$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/3e8a8d16-857b-33e9-b07b-913de656aa02.roa File: 3e8a8d16-857b-33e9-b07b-913de656aa02.roa (raw, json) Hash identifier: 8vNoN7TNPVQkvTXSSp6IZjZ+2Y5G5+U+bXPnUo7+Yq0= Subject key identifier: 96:3D:30:3A:03:6F:43:8A:7C:A4:3D:CF:CC:66:EB:FD:2E:B4:8C:E0 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584F0ED2364E1F6018EF06C74400 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/3e8a8d16-857b-33e9-b07b-913de656aa02.roa Signing time: Fri 04 Sep 2026 01:00:12 +0000 ROA not before: Fri 04 Sep 2026 01:00:12 +0000 ROA not after: Thu 03 Dec 2026 02:00:12 +0000 asID: 4213 IP address blocks: 98.126.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0e:d2:36:4e:1f:60:18:ef:06:c7:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Sep 4 01:00:12 2026 GMT Not After : Dec 3 02:00:12 2026 GMT Subject: CN=a5fc4111-c77a-4770-8815-219de6f33fb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4a:4d:5c:d5:92:c5:c7:7a:55:b2:70:03:f6: dc:13:68:7d:ff:67:20:66:2e:5e:1f:ab:54:a5:aa: 11:de:46:2e:42:2c:82:9b:cd:b9:38:55:72:43:22: cc:4b:8f:04:a4:1a:0d:d7:2b:77:b7:d6:15:b4:a4: 60:cd:c0:bb:1b:c5:79:fc:db:0b:37:2b:d8:82:20: 7f:3c:96:f6:1b:95:da:13:0b:a7:18:31:39:60:3d: fc:0f:b9:7d:ed:ae:14:8f:c2:8b:6b:21:09:8c:67: cd:c8:bc:ea:e8:00:48:d2:14:87:c6:e7:c8:d1:f6: 44:2e:d0:0f:bf:e6:d4:44:45:d1:f0:37:ab:71:0b: 92:ac:64:ff:fa:5a:c4:d6:e9:17:0c:4a:31:53:62: 6e:52:0d:af:b0:95:25:49:65:6d:06:58:44:e3:eb: 1a:21:2c:e3:12:f7:a5:7f:cf:1a:35:7d:8f:70:ff: 2f:77:69:1d:c7:f0:37:ae:80:37:e7:51:08:b6:0c: 29:f1:d1:8c:6c:d9:9a:ca:da:3b:01:d5:d6:13:af: df:97:fd:fa:63:c7:11:72:5c:7b:e1:3f:ae:07:2f: 37:e9:17:c5:39:d7:a6:5a:55:91:de:3f:b6:b1:70: 19:a5:d6:d2:3b:b6:46:52:88:17:4d:e1:d9:8a:12: 8c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:3D:30:3A:03:6F:43:8A:7C:A4:3D:CF:CC:66:EB:FD:2E:B4:8C:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/3e8a8d16-857b-33e9-b07b-913de656aa02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 98.126.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:55:3f:ff:c4:32:f7:a4:7e:79:96:06:85:ce:ff:80:7b:89: 0c:83:2e:8b:55:6f:4c:2e:e6:a1:f7:02:83:be:67:dd:f0:db: 38:84:48:2d:2c:3e:88:70:1e:a6:bc:dd:f4:ab:fc:8d:66:92: 62:4b:95:95:1f:61:54:56:8e:51:4c:b3:0a:fd:b6:a8:a5:3d: 5f:ed:58:4f:85:e7:21:44:37:14:71:7c:67:b8:a1:3a:13:ff: e9:4e:85:cf:66:55:92:42:a3:14:da:77:07:f9:91:dd:83:5e: e6:2f:1d:79:d4:e8:f3:11:c1:5f:09:7c:3d:86:7e:98:37:3f: 02:ba:c5:b3:4e:63:59:c1:2a:0f:15:fe:26:3a:83:6d:8f:11: 4c:26:c2:68:75:18:ac:00:c9:17:ca:b5:bd:54:e7:33:b4:51: 0e:6a:b3:96:10:27:bd:2b:df:cc:6c:1e:c7:52:dd:8a:fa:8b: b8:ab:2c:04:72:03:15:e9:66:e4:6d:ff:89:7d:cd:7e:80:2a: 6e:07:ec:17:c1:0b:4f:ca:2f:3c:bd:22:bc:71:43:5e:58:cd: b8:e2:04:76:6f:12:cf:53:d2:e8:07:3a:00:da:70:5e:a6:2d: 59:84:0f:33:5d:02:ad:8f:db:18:8f:52:63:4e:55:92:f6:d2: 08:e2:04:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8O0jZOH2AY7wbHRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI2MDkwNDAxMDAxMloXDTI2MTIwMzAyMDAxMlowLzEtMCsGA1UEAxMk YTVmYzQxMTEtYzc3YS00NzcwLTg4MTUtMjE5ZGU2ZjMzZmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEpNXNWSxcd6VbJwA/bcE2h9/2cgZi5eH6tU paoR3kYuQiyCm825OFVyQyLMS48EpBoN1yt3t9YVtKRgzcC7G8V5/NsLNyvYgiB/ PJb2G5XaEwunGDE5YD38D7l97a4Uj8KLayEJjGfNyLzq6ABI0hSHxufI0fZELtAP v+bUREXR8DercQuSrGT/+lrE1ukXDEoxU2JuUg2vsJUlSWVtBlhE4+saISzjEvel f88aNX2PcP8vd2kdx/A3roA351EItgwp8dGMbNmayto7AdXWE6/fl/36Y8cRclx7 4T+uBy836RfFOdemWlWR3j+2sXAZpdbSO7ZGUogXTeHZihKM8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJY9MDoDb0OKfKQ9z8xm6/0utIzgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvM2U4YThkMTYtODU3Yi0z M2U5LWIwN2ItOTEzZGU2NTZhYTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYn6WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFVP//EMvekfnmWBoXO/4B7iQyDLotVb0wu5qH3AoO+Z93w2ziESC0s PohwHqa83fSr/I1mkmJLlZUfYVRWjlFMswr9tqilPV/tWE+F5yFENxRxfGe4oToT /+lOhc9mVZJCoxTadwf5kd2DXuYvHXnU6PMRwV8JfD2Gfpg3PwK6xbNOY1nBKg8V /iY6g22PEUwmwmh1GKwAyRfKtb1U5zO0UQ5qs5YQJ70r38xsHsdS3Yr6i7irLARy AxXpZuRt/4l9zX6AKm4H7BfBC0/KLzy9IrxxQ15YzbjiBHZvEs9T0ugHOgDacF6m LVmEDzNdAq2P2xiPUmNOVZL20gjiBJs= -----END CERTIFICATE-----Generated at Sun Sep 20 18:24:02 2026 by rpki-client