$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0dfbd72-824a-30ea-8268-7a7b3f930644.roa File: a0dfbd72-824a-30ea-8268-7a7b3f930644.roa (raw, json) Hash identifier: 9exrSmgdFuXGKaUjXorih0O4vTp/IgCyEde/RvotQlk= Subject key identifier: 80:7F:CC:B4:56:E5:90:EE:B1:51:06:14:A5:83:2F:D0:B4:68:A4:2B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F4972B02F36E3CDB495CF62A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0dfbd72-824a-30ea-8268-7a7b3f930644.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33651 IP address blocks: 98.51.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:b0:2f:36:e3:cd:b4:95:cf:62:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=237cc998-2bb6-4722-a602-4adc835ef35b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:39:f9:25:52:dc:a7:fa:a6:56:c8:4e:62:a2: cf:7a:35:a4:23:58:b2:ee:e5:f8:1a:f6:a5:6a:97: 23:c0:f7:8a:6d:cc:d3:01:46:e2:a3:08:d6:40:04: f0:45:cd:90:3b:a2:09:8d:bf:b9:29:4d:44:40:ae: 57:2d:af:e0:59:7c:36:f6:e1:bf:fb:66:dc:74:47: f7:19:b7:25:73:70:c5:2c:de:35:fd:bd:2d:9e:c3: c2:bb:c3:80:be:c1:ae:75:3f:a4:99:b4:58:af:ae: 83:2d:57:2e:a7:5d:b8:b7:60:0f:a2:1f:3d:36:aa: 8c:18:66:fe:9c:50:eb:98:f4:b4:74:7d:fa:70:1e: d4:66:21:9c:7b:94:c6:4d:22:a4:b9:5a:0b:6d:c9: f9:51:b2:3c:7c:7a:21:f8:2a:b2:ca:3d:7a:52:cb: e7:ef:9a:70:9a:ed:be:94:ae:b6:7c:8f:6f:af:5f: b5:db:1c:23:10:a1:50:cb:7c:75:0d:29:14:67:8e: ff:23:bd:0f:74:e2:01:be:87:87:4a:ea:73:5d:d6: a7:96:b0:70:b5:36:29:4c:22:7c:bd:71:3e:cc:4e: 27:4c:e3:9d:ad:fa:b0:fb:2f:40:95:e7:5b:41:ad: bf:14:31:cd:0c:13:53:03:58:71:64:7a:bf:21:cb: c3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:7F:CC:B4:56:E5:90:EE:B1:51:06:14:A5:83:2F:D0:B4:68:A4:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0dfbd72-824a-30ea-8268-7a7b3f930644.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.51.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:8b:19:2e:bc:c4:d0:47:49:08:b3:5a:7b:33:c8:f8:a6:b6: 48:4d:7b:09:44:63:d4:88:e9:d4:e0:8a:de:5f:02:b8:78:b4: 1d:b2:a5:7c:02:57:82:1f:25:24:99:9c:3b:c9:6c:54:f5:4a: c3:ae:c4:b2:9a:4c:60:58:2a:9e:52:47:b4:6c:fb:4d:ce:79: 01:a7:02:cf:91:44:cb:98:40:62:02:e6:8d:99:fe:e5:08:6c: 90:33:93:3c:80:a2:4f:78:03:f7:5f:5c:a2:e8:70:03:78:a5: 88:79:f4:6b:dc:2a:40:70:13:f3:b7:be:15:d9:29:bd:49:ca: 05:91:e3:eb:00:a8:f2:2a:ed:28:e7:35:ee:9d:b4:5b:e3:5c: 85:b9:96:df:14:ec:7f:a4:91:79:40:3f:88:75:a9:24:c8:9e: 58:36:f5:7a:6d:25:aa:37:61:13:03:c3:4d:11:8e:29:1f:ce: 60:ee:54:7a:69:2e:13:a8:a8:aa:65:46:42:2c:04:8c:ee:0c: 22:45:c3:d0:f8:9b:ba:5f:44:b9:41:f2:94:0d:06:b1:77:b3: 97:fd:b9:b4:f1:65:db:6a:b6:c8:2e:bd:42:7a:a3:d6:05:50: 9f:ab:c5:fb:da:20:75:ad:b1:f3:19:34:1f:80:68:93:5c:c4: be:f2:12:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcrAvNuPNtJXPYqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjM3Y2M5OTgtMmJiNi00NzIyLWE2MDItNGFkYzgzNWVmMzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujn5JVLcp/qmVshOYqLPejWkI1iy7uX4Gval apcjwPeKbczTAUbiowjWQATwRc2QO6IJjb+5KU1EQK5XLa/gWXw29uG/+2bcdEf3 Gbclc3DFLN41/b0tnsPCu8OAvsGudT+kmbRYr66DLVcup124t2APoh89NqqMGGb+ nFDrmPS0dH36cB7UZiGce5TGTSKkuVoLbcn5UbI8fHoh+Cqyyj16Usvn75pwmu2+ lK62fI9vr1+12xwjEKFQy3x1DSkUZ47/I70PdOIBvoeHSupzXdanlrBwtTYpTCJ8 vXE+zE4nTOOdrfqw+y9AledbQa2/FDHNDBNTA1hxZHq/IcvDWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIB/zLRW5ZDusVEGFKWDL9C0aKQrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTBkZmJkNzItODI0YS0z MGVhLTgyNjgtN2E3YjNmOTMwNjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYjN8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKWLGS68xNBHSQizWnszyPimtkhNewlEY9SI6dTgit5fArh4tB2ypXwC V4IfJSSZnDvJbFT1SsOuxLKaTGBYKp5SR7Rs+03OeQGnAs+RRMuYQGIC5o2Z/uUI bJAzkzyAok94A/dfXKLocAN4pYh59GvcKkBwE/O3vhXZKb1JygWR4+sAqPIq7Sjn Ne6dtFvjXIW5lt8U7H+kkXlAP4h1qSTInlg29XptJao3YRMDw00RjikfzmDuVHpp LhOoqKplRkIsBIzuDCJFw9D4m7pfRLlB8pQNBrF3s5f9ubTxZdtqtsguvUJ6o9YF UJ+rxfvaIHWtsfMZNB+AaJNcxL7yEqg= -----END CERTIFICATE-----Generated at Sat Sep 26 18:47:21 2026 by rpki-client