$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df15b386-d80e-3d23-9139-81a14db2e677.roa File: df15b386-d80e-3d23-9139-81a14db2e677.roa (raw, json) Hash identifier: 7fe8cCC4FWQJ1uONQiLksAXbS+w+qkYpkBJje0CnGLw= Subject key identifier: C6:07:A5:FC:3A:0C:2A:53:BA:A5:50:5B:66:E6:14:72:10:9B:BF:34 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F11A1039942A906F5B80E8B80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df15b386-d80e-3d23-9139-81a14db2e677.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33651 IP address blocks: 98.248.246.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a1:03:99:42:a9:06:f5:b8:0e:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=fefd6771-59e5-4829-b7bb-7a2b72dbb239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:0f:45:5e:9a:79:f7:2c:f7:39:63:b6:02:27: 7e:10:9e:06:80:a5:c3:1d:29:43:2a:48:b7:c5:25: 9b:01:ba:93:b2:76:49:1d:fd:11:9e:c5:aa:21:d8: a9:ea:05:84:7d:89:22:b8:91:de:03:50:be:21:cc: e8:5b:1b:30:11:d9:7c:42:35:cb:d9:5a:84:d5:36: fe:fc:e6:b4:3a:99:ca:f1:16:ed:5d:af:70:44:30: 8f:56:03:63:b3:38:20:cc:09:52:15:c9:a4:1a:36: 7f:d9:70:84:a3:0a:28:23:43:ce:30:00:8d:d4:5f: c1:56:16:56:22:7b:bb:a4:03:2c:06:47:22:4a:2e: 58:21:04:05:cd:95:77:d7:01:2d:5e:ec:1d:2b:c8: 75:ab:51:9c:5d:d8:e5:5a:0f:e0:8a:dd:5e:f1:9d: 69:83:46:58:b8:4b:7a:00:a4:1f:a8:03:40:c6:2c: 51:0d:13:3e:1c:20:79:e1:e3:aa:7a:c9:40:ca:ff: bd:0c:7b:d0:5a:10:a9:1d:f8:db:f8:93:71:e1:c3: 70:8b:41:8c:6b:f1:71:5f:06:f1:13:bf:e2:9d:c3: 5d:cf:69:52:fd:2a:b3:0f:ec:0f:56:c6:4e:f4:e1: d1:72:60:da:7d:a3:87:6a:02:1c:c5:01:53:d0:31: 7a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:07:A5:FC:3A:0C:2A:53:BA:A5:50:5B:66:E6:14:72:10:9B:BF:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df15b386-d80e-3d23-9139-81a14db2e677.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.248.246.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:05:9f:a2:4c:92:50:59:fc:39:0f:a8:cc:4b:c8:b1:c7:5a: 6c:9c:33:cb:67:99:22:4c:0a:ef:42:7f:c3:e2:66:28:ae:1b: 4e:b3:e8:e3:56:11:e7:a2:31:eb:25:62:98:9c:3f:f8:9a:eb: 80:27:da:a5:c8:91:63:ad:91:ee:27:3b:0c:a8:e4:6f:48:7c: b8:72:95:c8:59:76:ba:2e:c4:12:f9:b6:2d:16:ad:da:86:c8: ab:50:f1:af:ba:8e:c5:f3:cc:fe:c7:73:cf:f7:0f:2a:4a:d5: 0a:27:09:c8:70:e4:61:7f:c9:b0:e1:65:30:87:31:93:5a:4b: 81:01:4f:35:4a:75:e5:d0:fc:36:32:37:21:09:af:9e:33:19: 63:fb:68:e0:e5:1a:9b:50:29:47:c1:51:36:a6:82:c2:ee:d2: 31:a6:b2:99:bf:a0:26:87:d5:89:37:5f:24:a6:63:73:90:a8: fa:1c:03:d4:9c:7d:cc:5f:c0:fb:95:19:2c:c5:c4:d1:87:39: 88:dc:23:45:a9:d7:ae:80:da:6a:ec:c9:41:b3:b5:f1:1a:84: d1:95:a7:e8:2d:43:d6:af:91:90:37:04:5b:0f:e7:94:74:01: b7:70:2b:56:cd:9d:b0:7a:db:d8:73:8d:6b:44:a1:10:0d:62: 83:19:d1:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoQOZQqkG9bgOi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmVmZDY3NzEtNTllNS00ODI5LWI3YmItN2EyYjcyZGJiMjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkw9FXpp59yz3OWO2Aid+EJ4GgKXDHSlDKki3 xSWbAbqTsnZJHf0RnsWqIdip6gWEfYkiuJHeA1C+IczoWxswEdl8QjXL2VqE1Tb+ /Oa0OpnK8RbtXa9wRDCPVgNjszggzAlSFcmkGjZ/2XCEowooI0POMACN1F/BVhZW Inu7pAMsBkciSi5YIQQFzZV31wEtXuwdK8h1q1GcXdjlWg/git1e8Z1pg0ZYuEt6 AKQfqANAxixRDRM+HCB54eOqeslAyv+9DHvQWhCpHfjb+JNx4cNwi0GMa/FxXwbx E7/incNdz2lS/SqzD+wPVsZO9OHRcmDafaOHagIcxQFT0DF6pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMYHpfw6DCpTuqVQW2bmFHIQm780MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGYxNWIzODYtZDgwZS0z ZDIzLTkxMzktODFhMTRkYjJlNjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYvj2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJMFn6JMklBZ/DkPqMxLyLHHWmycM8tnmSJMCu9Cf8PiZiiuG06z6ONW EeeiMeslYpicP/ia64An2qXIkWOtke4nOwyo5G9IfLhylchZdrouxBL5ti0WrdqG yKtQ8a+6jsXzzP7Hc8/3DypK1QonCchw5GF/ybDhZTCHMZNaS4EBTzVKdeXQ/DYy NyEJr54zGWP7aODlGptQKUfBUTamgsLu0jGmspm/oCaH1Yk3XySmY3OQqPocA9Sc fcxfwPuVGSzFxNGHOYjcI0Wp166A2mrsyUGztfEahNGVp+gtQ9avkZA3BFsP55R0 AbdwK1bNnbB629hzjWtEoRANYoMZ0Rg= -----END CERTIFICATE-----Generated at Tue Sep 22 11:56:55 2026 by rpki-client