$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f543234a-73f8-37c8-bb39-d3a4efb35f3d.roa File: f543234a-73f8-37c8-bb39-d3a4efb35f3d.roa (raw, json) Hash identifier: QLfpoKKyaGQZaw0pKQczIOzeg/R2QpBeeJjnG2pXTEQ= Subject key identifier: A1:3A:F0:F8:EA:F9:80:EF:3E:F2:B9:29:D0:09:42:E2:40:A9:78:E9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED8647BEE6614B31CD1DBEE30 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f543234a-73f8-37c8-bb39-d3a4efb35f3d.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33662 IP address blocks: 98.57.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:64:7b:ee:66:14:b3:1c:d1:db:ee:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=0542d85a-20c5-43a5-94a7-6a840d92d9b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2d:40:98:6e:9a:88:e1:45:c9:9c:97:d2:25: 59:c7:f9:c0:c3:06:9e:a7:cb:f0:98:50:e9:e7:76: 0c:bd:73:d3:fa:69:26:a0:4c:7a:31:4c:26:3c:60: fa:56:4c:d1:92:67:7a:3d:1d:cf:8f:61:f0:98:ef: 4a:fe:1b:51:77:50:be:4c:a9:18:d8:08:b6:a2:fa: e0:2c:52:56:d0:90:54:d3:ea:e8:ed:74:fd:e0:12: 26:f1:43:6e:52:3e:aa:63:46:e3:7d:1e:d1:f6:0c: cf:02:72:2f:6b:09:c8:00:89:44:c8:74:6d:35:b1: 70:d8:99:98:eb:de:93:41:be:bb:03:7e:4a:0c:5a: 57:bc:cd:1b:14:67:6b:92:cc:e0:3a:9e:49:94:ac: c2:f0:3b:af:69:75:77:e4:48:5f:86:da:ed:b9:96: a4:99:a1:e1:c4:46:93:29:67:4b:9e:6a:22:45:51: a8:f9:26:3c:7b:a0:5b:27:91:86:90:8b:8e:d9:c2: dc:92:d2:50:a2:57:a3:d5:2b:45:ad:f4:3c:54:c8: 2f:31:35:6b:7b:de:98:6c:a0:4e:8b:2b:11:c0:b9: 25:28:61:5b:3e:dc:54:4c:4f:e0:bb:b6:e5:c3:72: 7c:0a:8f:21:36:ae:f8:e2:66:d5:ad:56:42:5d:75: fa:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:3A:F0:F8:EA:F9:80:EF:3E:F2:B9:29:D0:09:42:E2:40:A9:78:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f543234a-73f8-37c8-bb39-d3a4efb35f3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.57.160.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:4e:05:ba:be:f1:d2:97:b2:0d:b4:8e:02:50:92:b1:27:61: 60:56:dc:e5:67:5f:69:f0:f0:eb:8f:91:e5:97:59:5f:61:4d: f7:04:2c:62:d5:95:c1:05:4d:47:73:ac:c8:91:2b:ed:be:0f: 67:d3:3a:af:c1:e9:d5:81:3a:ad:64:bd:65:8a:c3:88:f8:70: 30:7b:95:09:f4:b3:79:ff:8a:5f:4d:da:91:d2:92:ff:ba:51: 30:66:53:5e:16:14:1f:4a:a9:21:59:da:37:ca:dc:14:4d:3b: 36:9a:5d:c3:2a:4e:46:08:00:ca:08:01:45:bc:6c:43:8a:44: 9c:dc:29:bb:0d:e5:ee:23:5e:11:30:26:17:26:a5:ae:d0:12: ea:41:80:35:75:50:06:62:f8:99:e6:1f:58:c5:07:3e:7c:ef: e3:1d:e6:5e:3d:f8:12:e3:7d:e0:ae:0e:84:5d:01:cb:5d:2c: 10:c1:c3:d8:6c:cb:a5:47:97:39:ea:e4:b9:73:3a:c4:f2:11: d3:5f:d2:34:71:65:78:92:21:98:4f:b9:9f:f6:40:38:06:1e: 20:59:37:4c:6a:fe:6d:ed:14:6e:03:57:7d:25:66:93:9f:ab: 04:cf:44:58:97:b5:34:7a:a5:fa:fa:e1:c2:fe:c3:f4:b7:0a: 34:8d:ff:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YZHvuZhSzHNHb7jAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk MDU0MmQ4NWEtMjBjNS00M2E1LTk0YTctNmE4NDBkOTJkOWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAry1AmG6aiOFFyZyX0iVZx/nAwwaep8vwmFDp 53YMvXPT+mkmoEx6MUwmPGD6VkzRkmd6PR3Pj2HwmO9K/htRd1C+TKkY2Ai2ovrg LFJW0JBU0+ro7XT94BIm8UNuUj6qY0bjfR7R9gzPAnIvawnIAIlEyHRtNbFw2JmY 696TQb67A35KDFpXvM0bFGdrkszgOp5JlKzC8DuvaXV35EhfhtrtuZakmaHhxEaT KWdLnmoiRVGo+SY8e6BbJ5GGkIuO2cLcktJQolej1StFrfQ8VMgvMTVre96YbKBO iysRwLklKGFbPtxUTE/gu7blw3J8Co8hNq744mbVrVZCXXX6lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKE68Pjq+YDvPvK5KdAJQuJAqXjpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjU0MzIzNGEtNzNmOC0z N2M4LWJiMzktZDNhNGVmYjM1ZjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYjmgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKlOBbq+8dKXsg20jgJQkrEnYWBW3OVnX2nw8OuPkeWXWV9hTfcELGLV lcEFTUdzrMiRK+2+D2fTOq/B6dWBOq1kvWWKw4j4cDB7lQn0s3n/il9N2pHSkv+6 UTBmU14WFB9KqSFZ2jfK3BRNOzaaXcMqTkYIAMoIAUW8bEOKRJzcKbsN5e4jXhEw Jhcmpa7QEupBgDV1UAZi+JnmH1jFBz587+Md5l49+BLjfeCuDoRdActdLBDBw9hs y6VHlznq5LlzOsTyEdNf0jRxZXiSIZhPuZ/2QDgGHiBZN0xq/m3tFG4DV30lZpOf qwTPRFiXtTR6pfr64cL+w/S3CjSN/9I= -----END CERTIFICATE-----Generated at Fri Sep 25 20:18:35 2026 by rpki-client