$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/98f21885-21e4-4f38-8c7d-26696d802c35/d71a7e7b-47d3-3ef0-a7da-dd74ad50baf7.roa File: d71a7e7b-47d3-3ef0-a7da-dd74ad50baf7.roa (raw, json) Hash identifier: F9zVQSi2waiUmkCfl19LJHTP34qz1B4o3c+kQSvX+Us= Subject key identifier: FA:0E:C0:9E:0F:08:71:E2:5A:17:7E:3A:C3:F2:E2:65:C4:E5:99:4A Certificate issuer: /CN=98f21885-21e4-4f38-8c7d-26696d802c35 Certificate serial: 010D0C9F4328584F03AE79F9EA3A53D7B6C8D480 Authority key identifier: 4F:2E:32:6E:17:06:CB:FA:65:24:A3:90:A6:E2:CF:A9:3F:2B:B3:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/98f21885-21e4-4f38-8c7d-26696d802c35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/98f21885-21e4-4f38-8c7d-26696d802c35/d71a7e7b-47d3-3ef0-a7da-dd74ad50baf7.roa Signing time: Mon 31 Aug 2026 01:14:25 +0000 ROA not before: Mon 31 Aug 2026 01:14:25 +0000 ROA not after: Sun 29 Nov 2026 02:14:25 +0000 asID: 46224 IP address blocks: 204.108.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/98f21885-21e4-4f38-8c7d-26696d802c35/98f21885-21e4-4f38-8c7d-26696d802c35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/98f21885-21e4-4f38-8c7d-26696d802c35/98f21885-21e4-4f38-8c7d-26696d802c35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/98f21885-21e4-4f38-8c7d-26696d802c35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:ae:79:f9:ea:3a:53:d7:b6:c8:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98f21885-21e4-4f38-8c7d-26696d802c35 Validity Not Before: Aug 31 01:14:25 2026 GMT Not After : Nov 29 02:14:25 2026 GMT Subject: CN=c4c7e24d-0186-4594-9297-a67fc7056fe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a0:45:e9:6d:ff:fa:dd:9d:97:95:f1:29:bc: ac:6b:fc:54:52:29:29:ff:da:30:a4:dd:f3:ff:be: b5:1c:02:b5:12:9c:f4:a5:2f:1a:36:bc:b7:3f:5c: 36:ce:05:6d:f0:b5:05:ab:8c:a7:1c:bd:96:e0:c6: 32:bf:85:d2:86:a8:6e:98:b0:51:37:20:93:20:ba: fe:86:65:d2:bf:59:ce:13:36:e2:87:7f:c5:55:c8: 1e:60:e7:c8:1c:93:41:e5:a1:6c:3c:f9:ae:74:e7: eb:32:db:40:b0:3b:02:37:72:68:01:16:d2:91:7c: fd:10:71:9f:21:74:47:db:5c:88:93:93:3d:6c:9a: 50:77:e5:fd:d8:29:6e:ed:8f:8e:0d:b0:d9:c0:12: ec:45:0c:eb:da:a7:20:b0:9d:ef:4a:eb:cb:cc:79: 82:93:f2:86:47:0e:75:cf:15:1c:a0:1c:9d:a1:57: ce:9e:6a:13:b5:c1:67:b8:9c:fa:26:aa:f9:26:05: 54:43:7f:b6:31:fe:53:66:97:ac:d7:42:67:e1:d0: 98:d3:2e:ee:71:9f:65:e1:d1:ec:6f:8a:fe:d3:68: 27:64:2b:7c:b2:b5:9f:1d:9c:a3:b6:6a:e2:89:4b: b2:98:c5:44:84:d2:ef:f2:1b:d1:4b:17:85:ab:b2: fb:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:0E:C0:9E:0F:08:71:E2:5A:17:7E:3A:C3:F2:E2:65:C4:E5:99:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/98f21885-21e4-4f38-8c7d-26696d802c35/d71a7e7b-47d3-3ef0-a7da-dd74ad50baf7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/98f21885-21e4-4f38-8c7d-26696d802c35/98f21885-21e4-4f38-8c7d-26696d802c35.crl X509v3 Authority Key Identifier: keyid:4F:2E:32:6E:17:06:CB:FA:65:24:A3:90:A6:E2:CF:A9:3F:2B:B3:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/98f21885-21e4-4f38-8c7d-26696d802c35.cer sbgp-ipAddrBlock: critical IPv4: 204.108.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:d3:09:eb:cd:c0:9a:58:77:93:db:ed:5f:fa:db:ae:25:76: e3:35:9f:a7:30:c7:d1:d7:d9:5f:55:d8:95:fe:e9:c5:d8:75: 94:ca:28:93:44:1a:96:90:6a:e7:8c:17:7d:06:8b:0b:95:77: 20:11:02:ba:b9:dc:b3:9a:f0:16:03:9a:dc:23:55:46:43:40: 51:5c:6d:06:76:8b:89:54:24:15:d9:99:c8:37:53:58:cc:31: b1:cf:44:b2:9b:e8:b9:e4:51:77:96:a8:c5:0d:f8:88:ef:a2: bf:cb:84:a8:89:8c:7f:9c:b9:05:8c:36:e6:28:88:f8:f6:9f: 37:43:35:73:a6:51:02:10:d8:e9:27:92:56:ac:3b:30:22:10: 7e:37:7a:b5:75:73:1f:ee:ce:c6:36:ed:2f:89:5b:e6:35:46: 1e:3e:83:4b:d4:02:ac:11:63:42:9c:cc:09:55:8f:ee:2d:a7: 4d:87:45:e0:24:cd:7e:dc:5f:1c:60:81:4d:df:8e:9b:8d:67: 92:49:12:3f:6f:7a:da:07:a1:41:0b:07:d6:8b:fb:90:0a:52: 11:70:06:86:2e:44:20:20:5e:fd:ac:b2:02:68:80:8a:d6:5a: 3c:67:d3:ee:80:f4:b9:af:94:a0:68:da:ef:fe:cb:ed:12:b5: 30:75:56:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Drnn56jpT17bI1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOThmMjE4ODUtMjFlNC00ZjM4LThjN2QtMjY2OTZkODAy YzM1MB4XDTI2MDgzMTAxMTQyNVoXDTI2MTEyOTAyMTQyNVowLzEtMCsGA1UEAxMk YzRjN2UyNGQtMDE4Ni00NTk0LTkyOTctYTY3ZmM3MDU2ZmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaBF6W3/+t2dl5XxKbysa/xUUikp/9owpN3z /761HAK1Epz0pS8aNry3P1w2zgVt8LUFq4ynHL2W4MYyv4XShqhumLBRNyCTILr+ hmXSv1nOEzbih3/FVcgeYOfIHJNB5aFsPPmudOfrMttAsDsCN3JoARbSkXz9EHGf IXRH21yIk5M9bJpQd+X92Clu7Y+ODbDZwBLsRQzr2qcgsJ3vSuvLzHmCk/KGRw51 zxUcoBydoVfOnmoTtcFnuJz6Jqr5JgVUQ3+2Mf5TZpes10Jn4dCY0y7ucZ9l4dHs b4r+02gnZCt8srWfHZyjtmriiUuymMVEhNLv8hvRSxeFq7L76wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPoOwJ4PCHHiWhd+OsPy4mXE5ZlKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi85OGYy MTg4NS0yMWU0LTRmMzgtOGM3ZC0yNjY5NmQ4MDJjMzUvZDcxYTdlN2ItNDdkMy0z ZWYwLWE3ZGEtZGQ3NGFkNTBiYWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvOThmMjE4ODUtMjFlNC00ZjM4LThj N2QtMjY2OTZkODAyYzM1Lzk4ZjIxODg1LTIxZTQtNGYzOC04YzdkLTI2Njk2ZDgw MmMzNS5jcmwwHwYDVR0jBBgwFoAUTy4ybhcGy/plJKOQpuLPqT8rswwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi85OGYyMTg4NS0yMWU0LTRmMzgtOGM3ZC0yNjY5 NmQ4MDJjMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGz7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnTCevNwJpYd5Pb7V/6264lduM1n6cwx9HX2V9V2JX+6cXYdZTKKJNE GpaQaueMF30GiwuVdyARArq53LOa8BYDmtwjVUZDQFFcbQZ2i4lUJBXZmcg3U1jM MbHPRLKb6LnkUXeWqMUN+Ijvor/LhKiJjH+cuQWMNuYoiPj2nzdDNXOmUQIQ2Okn klasOzAiEH43erV1cx/uzsY27S+JW+Y1Rh4+g0vUAqwRY0KczAlVj+4tp02HReAk zX7cXxxggU3fjpuNZ5JJEj9vetoHoUELB9aL+5AKUhFwBoYuRCAgXv2ssgJogIrW Wjxn0+6A9LmvlKBo2u/+y+0StTB1Vjg= -----END CERTIFICATE-----Generated at Sun Sep 20 22:22:32 2026 by rpki-client