$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/94c0dd13-e159-34f6-8f4d-b11135e78ecf.roa File: 94c0dd13-e159-34f6-8f4d-b11135e78ecf.roa (raw, json) Hash identifier: xv6CQtOWVPtWayfWCF86vzuplKDXNt1fFC3RvRlMbGA= Subject key identifier: 28:96:99:B1:09:C9:30:46:54:17:FD:3E:08:16:43:BF:2C:55:8E:68 Certificate issuer: /CN=98f58f3d-707a-4dc1-8d25-5cdc95fb1746 Certificate serial: 010D0C9F4328584F093CCBCFA74BE5A7F1EED380 Authority key identifier: 88:0A:07:1D:19:77:B5:EF:FF:02:0D:0E:B5:6C:C9:82:A0:44:5E:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/94c0dd13-e159-34f6-8f4d-b11135e78ecf.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 216.153.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:cb:cf:a7:4b:e5:a7:f1:ee:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98f58f3d-707a-4dc1-8d25-5cdc95fb1746 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=361b19a8-c554-4b75-9b3c-8a4c7796c9a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c2:9d:5b:85:9f:fb:cf:a7:1a:9d:cb:c6:f4: a6:95:36:a8:58:0a:15:ba:62:4d:3f:13:9b:27:42: 82:cb:8c:3b:b6:fa:de:17:ab:81:02:91:3d:29:d7: 8b:44:e6:f5:27:25:55:da:56:e0:a3:e9:d7:11:9c: e3:1e:79:3a:90:f9:24:ae:eb:9a:fe:30:30:17:ef: 1c:54:d1:d6:44:1f:07:9f:15:e2:7f:ee:9f:c8:77: 21:3b:c4:4d:14:17:2f:bf:92:86:18:f8:4e:df:ee: b2:2c:30:f1:7e:ac:a7:d2:05:7c:6a:a9:ba:bd:06: 48:8f:f4:26:81:65:28:5d:92:d3:7b:f9:7a:3c:27: 03:e7:bc:cc:48:72:f0:83:b4:bc:7c:b3:83:a2:ae: da:9f:0c:56:5a:22:fd:2a:f8:a1:a9:69:c6:2a:68: 90:0e:c2:22:58:cf:84:0b:a9:44:77:cd:5b:56:41: 7b:43:c5:a5:62:42:1e:27:17:8a:c5:cd:11:c9:e3: 30:24:96:c7:27:81:87:b6:03:51:30:51:ea:32:8a: fe:2b:cb:69:8a:3f:31:b9:aa:8c:31:b8:2e:d3:01: 05:d6:82:a7:26:c4:9a:6d:0a:88:35:c2:6d:bc:a6: 66:cc:53:d1:ff:b5:04:7c:c2:84:e2:34:56:f8:98: 90:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:96:99:B1:09:C9:30:46:54:17:FD:3E:08:16:43:BF:2C:55:8E:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/94c0dd13-e159-34f6-8f4d-b11135e78ecf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.crl X509v3 Authority Key Identifier: keyid:88:0A:07:1D:19:77:B5:EF:FF:02:0D:0E:B5:6C:C9:82:A0:44:5E:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/98f58f3d-707a-4dc1-8d25-5cdc95fb1746.cer sbgp-ipAddrBlock: critical IPv4: 216.153.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:5a:1f:c5:29:53:3f:5c:0d:d2:ae:a1:00:bc:41:fc:05:c1: b4:f7:a6:2c:dc:43:0e:53:67:c8:69:69:f1:75:6c:7b:8c:0b: ee:3b:66:c5:aa:db:85:4f:cb:b2:3a:e4:7f:d0:d2:34:09:09: de:65:b7:66:32:b4:8c:d4:8d:e6:1f:bc:5c:75:e8:2c:fc:88: 50:dc:bc:d9:f3:a3:03:58:a1:e7:4f:de:7d:53:8f:ee:a1:00: 63:0a:9b:e5:15:3b:53:0f:ef:35:6b:fa:75:cb:6c:d1:aa:14: 6f:82:d9:b4:57:83:a3:ed:f9:98:48:d5:cd:60:6b:38:fd:95: a8:92:55:c6:08:b7:86:22:cd:5e:53:b3:41:27:b6:c2:9e:99: ca:54:99:80:f0:93:d8:ef:78:4c:e9:11:fb:1b:b6:e7:bb:18: e7:56:ab:8f:2e:e4:b3:5a:05:14:09:68:2c:c3:b5:f1:80:94: a9:8e:db:25:70:3e:cd:0f:ab:1d:56:75:f5:7e:2f:1a:49:62: b6:e0:82:d9:c8:e0:ff:ce:75:6e:de:25:cf:67:c3:8e:ae:bf: bd:4c:d2:10:fa:99:72:b6:d8:8c:a0:63:e3:46:6a:bd:60:d0: 45:b9:45:bd:26:33:25:be:39:a3:94:59:dd:04:e9:08:d3:67: d9:4f:1d:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPMvPp0vlp/Hu04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOThmNThmM2QtNzA3YS00ZGMxLThkMjUtNWNkYzk1ZmIx NzQ2MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk MzYxYjE5YTgtYzU1NC00Yjc1LTliM2MtOGE0Yzc3OTZjOWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMKdW4Wf+8+nGp3LxvSmlTaoWAoVumJNPxOb J0KCy4w7tvreF6uBApE9KdeLROb1JyVV2lbgo+nXEZzjHnk6kPkkruua/jAwF+8c VNHWRB8HnxXif+6fyHchO8RNFBcvv5KGGPhO3+6yLDDxfqyn0gV8aqm6vQZIj/Qm gWUoXZLTe/l6PCcD57zMSHLwg7S8fLODoq7anwxWWiL9KvihqWnGKmiQDsIiWM+E C6lEd81bVkF7Q8WlYkIeJxeKxc0RyeMwJJbHJ4GHtgNRMFHqMor+K8tpij8xuaqM Mbgu0wEF1oKnJsSabQqINcJtvKZmzFPR/7UEfMKE4jRW+JiQ0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCiWmbEJyTBGVBf9PggWQ78sVY5oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85OGY1 OGYzZC03MDdhLTRkYzEtOGQyNS01Y2RjOTVmYjE3NDYvOTRjMGRkMTMtZTE1OS0z NGY2LThmNGQtYjExMTM1ZTc4ZWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOThmNThmM2QtNzA3YS00ZGMxLThk MjUtNWNkYzk1ZmIxNzQ2Lzk4ZjU4ZjNkLTcwN2EtNGRjMS04ZDI1LTVjZGM5NWZi MTc0Ni5jcmwwHwYDVR0jBBgwFoAUiAoHHRl3te//Ag0OtWzJgqBEXvQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85OGY1OGYzZC03MDdhLTRkYzEtOGQyNS01Y2Rj OTVmYjE3NDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2JkcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ5aH8UpUz9cDdKuoQC8QfwFwbT3pizcQw5TZ8hpafF1bHuMC+47ZsWq 24VPy7I65H/Q0jQJCd5lt2YytIzUjeYfvFx16Cz8iFDcvNnzowNYoedP3n1Tj+6h AGMKm+UVO1MP7zVr+nXLbNGqFG+C2bRXg6Pt+ZhI1c1gazj9laiSVcYIt4YizV5T s0EntsKemcpUmYDwk9jveEzpEfsbtue7GOdWq48u5LNaBRQJaCzDtfGAlKmO2yVw Ps0Pqx1WdfV+LxpJYrbggtnI4P/OdW7eJc9nw46uv71M0hD6mXK22IygY+NGar1g 0EW5Rb0mMyW+OaOUWd0E6QjTZ9lPHTU= -----END CERTIFICATE-----Generated at Tue Sep 22 18:41:32 2026 by rpki-client