$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/743b788b-0947-3ada-91e0-9c14416f1f13.roa File: 743b788b-0947-3ada-91e0-9c14416f1f13.roa (raw, json) Hash identifier: ycHE0NJE1L5GrGhD9STW4adf+4it7IrDtAl1XJMG3hE= Subject key identifier: FF:66:70:3B:39:65:37:88:01:08:C6:1E:84:1A:33:2D:A7:98:AA:6A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119EF23ED4043E96EBD628C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/743b788b-0947-3ada-91e0-9c14416f1f13.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33287 IP address blocks: 98.225.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9e:f2:3e:d4:04:3e:96:eb:d6:28:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=8d8dab91-c3e5-444a-9974-89dd8dd44e24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f8:76:7a:50:45:f4:9c:b0:dc:64:0b:56:b8: ae:36:d0:62:67:15:98:74:c8:c7:33:c2:1d:be:4b: bc:02:8d:f6:79:f2:70:b4:e3:64:ca:b0:8c:36:37: 71:1d:a2:04:08:f3:d5:01:d9:84:c5:10:83:68:ff: bc:33:60:34:07:b8:d3:06:09:4a:b4:06:75:7a:e8: 0f:37:f0:df:fa:23:0c:63:6a:f7:37:5f:6e:70:47: bd:62:5a:35:73:c6:34:9d:c5:5a:4e:d9:3e:f5:d9: 82:18:35:97:db:1b:20:6a:dd:4b:2b:cb:d8:3e:79: 09:9f:3e:b8:ca:f9:7c:9b:cb:d9:2f:f0:9f:19:8a: 57:3c:5e:70:5e:e0:53:c9:58:dd:82:4a:36:fb:b5: c9:04:8a:8e:d6:89:c6:71:90:d8:49:c2:92:96:25: 11:bd:58:37:ba:42:4f:c0:6c:cd:b9:79:32:f0:04: 28:99:8e:2b:18:b7:80:f5:45:2a:37:ee:6b:d3:c1: ec:52:06:cc:18:ae:7a:75:8e:21:11:5b:14:b8:e4: 5d:66:e0:49:bd:9f:6e:9c:74:5d:1d:af:b6:08:85: 4f:a0:45:a0:e7:e5:c8:5e:ee:ab:74:87:62:df:6e: a5:15:f8:75:76:62:bb:6c:1f:8f:eb:e3:97:1e:aa: 9b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:66:70:3B:39:65:37:88:01:08:C6:1E:84:1A:33:2D:A7:98:AA:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/743b788b-0947-3ada-91e0-9c14416f1f13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.225.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:9a:4f:53:02:09:a2:76:90:23:cf:df:47:b0:25:cc:43:90: d5:72:62:57:88:98:76:39:1a:5d:48:f7:2d:65:01:02:49:ec: de:15:a4:2e:08:af:e0:08:ed:dd:f3:fe:f0:f8:e1:cc:93:58: c6:9c:52:3a:8c:c8:1c:ff:92:69:c7:b7:e6:13:ea:94:f7:22: f5:26:28:ca:8c:31:e3:8f:ff:1b:83:47:93:72:87:77:ed:2c: 75:5a:98:89:ae:c6:48:39:c6:ee:78:ad:7d:b5:22:0d:14:ba: 0c:3e:e4:b0:b9:63:db:68:eb:dd:be:e1:f9:fa:57:b9:0a:da: 7c:de:0b:c1:3a:d5:34:60:a1:15:ad:cb:9a:74:71:98:24:67: f2:38:3a:c3:4f:34:41:2d:2a:50:2f:af:c4:7f:9e:1b:1a:7f: 0b:c4:7b:07:2f:e0:d3:f0:e7:6c:48:5d:46:a6:88:ee:b7:00: 86:c7:a3:d4:ce:c6:1a:5b:ff:1f:a3:02:22:b1:51:99:fc:4a: d2:1a:aa:ac:90:2f:fa:da:4a:a9:c3:38:cf:ec:eb:c2:37:89: 58:96:76:b1:08:d3:89:5f:43:b4:70:8e:ba:b0:ff:cc:61:58: b4:bf:d5:01:b8:26:92:52:51:5a:cf:10:91:1d:ad:3d:c2:55: 11:ef:ba:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnvI+1AQ+luvWKMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk OGQ4ZGFiOTEtYzNlNS00NDRhLTk5NzQtODlkZDhkZDQ0ZTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/h2elBF9Jyw3GQLVriuNtBiZxWYdMjHM8Id vku8Ao32efJwtONkyrCMNjdxHaIECPPVAdmExRCDaP+8M2A0B7jTBglKtAZ1eugP N/Df+iMMY2r3N19ucEe9Ylo1c8Y0ncVaTtk+9dmCGDWX2xsgat1LK8vYPnkJnz64 yvl8m8vZL/CfGYpXPF5wXuBTyVjdgko2+7XJBIqO1onGcZDYScKSliURvVg3ukJP wGzNuXky8AQomY4rGLeA9UUqN+5r08HsUgbMGK56dY4hEVsUuORdZuBJvZ9unHRd Ha+2CIVPoEWg5+XIXu6rdIdi326lFfh1dmK7bB+P6+OXHqqbVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP9mcDs5ZTeIAQjGHoQaMy2nmKpqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzQzYjc4OGItMDk0Ny0z YWRhLTkxZTAtOWMxNDQxNmYxZjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYuGIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2aT1MCCaJ2kCPP30ewJcxDkNVyYleImHY5Gl1I9y1lAQJJ7N4VpC4I r+AI7d3z/vD44cyTWMacUjqMyBz/kmnHt+YT6pT3IvUmKMqMMeOP/xuDR5Nyh3ft LHVamImuxkg5xu54rX21Ig0Uugw+5LC5Y9to692+4fn6V7kK2nzeC8E61TRgoRWt y5p0cZgkZ/I4OsNPNEEtKlAvr8R/nhsafwvEewcv4NPw52xIXUamiO63AIbHo9TO xhpb/x+jAiKxUZn8StIaqqyQL/raSqnDOM/s68I3iViWdrEI04lfQ7Rwjrqw/8xh WLS/1QG4JpJSUVrPEJEdrT3CVRHvuvM= -----END CERTIFICATE-----Generated at Sat Oct 10 14:55:03 2026 by rpki-client