$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/a443ea4f-8cef-3073-9475-553c34701acb.roa File: a443ea4f-8cef-3073-9475-553c34701acb.roa (raw, json) Hash identifier: z56V7dgg1ed8qqbAISBQwqZ7ha6CCao4wyTESg3bbT8= Subject key identifier: 2D:7E:3C:34:BC:8F:74:A8:99:BF:18:F2:DC:3C:96:33:61:AC:33:81 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584F3CE2A1377319716C66FE6980 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/a443ea4f-8cef-3073-9475-553c34701acb.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 64286 IP address blocks: 98.159.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:a1:37:73:19:71:6c:66:fe:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=4fe88170-25bc-4f33-909b-69e5aba1fa72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b8:b3:ff:f6:3f:c4:ca:ea:0f:9c:79:ef:f3: 30:16:3e:2a:c3:15:8f:da:26:81:20:66:e0:89:13: 11:a9:3b:e0:f0:01:93:54:d5:c0:62:8a:a0:55:89: c6:9f:4e:e1:4b:a3:c6:38:6e:e9:93:85:ef:0a:cc: 8c:a1:ab:77:ad:4b:5b:fc:f2:94:b0:93:d3:a6:ab: a3:24:0e:05:68:61:7a:26:86:6f:9a:7a:c5:82:16: 06:aa:56:5d:b0:fa:b6:3a:60:23:9b:4f:0f:2b:db: 4a:b4:78:3f:92:54:ef:38:13:f9:01:28:30:67:28: b2:33:81:90:ca:57:47:24:da:87:19:27:e1:91:21: 8e:13:1d:44:c4:16:4c:e1:b7:c7:4b:f5:7a:8b:20: d1:11:39:35:38:34:e1:18:ab:59:5a:49:fb:28:df: 9e:37:89:ca:34:e5:13:60:74:17:93:a0:1f:18:36: 95:bf:12:bf:8b:01:c5:b8:13:48:b9:47:62:6e:cc: 02:e6:e9:9d:56:b9:3b:3e:90:b8:fc:b1:5b:73:8a: 0b:15:ba:26:c9:f3:59:df:a7:74:f7:7c:c3:46:24: 36:ce:56:06:ed:57:22:01:b1:55:6a:63:3e:8d:26: c8:d0:21:42:6d:44:f7:99:d0:3b:0e:0e:a0:8a:9f: 5c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:7E:3C:34:BC:8F:74:A8:99:BF:18:F2:DC:3C:96:33:61:AC:33:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/a443ea4f-8cef-3073-9475-553c34701acb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 98.159.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:b5:2d:06:38:10:d8:a7:8b:30:ab:42:0f:30:c4:89:75:6d: fc:16:b9:39:5d:1c:35:78:c1:fb:85:ed:3d:c6:f9:05:fd:c3: dd:87:e7:64:f9:ba:7c:51:6b:0a:a8:96:b0:4c:11:15:53:f3: b2:7c:c5:6b:91:bf:9c:be:e4:41:bc:ab:86:2f:0a:08:12:ca: 06:e8:05:ac:aa:9f:73:b1:e0:a4:2e:a6:9f:66:14:7b:ec:16: af:2f:e0:a3:69:56:ae:fa:26:38:aa:1b:c8:8d:d4:55:8d:c6: 63:c9:dc:fd:70:0b:6a:25:cd:ce:11:d9:3f:d6:ff:87:ab:79: 7f:f8:1a:ed:30:06:23:b8:d0:10:d1:db:17:b5:6c:6a:38:b1: 18:37:43:48:15:d2:1f:45:29:23:fc:16:e4:be:fe:91:4d:2e: b4:62:83:c2:b6:76:79:b6:45:f6:85:07:37:2c:a5:f4:96:ce: 2e:e0:f9:54:2c:9d:f4:11:7b:eb:7c:ea:fc:2e:76:66:a7:ea: 8d:8b:c7:2b:7e:1b:a4:db:6b:4a:9f:a2:77:56:0e:c5:57:99: 30:c7:f5:fd:88:b2:ac:52:56:82:b4:a6:49:fd:57:95:6d:80: ad:65:ad:af:de:9a:00:93:2f:43:13:22:e2:d4:32:50:46:f0: e7:95:eb:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884qE3cxlxbGb+aYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk NGZlODgxNzAtMjViYy00ZjMzLTkwOWItNjllNWFiYTFmYTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLiz//Y/xMrqD5x57/MwFj4qwxWP2iaBIGbg iRMRqTvg8AGTVNXAYoqgVYnGn07hS6PGOG7pk4XvCsyMoat3rUtb/PKUsJPTpquj JA4FaGF6JoZvmnrFghYGqlZdsPq2OmAjm08PK9tKtHg/klTvOBP5ASgwZyiyM4GQ yldHJNqHGSfhkSGOEx1ExBZM4bfHS/V6iyDRETk1ODThGKtZWkn7KN+eN4nKNOUT YHQXk6AfGDaVvxK/iwHFuBNIuUdibswC5umdVrk7PpC4/LFbc4oLFbomyfNZ36d0 93zDRiQ2zlYG7VciAbFVamM+jSbI0CFCbUT3mdA7Dg6gip9cSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1+PDS8j3Somb8Y8tw8ljNhrDOBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvYTQ0M2VhNGYtOGNlZi0z MDczLTk0NzUtNTUzYzM0NzAxYWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYp8oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADm1LQY4ENinizCrQg8wxIl1bfwWuTldHDV4wfuF7T3G+QX9w92H52T5 unxRawqolrBMERVT87J8xWuRv5y+5EG8q4YvCggSygboBayqn3Ox4KQupp9mFHvs Fq8v4KNpVq76JjiqG8iN1FWNxmPJ3P1wC2olzc4R2T/W/4ereX/4Gu0wBiO40BDR 2xe1bGo4sRg3Q0gV0h9FKSP8FuS+/pFNLrRig8K2dnm2RfaFBzcspfSWzi7g+VQs nfQRe+t86vwudman6o2Lxyt+G6Tba0qfondWDsVXmTDH9f2IsqxSVoK0pkn9V5Vt gK1lra/emgCTL0MTIuLUMlBG8OeV60k= -----END CERTIFICATE-----Generated at Tue Sep 22 18:10:50 2026 by rpki-client