$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c0f9b245-6207-3ad6-b822-bd1003b05899.roa File: c0f9b245-6207-3ad6-b822-bd1003b05899.roa (raw, json) Hash identifier: dLpGejm5OvoypObOONaL6Ajbq9VOB+Y6eZxa2NJQWSo= Subject key identifier: B5:F9:B6:7E:57:8E:6E:BD:D8:EE:3F:55:5A:47:11:F7:AC:01:39:71 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F4977C9A23BD1DF378A99F6B0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c0f9b245-6207-3ad6-b822-bd1003b05899.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 22909 IP address blocks: 98.40.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:c9:a2:3b:d1:df:37:8a:99:f6:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4c7a2589-fd67-437d-b1df-b4fbd1d07b61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b7:15:3f:dd:93:bf:7a:de:04:45:c2:98:36: 87:2f:d3:e7:10:d8:a8:11:a7:50:f8:2b:1a:f8:74: ce:01:b0:c9:9e:8e:d8:68:f6:2e:ee:67:a4:a6:55: af:af:dd:7f:b1:86:52:dd:ed:e6:d9:d5:26:6d:28: 6a:42:47:f6:98:9d:d2:41:f3:ba:98:76:09:1f:21: ac:ec:ac:78:75:84:bb:d6:3f:1a:07:e0:48:9d:10: 26:4a:11:06:7b:a7:b4:17:55:cc:a1:60:ed:c8:d6: 77:52:1e:0a:42:57:0c:de:7b:06:03:67:8d:48:24: a0:89:ec:af:f9:c4:51:04:6d:48:bc:9a:ba:21:d0: 9b:eb:27:ba:ef:0a:6f:fe:2e:4c:3c:79:ca:8a:b5: e4:d0:99:37:73:c6:d2:3f:42:8e:11:b9:6e:58:3c: 07:9b:25:15:d6:a1:42:e6:fc:ac:e6:ea:a4:05:65: 1f:d4:40:21:ba:12:45:24:f4:86:82:ef:a5:99:e0: ff:32:a5:6b:e9:0f:24:b5:63:73:84:4e:54:c3:cb: 36:d0:33:b6:c0:c3:ad:23:82:9c:a7:51:34:37:00: 29:00:90:59:86:cd:95:ee:45:60:e8:a6:e8:f6:f2: ea:49:e7:40:4b:36:d3:f4:d5:20:5e:04:76:39:0a: 69:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F9:B6:7E:57:8E:6E:BD:D8:EE:3F:55:5A:47:11:F7:AC:01:39:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c0f9b245-6207-3ad6-b822-bd1003b05899.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.40.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:fb:d1:f9:36:6c:0d:6d:99:43:f5:ae:d1:36:ab:e7:ee:19: ad:7b:06:53:71:0a:73:7c:3e:30:3a:e1:6f:ab:63:ec:cb:37: 2b:62:45:0a:fd:87:e9:a1:60:db:2a:79:c1:e3:62:27:59:76: f8:07:75:35:45:10:b1:ec:3f:55:b0:da:c8:c6:21:ee:b4:65: d2:0d:12:ac:ea:e0:0f:b0:d7:fe:30:82:c1:c4:f3:ef:2d:4a: 70:6e:8c:54:51:3c:e4:8a:7a:74:8a:dd:2d:3d:3f:1b:c3:4b: e4:8f:d0:b7:9c:07:7a:5a:ae:f1:0f:aa:0f:77:a0:a2:51:f7: 91:01:12:8f:7d:5c:1d:d3:61:31:97:39:64:00:af:93:aa:e4: 7d:53:5e:ed:00:e3:fa:4a:ae:0a:c4:b6:f2:bf:56:6e:4e:0f: 38:96:7a:0b:7c:e0:da:ee:be:e7:a1:84:0f:17:ea:ba:4d:4b: 61:18:cc:35:35:e8:18:78:6a:3b:40:40:2b:6a:1c:a4:3a:b1: 57:33:1b:57:c6:0e:41:76:8c:70:58:3d:f1:29:c9:94:01:0b: be:5e:d3:02:e2:dc:e4:4e:03:64:dc:84:68:c4:ae:84:95:4e: 29:52:5e:0e:5d:ee:72:94:3c:38:f2:7a:fe:cc:78:cf:92:ca: ff:96:d5:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jd8miO9HfN4qZ9rAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGM3YTI1ODktZmQ2Ny00MzdkLWIxZGYtYjRmYmQxZDA3YjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7cVP92Tv3reBEXCmDaHL9PnENioEadQ+Csa +HTOAbDJno7YaPYu7mekplWvr91/sYZS3e3m2dUmbShqQkf2mJ3SQfO6mHYJHyGs 7Kx4dYS71j8aB+BInRAmShEGe6e0F1XMoWDtyNZ3Uh4KQlcM3nsGA2eNSCSgieyv +cRRBG1IvJq6IdCb6ye67wpv/i5MPHnKirXk0Jk3c8bSP0KOEbluWDwHmyUV1qFC 5vys5uqkBWUf1EAhuhJFJPSGgu+lmeD/MqVr6Q8ktWNzhE5Uw8s20DO2wMOtI4Kc p1E0NwApAJBZhs2V7kVg6Kbo9vLqSedASzbT9NUgXgR2OQppzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLX5tn5Xjm692O4/VVpHEfesATlxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzBmOWIyNDUtNjIwNy0z YWQ2LWI4MjItYmQxMDAzYjA1ODk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYihEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIf70fk2bA1tmUP1rtE2q+fuGa17BlNxCnN8PjA64W+rY+zLNytiRQr9 h+mhYNsqecHjYidZdvgHdTVFELHsP1Ww2sjGIe60ZdINEqzq4A+w1/4wgsHE8+8t SnBujFRRPOSKenSK3S09PxvDS+SP0LecB3parvEPqg93oKJR95EBEo99XB3TYTGX OWQAr5Oq5H1TXu0A4/pKrgrEtvK/Vm5ODziWegt84NruvuehhA8X6rpNS2EYzDU1 6Bh4ajtAQCtqHKQ6sVczG1fGDkF2jHBYPfEpyZQBC75e0wLi3OROA2TchGjEroSV TilSXg5d7nKUPDjyev7MeM+Syv+W1TE= -----END CERTIFICATE-----Generated at Fri Sep 25 21:24:43 2026 by rpki-client