ee:55:9f:d9:33:58: 8b:bd:2a:4e:96:e7:c4:05:29:03:fe:a1:57:d1:26:09:81:db: 49:ee:82:67:46:3e:aa:b4:85:1e:3b:18:7b:ec:00:e3:51:1e: 14:25:08:b0:a1:44:35:5c:e1:b4:44:0c:4a:bf:ff:7d:80:36: fa:2c:c1:ed:ba:b2:e9:ad:07:c9:79:2d:14:18:6f:f4:2c:8a: 45:bd:53:0d:f9:a0:5c:2c:10:b7:f6:fd:98:33:da:11:6c:ab: 93:47:47:17:cb:b3:7a:44:9c:22:c8:4d:e4:21:ec:98:7e:54: bf:77:de:74:23:05:96:7a:04:83:d7:54:5b:b8:79:57:c0:70: d5:35:c7:f8:18:b7:bc:89:b6:d9:58:e3:8f:bf:99:f1:11:10: dd:ba:11:08:e6:c2:ee:35:79:eb:40:d6:f0:b2:63:06:2e:3f: 14:53:75:0b:4e:71:4c:9c:bc:5e:56:b6:9c:3b:ae:22:c3:8c: 39:d6:f4:6d:ee:c4:1f:ba:a2:e0:80:08:30:37:90:fa:d3:f0: 7d:9c:31:cb:1c:5e:bc:d1:a1:13:f1:f2:ca:8d:f9:2c:45:88: ba:7c:8b:48:c8:43:92:b1:7a:64:3b:23:2d:99:3b:77:1b:05: 22:80:19:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JerSjcbjU9pz0w+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWMwYjQyNjMtNDFkNC00ZTcyLWJhODEtNmE1MWNiZjFkNTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpaz0217LC8dhBSv+UisY+LSU8i3zZC866DK 1RrcLZKfWDECFIjYk7GdvELpfqGy49BbtVxi1e23T74qsmLstrJWyBBOIIAlHMa2 u6WhRx/z4wc/jMqJBfPTbP/4vXlHVuf9u7ZjhJxls333hNH58nMb22p0Za8zdhy4 wYIBOc4jnMOJCK+90wHO3uEazvDcbISXaFnQukCtiugTALa094QMtvpLk39zIL1X z9cLkYgXx8PNfw00rSxj+1XZODZAQanajhUgkBVvUWI3b2FvwxUeFaNjXWa7Rbzx RigCRWPXVMOF4XtnLFe1cInE69L0nvwlVfUIwlXrVsp0P/reCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFES2pzug/27U28pQ+bELPugnfGfhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2RlM2I2NDMtMGQxZS0z ZDczLWJlMGItZTMzMWQxNTcyOTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHYu4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANBV22msayFT5UtmiO5Vn9kzWIu9Kk6W58QFKQP+oVfRJgmB20nugmdG Pqq0hR47GHvsAONRHhQlCLChRDVc4bREDEq//32ANvoswe26sumtB8l5LRQYb/Qs ikW9Uw35oFwsELf2/Zgz2hFsq5NHRxfLs3pEnCLITeQh7Jh+VL933nQjBZZ6BIPX VFu4eVfAcNU1x/gYt7yJttlY44+/mfEREN26EQjmwu41eetA1vCyYwYuPxRTdQtO cUycvF5Wtpw7riLDjDnW9G3uxB+6ouCACDA3kPrT8H2cMcscXrzRoRPx8sqN+SxF iLp8i0jIQ5KxemQ7Iy2ZO3cbBSKAGXQ= -----END CERTIFICATE-----Generated at Fri Sep 25 13:37:28 2026 by rpki-client