$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/7f1d7ee4-70d1-3195-8611-24c2a0956a19.roa File: 7f1d7ee4-70d1-3195-8611-24c2a0956a19.roa (raw, json) Hash identifier: 3fAYHoc0f4EiJhdhFzgI14vOBWebGcsby2cAsGo+CzM= Subject key identifier: 48:60:C4:0B:2C:2D:75:AB:19:31:84:4C:3C:91:D6:FB:E6:8B:53:E6 Certificate issuer: /CN=040a98e1-0cb9-4e23-910e-20ec5dfe8bec Certificate serial: 010D0C9F4328584F1302419B5BF4650444AC3000 Authority key identifier: 7D:BC:F6:B5:A8:72:7C:0A:82:7C:61:12:04:36:FE:84:2B:CC:1C:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/7f1d7ee4-70d1-3195-8611-24c2a0956a19.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 17324 IP address blocks: 129.98.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:41:9b:5b:f4:65:04:44:ac:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=040a98e1-0cb9-4e23-910e-20ec5dfe8bec Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=f4f2d84c-c56c-4550-9e39-630be0a5d3a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:0c:d6:ed:d6:e4:d1:e4:3d:db:b3:8b:f3:41: 51:70:1a:dd:5c:be:20:53:02:93:3b:89:06:8a:d8: 4d:5a:37:9a:12:e5:78:dc:23:85:eb:e5:e8:c4:6c: 2f:cd:66:40:aa:10:d8:d0:6c:85:44:cd:da:b3:4b: 2e:d4:e9:b7:73:93:39:2c:72:66:55:1f:78:e9:39: 78:55:0e:94:df:30:bf:52:ab:98:83:64:df:85:38: bd:65:76:f5:43:16:dd:dd:ef:c5:2d:9f:e8:ee:2c: c5:16:d4:c1:f0:69:21:ea:89:2a:94:a0:15:a0:23: e8:40:d5:20:07:e3:8e:f4:d9:6e:70:1a:1f:40:ad: b1:07:5f:ee:e7:fb:a2:de:3f:89:6c:f9:20:91:8e: 43:c2:cd:e3:d0:5f:df:b1:37:01:28:1e:a6:e3:73: 6e:35:94:48:da:7d:51:2a:4b:4f:b3:35:73:f8:4c: b3:a8:9a:88:78:00:f5:27:0d:6d:83:30:29:94:ed: a9:e4:8a:2e:0d:e1:05:ea:a9:90:fb:82:e9:1e:70: 84:23:24:57:9c:d4:b8:42:80:a9:b8:9d:5f:0e:8c: 6f:e5:8b:c1:0c:ff:89:e9:55:86:5f:43:5e:ae:03: c3:57:5c:b3:e8:a0:33:a1:b1:3e:51:3d:46:e6:a4: 87:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:60:C4:0B:2C:2D:75:AB:19:31:84:4C:3C:91:D6:FB:E6:8B:53:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/7f1d7ee4-70d1-3195-8611-24c2a0956a19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.crl X509v3 Authority Key Identifier: keyid:7D:BC:F6:B5:A8:72:7C:0A:82:7C:61:12:04:36:FE:84:2B:CC:1C:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/040a98e1-0cb9-4e23-910e-20ec5dfe8bec.cer sbgp-ipAddrBlock: critical IPv4: 129.98.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:80:b8:46:28:a5:1a:eb:28:22:1f:4a:32:6a:02:5f:ca:7f: 8f:60:34:35:dd:80:f8:08:a0:89:33:3b:4e:fc:12:18:44:cc: 6a:ba:aa:4a:82:7f:3d:75:e3:15:a2:15:fa:b0:e7:09:de:b4: 2f:3c:75:4a:8e:0d:eb:be:d1:a8:f3:88:be:25:b7:24:2f:89: 6e:d6:8e:08:a7:86:5f:80:7d:bb:66:93:97:7b:1e:2a:27:5c: 24:fc:19:1f:5e:6a:ab:a5:a1:f6:7d:e8:b3:79:3c:ad:dd:a4: f4:c1:34:15:01:c8:af:79:e0:6d:62:80:b8:95:b1:b9:ac:62: 5d:f5:ec:72:99:b6:d9:10:ba:5e:69:81:24:b2:c7:f0:4d:19: ff:b8:72:b5:db:2e:49:82:a7:60:ae:d6:9f:4b:3f:f0:7e:ad: f9:3d:8f:3a:c6:51:5a:31:70:3f:05:95:87:7a:fb:7c:28:1b: 45:20:83:3d:d5:79:7c:b3:0c:4e:0b:e6:65:25:35:3e:12:1d: 68:a3:9c:9a:0d:9a:e3:f8:a5:44:a8:4d:8b:b7:d9:7c:97:55: 2a:8b:2f:47:60:01:68:14:dd:d1:b6:83:98:83:3d:39:2a:d2: 04:56:fa:a1:4d:47:3b:70:11:a0:68:8b:3e:de:74:cc:f7:28: f5:6a:18:53 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE8TAkGbW/RlBESsMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQwYTk4ZTEtMGNiOS00ZTIzLTkxMGUtMjBlYzVkZmU4 YmVjMB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk ZjRmMmQ4NGMtYzU2Yy00NTUwLTllMzktNjMwYmUwYTVkM2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwzW7dbk0eQ927OL80FRcBrdXL4gUwKTO4kG ithNWjeaEuV43COF6+XoxGwvzWZAqhDY0GyFRM3as0su1Om3c5M5LHJmVR946Tl4 VQ6U3zC/UquYg2TfhTi9ZXb1Qxbd3e/FLZ/o7izFFtTB8Gkh6okqlKAVoCPoQNUg B+OO9NlucBofQK2xB1/u5/ui3j+JbPkgkY5Dws3j0F/fsTcBKB6m43NuNZRI2n1R KktPszVz+EyzqJqIeAD1Jw1tgzAplO2p5IouDeEF6qmQ+4LpHnCEIyRXnNS4QoCp uJ1fDoxv5YvBDP+J6VWGX0NergPDV1yz6KAzobE+UT1G5qSHmQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFEhgxAssLXWrGTGETDyR1vvmi1PmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wNDBh OThlMS0wY2I5LTRlMjMtOTEwZS0yMGVjNWRmZThiZWMvN2YxZDdlZTQtNzBkMS0z MTk1LTg2MTEtMjRjMmEwOTU2YTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDQwYTk4ZTEtMGNiOS00ZTIzLTkx MGUtMjBlYzVkZmU4YmVjLzA0MGE5OGUxLTBjYjktNGUyMy05MTBlLTIwZWM1ZGZl OGJlYy5jcmwwHwYDVR0jBBgwFoAUfbz2tahyfAqCfGESBDb+hCvMHNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wNDBhOThlMS0wY2I5LTRlMjMtOTEwZS0yMGVj NWRmZThiZWMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgWIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAaIC4RiilGusoIh9KMmoCX8p/j2A0Nd2A+AigiTM7TvwSGETMarqqSoJ/ PXXjFaIV+rDnCd60Lzx1So4N677RqPOIviW3JC+JbtaOCKeGX4B9u2aTl3seKidc JPwZH15qq6Wh9n3os3k8rd2k9ME0FQHIr3ngbWKAuJWxuaxiXfXscpm22RC6XmmB JLLH8E0Z/7hytdsuSYKnYK7Wn0s/8H6t+T2POsZRWjFwPwWVh3r7fCgbRSCDPdV5 fLMMTgvmZSU1PhIdaKOcmg2a4/ilRKhNi7fZfJdVKosvR2ABaBTd0baDmIM9OSrS BFb6oU1HO3ARoGiLPt50zPco9WoYUw== -----END CERTIFICATE-----Generated at Sun Oct 4 06:57:41 2026 by rpki-client