$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fdfadcf5-020b-3e6a-9ca1-59d8f4ca364c.roa File: fdfadcf5-020b-3e6a-9ca1-59d8f4ca364c.roa (raw, json) Hash identifier: Pt5Cloy8FpSbHk3dMXItXPcJxJaLBUjs/DSol8fNwJo= Subject key identifier: 78:67:7F:EA:4D:49:11:E3:B9:D2:E9:23:45:CE:D5:AA:7D:99:99:D0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED4321E13746B4236AF147500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fdfadcf5-020b-3e6a-9ca1-59d8f4ca364c.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 13367 IP address blocks: 98.240.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:32:1e:13:74:6b:42:36:af:14:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=ceab729f-8666-43a8-949a-613f50e05e8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6b:e7:d9:4d:07:66:25:08:28:65:9d:aa:a0: f3:86:e8:9f:a3:c6:76:10:34:c7:8c:6b:14:3c:00: 94:04:1a:44:66:56:aa:8c:5c:b4:8b:f0:eb:32:9f: b3:03:90:49:e5:82:4e:0b:eb:e9:b7:e9:c2:6a:76: db:3e:3d:34:3a:98:e3:65:64:b4:35:2b:d4:18:58: db:b4:f2:ba:57:7d:c8:ee:21:51:eb:aa:8c:12:0d: b3:1f:73:1a:49:15:d3:0b:2e:03:ee:15:c2:48:fc: 03:f4:e3:38:58:01:03:de:24:8d:a6:2b:88:a0:72: ef:1d:cf:a1:b1:be:62:a4:c6:bf:95:e5:f6:10:e6: 84:5b:a7:4c:a2:31:14:61:2d:f2:99:4a:d9:87:85: 04:57:61:4e:8a:67:59:e4:d5:98:c5:38:68:92:47: cf:4b:3b:53:5f:52:8f:d1:e3:7d:b9:19:1b:9d:8c: 9b:ba:49:5f:73:48:c3:7c:db:28:66:23:b3:82:aa: ca:8b:e4:5f:4c:0d:e3:e5:33:2d:ed:c2:af:ed:af: df:d6:fa:06:f3:44:a4:1e:74:85:03:4e:8e:12:8b: 4a:27:4c:28:87:6e:6f:02:20:5c:38:ae:59:95:6e: ae:00:96:80:63:e8:a5:14:bf:a5:dd:03:2a:65:31: 04:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:67:7F:EA:4D:49:11:E3:B9:D2:E9:23:45:CE:D5:AA:7D:99:99:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fdfadcf5-020b-3e6a-9ca1-59d8f4ca364c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.240.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:b6:af:47:30:72:3c:d4:81:6e:41:b9:53:a8:3d:f2:84:5b: fb:c0:1b:e3:90:1f:56:f8:5d:32:29:0d:0b:86:13:b2:f6:26: 6a:48:36:c9:7b:35:f5:14:b9:e5:6f:93:14:c5:17:91:fa:31: cd:78:f5:b9:31:fb:7e:d8:e0:c4:96:f2:98:60:9e:73:ce:ed: f8:44:73:74:c8:af:75:d8:d5:66:1f:9e:2d:83:18:f1:27:c6: 67:58:b5:e1:ce:8a:0b:d8:2a:31:1a:ca:50:84:c2:a2:f3:2d: ff:68:d3:38:44:ee:64:8a:84:65:37:81:43:93:e6:9d:ed:75: 2a:5e:2b:10:82:30:b2:2c:b0:91:cf:06:09:c3:02:07:9c:da: 22:16:f0:47:57:60:26:ba:7d:13:12:e4:af:40:a4:4e:52:00: 69:4c:2b:e6:94:30:80:4e:22:2c:bf:8a:70:d3:14:55:44:ec: 92:76:20:37:d1:ae:62:2a:fb:11:b8:09:13:38:27:2b:b4:ba: 48:51:ca:e9:1c:ab:09:82:4c:d1:82:80:5b:f5:d2:50:35:da: 5c:6a:66:73:86:c0:45:1b:0c:40:b3:66:7c:83:9c:ee:59:82: 74:79:57:d6:65:21:d2:28:68:6d:66:95:84:9a:57:a0:5c:82: e4:00:d4:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMh4TdGtCNq8UdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk Y2VhYjcyOWYtODY2Ni00M2E4LTk0OWEtNjEzZjUwZTA1ZThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmvn2U0HZiUIKGWdqqDzhuifo8Z2EDTHjGsU PACUBBpEZlaqjFy0i/DrMp+zA5BJ5YJOC+vpt+nCanbbPj00OpjjZWS0NSvUGFjb tPK6V33I7iFR66qMEg2zH3MaSRXTCy4D7hXCSPwD9OM4WAED3iSNpiuIoHLvHc+h sb5ipMa/leX2EOaEW6dMojEUYS3ymUrZh4UEV2FOimdZ5NWYxThokkfPSztTX1KP 0eN9uRkbnYybuklfc0jDfNsoZiOzgqrKi+RfTA3j5TMt7cKv7a/f1voG80SkHnSF A06OEotKJ0woh25vAiBcOK5ZlW6uAJaAY+ilFL+l3QMqZTEEbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhnf+pNSRHjudLpI0XO1ap9mZnQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmRmYWRjZjUtMDIwYi0z ZTZhLTljYTEtNTlkOGY0Y2EzNjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYvCYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM+2r0cwcjzUgW5BuVOoPfKEW/vAG+OQH1b4XTIpDQuGE7L2JmpINsl7 NfUUueVvkxTFF5H6Mc149bkx+37Y4MSW8phgnnPO7fhEc3TIr3XY1WYfni2DGPEn xmdYteHOigvYKjEaylCEwqLzLf9o0zhE7mSKhGU3gUOT5p3tdSpeKxCCMLIssJHP BgnDAgec2iIW8EdXYCa6fRMS5K9ApE5SAGlMK+aUMIBOIiy/inDTFFVE7JJ2IDfR rmIq+xG4CRM4Jyu0ukhRyukcqwmCTNGCgFv10lA12lxqZnOGwEUbDECzZnyDnO5Z gnR5V9ZlIdIoaG1mlYSaV6BcguQA1H8= -----END CERTIFICATE-----Generated at Sat Sep 26 09:06:00 2026 by rpki-client