$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a68a0978-4812-3cc9-abcb-8f0508bd9b71.roa File: a68a0978-4812-3cc9-abcb-8f0508bd9b71.roa (raw, json) Hash identifier: 4phymP35Gk04KkXuvajdNgON9HJJz+DFBTYjimX5EYE= Subject key identifier: 14:D2:2B:9B:ED:89:78:17:BF:97:10:28:97:78:9A:B6:4D:79:5C:E1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED8645197A8A75DA887028900 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a68a0978-4812-3cc9-abcb-8f0508bd9b71.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33662 IP address blocks: 98.200.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:64:51:97:a8:a7:5d:a8:87:02:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=a6be05f0-a949-457d-abd6-d976c5f32530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:36:13:57:bf:43:be:64:68:09:35:df:d5:f1: 6f:35:07:b7:c5:ce:ce:b5:3e:8a:ad:c6:b1:16:c0: d1:f1:b9:a8:61:33:74:b5:cb:bf:f4:ef:96:95:f4: 6b:04:52:8d:3b:ee:5a:a5:53:03:a7:14:0f:35:44: fd:33:ed:77:d3:76:38:72:72:ab:0d:1b:50:08:53: 32:0c:91:90:b9:22:38:bc:4b:19:8d:eb:91:a7:31: 24:42:4e:4a:a5:3f:49:3b:c8:02:ce:ec:45:11:1e: c8:3e:79:09:90:ca:e6:74:97:59:41:59:2d:07:8a: ee:7e:43:31:7c:15:ed:63:3a:53:b9:73:0b:ce:81: a6:d6:2d:9f:17:a5:27:b4:cb:7c:89:61:30:03:5d: e9:72:ca:72:2a:42:80:4a:d4:f5:d6:ac:80:15:ec: 8b:0d:6a:32:ea:5c:65:1e:1d:81:f3:3d:37:22:f0: a6:5f:2a:29:0d:4a:58:5c:92:4d:58:fa:3a:39:b2: 02:24:b3:6a:e2:d4:9e:58:fc:19:5c:44:25:dc:08: e7:3c:a3:d3:20:ba:28:4c:e5:84:94:09:85:9e:f4: 99:24:e5:f5:e0:fb:c9:ab:9e:a3:e7:5f:03:ec:f4: 5f:5d:f0:2c:5d:50:ec:dc:18:44:79:08:11:c8:2f: cb:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D2:2B:9B:ED:89:78:17:BF:97:10:28:97:78:9A:B6:4D:79:5C:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a68a0978-4812-3cc9-abcb-8f0508bd9b71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.200.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:cb:96:bc:34:34:78:38:43:2e:43:20:42:ba:30:6b:3d:09: e4:88:bf:d6:a9:9a:08:b7:47:9e:16:e0:b5:83:62:14:b6:ac: 8d:e6:15:17:e9:ce:48:83:f8:76:d6:29:bd:f8:db:37:30:fb: 82:31:a1:a0:82:23:f2:79:0a:ff:86:1f:a6:da:46:c8:da:06: ab:f6:61:f2:8c:e2:ba:2c:40:08:c7:ac:72:22:e2:6a:77:9b: 70:69:f2:5d:9c:46:01:ec:a0:f7:36:71:ec:14:a2:57:87:64: 92:ae:7c:b2:47:5f:c6:3d:d8:aa:5d:45:5d:0b:83:89:ac:8b: 0a:38:21:c6:90:04:f0:0f:66:7e:cd:6b:da:be:72:75:ba:ca: d3:d4:3c:35:f1:f3:a3:13:bd:87:7e:1f:cf:ff:d3:97:86:8e: c8:c1:a5:38:f1:09:0d:41:ee:3a:bd:bf:78:84:ce:65:f8:85: 30:91:07:09:0f:99:44:ce:02:be:a3:7d:89:66:f6:1a:d4:cd: ce:6f:27:91:55:8b:1e:cb:8d:7e:8c:66:8f:40:17:46:4c:06: 13:0f:fe:f8:37:7f:3a:fd:42:19:ff:f5:66:d2:bb:86:d7:be: c0:1f:3f:20:78:0d:18:42:92:fb:97:29:8a:4c:08:5e:34:bf: 6d:2e:a7:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YZFGXqKddqIcCiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk YTZiZTA1ZjAtYTk0OS00NTdkLWFiZDYtZDk3NmM1ZjMyNTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDYTV79DvmRoCTXf1fFvNQe3xc7OtT6Krcax FsDR8bmoYTN0tcu/9O+WlfRrBFKNO+5apVMDpxQPNUT9M+1303Y4cnKrDRtQCFMy DJGQuSI4vEsZjeuRpzEkQk5KpT9JO8gCzuxFER7IPnkJkMrmdJdZQVktB4rufkMx fBXtYzpTuXMLzoGm1i2fF6UntMt8iWEwA13pcspyKkKAStT11qyAFeyLDWoy6lxl Hh2B8z03IvCmXyopDUpYXJJNWPo6ObICJLNq4tSeWPwZXEQl3AjnPKPTILooTOWE lAmFnvSZJOX14PvJq56j518D7PRfXfAsXVDs3BhEeQgRyC/LJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBTSK5vtiXgXv5cQKJd4mrZNeVzhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTY4YTA5NzgtNDgxMi0z Y2M5LWFiY2ItOGYwNTA4YmQ5YjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYsiYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKLLlrw0NHg4Qy5DIEK6MGs9CeSIv9apmgi3R54W4LWDYhS2rI3mFRfp zkiD+HbWKb342zcw+4IxoaCCI/J5Cv+GH6baRsjaBqv2YfKM4rosQAjHrHIi4mp3 m3Bp8l2cRgHsoPc2cewUoleHZJKufLJHX8Y92KpdRV0Lg4msiwo4IcaQBPAPZn7N a9q+cnW6ytPUPDXx86MTvYd+H8//05eGjsjBpTjxCQ1B7jq9v3iEzmX4hTCRBwkP mUTOAr6jfYlm9hrUzc5vJ5FVix7LjX6MZo9AF0ZMBhMP/vg3fzr9Qhn/9WbSu4bX vsAfPyB4DRhCkvuXKYpMCF40v20up1I= -----END CERTIFICATE-----Generated at Fri Sep 25 08:50:05 2026 by rpki-client