$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/201ed9e3-3421-33e7-a197-03e4de489db0.roa File: 201ed9e3-3421-33e7-a197-03e4de489db0.roa (raw, json) Hash identifier: i5hbYrOlGoR8ePX0gYIu6v1slwFIVAc7eXSKEx7J6V4= Subject key identifier: 3C:AD:01:61:AE:C3:AD:53:B2:ED:00:18:0F:95:17:CE:3C:75:D9:19 Certificate issuer: /CN=66ee137c-4201-4a21-a4f5-2f3161305281 Certificate serial: 010D0C9F4328584F4542800CAEB5B2B19612F400 Authority key identifier: 93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/201ed9e3-3421-33e7-a197-03e4de489db0.roa Signing time: Wed 23 Sep 2026 13:00:11 +0000 ROA not before: Wed 23 Sep 2026 13:00:11 +0000 ROA not after: Tue 22 Dec 2026 14:00:11 +0000 asID: 8796 IP address blocks: 98.158.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:42:80:0c:ae:b5:b2:b1:96:12:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66ee137c-4201-4a21-a4f5-2f3161305281 Validity Not Before: Sep 23 13:00:11 2026 GMT Not After : Dec 22 14:00:11 2026 GMT Subject: CN=b863be22-ee63-4e20-89e5-3e9198f70110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:53:22:d0:fc:19:ae:6c:c3:66:79:03:8f:02: d2:fb:03:20:3d:0e:bb:04:59:89:84:07:34:7d:03: 4f:dc:d3:cd:24:0f:d1:5d:09:e9:8d:45:35:03:07: d7:38:ad:4f:fd:2a:f9:b6:7a:ff:19:9f:1f:e0:0c: a1:a7:fe:c4:0b:fa:10:97:3b:6c:fe:a5:fc:b5:d1: 48:08:32:90:4c:a5:12:33:07:66:17:80:b7:be:a9: 07:ea:ad:fd:31:56:3f:d1:d5:12:12:86:74:31:17: fc:bc:6d:94:18:b2:13:0d:af:18:bc:16:0e:b9:8e: 73:ec:f1:40:1f:38:46:15:b6:a9:72:6c:18:cd:8e: 7d:bf:21:e1:6f:b8:bc:aa:5d:6f:a1:fd:e8:35:54: 4f:d2:a7:87:f5:1e:a7:5c:b0:08:56:9b:51:64:63: 1d:bc:8a:66:2d:19:b0:9d:5e:1c:e1:51:f9:ae:60: 31:fc:5e:8e:09:be:3b:e5:87:f6:d7:ee:8d:4e:4a: e2:26:49:b5:19:b2:cc:be:f6:d4:a6:bc:1a:c9:81: 41:b3:c0:18:22:bf:85:1f:fd:69:dc:0f:5c:b5:30: 8b:03:b1:73:7d:97:02:ae:54:dc:cf:7b:2b:61:0d: bc:35:56:92:82:58:b8:b6:3f:6c:c7:aa:73:96:d4: 08:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:AD:01:61:AE:C3:AD:53:B2:ED:00:18:0F:95:17:CE:3C:75:D9:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/201ed9e3-3421-33e7-a197-03e4de489db0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl X509v3 Authority Key Identifier: keyid:93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer sbgp-ipAddrBlock: critical IPv4: 98.158.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:a4:2e:ee:5b:9b:53:4c:5d:c6:12:77:84:d4:9d:96:6f:3e: d6:cf:e8:77:c1:d1:63:ea:5f:3c:c1:c3:fd:82:4f:32:72:51: 5b:3e:c9:ca:9d:22:d4:11:99:18:de:2a:d6:0c:34:a6:84:ca: 1f:f1:ea:88:37:85:c8:c0:ae:fd:ad:10:2b:10:d7:00:db:db: d0:8c:a6:86:3d:22:f8:c5:89:b4:89:83:82:f9:b3:0f:06:62: 1c:50:e2:78:5a:da:bb:8b:0d:81:e7:bd:fc:2c:0e:26:91:69: 24:9e:7d:2e:f6:97:a7:f1:f4:dd:80:f2:48:75:c1:2c:d9:30: ca:d2:71:be:92:51:48:86:01:07:75:d0:c7:cf:31:87:be:5c: 9f:09:72:15:bf:76:3d:ac:06:af:33:68:c9:50:31:35:9d:67: 9b:0e:23:e4:08:7c:00:e6:a4:cc:ac:c2:a8:dd:1b:78:53:09: 89:60:8e:cb:e3:6c:42:a5:bc:23:f6:06:f9:7a:3e:55:32:66: 45:31:ab:e0:d3:24:ed:b2:90:e9:67:a8:7b:0e:0a:f3:5f:45: a6:66:33:7d:25:f1:59:0f:2d:75:a4:f8:d4:26:64:80:74:74: 0e:2e:39:e8:83:35:d4:f8:ea:ec:4c:93:f0:0c:be:64:b7:1f: 54:6b:e8:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9FQoAMrrWysZYS9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZlZTEzN2MtNDIwMS00YTIxLWE0ZjUtMmYzMTYxMzA1 MjgxMB4XDTI2MDkyMzEzMDAxMVoXDTI2MTIyMjE0MDAxMVowLzEtMCsGA1UEAxMk Yjg2M2JlMjItZWU2My00ZTIwLTg5ZTUtM2U5MTk4ZjcwMTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVMi0PwZrmzDZnkDjwLS+wMgPQ67BFmJhAc0 fQNP3NPNJA/RXQnpjUU1AwfXOK1P/Sr5tnr/GZ8f4Ayhp/7EC/oQlzts/qX8tdFI CDKQTKUSMwdmF4C3vqkH6q39MVY/0dUSEoZ0MRf8vG2UGLITDa8YvBYOuY5z7PFA HzhGFbapcmwYzY59vyHhb7i8ql1vof3oNVRP0qeH9R6nXLAIVptRZGMdvIpmLRmw nV4c4VH5rmAx/F6OCb475Yf21+6NTkriJkm1GbLMvvbUprwayYFBs8AYIr+FH/1p 3A9ctTCLA7FzfZcCrlTcz3srYQ28NVaSgli4tj9sx6pzltQI1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDytAWGuw61Tsu0AGA+VF848ddkZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82NmVl MTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMxNjEzMDUyODEvMjAxZWQ5ZTMtMzQyMS0z M2U3LWExOTctMDNlNGRlNDg5ZGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjZlZTEzN2MtNDIwMS00YTIxLWE0 ZjUtMmYzMTYxMzA1MjgxLzY2ZWUxMzdjLTQyMDEtNGEyMS1hNGY1LTJmMzE2MTMw NTI4MS5jcmwwHwYDVR0jBBgwFoAUk6u6W3jmddEaQuIZV9YetG4N28YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82NmVlMTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMx NjEzMDUyODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYp4cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2kLu5bm1NMXcYSd4TUnZZvPtbP6HfB0WPqXzzBw/2CTzJyUVs+ycqd ItQRmRjeKtYMNKaEyh/x6og3hcjArv2tECsQ1wDb29CMpoY9IvjFibSJg4L5sw8G YhxQ4nha2ruLDYHnvfwsDiaRaSSefS72l6fx9N2A8kh1wSzZMMrScb6SUUiGAQd1 0MfPMYe+XJ8JchW/dj2sBq8zaMlQMTWdZ5sOI+QIfADmpMyswqjdG3hTCYlgjsvj bEKlvCP2Bvl6PlUyZkUxq+DTJO2ykOlnqHsOCvNfRaZmM30l8VkPLXWk+NQmZIB0 dA4uOeiDNdT46uxMk/AMvmS3H1Rr6LQ= -----END CERTIFICATE-----Generated at Mon Sep 28 19:45:41 2026 by rpki-client