$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/3e8a8d16-857b-33e9-b07b-913de656aa02.roa File: 3e8a8d16-857b-33e9-b07b-913de656aa02.roa (raw, json) Hash identifier: KgeZ6d6BWmN5rQ1eEDnsUoKW1IiLan3Wor3h+nMvCVw= Subject key identifier: 91:7F:25:1F:B3:58:58:D3:12:DF:BA:C2:76:A9:32:07:22:3F:84:A2 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584E6C6F69006AC80B899B573700 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/3e8a8d16-857b-33e9-b07b-913de656aa02.roa Signing time: Tue 07 Jul 2026 21:00:13 +0000 ROA not before: Tue 07 Jul 2026 21:00:13 +0000 ROA not after: Mon 05 Oct 2026 21:00:13 +0000 asID: 4213 IP address blocks: 98.126.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6c:6f:69:00:6a:c8:0b:89:9b:57:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Jul 7 21:00:13 2026 GMT Not After : Oct 5 21:00:13 2026 GMT Subject: CN=def58b1d-2a10-4a23-8eb6-3924a5388b77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:12:a5:14:9f:6a:af:93:92:c9:8f:13:19:58: 4c:91:06:24:b9:47:dc:c8:fb:cf:26:ae:e3:b5:c3: f9:e2:1a:c3:ea:bb:51:24:61:eb:34:bf:66:cc:f4: cf:37:19:88:a0:ba:11:82:35:86:02:8d:e3:38:ed: 00:9c:b1:0e:c7:58:97:c8:f2:68:d6:f0:25:e5:73: a7:35:0f:62:21:a5:b6:de:06:0e:6d:42:e2:8e:a4: d7:75:39:cc:cf:de:73:f9:24:f9:5d:84:c0:02:b4: c8:26:c2:8d:51:88:8d:e2:73:a2:28:00:1b:03:ba: 6f:2f:21:30:37:79:b7:9c:ad:73:6b:87:a9:dc:95: 55:43:09:02:42:6b:64:b0:2e:e3:40:44:74:60:79: 37:08:66:08:c1:57:f4:c8:ba:e5:21:e7:fa:b1:36: 78:c3:ee:0b:7a:be:2d:e1:62:74:67:18:f0:a7:1b: cb:1d:ed:8a:8b:cf:5e:c4:3b:82:45:30:f0:31:2b: ad:e9:8d:19:33:9a:13:82:86:32:1e:ac:e8:5f:ae: 21:5f:41:d4:41:09:be:49:c3:a7:71:1a:44:77:d4: 9c:59:ae:d3:a9:3f:2a:31:b2:99:86:de:52:f0:c8: 1a:22:f6:fa:c6:87:d3:f5:42:61:60:94:14:8b:84: 33:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:7F:25:1F:B3:58:58:D3:12:DF:BA:C2:76:A9:32:07:22:3F:84:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/3e8a8d16-857b-33e9-b07b-913de656aa02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 98.126.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:64:93:1a:e5:b9:c2:ed:44:f0:a4:49:6f:93:a2:7d:99:b0: 45:01:e6:18:d4:87:a1:d5:2d:64:54:08:5d:c8:ad:19:df:92: 13:17:87:1a:3a:d2:5b:db:8e:38:7a:f3:b1:bb:4d:c4:b0:8a: 3b:f4:c5:bf:f1:cc:95:72:8e:0a:28:de:2d:6c:67:50:6a:2b: f3:6f:96:53:5e:7e:90:66:69:b3:12:b6:6c:a8:8a:49:90:df: 20:5c:65:d3:0c:68:b9:d7:b6:65:6b:23:8e:c6:40:04:2c:cf: c5:c9:62:1a:c2:fe:35:de:3e:a6:b2:4c:6e:67:53:25:b2:cd: 52:19:6f:75:54:25:fc:8b:f5:5a:b6:9a:a7:d2:9b:53:ba:5d: 52:58:da:af:ac:6b:96:15:ad:b2:76:6a:72:94:f5:4a:83:d8: 15:63:08:4b:f0:37:75:c8:d2:da:02:f0:1f:16:34:c5:1b:76: 31:ed:ca:cd:ef:3c:f2:3a:38:3b:dd:a7:4d:01:23:1c:44:b9: 6c:03:5c:4c:dd:a6:2e:31:dc:98:4b:20:b1:c8:d0:07:8e:fb: d4:f0:ce:a3:d0:b3:df:e2:7d:1d:41:a7:43:29:57:d9:82:cb: d7:7e:95:0c:a2:f0:1e:97:df:94:bb:5e:96:38:e4:11:be:70: 6f:2d:34:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5sb2kAasgLiZtXNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI2MDcwNzIxMDAxM1oXDTI2MTAwNTIxMDAxM1owLzEtMCsGA1UEAxMk ZGVmNThiMWQtMmExMC00YTIzLThlYjYtMzkyNGE1Mzg4Yjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxKlFJ9qr5OSyY8TGVhMkQYkuUfcyPvPJq7j tcP54hrD6rtRJGHrNL9mzPTPNxmIoLoRgjWGAo3jOO0AnLEOx1iXyPJo1vAl5XOn NQ9iIaW23gYObULijqTXdTnMz95z+ST5XYTAArTIJsKNUYiN4nOiKAAbA7pvLyEw N3m3nK1za4ep3JVVQwkCQmtksC7jQER0YHk3CGYIwVf0yLrlIef6sTZ4w+4Ler4t 4WJ0ZxjwpxvLHe2Ki89exDuCRTDwMSut6Y0ZM5oTgoYyHqzoX64hX0HUQQm+ScOn cRpEd9ScWa7TqT8qMbKZht5S8MgaIvb6xofT9UJhYJQUi4Qz4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJF/JR+zWFjTEt+6wnapMgciP4SiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvM2U4YThkMTYtODU3Yi0z M2U5LWIwN2ItOTEzZGU2NTZhYTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYn6WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALRkkxrlucLtRPCkSW+Ton2ZsEUB5hjUh6HVLWRUCF3IrRnfkhMXhxo6 0lvbjjh687G7TcSwijv0xb/xzJVyjgoo3i1sZ1BqK/NvllNefpBmabMStmyoikmQ 3yBcZdMMaLnXtmVrI47GQAQsz8XJYhrC/jXePqayTG5nUyWyzVIZb3VUJfyL9Vq2 mqfSm1O6XVJY2q+sa5YVrbJ2anKU9UqD2BVjCEvwN3XI0toC8B8WNMUbdjHtys3v PPI6ODvdp00BIxxEuWwDXEzdpi4x3JhLILHI0AeO+9TwzqPQs9/ifR1Bp0MpV9mC y9d+lQyi8B6X35S7XpY45BG+cG8tNFo= -----END CERTIFICATE-----Generated at Fri Jul 24 10:38:15 2026 by rpki-client