$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d39b6317-3d01-37a3-81d2-38a49ed647b9.roa File: d39b6317-3d01-37a3-81d2-38a49ed647b9.roa (raw, json) Hash identifier: 9pn5TDAfa1EJ6GgiCyBW76es1ISke5nBtu0YseZBcAo= Subject key identifier: 17:58:D7:02:F9:02:AF:E5:B1:9E:52:B3:FD:73:0B:AD:F2:5F:06:4F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119E8CF7C4750CEF6DF3C200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d39b6317-3d01-37a3-81d2-38a49ed647b9.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33660 IP address blocks: 98.33.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9e:8c:f7:c4:75:0c:ef:6d:f3:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=9ba7f0b0-1c17-4933-a06d-65c32181ce7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:97:10:ff:09:aa:83:5e:3b:c3:2b:57:c1:9e: 61:55:46:68:70:ae:0c:76:58:74:ef:00:7e:3e:2d: 0d:47:1c:11:c4:82:95:29:3e:27:ea:d1:38:a6:05: c3:13:5d:c9:cf:eb:42:de:72:37:66:80:eb:3a:b9: ad:ad:6f:e0:2c:6c:15:5c:7e:c3:47:68:78:9b:77: b1:4c:3b:ca:cc:d9:a9:5f:de:f2:2d:ba:fc:ce:b1: 56:e5:75:b1:87:0c:48:2f:9b:c9:44:20:38:4b:0b: fa:3e:78:cc:fd:ff:46:01:3d:52:1d:0f:b9:f8:4a: c7:e0:db:da:75:2a:ad:e3:b6:cc:98:c8:d5:33:c3: d7:16:26:ea:21:c3:28:34:af:3a:17:cb:c1:df:a1: 6a:9c:cb:d2:68:40:f9:b5:cd:fd:55:76:51:02:03: 71:f4:1e:8f:2d:90:d7:bb:b0:14:19:e1:cb:15:04: ec:a9:46:05:8b:36:b3:f1:58:55:fd:7d:a8:b3:af: 72:b0:71:9a:e6:8b:11:19:d4:15:7b:e3:ae:87:00: 75:79:37:0a:5b:d9:cf:c1:35:17:56:4a:bf:44:98: b5:64:e3:a4:9f:f1:53:8c:56:63:43:6f:9c:65:a1: 13:a4:8f:5c:a8:a7:62:c6:c5:49:88:6a:39:14:de: 8a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:58:D7:02:F9:02:AF:E5:B1:9E:52:B3:FD:73:0B:AD:F2:5F:06:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d39b6317-3d01-37a3-81d2-38a49ed647b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.33.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:b7:53:24:85:18:ba:32:30:26:b5:62:89:18:1f:63:31:05: 56:bd:2e:72:99:15:68:2e:09:0b:de:ac:de:ba:aa:3f:0f:4d: 10:86:81:46:ce:57:89:50:87:1d:d1:36:49:bc:3e:56:c4:4d: ce:4a:9e:36:bc:91:54:e8:90:e1:79:6b:07:83:ea:08:f0:be: a3:08:a5:c3:9d:3e:a8:6b:89:f0:55:84:a8:4d:c3:cd:1b:3d: a7:db:4e:41:35:21:01:d1:0f:16:21:0d:20:51:5a:8e:56:7c: 70:21:2a:b9:f9:c4:9a:6c:44:b8:d1:8e:62:d8:de:42:a2:ab: 15:99:c7:e1:01:24:50:3d:8c:8b:18:ab:1c:97:bf:ea:64:63: 14:96:e1:30:c5:2c:6a:40:68:8a:b2:bc:95:c4:17:35:24:e7: a4:f7:b0:05:ac:fa:60:d4:cb:21:fe:44:5d:41:db:1a:39:ce: a9:a1:34:7f:3b:84:bb:92:90:5b:69:b4:cc:8a:f7:1a:79:e1: 88:17:5d:cd:42:a5:df:05:ea:84:6c:a3:53:22:4d:1e:a5:b8: d3:86:f2:e9:00:c0:f2:c2:8e:f3:76:cc:87:f7:23:61:4a:ed: c7:8b:cc:4c:8e:8d:32:c5:b2:9c:48:74:90:5a:49:eb:53:91: 53:a0:f7:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Rnoz3xHUM723zwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk OWJhN2YwYjAtMWMxNy00OTMzLWEwNmQtNjVjMzIxODFjZTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpcQ/wmqg147wytXwZ5hVUZocK4Mdlh07wB+ Pi0NRxwRxIKVKT4n6tE4pgXDE13Jz+tC3nI3ZoDrOrmtrW/gLGwVXH7DR2h4m3ex TDvKzNmpX97yLbr8zrFW5XWxhwxIL5vJRCA4Swv6PnjM/f9GAT1SHQ+5+ErH4Nva dSqt47bMmMjVM8PXFibqIcMoNK86F8vB36FqnMvSaED5tc39VXZRAgNx9B6PLZDX u7AUGeHLFQTsqUYFizaz8VhV/X2os69ysHGa5osRGdQVe+OuhwB1eTcKW9nPwTUX Vkq/RJi1ZOOkn/FTjFZjQ2+cZaETpI9cqKdixsVJiGo5FN6KuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdY1wL5Aq/lsZ5Ss/1zC63yXwZPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDM5YjYzMTctM2QwMS0z N2EzLTgxZDItMzhhNDllZDY0N2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYiGMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ63UySFGLoyMCa1YokYH2MxBVa9LnKZFWguCQverN66qj8PTRCGgUbO V4lQhx3RNkm8PlbETc5Knja8kVTokOF5aweD6gjwvqMIpcOdPqhrifBVhKhNw80b PafbTkE1IQHRDxYhDSBRWo5WfHAhKrn5xJpsRLjRjmLY3kKiqxWZx+EBJFA9jIsY qxyXv+pkYxSW4TDFLGpAaIqyvJXEFzUk56T3sAWs+mDUyyH+RF1B2xo5zqmhNH87 hLuSkFtptMyK9xp54YgXXc1Cpd8F6oRso1MiTR6luNOG8ukAwPLCjvN2zIf3I2FK 7ceLzEyOjTLFspxIdJBaSetTkVOg94M= -----END CERTIFICATE-----Generated at Sat Sep 26 18:08:53 2026 by rpki-client