$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/18447f46-ae19-3da6-8932-a57b8e80e0a6.roa File: 18447f46-ae19-3da6-8932-a57b8e80e0a6.roa (raw, json) Hash identifier: DIvcHLqcnUBPYIwXMm0cyWX8p11TXyyWGWVmYufm9II= Subject key identifier: BC:48:45:EA:41:FC:05:49:41:AA:DA:84:75:CD:8E:3B:B8:11:DB:05 Certificate issuer: /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7 Certificate serial: 010D0C9F4328584F305281D88491BD901E863F60 Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/18447f46-ae19-3da6-8932-a57b8e80e0a6.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 14956 IP address blocks: 144.172.90.0/23 maxlen: 24 144.172.92.0/22 maxlen: 24 144.172.96.0/23 maxlen: 24 144.172.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:81:d8:84:91:bd:90:1e:86:3f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7 Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=23a9754e-3d1f-4204-8463-edf71fd2228f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d6:59:7f:23:b0:fb:07:33:98:a0:6a:ce:ee: ac:69:71:36:58:c7:66:08:1f:20:21:b6:5b:42:b8: 30:08:97:3f:d6:89:47:7b:ea:dc:e0:81:e0:16:9e: 8e:22:f2:01:95:35:60:12:ad:ce:b4:0d:38:56:1e: 46:c0:86:21:68:89:0e:ed:45:9d:60:26:51:36:29: c4:63:df:5e:e8:32:2b:76:0b:96:69:d2:6a:3e:28: b2:91:2a:63:3a:01:d0:c2:ab:18:23:f1:0d:cf:86: 2f:4d:86:14:94:b6:27:0b:29:f3:f1:85:1a:24:54: e3:f1:05:00:5e:f5:18:1c:63:68:fd:38:b6:94:c3: 6a:41:05:5f:f0:d8:fa:49:34:38:1a:25:02:47:b9: 48:bf:05:db:93:59:be:78:60:cf:92:a8:41:75:4c: 0e:4d:b7:52:0a:14:88:ac:25:00:05:2e:8d:cf:49: 60:7d:7d:9b:1a:6b:ff:a0:12:13:f3:6a:03:b8:d5: 6b:b7:c3:c6:0e:69:47:74:bf:3d:b4:14:a5:90:83: 09:07:c4:26:c6:8c:d5:dc:69:ce:bb:16:f7:eb:49: dc:89:54:8a:f2:97:c7:56:4e:ee:64:35:26:28:e1: 4a:03:17:a2:5e:ce:78:a0:80:8d:13:74:77:90:f3: 0d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:48:45:EA:41:FC:05:49:41:AA:DA:84:75:CD:8E:3B:B8:11:DB:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/18447f46-ae19-3da6-8932-a57b8e80e0a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl X509v3 Authority Key Identifier: keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer sbgp-ipAddrBlock: critical IPv4: 144.172.90.0-144.172.98.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:6b:1e:61:0a:db:7c:f1:36:4d:31:ff:51:4b:9f:12:f8:f8: 3d:2d:8a:da:ef:22:58:4a:d4:4d:46:b5:e9:93:82:41:9a:45: a7:94:02:c4:14:d3:4f:7a:03:a7:56:bd:c7:8a:15:73:19:df: 2a:7a:8c:0f:2e:79:be:97:f3:03:1b:07:3b:fa:84:b0:09:d1: c3:f7:b2:2f:bc:b5:6c:d6:4a:b8:4b:f7:a9:00:d7:4c:92:0a: 9d:52:43:a1:6e:ef:66:89:a3:d6:b0:fa:8c:b5:ff:60:1e:35: 4f:fb:01:9e:58:11:b0:d3:14:47:0c:19:7e:4c:81:6b:00:96: d6:da:cf:74:1d:32:4b:87:cf:8b:2c:93:3f:63:0e:3b:1c:a5: 6d:e0:45:88:33:ff:4f:7c:c7:96:f1:f2:5a:bd:9d:45:40:d3: a6:2a:95:61:06:d8:94:c0:09:b9:94:41:85:dc:8d:c9:7d:2a: 06:fd:8b:0c:64:0d:44:b6:c9:76:dd:12:4c:84:ef:6b:83:56: 0b:9e:7b:b8:29:b5:d8:2b:06:c9:90:fc:aa:14:80:99:23:84: 95:5f:ff:40:d1:e5:7a:a3:7b:83:4a:fa:5d:40:a1:0d:96:c7: 53:e5:c7:78:b9:5c:f3:29:68:2b:cf:b3:61:77:5e:6b:2d:76: 8b:93:ca:64 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE8wUoHYhJG9kB6GP2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOThjYjUwNTgtMDFhZC00NWJmLTljMTUtNDUzZjQxMGJi OWQ3MB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk MjNhOTc1NGUtM2QxZi00MjA0LTg0NjMtZWRmNzFmZDIyMjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtZZfyOw+wczmKBqzu6saXE2WMdmCB8gIbZb QrgwCJc/1olHe+rc4IHgFp6OIvIBlTVgEq3OtA04Vh5GwIYhaIkO7UWdYCZRNinE Y99e6DIrdguWadJqPiiykSpjOgHQwqsYI/ENz4YvTYYUlLYnCynz8YUaJFTj8QUA XvUYHGNo/Ti2lMNqQQVf8Nj6STQ4GiUCR7lIvwXbk1m+eGDPkqhBdUwOTbdSChSI rCUABS6Nz0lgfX2bGmv/oBIT82oDuNVrt8PGDmlHdL89tBSlkIMJB8QmxozV3GnO uxb360nciVSK8pfHVk7uZDUmKOFKAxeiXs54oICNE3R3kPMNdQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFLxIRepB/AVJQarahHXNjju4EdsFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OGNi NTA1OC0wMWFkLTQ1YmYtOWMxNS00NTNmNDEwYmI5ZDcvMTg0NDdmNDYtYWUxOS0z ZGE2LTg5MzItYTU3YjhlODBlMGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOThjYjUwNTgtMDFhZC00NWJmLTlj MTUtNDUzZjQxMGJiOWQ3Lzk4Y2I1MDU4LTAxYWQtNDViZi05YzE1LTQ1M2Y0MTBi YjlkNy5jcmwwHwYDVR0jBBgwFoAUgs6ENpgBbErCBlI/wMU9V+EIADkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85OGNiNTA1OC0wMWFkLTQ1YmYtOWMxNS00NTNm NDEwYmI5ZDcuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGQrFoD BACQrGIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAr2seYQrbfPE2TTH/UUufEvj4PS2K2u8iWErUTUa16ZOC QZpFp5QCxBTTT3oDp1a9x4oVcxnfKnqMDy55vpfzAxsHO/qEsAnRw/eyL7y1bNZK uEv3qQDXTJIKnVJDoW7vZomj1rD6jLX/YB41T/sBnlgRsNMURwwZfkyBawCW1trP dB0yS4fPiyyTP2MOOxylbeBFiDP/T3zHlvHyWr2dRUDTpiqVYQbYlMAJuZRBhdyN yX0qBv2LDGQNRLbJdt0STITva4NWC557uCm12CsGyZD8qhSAmSOElV//QNHleqN7 g0r6XUChDZbHU+XHeLlc8yloK8+zYXdeay12i5PKZA== -----END CERTIFICATE-----Generated at Tue Sep 29 13:50:17 2026 by rpki-client