$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/970d366d-574a-33ac-a079-81733774db4c.roa File: 970d366d-574a-33ac-a079-81733774db4c.roa (raw, json) Hash identifier: 8JIcsQoJODwI08Oe9sunma5h2M7fVQumJcaBfQGQ/3o= Subject key identifier: F8:6C:F9:67:0C:C8:11:30:D6:EF:FE:E9:44:D4:89:7B:CF:25:1C:1D Certificate issuer: /CN=66ee137c-4201-4a21-a4f5-2f3161305281 Certificate serial: 010D0C9F4328584F45429A6EB5D8E56A08ED6F00 Authority key identifier: 93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/970d366d-574a-33ac-a079-81733774db4c.roa Signing time: Wed 23 Sep 2026 13:00:11 +0000 ROA not before: Wed 23 Sep 2026 13:00:11 +0000 ROA not after: Tue 22 Dec 2026 14:00:11 +0000 asID: 395886 IP address blocks: 98.158.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:42:9a:6e:b5:d8:e5:6a:08:ed:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66ee137c-4201-4a21-a4f5-2f3161305281 Validity Not Before: Sep 23 13:00:11 2026 GMT Not After : Dec 22 14:00:11 2026 GMT Subject: CN=5eee8f01-88d9-4161-9be0-9e0c0b851a3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:dc:99:f5:9f:3a:09:f9:7c:3c:01:fc:a2:da: 87:75:8c:46:15:20:09:a4:82:76:3b:fc:27:b4:e8: c1:f6:61:a8:a2:10:ba:e6:b3:11:fe:34:25:26:d5: 99:e7:4b:d8:b6:7f:8a:6d:81:36:b5:78:36:ac:b1: 23:94:2e:b0:22:3a:ff:dc:ea:11:60:3b:a4:6e:07: d3:d8:bd:6a:a8:ba:1a:fb:80:2b:1c:82:18:53:a6: e6:2b:80:5c:5e:07:de:d0:c0:3a:c1:97:ec:d0:8c: 6d:9c:f7:5a:96:62:a0:7c:a3:91:23:20:9e:10:e5: e3:ce:1b:14:52:a8:cf:f6:fb:ea:84:e6:2c:a6:f5: c0:2f:5c:88:50:a6:8c:66:85:57:cc:5d:13:f2:0c: dd:47:0e:45:02:91:cc:c7:b1:6a:20:0c:69:f9:4b: 02:bd:6b:21:ef:1f:13:55:15:a4:63:8a:9f:68:2c: 04:6b:63:0a:be:9f:ac:03:29:ae:2e:61:48:9d:bf: ef:c3:1b:1d:d0:6e:fa:17:c2:af:88:2f:6d:ba:f5: b7:f3:34:63:d9:8a:e4:99:27:d7:e7:75:76:3a:b1: 15:c0:a5:65:e0:e0:02:8b:f9:3e:a5:94:64:a5:72: 27:14:f6:0a:51:7c:39:e9:f9:09:28:59:67:7c:57: ff:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:6C:F9:67:0C:C8:11:30:D6:EF:FE:E9:44:D4:89:7B:CF:25:1C:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/970d366d-574a-33ac-a079-81733774db4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl X509v3 Authority Key Identifier: keyid:93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer sbgp-ipAddrBlock: critical IPv4: 98.158.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:5f:06:b1:d0:8d:b0:3d:3c:62:58:97:75:94:bb:c4:cc:0c: d5:d0:1b:d9:ac:a5:87:b6:1f:0a:78:cc:c6:c7:4b:48:10:8a: 54:3a:60:da:a7:48:70:1d:09:6b:60:3f:be:0c:d9:3f:32:5e: 7b:02:c8:f2:86:88:5b:22:9d:15:e0:6a:aa:2b:22:99:29:97: 7c:b1:dd:34:fe:d7:a1:4b:90:34:5d:db:9a:45:1b:b4:59:14: e3:bb:f0:10:cf:de:83:9a:00:fb:a6:5c:97:25:61:97:dc:f9: 72:64:f6:a9:91:5f:04:da:89:a4:64:3d:ad:d4:4d:e1:61:d7: e0:19:eb:21:a9:1e:50:34:34:4f:11:6d:36:0f:6d:bd:a6:ff: 84:54:3f:64:95:c6:f6:28:64:20:27:d8:c5:f7:35:1c:f5:d7: 9f:a7:e2:55:e4:0e:21:bb:86:82:f4:e7:3e:91:4f:92:b6:ec: 12:ce:ef:e2:38:2b:d9:1f:3f:df:41:d3:ca:bd:b3:a4:51:d6: fc:7d:70:ce:f4:8a:0e:9f:a8:85:be:29:88:51:00:04:e8:5b: e3:de:29:72:e1:52:25:5a:10:5c:5c:f0:21:27:12:15:34:8b: e4:0f:16:2c:69:a8:ee:3a:0f:8b:c8:c8:2c:07:d1:36:2b:02: d2:ba:5c:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9FQpputdjlagjtbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZlZTEzN2MtNDIwMS00YTIxLWE0ZjUtMmYzMTYxMzA1 MjgxMB4XDTI2MDkyMzEzMDAxMVoXDTI2MTIyMjE0MDAxMVowLzEtMCsGA1UEAxMk NWVlZThmMDEtODhkOS00MTYxLTliZTAtOWUwYzBiODUxYTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNyZ9Z86Cfl8PAH8otqHdYxGFSAJpIJ2O/wn tOjB9mGoohC65rMR/jQlJtWZ50vYtn+KbYE2tXg2rLEjlC6wIjr/3OoRYDukbgfT 2L1qqLoa+4ArHIIYU6bmK4BcXgfe0MA6wZfs0IxtnPdalmKgfKORIyCeEOXjzhsU UqjP9vvqhOYspvXAL1yIUKaMZoVXzF0T8gzdRw5FApHMx7FqIAxp+UsCvWsh7x8T VRWkY4qfaCwEa2MKvp+sAymuLmFInb/vwxsd0G76F8KviC9tuvW38zRj2YrkmSfX 53V2OrEVwKVl4OACi/k+pZRkpXInFPYKUXw56fkJKFlnfFf/pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhs+WcMyBEw1u/+6UTUiXvPJRwdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82NmVl MTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMxNjEzMDUyODEvOTcwZDM2NmQtNTc0YS0z M2FjLWEwNzktODE3MzM3NzRkYjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjZlZTEzN2MtNDIwMS00YTIxLWE0 ZjUtMmYzMTYxMzA1MjgxLzY2ZWUxMzdjLTQyMDEtNGEyMS1hNGY1LTJmMzE2MTMw NTI4MS5jcmwwHwYDVR0jBBgwFoAUk6u6W3jmddEaQuIZV9YetG4N28YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82NmVlMTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMx NjEzMDUyODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYp4cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFfBrHQjbA9PGJYl3WUu8TMDNXQG9mspYe2Hwp4zMbHS0gQilQ6YNqn SHAdCWtgP74M2T8yXnsCyPKGiFsinRXgaqorIpkpl3yx3TT+16FLkDRd25pFG7RZ FOO78BDP3oOaAPumXJclYZfc+XJk9qmRXwTaiaRkPa3UTeFh1+AZ6yGpHlA0NE8R bTYPbb2m/4RUP2SVxvYoZCAn2MX3NRz115+n4lXkDiG7hoL05z6RT5K27BLO7+I4 K9kfP99B08q9s6RR1vx9cM70ig6fqIW+KYhRAAToW+PeKXLhUiVaEFxc8CEnEhU0 i+QPFixpqO46D4vIyCwH0TYrAtK6XO0= -----END CERTIFICATE-----Generated at Wed Sep 30 20:01:26 2026 by rpki-client