$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9653b10d-9e56-3a43-a43b-c82fd0b1e819.roa File: 9653b10d-9e56-3a43-a43b-c82fd0b1e819.roa (raw, json) Hash identifier: jXXLM3zgHbEfwZqo2ZwyQNLm3fEeO47hROR07L7nfHk= Subject key identifier: 20:F6:C6:56:A7:B9:E1:D0:B3:D0:41:3D:53:0F:57:A8:20:63:64:66 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584E6F3B40B09A75D9307235A680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9653b10d-9e56-3a43-a43b-c82fd0b1e819.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 33491 IP address blocks: 98.34.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3b:40:b0:9a:75:d9:30:72:35:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=d1e7a29a-812f-4081-b02f-c090dad9b054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:94:60:02:33:61:cc:1d:2d:05:6f:4c:d9:fc: f6:d7:f5:0d:79:27:9c:6a:e5:a0:49:d1:81:70:b5: f6:e4:f9:eb:12:f4:5d:9b:21:fa:52:30:63:70:86: 30:ca:28:ac:b3:bf:e9:4a:fe:bb:75:0b:95:56:be: f8:01:52:0b:47:15:3d:a0:f2:de:11:6d:18:f6:6b: 97:0d:c8:ef:6b:e9:7a:2e:fd:bf:21:31:6d:e8:3a: 7e:8c:64:52:38:bd:1b:13:46:a8:89:7b:f1:7d:66: 0f:ae:4f:04:8f:2b:05:c9:a8:5b:b7:17:9b:85:92: 7d:8e:ed:fb:56:2f:b4:31:25:27:a8:78:66:5d:06: 1b:1b:90:9c:63:ee:16:57:6e:83:57:c7:82:88:dd: 59:42:e3:50:a5:49:60:8f:32:42:45:36:35:ae:8a: de:d4:93:cc:f0:01:98:d3:b1:b6:c6:34:0c:d4:dd: 17:7a:cb:62:3c:21:b4:39:77:b4:07:9f:c8:38:05: 61:4a:97:a8:a1:ed:54:ff:79:c7:ae:33:de:fa:8f: 97:61:85:3e:a0:5d:f1:6c:27:16:8d:8f:30:51:ce: 17:f0:b4:e5:ad:05:22:65:93:11:53:1e:3a:df:29: 81:96:ef:bd:2c:a7:48:62:ac:86:7d:82:cc:67:48: 93:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:F6:C6:56:A7:B9:E1:D0:B3:D0:41:3D:53:0F:57:A8:20:63:64:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9653b10d-9e56-3a43-a43b-c82fd0b1e819.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.34.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:1c:f8:1b:73:cc:95:69:36:77:bc:57:bd:51:66:c6:b1:ec: 0d:c0:24:7f:1b:4a:51:9b:ce:f4:01:ac:db:94:30:c4:26:26: 70:1a:19:4e:d7:43:87:1d:6b:bd:4c:7f:96:06:47:ac:23:b4: 2f:fd:b5:65:44:b2:38:6f:5b:a5:e1:55:56:0d:5d:aa:41:59: 32:57:ca:d2:1b:9c:e4:b5:6b:37:ca:ba:08:5b:91:98:db:2f: 42:91:fb:89:c9:8b:2e:32:13:58:8b:6c:7b:e9:99:fa:27:fe: f2:12:fd:ac:7b:38:dc:bf:30:5a:0d:73:c5:f5:3d:85:03:f6: cc:3b:69:9f:87:c4:32:f1:41:71:f0:5d:4c:8e:cc:0d:a8:4c: 8c:46:12:0c:59:66:c3:61:c8:6c:2b:51:0a:0e:13:50:db:d2: e9:a9:c9:df:58:99:c1:33:af:75:a5:9c:05:64:32:e3:0c:16: 22:17:9f:49:cb:f3:42:aa:18:d9:af:14:95:6e:23:25:d9:4b: 58:c4:29:f6:a1:a2:81:0c:15:a6:4b:ab:bc:b1:f3:f3:9e:22: 71:74:b8:db:c9:96:07:5e:76:c8:c4:e0:f1:28:e2:f4:cf:fd: 9b:84:1a:d4:d7:cb:55:cb:51:6d:97:d2:96:57:03:1b:f5:43: 41:b0:02:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vO0CwmnXZMHI1poAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk ZDFlN2EyOWEtODEyZi00MDgxLWIwMmYtYzA5MGRhZDliMDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJRgAjNhzB0tBW9M2fz21/UNeSecauWgSdGB cLX25PnrEvRdmyH6UjBjcIYwyiiss7/pSv67dQuVVr74AVILRxU9oPLeEW0Y9muX Dcjva+l6Lv2/ITFt6Dp+jGRSOL0bE0aoiXvxfWYPrk8EjysFyahbtxebhZJ9ju37 Vi+0MSUnqHhmXQYbG5CcY+4WV26DV8eCiN1ZQuNQpUlgjzJCRTY1rore1JPM8AGY 07G2xjQM1N0XestiPCG0OXe0B5/IOAVhSpeooe1U/3nHrjPe+o+XYYU+oF3xbCcW jY8wUc4X8LTlrQUiZZMRUx463ymBlu+9LKdIYqyGfYLMZ0iTRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCD2xlanueHQs9BBPVMPV6ggY2RmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTY1M2IxMGQtOWU1Ni0z YTQzLWE0M2ItYzgyZmQwYjFlODE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYiIkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKsc+BtzzJVpNne8V71RZsax7A3AJH8bSlGbzvQBrNuUMMQmJnAaGU7X Q4cda71Mf5YGR6wjtC/9tWVEsjhvW6XhVVYNXapBWTJXytIbnOS1azfKughbkZjb L0KR+4nJiy4yE1iLbHvpmfon/vIS/ax7ONy/MFoNc8X1PYUD9sw7aZ+HxDLxQXHw XUyOzA2oTIxGEgxZZsNhyGwrUQoOE1Db0umpyd9YmcEzr3WlnAVkMuMMFiIXn0nL 80KqGNmvFJVuIyXZS1jEKfahooEMFaZLq7yx8/OeInF0uNvJlgdedsjE4PEo4vTP /ZuEGtTXy1XLUW2X0pZXAxv1Q0GwAik= -----END CERTIFICATE-----Generated at Fri Jul 24 09:02:40 2026 by rpki-client