$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/04303ace-af16-3b2e-affa-dc39c5b04980.roa File: 04303ace-af16-3b2e-affa-dc39c5b04980.roa (raw, json) Hash identifier: aiCRzP0einX/jiIxdKkSBob+0u73s9CJfvV4D4xW45Y= Subject key identifier: 58:77:E2:E7:00:E0:6B:64:4D:06:83:B5:D2:E7:3B:33:BB:EA:D7:5A Certificate issuer: /CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a Certificate serial: 010D0C9F4328584F3A17C83B305FC2B5DBCC6780 Authority key identifier: A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/04303ace-af16-3b2e-affa-dc39c5b04980.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 30029 IP address blocks: 98.142.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:c8:3b:30:5f:c2:b5:db:cc:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=9c16752c-51eb-466c-b0fc-35826ec38c37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c2:bc:a0:3d:a4:cc:63:cb:d5:28:0f:97:c7: bb:bb:d9:c2:aa:5c:18:d2:58:3b:29:0a:a3:70:2e: 0c:ec:f4:ca:90:da:8b:26:94:db:f2:8c:57:78:f6: 86:c5:54:38:e0:15:a8:d8:cd:99:b8:d2:3b:03:56: f5:ad:6f:a4:5d:71:06:48:50:7b:1f:20:7d:0a:3f: b5:68:42:b7:bd:18:a7:0e:29:73:0a:3f:36:93:57: 86:e7:5d:e6:db:80:c8:28:88:2c:ff:a9:b3:3d:f5: 9d:65:aa:9f:87:71:db:59:43:bc:d2:70:19:16:e4: 66:58:72:7e:dc:48:1f:41:ae:5f:cf:12:3d:54:ff: 21:f8:50:cc:b4:f1:73:1d:2b:9c:c3:ee:aa:50:98: a4:59:18:02:ec:e5:ba:c9:bf:41:bb:21:fd:31:df: 34:da:d4:05:cf:8f:3a:f9:97:3e:06:37:85:17:a5: 05:ca:5c:38:7c:b1:d8:ba:49:d2:36:49:19:98:07: 24:a8:ec:47:e2:25:b2:90:8f:23:3a:cd:5a:4e:62: bf:76:8c:e0:0f:1a:3e:ab:fa:45:18:b0:ce:0d:19: f0:ab:62:78:46:b8:55:34:55:64:3c:43:24:a2:93: 55:cf:4d:63:c2:58:30:03:8a:a3:f4:64:d5:08:2a: a9:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:77:E2:E7:00:E0:6B:64:4D:06:83:B5:D2:E7:3B:33:BB:EA:D7:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/04303ace-af16-3b2e-affa-dc39c5b04980.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl X509v3 Authority Key Identifier: keyid:A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer sbgp-ipAddrBlock: critical IPv4: 98.142.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:40:95:fe:74:c1:0c:d7:46:8e:80:1b:37:9d:30:86:31:ec: 67:ae:1d:55:88:62:12:f2:b7:bd:98:65:97:b4:aa:fa:92:c4: d5:09:f3:24:e3:c4:9e:28:4c:9d:d0:00:92:5a:74:8b:10:6a: d9:70:4f:81:af:dd:3c:2a:4a:0a:dd:dc:ab:de:86:ef:0f:88: 95:03:54:97:57:58:3a:22:ec:bc:55:c2:ee:62:66:f9:b6:93: 4e:44:57:b2:f4:5a:1b:fc:db:10:41:ef:d9:d1:ed:01:4b:9a: bb:ad:6d:c2:fb:ed:c1:91:35:79:32:fb:84:4a:a1:2f:39:4f: 7d:1f:46:67:e5:b6:61:ef:d6:cc:04:45:64:67:09:75:02:12: 1a:12:9a:10:cf:4f:88:4f:3f:57:3d:81:a1:e6:89:48:8b:04: 60:67:b5:08:d9:cb:4a:d4:0c:48:52:91:4c:3d:23:e7:41:53: 0d:6e:ab:a6:33:f5:7a:32:de:8b:3c:ba:8e:57:46:04:b7:23: 85:af:cd:47:0a:4e:7f:c7:8d:02:55:b0:ec:7c:5f:75:49:b5: b3:58:67:4b:42:ec:35:32:db:ac:66:98:44:6f:21:c3:51:27: 40:66:44:b3:04:ad:39:8e:4a:6a:79:34:84:4c:08:0f:dc:94: f2:42:97:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F8g7MF/CtdvMZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRhMWIzODMtZjk3NS00ZmIxLTljZTYtZTQzNjExZWFm YTFhMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk OWMxNjc1MmMtNTFlYi00NjZjLWIwZmMtMzU4MjZlYzM4YzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMK8oD2kzGPL1SgPl8e7u9nCqlwY0lg7KQqj cC4M7PTKkNqLJpTb8oxXePaGxVQ44BWo2M2ZuNI7A1b1rW+kXXEGSFB7HyB9Cj+1 aEK3vRinDilzCj82k1eG513m24DIKIgs/6mzPfWdZaqfh3HbWUO80nAZFuRmWHJ+ 3EgfQa5fzxI9VP8h+FDMtPFzHSucw+6qUJikWRgC7OW6yb9BuyH9Md802tQFz486 +Zc+BjeFF6UFylw4fLHYuknSNkkZmAckqOxH4iWykI8jOs1aTmK/dozgDxo+q/pF GLDODRnwq2J4RrhVNFVkPEMkopNVz01jwlgwA4qj9GTVCCqpZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFh34ucA4GtkTQaDtdLnOzO76tdaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81ZGEx YjM4My1mOTc1LTRmYjEtOWNlNi1lNDM2MTFlYWZhMWEvMDQzMDNhY2UtYWYxNi0z YjJlLWFmZmEtZGMzOWM1YjA0OTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWRhMWIzODMtZjk3NS00ZmIxLTlj ZTYtZTQzNjExZWFmYTFhLzVkYTFiMzgzLWY5NzUtNGZiMS05Y2U2LWU0MzYxMWVh ZmExYS5jcmwwHwYDVR0jBBgwFoAUomwcT7YhlG/6poaO5igrec40Hx8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81ZGExYjM4My1mOTc1LTRmYjEtOWNlNi1lNDM2 MTFlYWZhMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYo5AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFAlf50wQzXRo6AGzedMIYx7GeuHVWIYhLyt72YZZe0qvqSxNUJ8yTj xJ4oTJ3QAJJadIsQatlwT4Gv3TwqSgrd3Kvehu8PiJUDVJdXWDoi7LxVwu5iZvm2 k05EV7L0Whv82xBB79nR7QFLmrutbcL77cGRNXky+4RKoS85T30fRmfltmHv1swE RWRnCXUCEhoSmhDPT4hPP1c9gaHmiUiLBGBntQjZy0rUDEhSkUw9I+dBUw1uq6Yz 9Xoy3os8uo5XRgS3I4WvzUcKTn/HjQJVsOx8X3VJtbNYZ0tC7DUy26xmmERvIcNR J0BmRLMErTmOSmp5NIRMCA/clPJCl3Q= -----END CERTIFICATE-----Generated at Sun Sep 27 00:12:46 2026 by rpki-client