$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/8af32f4b-3d49-34a7-907b-43985f15f53e.roa File: 8af32f4b-3d49-34a7-907b-43985f15f53e.roa (raw, json) Hash identifier: 29p9Jrmckca9/7A5nNJp1ON/6VgrJsG94GkPp1nIqFg= Subject key identifier: 86:74:CE:6D:2F:68:B7:C6:3E:48:AF:5C:8F:1D:11:BF:D2:F7:36:A7 Certificate issuer: /CN=da62f168-0c26-4931-a3e3-4abaa31177f0 Certificate serial: 010D0C9F4328584F506D47AAC2C11C2B2F58A9C0 Authority key identifier: 7D:13:A9:4B:75:4C:67:24:6D:B2:FA:E5:E5:74:22:EC:B3:1C:C6:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/8af32f4b-3d49-34a7-907b-43985f15f53e.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 14618 IP address blocks: 98.142.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/da62f168-0c26-4931-a3e3-4abaa31177f0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/da62f168-0c26-4931-a3e3-4abaa31177f0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:47:aa:c2:c1:1c:2b:2f:58:a9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da62f168-0c26-4931-a3e3-4abaa31177f0 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=00571a4d-f53f-4c9e-8516-040f5aad7b73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7e:4c:fb:c1:cc:34:2c:f0:4b:3b:b3:fa:0e: 5d:b2:5a:85:1e:65:11:8e:6b:31:50:19:40:30:3f: 00:09:3a:34:ba:ee:47:a3:bd:4f:d2:12:35:26:df: 47:d5:c7:7b:86:ae:c8:0a:2a:8d:ef:52:0b:d1:ad: 39:ab:b1:82:e8:1f:ab:a8:c3:12:04:f3:0a:c3:d2: c1:71:e3:9c:c1:25:85:33:ec:57:cc:a3:e8:93:ad: 3e:3b:06:5d:54:b2:00:dd:21:30:e4:5e:6f:10:87: 40:d3:44:98:ca:fd:6f:00:98:9e:14:9f:cd:6b:48: 27:00:f7:18:0e:24:0d:84:c8:1c:38:d2:05:6c:15: 90:ec:ac:9c:c3:1b:c3:0f:b8:03:73:ae:c9:92:eb: 4e:07:03:45:2a:45:e4:38:fe:eb:7c:29:d5:df:a8: a0:12:09:bf:7d:2e:32:0c:c3:8f:bf:aa:27:20:f8: 28:7c:e7:1b:86:09:0c:a8:51:ad:65:2f:32:1c:b9: af:7e:f8:10:04:48:c8:2b:42:bd:38:20:80:f1:eb: c1:17:2c:29:0c:18:38:14:d9:21:9a:2a:94:5a:fb: 1d:8f:18:20:b1:6b:76:c4:fb:cd:9c:1f:35:ae:cb: ab:a5:26:1e:49:20:b2:c6:9d:67:07:8e:d8:6b:5d: e3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:74:CE:6D:2F:68:B7:C6:3E:48:AF:5C:8F:1D:11:BF:D2:F7:36:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/8af32f4b-3d49-34a7-907b-43985f15f53e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/da62f168-0c26-4931-a3e3-4abaa31177f0.crl X509v3 Authority Key Identifier: keyid:7D:13:A9:4B:75:4C:67:24:6D:B2:FA:E5:E5:74:22:EC:B3:1C:C6:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer sbgp-ipAddrBlock: critical IPv4: 98.142.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:5e:17:1e:be:49:1f:45:6e:10:ff:62:06:ed:e9:8e:34:a1: 79:63:89:4c:16:5d:e4:16:2e:e8:b6:53:16:39:25:8c:09:67: f6:d3:14:ad:c8:90:3c:f7:b3:06:2d:f9:fa:75:a0:22:60:0e: fc:03:67:94:6c:2d:90:66:39:a7:8b:ed:a2:5d:b2:4a:05:24: 8f:73:a2:46:76:43:0a:94:24:47:60:2f:d4:55:51:80:6f:50: 61:10:35:ee:32:0a:ed:97:0c:73:5f:e4:cc:7f:89:56:25:89: f4:c3:ba:13:54:6c:52:e1:c2:1f:a4:cf:15:a0:a4:d3:76:cd: 1e:99:d1:87:a7:e9:f9:d2:d0:48:bf:69:78:23:af:0a:fe:bc: f4:d2:b5:05:2c:bf:a5:d1:a0:66:c0:7d:2f:bf:75:30:17:de: ef:22:7a:82:ad:43:f7:b1:c8:bf:34:21:11:21:55:a5:a1:20: f9:15:20:1b:e4:31:c3:fe:84:19:5d:c5:d7:95:4b:59:be:8c: a9:d9:b2:ce:6a:d7:ed:a0:cc:ef:16:32:e6:9c:a7:e8:8b:80: bb:3f:2d:42:5f:8b:df:59:4f:a6:5c:95:b0:ca:91:3f:90:38: 57:02:8d:89:b6:07:f0:2f:ae:1f:c7:4a:1c:d7:5b:38:2a:8a: 80:d8:3f:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbUeqwsEcKy9YqcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE2MmYxNjgtMGMyNi00OTMxLWEzZTMtNGFiYWEzMTE3 N2YwMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk MDA1NzFhNGQtZjUzZi00YzllLTg1MTYtMDQwZjVhYWQ3YjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxH5M+8HMNCzwSzuz+g5dslqFHmURjmsxUBlA MD8ACTo0uu5Ho71P0hI1Jt9H1cd7hq7ICiqN71IL0a05q7GC6B+rqMMSBPMKw9LB ceOcwSWFM+xXzKPok60+OwZdVLIA3SEw5F5vEIdA00SYyv1vAJieFJ/Na0gnAPcY DiQNhMgcONIFbBWQ7KycwxvDD7gDc67JkutOBwNFKkXkOP7rfCnV36igEgm/fS4y DMOPv6onIPgofOcbhgkMqFGtZS8yHLmvfvgQBEjIK0K9OCCA8evBFywpDBg4FNkh miqUWvsdjxggsWt2xPvNnB81rsurpSYeSSCyxp1nB47Ya13j8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZ0zm0vaLfGPkivXI8dEb/S9zanMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kYTYy ZjE2OC0wYzI2LTQ5MzEtYTNlMy00YWJhYTMxMTc3ZjAvOGFmMzJmNGItM2Q0OS0z NGE3LTkwN2ItNDM5ODVmMTVmNTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGE2MmYxNjgtMGMyNi00OTMxLWEz ZTMtNGFiYWEzMTE3N2YwL2RhNjJmMTY4LTBjMjYtNDkzMS1hM2UzLTRhYmFhMzEx NzdmMC5jcmwwHwYDVR0jBBgwFoAUfROpS3VMZyRtsvrl5XQi7LMcxiIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kYTYyZjE2OC0wYzI2LTQ5MzEtYTNlMy00YWJh YTMxMTc3ZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYo6QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1eFx6+SR9FbhD/Ygbt6Y40oXljiUwWXeQWLui2UxY5JYwJZ/bTFK3I kDz3swYt+fp1oCJgDvwDZ5RsLZBmOaeL7aJdskoFJI9zokZ2QwqUJEdgL9RVUYBv UGEQNe4yCu2XDHNf5Mx/iVYlifTDuhNUbFLhwh+kzxWgpNN2zR6Z0Yen6fnS0Ei/ aXgjrwr+vPTStQUsv6XRoGbAfS+/dTAX3u8ieoKtQ/exyL80IREhVaWhIPkVIBvk McP+hBldxdeVS1m+jKnZss5q1+2gzO8WMuacp+iLgLs/LUJfi99ZT6ZclbDKkT+Q OFcCjYm2B/Avrh/HShzXWzgqioDYP7s= -----END CERTIFICATE-----Generated at Mon Sep 28 20:17:13 2026 by rpki-client