$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a24695e0-2098-3001-97ae-1f88642b07d4.roa File: a24695e0-2098-3001-97ae-1f88642b07d4.roa (raw, json) Hash identifier: WXGrA5sThMZpDh7UATw5sHjSqZhl2UJfwH5Tpqwm4kY= Subject key identifier: 47:3C:45:3A:4C:29:FE:04:37:82:1A:AD:05:31:09:BE:09:68:24:90 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119D312F412FDDF213546C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a24695e0-2098-3001-97ae-1f88642b07d4.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33660 IP address blocks: 98.33.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:31:2f:41:2f:dd:f2:13:54:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=be98027d-deeb-41c8-bbaf-a22eeb53bfce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a5:ad:74:51:66:b0:38:51:e7:0f:0c:16:81: b6:67:48:a0:6e:9d:96:5d:1c:10:51:3e:e3:34:74: 7d:44:c4:5c:cc:19:e4:d8:af:1e:f3:58:41:0e:94: 56:74:06:12:5d:23:16:6f:6b:73:61:3c:90:52:9f: e3:6d:8e:38:9c:f6:a1:13:02:25:d3:77:04:e3:da: 92:82:d3:4e:ff:f6:3a:41:ed:4a:64:f1:f4:03:d8: 69:b9:44:da:3f:2c:ef:11:3f:c6:f1:e3:2c:7a:45: 56:29:f8:4f:b2:d4:08:1d:87:05:51:ff:d1:5a:70: 40:6d:e2:ad:4b:a0:f2:f7:86:3e:82:7b:9c:18:62: e7:45:f5:cd:2c:ba:ae:80:fb:32:57:a9:8c:1b:11: 2a:98:4e:30:2f:14:2f:d0:80:23:7e:ce:31:d4:05: 91:c7:40:c9:a9:d5:f1:e7:e2:01:f8:cb:94:e8:ee: 57:b6:c1:c1:e8:13:da:af:64:c7:4d:52:2d:7f:71: 09:c3:d8:3c:3a:20:49:59:67:e3:43:e0:98:03:18: 2f:99:f4:f4:b7:84:2a:ec:53:bc:1b:17:93:f8:b1: b0:1d:9c:db:c8:5f:e8:0e:92:23:2a:6e:e0:85:1f: e0:39:35:d0:54:9d:a7:c3:f5:17:df:0a:43:07:c4: ee:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:3C:45:3A:4C:29:FE:04:37:82:1A:AD:05:31:09:BE:09:68:24:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a24695e0-2098-3001-97ae-1f88642b07d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.33.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:ba:31:b5:5f:9d:b6:01:bd:e3:e6:82:28:ba:c4:13:06:9b: 34:9b:a3:de:fa:08:c3:16:dc:7e:1c:db:78:f9:6c:6e:05:2d: ec:f9:13:ac:b0:c3:09:19:03:13:4b:e6:99:c2:de:b6:10:64: ea:44:ea:91:19:c2:d8:96:0e:e4:d4:db:fd:82:a1:50:9f:01: 33:be:1f:55:59:78:47:af:67:bd:77:97:b7:ce:51:4c:58:07: 79:cb:00:fb:40:50:eb:12:c8:2a:88:73:15:8a:85:85:e8:0f: b8:44:f3:fe:9f:42:ca:7e:62:1a:68:5a:01:93:35:72:ad:c0: 8f:27:45:39:4a:61:5a:b8:60:a4:7d:e7:d5:c5:98:55:61:9d: 6c:36:49:5d:05:2d:fa:03:c4:b7:c3:f6:b6:60:42:e5:e5:78: 02:7e:1c:59:4a:50:53:38:69:f9:fa:a3:ff:b5:53:e8:21:3b: 79:78:a8:96:e6:b3:71:70:79:28:0c:f8:bf:b2:97:2b:08:ef: d9:a2:0e:e9:84:fa:65:d2:2a:38:a8:63:51:f3:0d:d6:7c:55: 30:e7:69:ea:e9:7b:65:b7:b5:f1:35:fc:c5:50:12:79:92:4f: 91:37:55:72:d8:40:9e:36:ef:25:e4:6c:bc:cb:8c:43:54:6c: f7:fd:b8:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnTEvQS/d8hNUbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk YmU5ODAyN2QtZGVlYi00MWM4LWJiYWYtYTIyZWViNTNiZmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6WtdFFmsDhR5w8MFoG2Z0igbp2WXRwQUT7j NHR9RMRczBnk2K8e81hBDpRWdAYSXSMWb2tzYTyQUp/jbY44nPahEwIl03cE49qS gtNO//Y6Qe1KZPH0A9hpuUTaPyzvET/G8eMsekVWKfhPstQIHYcFUf/RWnBAbeKt S6Dy94Y+gnucGGLnRfXNLLqugPsyV6mMGxEqmE4wLxQv0IAjfs4x1AWRx0DJqdXx 5+IB+MuU6O5XtsHB6BPar2THTVItf3EJw9g8OiBJWWfjQ+CYAxgvmfT0t4Qq7FO8 GxeT+LGwHZzbyF/oDpIjKm7ghR/gOTXQVJ2nw/UX3wpDB8Tu2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEc8RTpMKf4EN4IarQUxCb4JaCSQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTI0Njk1ZTAtMjA5OC0z MDAxLTk3YWUtMWY4ODY0MmIwN2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYiHEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL26MbVfnbYBvePmgii6xBMGmzSbo976CMMW3H4c23j5bG4FLez5E6yw wwkZAxNL5pnC3rYQZOpE6pEZwtiWDuTU2/2CoVCfATO+H1VZeEevZ713l7fOUUxY B3nLAPtAUOsSyCqIcxWKhYXoD7hE8/6fQsp+YhpoWgGTNXKtwI8nRTlKYVq4YKR9 59XFmFVhnWw2SV0FLfoDxLfD9rZgQuXleAJ+HFlKUFM4afn6o/+1U+ghO3l4qJbm s3FweSgM+L+ylysI79miDumE+mXSKjioY1HzDdZ8VTDnaerpe2W3tfE1/MVQEnmS T5E3VXLYQJ427yXkbLzLjENUbPf9uEI= -----END CERTIFICATE-----Generated at Thu Oct 8 13:22:52 2026 by rpki-client