$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/e9e39f37-1286-3597-960c-6c5f44ec4d30.roa File: e9e39f37-1286-3597-960c-6c5f44ec4d30.roa (raw, json) Hash identifier: cdqrmQOYEdNsQEzjX30rZZxY/scjZcq6tEY+rWwve0w= Subject key identifier: 60:38:7E:62:74:6A:8B:A6:F2:83:3F:24:00:22:34:35:B2:B9:2B:CD Certificate issuer: /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c Certificate serial: 010D0C9F4328584E5A49F61764CE618D7A3C9580 Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/e9e39f37-1286-3597-960c-6c5f44ec4d30.roa Signing time: Wed 01 Jul 2026 09:00:12 +0000 ROA not before: Wed 01 Jul 2026 09:00:12 +0000 ROA not after: Tue 29 Sep 2026 09:00:12 +0000 asID: 32133 IP address blocks: 98.124.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:49:f6:17:64:ce:61:8d:7a:3c:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c Validity Not Before: Jul 1 09:00:12 2026 GMT Not After : Sep 29 09:00:12 2026 GMT Subject: CN=0b6829fb-228a-4ac2-8b9c-7583dd2f570d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:58:7c:60:b6:77:a4:3f:00:46:53:00:4b:fb: e6:8c:91:b7:14:c9:5c:7f:82:63:bc:63:42:62:78: 60:96:34:14:14:43:63:2c:28:03:f9:e2:d5:23:b7: 09:54:2d:b7:a9:4b:81:1f:fc:3c:f5:c4:1f:d9:9e: b0:2d:3f:f4:a4:60:a7:ad:c8:d0:07:3a:95:71:d4: d9:04:1f:0f:a6:11:1b:66:b7:b4:18:bb:42:9b:72: 5d:b5:2f:ce:99:42:77:f2:e9:90:1c:46:fe:f6:68: a9:bc:55:ba:0c:ab:91:1f:f0:bb:48:54:ed:8c:3e: 0a:e8:67:81:14:19:06:f7:65:89:a1:59:e4:52:15: 50:e7:3f:c2:74:4e:a8:3f:de:e4:3d:a1:11:c4:97: 1c:fa:d4:b3:ef:f6:e6:22:8e:12:e5:12:ab:55:4d: a5:42:bd:c9:58:2d:b7:34:b1:21:95:89:c3:01:0d: 4c:b8:f5:5f:56:a0:7f:c3:86:d7:88:43:39:ed:00: 78:e9:e0:07:8f:37:81:53:4c:6c:6a:2f:5f:67:50: 3e:a3:a4:cf:08:52:1f:67:58:9e:e9:0a:60:3f:a8: 6c:19:ba:72:a2:f0:10:8a:9c:5b:2b:fd:6f:bf:3d: 77:c3:17:bd:bc:b8:62:22:c7:79:ce:8e:20:1e:88: e2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:38:7E:62:74:6A:8B:A6:F2:83:3F:24:00:22:34:35:B2:B9:2B:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/e9e39f37-1286-3597-960c-6c5f44ec4d30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl X509v3 Authority Key Identifier: keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer sbgp-ipAddrBlock: critical IPv4: 98.124.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:81:8f:26:4c:76:c7:7d:c9:6e:c4:f6:1a:d3:b9:21:40:17: 31:20:d6:d5:d7:69:b6:3c:96:06:f6:aa:2e:6b:b4:93:61:69: c9:36:bf:45:4d:31:68:e6:03:a3:95:ea:f6:72:fd:e5:be:14: 18:11:c7:60:fa:a2:d8:ee:bf:e9:49:98:70:fc:8d:6b:cd:d9: 01:bc:db:a9:23:82:b7:85:0e:92:7a:a1:0e:8d:c9:5f:ae:8c: 47:61:c8:48:99:b4:4b:ef:de:d6:ab:25:52:04:5c:ea:92:d9: 61:33:d4:fa:2d:fd:f2:d9:30:b6:3f:69:37:33:b7:52:44:54: 0c:4b:b9:36:84:4f:74:03:08:19:6a:cb:f1:fd:fe:2d:b9:3b: 74:d8:3f:cb:4d:d4:bb:21:f1:56:31:00:01:0a:54:17:e2:1b: 10:98:30:dd:cf:40:b7:11:33:8b:50:e9:dc:42:30:78:1b:96: dd:41:e5:4b:7e:56:66:fa:f6:b5:ce:5f:34:ab:16:59:da:0d: f5:68:49:43:6f:6d:3f:c8:15:79:75:b6:c5:29:93:24:c0:3d: f4:2f:52:a2:f0:87:6f:db:ae:65:ff:34:c1:f1:27:ae:a4:c0: 37:57:c2:2a:60:e8:f9:d3:d9:78:81:25:06:a9:42:36:4f:54: 09:7d:24:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5aSfYXZM5hjXo8lYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA2Y2JjOTEtY2ZlOS00ZDE1LThhMTMtZTNkODI4YzA0 NjljMB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk MGI2ODI5ZmItMjI4YS00YWMyLThiOWMtNzU4M2RkMmY1NzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1h8YLZ3pD8ARlMAS/vmjJG3FMlcf4JjvGNC YnhgljQUFENjLCgD+eLVI7cJVC23qUuBH/w89cQf2Z6wLT/0pGCnrcjQBzqVcdTZ BB8PphEbZre0GLtCm3JdtS/OmUJ38umQHEb+9mipvFW6DKuRH/C7SFTtjD4K6GeB FBkG92WJoVnkUhVQ5z/CdE6oP97kPaERxJcc+tSz7/bmIo4S5RKrVU2lQr3JWC23 NLEhlYnDAQ1MuPVfVqB/w4bXiEM57QB46eAHjzeBU0xsai9fZ1A+o6TPCFIfZ1ie 6QpgP6hsGbpyovAQipxbK/1vvz13wxe9vLhiIsd5zo4gHojiEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGA4fmJ0aoum8oM/JAAiNDWyuSvNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZj YmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4MjhjMDQ2OWMvZTllMzlmMzctMTI4Ni0z NTk3LTk2MGMtNmM1ZjQ0ZWM0ZDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTA2Y2JjOTEtY2ZlOS00ZDE1LThh MTMtZTNkODI4YzA0NjljLzkwNmNiYzkxLWNmZTktNGQxNS04YTEzLWUzZDgyOGMw NDY5Yy5jcmwwHwYDVR0jBBgwFoAUtM26EqXmV2vBKngoUh64xcKEYhUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZjYmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4 MjhjMDQ2OWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYnzoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAeBjyZMdsd9yW7E9hrTuSFAFzEg1tXXabY8lgb2qi5rtJNhack2v0VN MWjmA6OV6vZy/eW+FBgRx2D6otjuv+lJmHD8jWvN2QG826kjgreFDpJ6oQ6NyV+u jEdhyEiZtEvv3tarJVIEXOqS2WEz1Pot/fLZMLY/aTczt1JEVAxLuTaET3QDCBlq y/H9/i25O3TYP8tN1Lsh8VYxAAEKVBfiGxCYMN3PQLcRM4tQ6dxCMHgblt1B5Ut+ Vmb69rXOXzSrFlnaDfVoSUNvbT/IFXl1tsUpkyTAPfQvUqLwh2/brmX/NMHxJ66k wDdXwipg6PnT2XiBJQapQjZPVAl9JLw= -----END CERTIFICATE-----Generated at Fri Jul 24 02:04:19 2026 by rpki-client