$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf3d3e6c-7d65-3191-ab95-85a06a9cb7e2.roa File: cf3d3e6c-7d65-3191-ab95-85a06a9cb7e2.roa (raw, json) Hash identifier: Qei97KBd+q6QUtOAabUWK78WBsMVgqIiD40Lf4k1FYQ= Subject key identifier: 56:D4:ED:97:5F:50:AA:D3:EC:BA:D2:05:CC:D4:49:9F:02:15:04:83 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F11A1047A35E564A5791DD770 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf3d3e6c-7d65-3191-ab95-85a06a9cb7e2.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33651 IP address blocks: 98.248.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a1:04:7a:35:e5:64:a5:79:1d:d7:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=49c8689b-f9b9-44d9-a0c3-abd3c6b7cd98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:3b:09:24:c9:17:9b:a0:41:c3:42:e1:fd:93: 2b:c8:a0:f1:a4:6f:b8:56:9d:10:fc:e2:e6:04:6f: e9:55:7a:d3:e2:6d:cf:a3:a4:5b:9b:c7:79:2b:71: a8:1c:13:6e:c2:1b:ab:8b:b7:68:06:26:f8:e7:52: 05:45:13:49:5d:e3:42:8f:4c:54:d2:41:7e:77:a9: 10:9c:f2:71:70:f3:40:f6:20:72:f9:7c:b3:b1:de: d9:49:f4:53:67:c6:26:b4:06:a9:c8:2b:93:e5:00: 19:e4:31:36:83:de:66:e7:a4:16:ac:bb:bd:f8:08: a6:7e:a5:80:55:80:a9:1d:50:2b:a2:1a:21:bc:b3: 31:b6:89:bf:51:c6:b7:ac:88:9d:4e:82:5e:dc:78: 85:ed:da:c1:63:65:94:69:20:95:bd:8e:a6:59:60: d9:7e:5d:b2:6b:58:fe:b4:d0:90:99:41:26:f0:90: 71:7c:c8:41:c4:22:69:81:b2:31:d9:c2:dd:a4:aa: 1e:d0:36:01:48:1a:f2:fb:31:98:f4:d0:56:19:ef: e3:2b:07:c6:57:34:ea:76:3b:50:b7:3f:65:01:b2: 99:b5:6f:a0:05:ec:02:c3:87:d8:20:d4:d7:39:69: 0b:64:d7:d8:92:5c:15:25:db:d4:06:76:93:b3:0e: 3d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:D4:ED:97:5F:50:AA:D3:EC:BA:D2:05:CC:D4:49:9F:02:15:04:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf3d3e6c-7d65-3191-ab95-85a06a9cb7e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.248.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:20:aa:ed:c5:f1:44:1e:a2:b9:8a:7e:f6:5a:4f:e6:b1:36: fc:72:f8:01:30:76:f3:1f:0f:84:b2:56:20:f8:74:63:bc:85: 01:68:2b:30:7f:0b:da:09:5d:0d:eb:cb:0d:68:a2:4d:ba:17: da:77:32:de:39:9d:1a:17:4c:ca:87:44:02:19:38:f8:40:c7: 86:c9:d7:75:80:fa:8f:77:b8:32:d9:65:4f:e6:7b:ab:ce:bf: 81:6e:01:16:18:d3:82:da:24:bf:5c:ed:90:ae:5a:f1:00:0e: 7b:f5:0a:b6:a3:09:67:61:07:09:45:4c:d3:d6:a9:58:eb:7c: 0a:74:ca:ff:ba:98:fb:72:60:c2:cb:3c:10:b4:30:3f:3e:0c: d5:e0:41:b9:43:6b:c3:bf:a1:70:f2:55:d1:0b:84:b6:68:ce: 7a:99:d8:37:f2:4a:9a:b7:51:99:83:21:d5:d9:18:78:38:e9: 9e:4e:d0:d8:19:62:31:83:61:7f:c9:10:9f:35:4d:93:80:74: 0f:03:6a:80:11:f2:02:8d:aa:49:d7:8c:4b:c4:c5:ba:ad:98: 04:9a:84:be:03:70:a7:72:ce:3c:3c:09:e6:7b:91:cd:02:56: 47:19:4d:98:f2:1d:eb:17:db:db:d1:d1:82:54:8b:50:0f:58: f8:60:ca:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoQR6NeVkpXkd13AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk NDljODY4OWItZjliOS00NGQ5LWEwYzMtYWJkM2M2YjdjZDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjsJJMkXm6BBw0Lh/ZMryKDxpG+4Vp0Q/OLm BG/pVXrT4m3Po6Rbm8d5K3GoHBNuwhuri7doBib451IFRRNJXeNCj0xU0kF+d6kQ nPJxcPNA9iBy+Xyzsd7ZSfRTZ8YmtAapyCuT5QAZ5DE2g95m56QWrLu9+AimfqWA VYCpHVArohohvLMxtom/Uca3rIidToJe3HiF7drBY2WUaSCVvY6mWWDZfl2ya1j+ tNCQmUEm8JBxfMhBxCJpgbIx2cLdpKoe0DYBSBry+zGY9NBWGe/jKwfGVzTqdjtQ tz9lAbKZtW+gBewCw4fYINTXOWkLZNfYklwVJdvUBnaTsw490QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFbU7ZdfUKrT7LrSBczUSZ8CFQSDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2YzZDNlNmMtN2Q2NS0z MTkxLWFiOTUtODVhMDZhOWNiN2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYvhGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIggqu3F8UQeormKfvZaT+axNvxy+AEwdvMfD4SyViD4dGO8hQFoKzB/ C9oJXQ3ryw1ook26F9p3Mt45nRoXTMqHRAIZOPhAx4bJ13WA+o93uDLZZU/me6vO v4FuARYY04LaJL9c7ZCuWvEADnv1CrajCWdhBwlFTNPWqVjrfAp0yv+6mPtyYMLL PBC0MD8+DNXgQblDa8O/oXDyVdELhLZoznqZ2DfySpq3UZmDIdXZGHg46Z5O0NgZ YjGDYX/JEJ81TZOAdA8DaoAR8gKNqknXjEvExbqtmASahL4DcKdyzjw8CeZ7kc0C VkcZTZjyHesX29vR0YJUi1APWPhgyvo= -----END CERTIFICATE-----Generated at Fri Sep 25 01:40:08 2026 by rpki-client