$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/28e1aa5c-6fcb-3342-8af1-898c8b653ea6.roa File: 28e1aa5c-6fcb-3342-8af1-898c8b653ea6.roa (raw, json) Hash identifier: fnK2502Qa0P8JKqA5aDQ1JoqXIeGpwn8EQNleKtnz9M= Subject key identifier: 9B:9E:2E:4F:16:48:AC:EF:DF:FD:42:FF:D2:0B:6F:8F:B5:A6:84:C7 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584F0ED236419CF4B8339B2D58FC Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/28e1aa5c-6fcb-3342-8af1-898c8b653ea6.roa Signing time: Fri 04 Sep 2026 01:00:12 +0000 ROA not before: Fri 04 Sep 2026 01:00:12 +0000 ROA not after: Thu 03 Dec 2026 02:00:12 +0000 asID: 4213 IP address blocks: 98.126.166.0/24 maxlen: 24 98.126.213.0/24 maxlen: 24 98.126.214.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0e:d2:36:41:9c:f4:b8:33:9b:2d:58:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Sep 4 01:00:12 2026 GMT Not After : Dec 3 02:00:12 2026 GMT Subject: CN=de7782c4-f918-4ae5-9839-9beb6983e2ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e4:ba:de:33:b6:05:19:88:d0:55:d8:e6:ee: 0f:2f:d8:3a:4c:e9:36:4e:9c:76:be:3c:58:49:b1: f0:9c:46:c2:56:6b:e7:8c:3a:78:e2:7f:b4:01:08: d3:f5:49:c4:3d:99:f5:80:7a:36:34:52:f4:3f:5a: 25:7f:cf:28:11:77:f5:39:61:da:6a:26:8f:40:46: 46:42:28:fd:03:09:bc:e9:28:44:37:3d:11:a0:83: 64:99:09:72:49:e1:e3:2c:53:a5:59:88:d6:97:0d: e0:10:c9:c0:50:be:5e:7d:c4:07:2f:65:7a:82:e3: dc:ab:db:12:6f:7a:06:33:2f:e1:e3:46:57:af:42: 18:97:a3:18:6b:28:72:3b:70:07:9d:9b:dd:1e:71: d8:92:03:4a:5d:eb:06:ba:8e:b0:43:a9:66:00:98: 41:69:7e:ec:ad:63:93:e3:0f:c0:11:c8:89:33:81: 79:e8:fa:de:72:ff:46:35:71:c8:26:6e:37:10:80: 59:dd:e6:7a:65:06:b6:10:a0:72:56:16:09:e4:51: 42:b8:a1:79:f2:e4:61:77:b8:e7:02:3c:e2:6c:56: 28:32:3b:b5:46:98:e3:6f:b5:97:da:bf:e5:9e:cf: 28:85:3b:1b:9b:f6:6f:c0:d7:81:94:31:0a:93:e7: 47:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:9E:2E:4F:16:48:AC:EF:DF:FD:42:FF:D2:0B:6F:8F:B5:A6:84:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/28e1aa5c-6fcb-3342-8af1-898c8b653ea6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 98.126.166.0/24 98.126.213.0-98.126.215.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:97:7f:bf:a2:fe:e8:c0:e1:e1:5e:d4:b2:da:d0:e2:c9:49: eb:50:9a:af:8e:4a:cd:2e:8d:58:2e:df:5e:91:1b:d9:bd:4a: 1b:d3:f6:ed:2e:20:de:a7:54:10:7e:ca:ce:23:d1:4d:57:e7: 36:d7:aa:f5:d9:1d:29:cc:f8:e2:9c:be:c2:08:b2:0d:b5:85: 21:d4:71:cc:a6:ad:48:49:e4:80:65:5c:b0:8b:39:d9:c2:c1: 2a:c8:d2:c6:ca:bd:0b:79:f3:08:fc:09:1b:01:84:5e:aa:e1: 16:e3:0a:b3:bb:36:7c:a7:f7:f2:a2:55:5c:ad:bb:d9:e2:bd: ca:c9:07:33:fc:fb:c9:47:ad:2d:b1:27:44:1c:9f:62:d2:48: bf:3b:4c:9f:8f:0b:27:27:c5:6f:14:42:1a:cc:ee:ad:59:8a: db:a1:0a:b7:9b:26:7e:7b:2f:82:26:48:26:d1:12:b1:e8:2d: 86:50:14:17:4a:5f:cb:e9:99:14:02:88:2a:e0:9e:2d:7b:d7: 68:ed:2a:fe:06:cf:ec:21:91:ec:69:ad:47:65:41:51:a2:b1: 98:d9:c0:1b:73:66:e6:72:c8:b9:4e:b7:b7:b0:af:49:e2:72: f2:fc:f6:9b:d1:2c:c5:67:08:f7:3b:66:82:c8:c8:68:ea:47: db:30:05:8f -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWE8O0jZBnPS4M5stWPwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI2MDkwNDAxMDAxMloXDTI2MTIwMzAyMDAxMlowLzEtMCsGA1UEAxMk ZGU3NzgyYzQtZjkxOC00YWU1LTk4MzktOWJlYjY5ODNlMmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uS63jO2BRmI0FXY5u4PL9g6TOk2Tpx2vjxY SbHwnEbCVmvnjDp44n+0AQjT9UnEPZn1gHo2NFL0P1olf88oEXf1OWHaaiaPQEZG Qij9Awm86ShENz0RoINkmQlySeHjLFOlWYjWlw3gEMnAUL5efcQHL2V6guPcq9sS b3oGMy/h40ZXr0IYl6MYayhyO3AHnZvdHnHYkgNKXesGuo6wQ6lmAJhBaX7srWOT 4w/AEciJM4F56Precv9GNXHIJm43EIBZ3eZ6ZQa2EKByVhYJ5FFCuKF58uRhd7jn AjzibFYoMju1Rpjjb7WX2r/lns8ohTsbm/ZvwNeBlDEKk+dHiQIDAQABo4IDYzCC A18wHQYDVR0OBBYEFJueLk8WSKzv3/1C/9ILb4+1poTHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvMjhlMWFhNWMtNmZjYi0z MzQyLThhZjEtODk4YzhiNjUzZWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAYn6mMAwD BABiftUDBANiftAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAj5d/v6L+6MDh4V7UstrQ4slJ61Car45KzS6N WC7fXpEb2b1KG9P27S4g3qdUEH7KziPRTVfnNteq9dkdKcz44py+wgiyDbWFIdRx zKatSEnkgGVcsIs52cLBKsjSxsq9C3nzCPwJGwGEXqrhFuMKs7s2fKf38qJVXK27 2eK9yskHM/z7yUetLbEnRByfYtJIvztMn48LJyfFbxRCGszurVmK26EKt5smfnsv giZIJtESsegthlAUF0pfy+mZFAKIKuCeLXvXaO0q/gbP7CGR7GmtR2VBUaKxmNnA G3Nm5nLIuU63t7CvSeJy8vz2m9EsxWcI9ztmgsjIaOpH2zAFjw== -----END CERTIFICATE-----Generated at Tue Sep 22 23:10:41 2026 by rpki-client