$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b1dd6e30-4099-4e09-b21a-2d586fc125f9/c43593d9-a65b-3cb2-a082-f5a291790122.roa File: c43593d9-a65b-3cb2-a082-f5a291790122.roa (raw, json) Hash identifier: ZE1bxAD7faomVBQ81WOuwtl9mZauzZ5RQcLRaDNUQBw= Subject key identifier: 5B:EF:42:9B:4E:57:F2:2E:7A:9E:BF:EE:A0:A5:22:2A:43:54:F9:8D Certificate issuer: /CN=b1dd6e30-4099-4e09-b21a-2d586fc125f9 Certificate serial: 010D0C9F4328584F497705E26D98AF30290FAB80 Authority key identifier: 18:3D:C5:44:87:1C:E0:02:65:B1:50:F9:D6:4F:98:D1:7F:D9:8A:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b1dd6e30-4099-4e09-b21a-2d586fc125f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b1dd6e30-4099-4e09-b21a-2d586fc125f9/c43593d9-a65b-3cb2-a082-f5a291790122.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19555 IP address blocks: 98.159.0.0/20 maxlen: 24 2620:28::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b1dd6e30-4099-4e09-b21a-2d586fc125f9/b1dd6e30-4099-4e09-b21a-2d586fc125f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b1dd6e30-4099-4e09-b21a-2d586fc125f9/b1dd6e30-4099-4e09-b21a-2d586fc125f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b1dd6e30-4099-4e09-b21a-2d586fc125f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:05:e2:6d:98:af:30:29:0f:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1dd6e30-4099-4e09-b21a-2d586fc125f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=68980d64-c198-41bc-9806-77d7a5ef6509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c2:36:0f:e3:fc:35:b1:50:da:ed:2b:fd:08: 0e:3f:32:14:9b:ee:f3:3a:32:79:4c:37:31:42:c7: d7:44:60:8a:3e:d8:87:61:b2:1e:8a:92:3b:f8:77: 89:cf:3f:53:70:d1:f7:bb:f9:66:3d:18:93:1d:ab: cb:b5:51:44:64:cf:b8:da:75:bb:95:33:26:c7:85: 8c:55:d1:28:16:9d:f3:c4:a6:5b:97:f0:85:81:5b: 7d:bb:c0:54:4c:9f:4c:41:91:e0:80:08:52:c7:ab: e6:a2:c1:37:c2:f6:d6:0f:29:d4:30:28:e2:51:fa: ee:3c:8c:fe:30:dd:14:4e:04:8e:11:59:56:fd:88: 49:8d:dd:cf:6a:63:44:31:b9:af:1a:65:9c:44:98: 2c:8f:6b:94:49:d5:7c:8e:fd:54:ad:a7:cb:0d:0c: 76:79:f0:8d:41:55:ad:5f:8a:8c:9d:6c:9f:74:65: c3:08:be:fe:a5:ab:09:9a:62:7e:c3:c0:60:8f:cb: 27:fe:98:cb:d5:43:41:0d:80:0a:e8:bb:d6:ac:23: 06:38:c6:dc:f3:f6:55:aa:e9:de:d5:08:16:bb:86: dd:bc:7c:ba:35:dd:84:b0:92:95:bd:e7:d3:a0:68: 45:36:bc:b4:8d:3c:76:4e:0b:7d:b7:c8:a0:46:db: 55:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:EF:42:9B:4E:57:F2:2E:7A:9E:BF:EE:A0:A5:22:2A:43:54:F9:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b1dd6e30-4099-4e09-b21a-2d586fc125f9/c43593d9-a65b-3cb2-a082-f5a291790122.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b1dd6e30-4099-4e09-b21a-2d586fc125f9/b1dd6e30-4099-4e09-b21a-2d586fc125f9.crl X509v3 Authority Key Identifier: keyid:18:3D:C5:44:87:1C:E0:02:65:B1:50:F9:D6:4F:98:D1:7F:D9:8A:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b1dd6e30-4099-4e09-b21a-2d586fc125f9.cer sbgp-ipAddrBlock: critical IPv4: 98.159.0.0/20 IPv6: 2620:28::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:da:fa:cb:7e:72:9a:2f:43:7c:2e:18:17:17:7c:ac:7f:77: 9e:d8:00:2e:3b:7a:40:26:7c:46:9b:73:d2:f4:69:28:26:e2: 94:bf:c7:4a:94:78:dc:dd:82:96:4d:3b:a9:38:e2:71:ec:4a: 87:f9:d8:6d:b6:30:16:bc:f5:19:5c:ce:3e:d7:7b:51:ee:1b: 5a:72:ce:25:4c:b5:23:1a:4b:07:81:7a:67:92:f6:ec:d2:fd: c1:b0:e6:3e:91:8d:d9:17:71:4d:12:b8:3e:08:07:5c:36:95: 48:53:72:ef:31:63:fc:78:10:81:ee:38:34:e5:06:9f:a2:f4: 41:13:62:3a:0e:c3:7e:5b:fd:b2:c3:e7:34:0d:ab:84:f4:10: a4:3c:a7:ac:a6:71:b3:de:2f:7e:ed:cd:d3:e8:93:31:7f:b0: 28:3c:e6:77:21:2a:79:18:fe:05:33:99:77:c1:3f:ed:a9:0a: 04:e2:47:63:d6:a5:09:0a:ca:4a:92:f5:01:46:9a:d2:1c:7f: 38:9a:01:37:46:74:7b:85:42:79:f2:2a:7e:e2:23:eb:13:cc: 05:55:bd:9c:92:1b:50:64:e4:41:3e:14:8a:ce:4b:26:72:21: 45:21:95:63:a9:5a:20:4b:5c:c3:2a:63:a3:8e:b7:d7:2c:9a: 92:c2:e9:f4 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE9JdwXibZivMCkPq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFkZDZlMzAtNDA5OS00ZTA5LWIyMWEtMmQ1ODZmYzEy NWY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Njg5ODBkNjQtYzE5OC00MWJjLTk4MDYtNzdkN2E1ZWY2NTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisI2D+P8NbFQ2u0r/QgOPzIUm+7zOjJ5TDcx QsfXRGCKPtiHYbIeipI7+HeJzz9TcNH3u/lmPRiTHavLtVFEZM+42nW7lTMmx4WM VdEoFp3zxKZbl/CFgVt9u8BUTJ9MQZHggAhSx6vmosE3wvbWDynUMCjiUfruPIz+ MN0UTgSOEVlW/YhJjd3PamNEMbmvGmWcRJgsj2uUSdV8jv1UrafLDQx2efCNQVWt X4qMnWyfdGXDCL7+pasJmmJ+w8Bgj8sn/pjL1UNBDYAK6LvWrCMGOMbc8/ZVqune 1QgWu4bdvHy6Nd2EsJKVvefToGhFNry0jTx2Tgt9t8igRttVFQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFFvvQptOV/Iuep6/7qClIipDVPmNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iMWRk NmUzMC00MDk5LTRlMDktYjIxYS0yZDU4NmZjMTI1ZjkvYzQzNTkzZDktYTY1Yi0z Y2IyLWEwODItZjVhMjkxNzkwMTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjFkZDZlMzAtNDA5OS00ZTA5LWIy MWEtMmQ1ODZmYzEyNWY5L2IxZGQ2ZTMwLTQwOTktNGUwOS1iMjFhLTJkNTg2ZmMx MjVmOS5jcmwwHwYDVR0jBBgwFoAUGD3FRIcc4AJlsVD51k+Y0X/ZirkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iMWRkNmUzMC00MDk5LTRlMDktYjIxYS0yZDU4 NmZjMTI1ZjkuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQEYp8AMA8E AgACMAkDBwAmIAAoAAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAedr6y35ymi9DfC4YFxd8rH93ntgALjt6 QCZ8Rptz0vRpKCbilL/HSpR43N2Clk07qTjicexKh/nYbbYwFrz1GVzOPtd7Ue4b WnLOJUy1IxpLB4F6Z5L27NL9wbDmPpGN2RdxTRK4PggHXDaVSFNy7zFj/HgQge44 NOUGn6L0QRNiOg7Dflv9ssPnNA2rhPQQpDynrKZxs94vfu3N0+iTMX+wKDzmdyEq eRj+BTOZd8E/7akKBOJHY9alCQrKSpL1AUaa0hx/OJoBN0Z0e4VCefIqfuIj6xPM BVW9nJIbUGTkQT4Uis5LJnIhRSGVY6laIEtcwypjo4631yyaksLp9A== -----END CERTIFICATE-----Generated at Mon Sep 28 11:03:23 2026 by rpki-client