$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa843317-ad11-3214-bbd2-92bcbafc1e11.roa File: fa843317-ad11-3214-bbd2-92bcbafc1e11.roa (raw, json) Hash identifier: G2D8qQ2xI8wJv4JbiCKhQZ+67Qb65FBoEvotDf2kOBQ= Subject key identifier: D9:D0:A4:71:A4:74:8F:59:AA:59:71:92:2B:4F:63:F6:36:64:9B:DB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F11A102AAC2D7600FFD963980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa843317-ad11-3214-bbd2-92bcbafc1e11.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33651 IP address blocks: 98.248.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a1:02:aa:c2:d7:60:0f:fd:96:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=deeaab14-91e4-46c0-b33f-ce9491551b1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:1a:3e:f8:64:c5:65:84:ce:14:fe:2a:25:38: c3:8b:64:cd:26:e0:ae:0b:14:33:21:7f:d5:37:58: b6:b8:ff:79:c3:d6:bd:b6:3e:b1:2c:28:54:c2:b0: fa:f2:a9:0e:87:1a:71:7f:57:48:df:7b:05:1f:30: 31:6d:59:3c:87:a0:03:dc:5e:e9:93:17:30:db:84: b0:63:60:0f:46:d0:cc:ec:ed:f9:fb:9d:da:9b:59: 6e:54:e8:36:54:14:b5:cc:21:d5:41:0d:47:53:8e: ce:88:f7:4f:16:f8:a4:39:4d:99:32:a9:6b:a0:b8: 9b:bd:39:57:61:1b:21:73:0a:51:17:61:b5:67:aa: c5:3c:5b:da:b1:ef:90:72:18:6f:6b:ee:4d:9a:27: 3c:75:50:e2:a4:1f:a0:ab:41:5d:a1:9f:d2:3e:f6: 15:b7:7c:49:0a:fd:82:1a:b2:f6:6e:de:40:c6:47: d4:02:da:31:f3:51:f0:19:5c:8a:eb:2c:95:22:06: cc:c4:98:4a:7c:44:24:19:a3:e5:15:7b:05:b4:c3: 6e:b1:ce:56:c5:77:90:8c:8e:a1:c0:36:b1:fc:c6: 74:0e:d6:9f:70:10:95:13:00:93:4d:f5:ae:dd:14: ae:a8:5b:73:da:9e:38:32:3a:e0:c5:a6:10:a4:d1: dd:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D0:A4:71:A4:74:8F:59:AA:59:71:92:2B:4F:63:F6:36:64:9B:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa843317-ad11-3214-bbd2-92bcbafc1e11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.248.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:cd:f0:56:72:c1:61:c8:c2:18:a6:1b:28:9e:2f:d5:c1:7f: 5d:3c:30:f5:99:b4:01:0e:1f:db:04:b4:26:fd:f1:b4:03:6f: 2e:35:ed:af:13:ad:f4:28:bb:2f:cd:5c:a3:e6:6b:c9:7c:46: 6a:24:32:ff:60:e6:f7:d2:e9:ef:f0:c6:81:db:1b:3d:e8:8f: 9c:1a:f8:0a:5f:78:d3:cf:ee:8a:6c:7b:1d:63:85:ec:8f:cb: 16:2c:2d:8d:bb:3e:8b:f7:3f:78:a4:e4:94:f0:e1:8f:7d:c0: 9d:0e:cd:54:f2:2a:1f:d7:29:37:74:5d:d3:70:b0:44:32:b9: e8:f8:44:8f:10:6f:a8:19:95:e1:39:be:d3:dd:55:c6:6f:b6: 06:02:bf:bd:fb:96:19:a5:cf:76:f3:52:17:a5:82:10:a2:61: 98:8f:fa:e2:80:fb:79:6c:67:73:9c:9f:86:7d:ef:96:1a:8f: 11:c7:8f:68:a1:31:ee:77:d3:16:9f:d2:4e:26:49:6e:67:a0: 64:ff:44:41:60:8c:88:c3:de:87:c4:7e:05:b2:b6:a5:a2:c5: ca:0e:a4:74:c7:1d:db:ff:ec:cd:9d:7c:1a:ed:e8:d8:52:40: cf:c9:23:4f:fc:79:73:be:04:07:03:23:98:06:8a:43:3c:aa: 22:3d:7e:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoQKqwtdgD/2WOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGVlYWFiMTQtOTFlNC00NmMwLWIzM2YtY2U5NDkxNTUxYjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ho++GTFZYTOFP4qJTjDi2TNJuCuCxQzIX/V N1i2uP95w9a9tj6xLChUwrD68qkOhxpxf1dI33sFHzAxbVk8h6AD3F7pkxcw24Sw Y2APRtDM7O35+53am1luVOg2VBS1zCHVQQ1HU47OiPdPFvikOU2ZMqlroLibvTlX YRshcwpRF2G1Z6rFPFvase+Qchhva+5Nmic8dVDipB+gq0FdoZ/SPvYVt3xJCv2C GrL2bt5AxkfUAtox81HwGVyK6yyVIgbMxJhKfEQkGaPlFXsFtMNusc5WxXeQjI6h wDax/MZ0DtafcBCVEwCTTfWu3RSuqFtz2p44MjrgxaYQpNHdKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNnQpHGkdI9ZqllxkitPY/Y2ZJvbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmE4NDMzMTctYWQxMS0z MjE0LWJiZDItOTJiY2JhZmMxZTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYvh4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMTN8FZywWHIwhimGyieL9XBf108MPWZtAEOH9sEtCb98bQDby417a8T rfQouy/NXKPma8l8RmokMv9g5vfS6e/wxoHbGz3oj5wa+ApfeNPP7opsex1jheyP yxYsLY27Pov3P3ik5JTw4Y99wJ0OzVTyKh/XKTd0XdNwsEQyuej4RI8Qb6gZleE5 vtPdVcZvtgYCv737lhmlz3bzUhelghCiYZiP+uKA+3lsZ3Ocn4Z975YajxHHj2ih Me530xaf0k4mSW5noGT/REFgjIjD3ofEfgWytqWixcoOpHTHHdv/7M2dfBrt6NhS QM/JI0/8eXO+BAcDI5gGikM8qiI9flk= -----END CERTIFICATE-----Generated at Mon Sep 21 16:52:10 2026 by rpki-client