$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/db8f6df4-cb2e-3c4f-a6d7-b7b4e019d3a6.roa File: db8f6df4-cb2e-3c4f-a6d7-b7b4e019d3a6.roa (raw, json) Hash identifier: IJTmjsVt2Huzc8178RIpFx2Ynn7f97hO7ykEy+D6ZKw= Subject key identifier: CD:8F:A9:BE:3B:08:F3:3A:40:F6:59:54:A5:01:B5:81:5C:44:81:52 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F11A0F7108CDA18AFBB911320 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/db8f6df4-cb2e-3c4f-a6d7-b7b4e019d3a6.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33651 IP address blocks: 98.207.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a0:f7:10:8c:da:18:af:bb:91:13:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=1c6eba61-5285-479f-ac28-6bceb18dcb51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ea:63:e6:45:1f:21:29:e3:d5:ec:cf:61:db: 03:00:24:3e:14:cc:c5:cd:07:eb:b3:0e:01:cb:2d: f5:dc:2c:91:0e:72:b4:bc:71:2b:14:ed:95:61:86: 4a:c6:5f:04:c2:ab:87:f4:45:ef:dc:e2:61:7c:18: 3d:82:f8:db:96:7c:ae:ac:4c:f8:e7:63:be:8f:b6: 69:61:8b:53:92:86:04:7e:2b:de:4b:d6:69:48:b7: 58:61:85:20:44:2e:3b:92:97:72:6f:e3:49:f3:30: 62:86:74:2c:c7:f2:8f:fd:0d:3a:cd:da:3b:d8:7e: be:23:d6:b9:ab:22:ce:4f:f5:66:62:bf:cd:81:68: c8:9f:bb:d6:c5:71:1f:11:af:36:13:0e:24:59:a6: b1:86:ec:05:15:02:da:fb:06:b4:e6:dd:24:69:3b: f0:01:a5:6e:de:3b:69:3b:c4:91:9c:b8:0d:a0:82: df:85:ca:15:c1:76:0e:25:d8:11:18:30:be:2a:a4: f2:bb:cb:91:71:8a:23:fb:7e:8d:08:6a:38:41:99: e1:29:8e:54:78:e3:80:0b:ef:81:72:75:5a:6b:67: fb:6f:9c:c7:3f:3e:63:12:d4:05:5e:a7:d5:6b:e1: cf:70:17:c6:64:85:97:01:72:8e:67:c7:79:c2:36: de:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:8F:A9:BE:3B:08:F3:3A:40:F6:59:54:A5:01:B5:81:5C:44:81:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/db8f6df4-cb2e-3c4f-a6d7-b7b4e019d3a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.207.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:1b:0c:94:35:b9:05:47:ad:08:77:13:8e:61:60:da:d9:98: de:d8:b3:c4:ec:3f:10:13:14:f9:63:61:d0:e8:da:78:64:84: f1:32:3a:cd:fc:0c:b8:27:1e:3a:67:12:8c:85:78:48:a2:bf: 8a:ed:40:66:19:44:3d:ae:4b:40:f4:9e:d0:f1:a8:97:c8:24: 86:a2:47:a1:bb:54:d0:4a:29:4d:b1:a5:0a:71:00:8d:1a:44: 1c:03:32:d2:0f:9c:3f:e9:f3:41:1f:b8:78:30:6f:54:e9:7e: 77:5f:88:dd:b8:c4:99:b5:3f:73:83:03:69:32:58:30:fd:b9: c0:84:0a:72:3c:64:c3:fd:ce:5c:ac:e2:f4:b2:13:26:ed:41: 1b:67:f3:98:a4:6c:dc:53:37:aa:cc:00:5d:7d:84:f0:13:50: 9a:87:49:cf:0a:47:86:c8:0a:30:42:c5:87:db:07:3b:2b:c8: 03:10:2a:19:ab:be:56:28:e6:22:c8:64:f3:7b:18:4d:00:d8: 02:ee:6b:61:8a:03:3e:b6:c8:4e:9c:39:b6:75:13:36:cd:d1: ac:cc:d0:7a:eb:cb:6d:1e:d9:09:bc:97:5a:d7:a6:25:c7:f8: d6:62:84:86:27:c3:3f:55:cd:6e:88:53:09:16:c8:3b:f4:43: 29:61:ce:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoPcQjNoYr7uREyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MWM2ZWJhNjEtNTI4NS00NzlmLWFjMjgtNmJjZWIxOGRjYjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhepj5kUfISnj1ezPYdsDACQ+FMzFzQfrsw4B yy313CyRDnK0vHErFO2VYYZKxl8EwquH9EXv3OJhfBg9gvjblnyurEz452O+j7Zp YYtTkoYEfiveS9ZpSLdYYYUgRC47kpdyb+NJ8zBihnQsx/KP/Q06zdo72H6+I9a5 qyLOT/VmYr/NgWjIn7vWxXEfEa82Ew4kWaaxhuwFFQLa+wa05t0kaTvwAaVu3jtp O8SRnLgNoILfhcoVwXYOJdgRGDC+KqTyu8uRcYoj+36NCGo4QZnhKY5UeOOAC++B cnVaa2f7b5zHPz5jEtQFXqfVa+HPcBfGZIWXAXKOZ8d5wjbeHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM2Pqb47CPM6QPZZVKUBtYFcRIFSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGI4ZjZkZjQtY2IyZS0z YzRmLWE2ZDctYjdiNGUwMTlkM2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYs/8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM0bDJQ1uQVHrQh3E45hYNrZmN7Ys8TsPxATFPljYdDo2nhkhPEyOs38 DLgnHjpnEoyFeEiiv4rtQGYZRD2uS0D0ntDxqJfIJIaiR6G7VNBKKU2xpQpxAI0a RBwDMtIPnD/p80EfuHgwb1TpfndfiN24xJm1P3ODA2kyWDD9ucCECnI8ZMP9zlys 4vSyEybtQRtn85ikbNxTN6rMAF19hPATUJqHSc8KR4bICjBCxYfbBzsryAMQKhmr vlYo5iLIZPN7GE0A2ALua2GKAz62yE6cObZ1EzbN0azM0Hrry20e2Qm8l1rXpiXH +NZihIYnwz9VzW6IUwkWyDv0QylhzuA= -----END CERTIFICATE-----Generated at Sun Sep 20 18:23:46 2026 by rpki-client