$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/96c2d158-c3ea-3c40-b9b9-8b355b682476.roa File: 96c2d158-c3ea-3c40-b9b9-8b355b682476.roa (raw, json) Hash identifier: 8YSYPDrrRpBGdYzbU8PVwzFnlh2B4QawKUvI1kz4BG4= Subject key identifier: B5:31:3E:AB:DE:2E:CB:01:3B:3C:44:4F:A8:F0:E0:51:6D:9B:BE:E9 Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584EA0152F81F5CAFFFC0CF8CEA0 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/96c2d158-c3ea-3c40-b9b9-8b355b682476.roa Signing time: Sun 26 Jul 2026 09:00:12 +0000 ROA not before: Sun 26 Jul 2026 09:00:12 +0000 ROA not after: Sat 24 Oct 2026 09:00:12 +0000 asID: 62610 IP address blocks: 98.98.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:15:2f:81:f5:ca:ff:fc:0c:f8:ce:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Jul 26 09:00:12 2026 GMT Not After : Oct 24 09:00:12 2026 GMT Subject: CN=ced3e8f5-4d92-46f3-9e75-a6a682491e8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:72:b2:0f:1e:97:6d:d4:44:3d:85:ec:cb:fb: e1:90:72:db:64:37:c8:b1:a1:ea:2a:cb:f4:c8:6f: 79:0d:de:f7:eb:2e:6b:40:6a:ce:f1:a4:c1:ad:44: c3:65:45:e8:da:69:ef:fc:d7:8f:ac:54:74:32:1e: 24:6d:cb:ab:56:b9:4c:bf:86:19:5a:f2:95:02:65: 63:2b:00:c2:a5:bd:18:81:96:fe:33:d4:97:f8:da: 5c:2f:cd:8a:ce:c8:18:9a:c8:29:0d:a1:a1:25:56: 13:b4:9d:e2:ba:66:fa:e4:7b:0e:d7:8b:20:96:32: 57:ca:4e:fe:d6:38:fa:7c:08:b5:a7:22:a2:58:d4: a0:91:1c:e8:ed:cb:83:d1:fc:b8:f2:2c:fb:27:ce: 1f:7e:6c:9c:a0:d4:48:d1:cd:3b:d0:2c:e5:84:53: 5f:10:a1:ca:3f:9a:39:e8:11:ba:c2:6a:c5:6e:c0: 93:18:ca:1e:49:c8:f8:e1:d7:fd:a4:41:45:f3:67: 63:ea:9a:13:cc:d1:64:55:57:d5:c8:27:6d:0f:8e: b5:7f:68:fb:ac:9f:b0:46:63:7b:4a:e5:00:b0:0f: 7d:c7:bb:c0:1e:16:f2:1f:7c:4a:2e:6f:a3:d6:ac: b5:d6:df:77:cf:4b:7b:7b:bf:54:8c:f7:c4:fe:56: 4d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:31:3E:AB:DE:2E:CB:01:3B:3C:44:4F:A8:F0:E0:51:6D:9B:BE:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/96c2d158-c3ea-3c40-b9b9-8b355b682476.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 98.98.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:99:86:91:ad:2b:fb:20:b5:7f:c0:6d:74:70:b7:8d:68:43: 33:98:31:a6:fb:07:6d:fc:19:7e:66:3a:9d:d8:c7:af:9c:b5: 91:d7:fa:98:be:19:33:4c:54:ac:3b:09:62:a5:60:38:e2:3d: f8:20:67:f8:08:a0:e3:36:00:93:a7:09:82:39:d1:d7:18:31: 5d:64:fc:b5:f0:29:d3:1e:90:88:f2:d7:7a:3d:c5:93:8e:7a: 5e:ab:15:69:59:78:42:1f:31:d5:36:65:29:f7:e0:2d:be:0c: 28:75:e2:b9:61:b7:0a:46:dd:7a:ae:9b:0b:52:72:d1:5c:27: 5d:49:2a:5b:dc:2b:40:29:85:2a:6d:fa:c8:0a:ed:22:e9:c8: 68:43:27:b4:dc:73:b8:1d:7b:a5:18:76:8e:10:80:fe:85:52: 63:b7:71:25:62:b4:59:af:f6:0b:da:58:2b:81:5a:ad:60:de: 11:07:a1:d5:91:70:25:19:94:d6:f7:d6:a5:f1:8e:2e:4e:1e: f2:32:2b:0e:35:fc:4e:f1:d7:a5:52:de:df:d8:a7:89:f9:c4: 6e:57:32:0b:f9:c0:ec:75:08:3b:b1:4d:92:b4:f2:55:91:2a: d7:ec:89:78:40:1e:85:00:c5:e4:5a:72:19:06:48:48:ef:67: 4a:6c:64:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6gFS+B9cr//Az4zqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk Y2VkM2U4ZjUtNGQ5Mi00NmYzLTllNzUtYTZhNjgyNDkxZThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonKyDx6XbdREPYXsy/vhkHLbZDfIsaHqKsv0 yG95Dd736y5rQGrO8aTBrUTDZUXo2mnv/NePrFR0Mh4kbcurVrlMv4YZWvKVAmVj KwDCpb0YgZb+M9SX+NpcL82KzsgYmsgpDaGhJVYTtJ3iumb65HsO14sgljJXyk7+ 1jj6fAi1pyKiWNSgkRzo7cuD0fy48iz7J84ffmycoNRI0c070CzlhFNfEKHKP5o5 6BG6wmrFbsCTGMoeScj44df9pEFF82dj6poTzNFkVVfVyCdtD461f2j7rJ+wRmN7 SuUAsA99x7vAHhbyH3xKLm+j1qy11t93z0t7e79UjPfE/lZNAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLUxPqveLssBOzxET6jw4FFtm77pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvOTZjMmQxNTgtYzNlYS0z YzQwLWI5YjktOGIzNTViNjgyNDc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYmIUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKZhpGtK/sgtX/AbXRwt41oQzOYMab7B238GX5mOp3Yx6+ctZHX+pi+ GTNMVKw7CWKlYDjiPfggZ/gIoOM2AJOnCYI50dcYMV1k/LXwKdMekIjy13o9xZOO el6rFWlZeEIfMdU2ZSn34C2+DCh14rlhtwpG3XqumwtSctFcJ11JKlvcK0AphSpt +sgK7SLpyGhDJ7Tcc7gde6UYdo4QgP6FUmO3cSVitFmv9gvaWCuBWq1g3hEHodWR cCUZlNb31qXxji5OHvIyKw41/E7x16VS3t/Yp4n5xG5XMgv5wOx1CDuxTZK08lWR KtfsiXhAHoUAxeRachkGSEjvZ0psZF0= -----END CERTIFICATE-----Generated at Tue Jul 28 21:39:13 2026 by rpki-client