$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/bc8817b2-3a75-3787-b995-61f61104a979.roa File: bc8817b2-3a75-3787-b995-61f61104a979.roa (raw, json) Hash identifier: h/RXHaMnrXIcoIXgK2CpOBn+HcbhElgLxtFiZdntIpQ= Subject key identifier: 40:71:7F:33:A5:4E:FF:AE:F4:FC:D8:01:6C:B5:56:C7:D7:DD:D6:17 Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584F4975BD2CA2586F0697623700 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/bc8817b2-3a75-3787-b995-61f61104a979.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 21859 IP address blocks: 98.98.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:bd:2c:a2:58:6f:06:97:62:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=24d8ea33-0d6a-4a96-afd0-063c210f6f95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:db:16:ae:84:5d:da:28:4b:c8:b0:66:69:9c: 0b:e2:2c:80:36:1b:aa:51:54:1f:46:86:1f:9f:16: 47:49:62:54:90:9a:7e:ac:6c:13:1a:87:72:72:39: 0f:bd:f2:af:ca:c4:29:9d:e5:a2:4f:64:9d:53:3b: 5c:32:1a:a8:90:85:b1:f0:a9:d1:ca:1a:dd:4e:d3: c2:b8:0d:fb:98:8f:c2:b9:c1:3b:18:c4:05:2f:b1: 78:2c:74:46:34:62:13:b6:4c:72:10:cb:15:5e:44: 66:cb:14:53:a9:45:26:bc:bf:48:f5:83:b5:8d:5b: 21:60:87:55:29:3c:c4:a1:5c:b0:45:fa:00:66:7c: cb:d5:8a:ab:78:00:3e:97:c1:44:e2:67:a2:14:ec: 7f:e7:2a:75:38:2c:fd:73:85:51:58:03:6e:82:de: 7b:3a:b4:9b:16:1a:60:25:ec:d2:39:39:71:87:99: 49:47:82:57:a3:77:e2:53:33:42:64:27:44:3f:11: c0:b2:36:9f:12:76:f3:e1:2e:a9:85:eb:be:d7:7e: e8:8d:68:a7:ab:54:27:78:8d:de:48:4f:63:7b:e1: 1f:c2:55:17:3a:06:16:91:0a:65:8a:27:5b:94:26: d0:3a:33:07:5c:ae:81:6e:9d:74:e5:90:2c:84:4b: 60:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:71:7F:33:A5:4E:FF:AE:F4:FC:D8:01:6C:B5:56:C7:D7:DD:D6:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/bc8817b2-3a75-3787-b995-61f61104a979.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 98.98.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:c0:71:51:ad:2d:5f:11:04:02:27:58:0c:c8:6d:84:d3:ee: 76:e1:f3:c5:f5:85:08:bf:1c:0d:74:ab:2f:c5:3c:90:96:a8: 5e:04:93:c3:42:21:f4:7f:f1:32:2f:39:13:1a:23:99:8b:85: 24:bf:04:49:2a:13:e3:c3:f6:ff:2f:ec:7c:8c:e7:33:5e:c2: 1e:7d:73:a0:cf:13:4b:2d:2f:ce:98:a1:05:fd:8b:32:73:06: d9:3a:05:47:d3:30:ad:fa:08:79:c8:dd:6e:16:56:77:73:47: 9b:f3:af:08:2d:43:56:ea:b0:14:fd:d9:a4:27:25:43:b8:8d: 42:7e:f7:8d:e9:dd:e3:a7:41:99:a8:8b:fc:e5:e0:ec:3a:4e: b3:4d:1e:a2:a9:fb:c6:78:f9:bc:6a:9b:a0:71:75:61:14:e7: 70:85:56:1c:5f:48:e4:29:b1:7e:66:87:69:d0:ab:55:96:16: 9e:38:73:ef:09:03:cb:36:42:81:75:81:2d:ba:35:90:64:49: 2c:56:2d:66:cf:3d:b3:9a:5f:74:92:e2:1a:e2:d8:3a:d7:1d: cc:70:c7:40:ba:ca:98:b9:40:c6:60:96:33:8c:bc:85:c0:c7: 64:92:b1:c3:99:f3:20:5a:1f:1a:b5:9f:6a:e7:26:19:78:87: 16:85:eb:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdb0solhvBpdiNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjRkOGVhMzMtMGQ2YS00YTk2LWFmZDAtMDYzYzIxMGY2Zjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldsWroRd2ihLyLBmaZwL4iyANhuqUVQfRoYf nxZHSWJUkJp+rGwTGodycjkPvfKvysQpneWiT2SdUztcMhqokIWx8KnRyhrdTtPC uA37mI/CucE7GMQFL7F4LHRGNGITtkxyEMsVXkRmyxRTqUUmvL9I9YO1jVshYIdV KTzEoVywRfoAZnzL1YqreAA+l8FE4meiFOx/5yp1OCz9c4VRWANugt57OrSbFhpg JezSOTlxh5lJR4JXo3fiUzNCZCdEPxHAsjafEnbz4S6pheu+137ojWinq1QneI3e SE9je+EfwlUXOgYWkQpliidblCbQOjMHXK6Bbp105ZAshEtgVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEBxfzOlTv+u9PzYAWy1VsfX3dYXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvYmM4ODE3YjItM2E3NS0z Nzg3LWI5OTUtNjFmNjExMDRhOTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYmLGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPAcVGtLV8RBAInWAzIbYTT7nbh88X1hQi/HA10qy/FPJCWqF4Ek8NC IfR/8TIvORMaI5mLhSS/BEkqE+PD9v8v7HyM5zNewh59c6DPE0stL86YoQX9izJz Btk6BUfTMK36CHnI3W4WVndzR5vzrwgtQ1bqsBT92aQnJUO4jUJ+943p3eOnQZmo i/zl4Ow6TrNNHqKp+8Z4+bxqm6BxdWEU53CFVhxfSOQpsX5mh2nQq1WWFp44c+8J A8s2QoF1gS26NZBkSSxWLWbPPbOaX3SS4hri2DrXHcxwx0C6ypi5QMZgljOMvIXA x2SSscOZ8yBaHxq1n2rnJhl4hxaF6xo= -----END CERTIFICATE-----Generated at Tue Oct 6 15:34:56 2026 by rpki-client