$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/af72ac96-389c-3eb8-a84c-7f22db7a7533.roa File: af72ac96-389c-3eb8-a84c-7f22db7a7533.roa (raw, json) Hash identifier: irxUNLJ/xUmftyUzIwr85oZIzk62OdW3+kAHP2m9CBI= Subject key identifier: A9:56:C6:85:F9:0A:60:B8:CD:D1:3E:F1:6E:B1:6A:EC:B3:3C:53:93 Certificate issuer: /CN=d65fef8f-4cd2-4778-9158-f56f30242812 Certificate serial: 010D0C9F4328584F6F2311C24B44819ADD2C8240 Authority key identifier: 7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/af72ac96-389c-3eb8-a84c-7f22db7a7533.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 2734 IP address blocks: 98.158.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:23:11:c2:4b:44:81:9a:dd:2c:82:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d65fef8f-4cd2-4778-9158-f56f30242812 Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=0848f1fa-6b42-4b6b-8649-f7921737f715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c2:97:dc:08:db:95:ba:fd:3a:21:fc:0e:23: fb:e0:2e:2f:c5:c8:4b:87:f6:10:82:6f:94:08:14: 18:d2:aa:f3:19:e3:37:b8:96:03:6c:89:1c:e7:85: 43:b3:90:9d:c7:10:42:e8:8c:2b:d3:17:2b:96:87: 90:6e:1b:38:67:2f:8e:ef:3a:f7:75:40:80:f2:77: 71:6b:33:92:1b:8b:02:9e:8a:ae:c5:4a:ce:b3:be: 3d:d0:d3:34:a9:8e:55:04:ab:68:8e:cf:f7:b8:30: c6:30:64:1d:79:0e:a7:7d:af:71:4d:72:ec:0d:a0: d0:a9:c6:05:a8:e6:95:61:23:5a:c7:42:18:0f:f1: 0d:b6:8b:5b:6b:3f:01:b6:dd:3e:7f:a9:7b:c7:35: aa:23:78:bb:8b:5a:9e:ea:c5:3f:2a:fa:c9:76:a2: 02:95:96:28:f8:a2:64:4c:d3:cb:3c:36:f2:db:4e: c8:bb:4b:5e:75:61:38:76:97:a5:19:4a:a5:a3:14: f1:62:9e:b4:29:33:4a:67:10:e6:79:ed:c5:d5:24: 41:3c:a1:c5:73:fd:91:03:9c:22:69:b9:25:93:bd: 62:00:f7:c5:40:32:73:42:39:38:c3:1c:d5:3c:e8: e5:5c:13:38:59:de:3e:40:53:6f:68:ed:6d:96:5b: ff:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:56:C6:85:F9:0A:60:B8:CD:D1:3E:F1:6E:B1:6A:EC:B3:3C:53:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/af72ac96-389c-3eb8-a84c-7f22db7a7533.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl X509v3 Authority Key Identifier: keyid:7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer sbgp-ipAddrBlock: critical IPv4: 98.158.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:17:1f:7c:68:64:e1:a2:42:b1:4a:0c:a9:c7:83:db:43:67: 38:25:0b:75:df:f6:48:3e:00:02:79:94:bb:3a:e4:da:9f:69: 55:d6:88:15:0a:ab:5d:b5:7d:ea:e7:06:c1:ea:96:30:58:ec: 02:37:5d:a2:6d:50:96:47:bd:fe:bb:8c:1d:b0:87:03:39:52: 78:85:f7:1c:b8:36:0b:7e:14:9b:9d:30:6a:b1:7e:9b:26:85: 1e:5a:e8:1f:88:db:71:71:18:9d:f5:9b:63:74:73:b2:57:2a: 26:a4:26:99:ea:e8:cf:78:b1:fb:3b:f5:a0:6e:75:49:2d:81: db:ab:c6:6a:ba:e9:78:3d:ee:f1:f5:90:09:dc:5a:e6:e6:63: 72:32:d5:00:b1:11:3e:eb:91:9f:6f:0f:6f:84:c4:27:b6:8a: 0f:fb:af:2a:e5:59:cc:eb:8c:cf:43:9a:fd:39:cb:de:b2:fb: e6:c9:08:b5:68:55:a5:b8:c6:ec:17:35:2a:b5:2b:fb:43:e8: 40:95:57:88:6e:f7:9c:a7:93:f7:6a:6f:72:c3:0a:fe:d0:ba: 5a:e2:3e:32:a6:27:31:28:8e:75:80:71:32:40:17:79:7f:3a: f0:48:bb:fe:8f:93:ab:6b:12:2b:4b:3d:98:95:33:66:be:dc: aa:63:64:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIxHCS0SBmt0sgkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY1ZmVmOGYtNGNkMi00Nzc4LTkxNTgtZjU2ZjMwMjQy ODEyMB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk MDg0OGYxZmEtNmI0Mi00YjZiLTg2NDktZjc5MjE3MzdmNzE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMKX3Ajblbr9OiH8DiP74C4vxchLh/YQgm+U CBQY0qrzGeM3uJYDbIkc54VDs5CdxxBC6Iwr0xcrloeQbhs4Zy+O7zr3dUCA8ndx azOSG4sCnoquxUrOs7490NM0qY5VBKtojs/3uDDGMGQdeQ6nfa9xTXLsDaDQqcYF qOaVYSNax0IYD/ENtotbaz8Btt0+f6l7xzWqI3i7i1qe6sU/KvrJdqIClZYo+KJk TNPLPDby207Iu0tedWE4dpelGUqloxTxYp60KTNKZxDmee3F1SRBPKHFc/2RA5wi abklk71iAPfFQDJzQjk4wxzVPOjlXBM4Wd4+QFNvaO1tllv/XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKlWxoX5CmC4zdE+8W6xauyzPFOTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVm ZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZmMzAyNDI4MTIvYWY3MmFjOTYtMzg5Yy0z ZWI4LWE4NGMtN2YyMmRiN2E3NTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDY1ZmVmOGYtNGNkMi00Nzc4LTkx NTgtZjU2ZjMwMjQyODEyL2Q2NWZlZjhmLTRjZDItNDc3OC05MTU4LWY1NmYzMDI0 MjgxMi5jcmwwHwYDVR0jBBgwFoAUf5hQBZBb45yWyzsCUOY3tAKzSTgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVmZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZm MzAyNDI4MTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYp6QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkXH3xoZOGiQrFKDKnHg9tDZzglC3Xf9kg+AAJ5lLs65NqfaVXWiBUK q121fernBsHqljBY7AI3XaJtUJZHvf67jB2whwM5UniF9xy4Ngt+FJudMGqxfpsm hR5a6B+I23FxGJ31m2N0c7JXKiakJpnq6M94sfs79aBudUktgdurxmq66Xg97vH1 kAncWubmY3Iy1QCxET7rkZ9vD2+ExCe2ig/7ryrlWczrjM9Dmv05y96y++bJCLVo VaW4xuwXNSq1K/tD6ECVV4hu95ynk/dqb3LDCv7QulriPjKmJzEojnWAcTJAF3l/ OvBIu/6Pk6trEitLPZiVM2a+3KpjZCw= -----END CERTIFICATE-----Generated at Sun Oct 11 07:36:46 2026 by rpki-client