$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a8aa5dba-5897-3820-8d80-44443af9e605.roa File: a8aa5dba-5897-3820-8d80-44443af9e605.roa (raw, json) Hash identifier: QOtwhrv5zHQ6U7Odo7jixTcD/4tF6Vl7eRPXh/fcszQ= Subject key identifier: 31:AF:54:08:72:37:6E:53:27:6D:6E:5C:8C:A1:7C:9A:4C:D3:FF:9F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED8631A6DB18ADE0625D87000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a8aa5dba-5897-3820-8d80-44443af9e605.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33662 IP address blocks: 98.39.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:63:1a:6d:b1:8a:de:06:25:d8:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=9bea1863-d3e2-416a-b583-84035c1b7f85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d9:66:d8:1e:8b:3a:17:c4:fe:92:22:6f:cc: 83:b8:80:d8:78:f2:30:9b:0d:78:c6:64:ac:85:02: 38:e6:00:53:ec:06:84:bd:87:bb:76:a0:c6:5a:b6: 77:4a:52:2f:1e:76:c8:e6:7b:ac:7a:80:94:b5:9b: da:eb:64:b8:c7:81:be:a0:90:a7:ab:e8:32:bf:29: e6:0e:77:53:50:63:48:c4:47:c4:e0:74:fc:d4:1f: be:20:6c:23:c2:e9:6d:82:8c:11:2c:32:38:0b:78: 7e:c7:93:1f:63:e6:79:a6:55:2b:c0:ce:fb:2a:0b: e3:c9:bb:59:f4:9a:a2:01:c9:6b:79:99:30:97:e8: a5:fc:55:7d:18:cd:12:6a:d1:50:ab:f0:53:3c:de: 4c:a9:dd:6e:00:6d:c3:08:6e:06:3f:9b:a9:f3:d5: 30:c1:82:65:09:60:4d:48:9a:46:17:8a:34:26:3e: e5:a7:40:a4:cc:2b:1c:7c:31:ca:5b:75:74:c9:e2: 1c:20:3a:d3:c9:ee:61:61:dc:72:60:d8:85:2c:f1: 01:97:ab:37:2f:a5:83:39:d9:0f:3a:2e:0c:87:28: 13:2b:34:23:41:0c:3a:5d:20:d3:46:3a:6a:ea:1b: 98:e9:0f:1f:b7:58:e7:fa:fe:53:f1:15:36:07:26: 93:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:AF:54:08:72:37:6E:53:27:6D:6E:5C:8C:A1:7C:9A:4C:D3:FF:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a8aa5dba-5897-3820-8d80-44443af9e605.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.39.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:ea:27:c8:0a:e5:79:89:76:d9:7d:bf:39:95:b0:d5:0d:95: 9a:ce:ad:05:23:da:24:f1:60:dc:fb:79:9f:ed:62:af:b0:1a: 12:4f:43:8b:9a:8b:3e:ec:32:b3:15:d0:61:59:5c:da:7c:d0: 83:3a:4d:dd:f1:26:41:75:fa:79:98:21:34:98:3a:f9:eb:2f: 5d:3c:40:5a:44:1e:1a:01:5f:e3:68:c1:79:19:02:bb:4b:41: f5:9f:ef:fe:5c:51:7a:a3:55:d0:45:6e:24:83:07:cf:c6:b2: 72:39:72:12:2d:26:92:34:70:c7:13:f7:21:34:94:33:4d:c9: 52:22:0f:c4:26:bb:0e:fa:db:36:8b:c8:d4:03:1b:0c:0d:7d: e7:9e:db:50:b1:a1:58:ca:38:b4:c9:9c:06:d6:53:4b:74:df: e5:09:4d:ee:05:41:84:03:b7:7c:e2:9b:e4:e9:86:48:3d:01: 3a:9d:e2:7a:4a:2f:b3:1a:61:bb:a6:74:eb:f2:0e:6f:08:c4: 9d:ca:49:4d:a3:1e:ff:fb:8a:4c:db:cd:7f:79:28:b0:81:1f: 34:72:b8:ee:52:5e:93:10:a9:3a:ba:18:8b:19:10:2f:6e:37: 5d:78:f1:9a:2b:4a:68:06:66:5b:47:a0:c3:95:eb:ab:26:e5: 60:6b:5a:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYxptsYreBiXYcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk OWJlYTE4NjMtZDNlMi00MTZhLWI1ODMtODQwMzVjMWI3Zjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNlm2B6LOhfE/pIib8yDuIDYePIwmw14xmSs hQI45gBT7AaEvYe7dqDGWrZ3SlIvHnbI5nuseoCUtZva62S4x4G+oJCnq+gyvynm DndTUGNIxEfE4HT81B++IGwjwultgowRLDI4C3h+x5MfY+Z5plUrwM77KgvjybtZ 9JqiAclreZkwl+il/FV9GM0SatFQq/BTPN5Mqd1uAG3DCG4GP5up89UwwYJlCWBN SJpGF4o0Jj7lp0CkzCscfDHKW3V0yeIcIDrTye5hYdxyYNiFLPEBl6s3L6WDOdkP Oi4MhygTKzQjQQw6XSDTRjpq6huY6Q8ft1jn+v5T8RU2ByaT8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDGvVAhyN25TJ21uXIyhfJpM0/+fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYThhYTVkYmEtNTg5Ny0z ODIwLThkODAtNDQ0NDNhZjllNjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYieSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrqJ8gK5XmJdtl9vzmVsNUNlZrOrQUj2iTxYNz7eZ/tYq+wGhJPQ4ua iz7sMrMV0GFZXNp80IM6Td3xJkF1+nmYITSYOvnrL108QFpEHhoBX+NowXkZArtL QfWf7/5cUXqjVdBFbiSDB8/GsnI5chItJpI0cMcT9yE0lDNNyVIiD8Qmuw762zaL yNQDGwwNfeee21CxoVjKOLTJnAbWU0t03+UJTe4FQYQDt3zim+Tphkg9ATqd4npK L7MaYbumdOvyDm8IxJ3KSU2jHv/7ikzbzX95KLCBHzRyuO5SXpMQqTq6GIsZEC9u N1148ZorSmgGZltHoMOV66sm5WBrWrY= -----END CERTIFICATE-----Generated at Sun Sep 27 01:08:35 2026 by rpki-client