$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/00c9f6ff-7637-31de-908a-f6b4cd381a2d.roa File: 00c9f6ff-7637-31de-908a-f6b4cd381a2d.roa (raw, json) Hash identifier: SLKJ4uh5rcAfLka3AfETbC4bMnYhA/v2nLfv5YwgYXU= Subject key identifier: 70:0D:EF:35:86:93:FE:AE:D6:3A:1C:57:E6:C7:D2:F1:80:A6:DF:78 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4EBFC4FB7826EF60AFD000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/00c9f6ff-7637-31de-908a-f6b4cd381a2d.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33662 IP address blocks: 98.194.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 24 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4e:bf:c4:fb:78:26:ef:60:af:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=659022f1-0048-48e7-a9a1-96c5268605aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:98:c9:66:4c:84:bd:22:a3:ae:14:c6:ce:cf: 91:9d:37:7f:8c:dc:9a:5d:d0:b9:2a:23:f9:b7:d4: a3:70:1a:88:49:87:58:ed:d1:2c:98:2d:f4:35:e5: 02:67:55:79:28:df:27:b2:a1:58:72:5a:71:3e:17: 0b:d2:a3:08:36:4a:e8:37:a7:03:3a:fb:d1:a3:bf: cb:07:2d:f5:d9:ce:64:b6:70:16:f7:65:81:30:8f: 80:67:13:ee:2e:8a:e9:ec:3b:e4:7e:95:40:d8:1a: 9b:5c:ac:b3:41:1e:fd:cb:3a:4f:2c:5d:7f:d9:0d: 23:ab:5e:4c:fa:62:d2:71:ba:26:b1:69:4f:57:57: 96:89:b1:44:83:69:f6:30:d4:c7:b9:79:30:47:a6: 5f:24:b7:93:36:62:ec:bc:05:f7:ba:37:4f:f4:50: 1f:e3:4e:74:4d:82:32:4c:4c:ed:2e:e3:7a:dc:f8: 38:ad:49:ea:80:f7:5d:ec:ad:05:50:20:12:f6:7e: 8c:ca:84:57:fd:2c:f3:ae:5a:a4:94:cc:e3:d9:cd: e5:4a:e3:a1:56:be:db:df:97:ed:f8:4e:1f:ce:23: 66:9e:65:48:27:51:c1:3a:4d:5b:3c:ac:42:4d:a1: 7d:ef:24:24:b6:87:05:64:4c:47:98:dd:b2:9b:f9: 6f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:0D:EF:35:86:93:FE:AE:D6:3A:1C:57:E6:C7:D2:F1:80:A6:DF:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/00c9f6ff-7637-31de-908a-f6b4cd381a2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.194.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:d4:c1:cb:7d:c1:64:08:2b:2e:fb:ed:76:c6:fe:92:44:6f: 7e:48:90:41:ce:32:6c:73:c1:21:35:fa:35:14:cd:83:48:01: 2c:e5:ba:51:e5:92:48:f7:d9:42:2f:9d:c6:b0:c6:f3:15:d2: 59:d2:43:7d:8a:fd:f2:9d:23:df:88:c3:39:b1:15:08:72:ba: 26:bb:4a:8b:29:60:2d:25:ee:24:fe:ea:7d:f6:d5:e3:c9:57: 4f:0d:5c:63:b7:2b:d2:b7:32:23:ad:6f:6c:6c:31:24:ff:36: a7:08:be:4a:7d:01:53:b3:f0:4d:57:54:70:23:29:de:5b:d5: e2:f7:c9:04:11:d4:a9:47:62:8a:2b:83:4d:6d:b0:97:68:4c: 1a:dc:a8:a9:f3:83:51:43:16:1e:80:f1:d5:b4:84:46:67:7a: bd:88:89:e7:0d:1c:f9:05:02:c8:11:38:f8:be:8e:5f:f8:bc: 4c:24:02:1c:45:86:de:d9:fa:2c:0a:af:cb:7e:e5:37:cb:4f: 5e:f5:0c:71:00:cf:82:07:da:19:4b:8e:7e:a9:14:de:8b:40: 93:33:d2:fd:da:46:67:aa:5b:9e:87:af:24:bf:99:24:d8:dd: 53:e8:91:fe:71:cf:a4:a0:92:fe:5d:0f:6f:2d:69:49:9c:1f: 66:90:ca:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96Tr/E+3gm72Cv0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk NjU5MDIyZjEtMDA0OC00OGU3LWE5YTEtOTZjNTI2ODYwNWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZjJZkyEvSKjrhTGzs+RnTd/jNyaXdC5KiP5 t9SjcBqISYdY7dEsmC30NeUCZ1V5KN8nsqFYclpxPhcL0qMINkroN6cDOvvRo7/L By312c5ktnAW92WBMI+AZxPuLorp7DvkfpVA2BqbXKyzQR79yzpPLF1/2Q0jq15M +mLScbomsWlPV1eWibFEg2n2MNTHuXkwR6ZfJLeTNmLsvAX3ujdP9FAf4050TYIy TEztLuN63Pg4rUnqgPdd7K0FUCAS9n6MyoRX/SzzrlqklMzj2c3lSuOhVr7b35ft +E4fziNmnmVIJ1HBOk1bPKxCTaF97yQktocFZExHmN2ym/lv2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHAN7zWGk/6u1jocV+bH0vGApt94MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDBjOWY2ZmYtNzYzNy0z MWRlLTkwOGEtZjZiNGNkMzgxYTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYsJkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKLUwct9wWQIKy777XbG/pJEb35IkEHOMmxzwSE1+jUUzYNIASzlulHl kkj32UIvncawxvMV0lnSQ32K/fKdI9+IwzmxFQhyuia7SospYC0l7iT+6n321ePJ V08NXGO3K9K3MiOtb2xsMST/NqcIvkp9AVOz8E1XVHAjKd5b1eL3yQQR1KlHYoor g01tsJdoTBrcqKnzg1FDFh6A8dW0hEZner2IiecNHPkFAsgROPi+jl/4vEwkAhxF ht7Z+iwKr8t+5TfLT171DHEAz4IH2hlLjn6pFN6LQJMz0v3aRmeqW56HryS/mSTY 3VPokf5xz6Sgkv5dD28taUmcH2aQyg8= -----END CERTIFICATE-----Generated at Fri Oct 23 13:29:42 2026 by rpki-client