$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23b8ae4d-2419-30c3-b2ff-4b7c1a915610.roa File: 23b8ae4d-2419-30c3-b2ff-4b7c1a915610.roa (raw, json) Hash identifier: h93ubjuj9vXgFXgnGlllqnRuATznZFfdXDmcwnBu4sE= Subject key identifier: 82:97:2B:54:8A:F0:92:02:21:E5:9B:2D:D6:18:0C:40:1F:F6:48:86 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F03A82DA6B03966F545D61480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23b8ae4d-2419-30c3-b2ff-4b7c1a915610.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 7725 IP address blocks: 98.252.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a8:2d:a6:b0:39:66:f5:45:d6:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=e51f065d-06cc-42bc-909c-5336e97a9702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:11:f0:3c:5a:68:f8:59:1d:26:83:cb:bf:82: 46:62:3c:12:77:40:2c:be:ce:53:f1:19:28:ff:d2: 22:96:7a:af:3e:44:fd:7e:68:48:eb:8c:a4:8e:25: 1b:8a:3f:94:18:87:b6:d3:e1:6b:4c:51:88:ed:ae: c0:f0:db:ee:16:08:79:38:d4:ca:ec:d4:50:e2:77: a7:8a:a8:5f:9b:83:70:f6:89:0d:55:8e:12:7c:89: c5:62:a4:f3:b6:43:80:bf:8d:17:5b:84:75:2f:40: cc:2e:ff:a9:d5:59:6e:6f:50:98:dc:18:1f:0c:a2: 3a:f2:7b:d3:a1:03:7a:c0:9c:cf:be:84:44:6d:1c: ac:19:72:9c:e2:04:62:18:5c:48:dc:0a:08:b1:19: e8:b2:65:88:f3:f1:cf:92:0b:e1:3b:6d:e2:53:87: 58:d4:ed:8d:ae:90:55:b8:74:0b:9b:8c:8a:ae:b6: 2a:81:f3:a6:aa:29:d0:7a:b1:08:f0:11:e4:38:32: 38:94:d1:5a:b4:01:9c:98:93:f6:7b:7c:e0:1f:ec: d1:1d:ef:b4:ec:bf:23:20:b9:a5:68:22:6a:ee:d3: f9:37:75:a6:eb:9e:7c:68:a0:00:18:61:40:28:14: 43:eb:0c:35:e1:e2:79:c2:9e:46:ac:59:06:09:6a: d5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:97:2B:54:8A:F0:92:02:21:E5:9B:2D:D6:18:0C:40:1F:F6:48:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23b8ae4d-2419-30c3-b2ff-4b7c1a915610.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.252.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:22:e7:cd:d6:17:51:a8:42:49:0e:ee:18:70:e3:2e:53:ef: 5a:f4:97:70:44:2e:05:46:fd:d7:07:4a:55:d5:72:ce:ae:1e: cb:03:27:4d:92:32:d2:6d:bb:e7:17:fc:d7:38:f3:f8:86:06: c3:79:51:9e:af:18:08:64:55:18:26:2a:ea:b7:c2:4f:0c:5b: fc:fc:aa:15:fb:86:d8:8a:5e:84:8c:a3:fe:cb:3a:be:82:7c: 69:15:0b:bb:4f:c7:35:22:d7:be:06:c0:40:77:65:49:a6:52: 7c:27:5c:c0:07:93:29:e0:22:c6:ea:fd:3d:b0:cf:80:99:60: d3:fd:fe:43:95:f1:a5:24:1d:b2:89:e5:0e:c9:11:4a:da:8d: be:01:40:04:1c:aa:95:62:47:48:38:03:23:18:8f:46:bf:29: e9:1e:6d:b2:80:e5:69:ce:5f:ab:d1:fd:cd:09:72:45:a4:6d: 6e:58:1e:eb:15:40:1d:92:1f:63:6b:96:ec:25:2b:36:e0:e8: 81:5e:4f:a4:d8:d9:17:fc:e3:fe:2a:8a:07:91:aa:5c:4b:db: 89:e0:97:6f:8e:28:3d:4d:1f:7b:cb:2a:50:48:b2:65:10:b3: 44:1e:d6:eb:f9:c4:38:c1:ea:8c:1c:6e:73:72:e1:21:78:00: 3e:c1:a7:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8DqC2msDlm9UXWFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk ZTUxZjA2NWQtMDZjYy00MmJjLTkwOWMtNTMzNmU5N2E5NzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBHwPFpo+FkdJoPLv4JGYjwSd0Asvs5T8Rko /9IilnqvPkT9fmhI64ykjiUbij+UGIe20+FrTFGI7a7A8NvuFgh5ONTK7NRQ4nen iqhfm4Nw9okNVY4SfInFYqTztkOAv40XW4R1L0DMLv+p1Vlub1CY3BgfDKI68nvT oQN6wJzPvoREbRysGXKc4gRiGFxI3AoIsRnosmWI8/HPkgvhO23iU4dY1O2NrpBV uHQLm4yKrrYqgfOmqinQerEI8BHkODI4lNFatAGcmJP2e3zgH+zRHe+07L8jILml aCJq7tP5N3Wm6558aKAAGGFAKBRD6ww14eJ5wp5GrFkGCWrVLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIKXK1SK8JICIeWbLdYYDEAf9kiGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjNiOGFlNGQtMjQxOS0z MGMzLWIyZmYtNGI3YzFhOTE1NjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYvzcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0i583WF1GoQkkO7hhw4y5T71r0l3BELgVG/dcHSlXVcs6uHssDJ02S MtJtu+cX/Nc48/iGBsN5UZ6vGAhkVRgmKuq3wk8MW/z8qhX7htiKXoSMo/7LOr6C fGkVC7tPxzUi174GwEB3ZUmmUnwnXMAHkyngIsbq/T2wz4CZYNP9/kOV8aUkHbKJ 5Q7JEUrajb4BQAQcqpViR0g4AyMYj0a/KekebbKA5WnOX6vR/c0JckWkbW5YHusV QB2SH2NrluwlKzbg6IFeT6TY2Rf84/4qigeRqlxL24ngl2+OKD1NH3vLKlBIsmUQ s0Qe1uv5xDjB6owcbnNy4SF4AD7Bp2w= -----END CERTIFICATE-----Generated at Sun Sep 27 10:06:59 2026 by rpki-client