$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c9d1a20-3de5-3a1b-adc7-cb0fff037249.roa File: 0c9d1a20-3de5-3a1b-adc7-cb0fff037249.roa (raw, json) Hash identifier: rFb5QRUjwy9q36s7LBJ49B07fVTi/zsVv9Mv/o7Y3+8= Subject key identifier: D9:A9:C7:C2:75:CF:66:F4:10:C2:6E:41:7C:8F:1F:D1:8A:03:8C:02 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A500B77B1497C32806FB978 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c9d1a20-3de5-3a1b-adc7-cb0fff037249.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33662 IP address blocks: 98.40.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:50:0b:77:b1:49:7c:32:80:6f:b9:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=33fcd2cc-63fe-4596-a940-6830d986af24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:cb:f4:b9:e4:29:76:61:ae:51:1b:4e:06:33: 80:58:7d:f2:b6:61:bf:3d:47:88:bd:17:80:bb:a7: da:b6:f0:91:3a:de:77:d9:70:f1:f0:75:de:30:34: dc:70:87:a2:ab:5c:91:7d:b7:e0:b4:a0:7e:41:3d: 0d:48:ed:26:58:91:cd:3f:d0:10:84:a9:c5:89:6c: f9:93:3e:b9:ca:43:f1:ac:ff:b4:33:57:de:c6:05: d5:84:45:cb:6f:50:ba:60:41:50:47:14:95:86:74: 91:e0:f5:18:a2:82:58:d7:6e:57:c4:3e:40:71:f4: e7:25:d1:da:e1:86:08:71:9c:6c:1c:e3:39:26:db: 7d:1b:21:cb:89:46:0f:d2:65:3c:bf:31:26:3c:3d: 7b:44:83:ac:f6:88:45:3d:51:ec:ff:f2:4c:95:dd: ea:02:ad:5d:5d:79:e2:f8:19:d7:c9:f4:90:bb:2a: 81:45:54:da:c6:dc:33:06:44:83:3b:c0:71:c9:d8: da:3e:f7:79:32:8e:6f:76:94:76:94:88:63:fa:3f: 84:06:58:8c:a7:2e:dd:cd:dd:02:00:c8:ec:f6:c0: 5b:ea:f8:2d:c6:e6:46:13:96:6a:38:7d:89:a4:70: 42:54:6c:2a:0a:18:c6:1e:13:10:6b:d7:60:61:dc: d5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:A9:C7:C2:75:CF:66:F4:10:C2:6E:41:7C:8F:1F:D1:8A:03:8C:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c9d1a20-3de5-3a1b-adc7-cb0fff037249.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.40.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:ec:61:08:26:77:58:7b:59:19:10:18:14:0f:0d:83:d3:70: 36:db:47:3c:de:7b:06:69:e6:39:37:60:a9:a0:a5:96:80:ac: b7:6e:a6:d8:3c:09:79:f5:97:db:1d:90:75:d5:4a:fd:8b:3d: 2e:b4:e7:9c:cd:52:c9:45:b6:18:dd:35:82:c9:23:0a:f1:1f: c1:48:aa:db:51:0b:d1:c7:d6:29:21:76:a3:21:a0:1b:27:c1: dc:18:75:40:0b:46:0f:10:08:a9:a5:33:57:4f:f8:16:ea:08: 13:0c:fa:41:77:3f:6a:be:ff:6e:e4:b4:24:19:99:f9:a0:d8: 7a:32:1e:08:ae:d0:33:a3:e5:aa:4f:8f:c7:31:99:c7:93:ff: 85:5d:04:77:df:7d:d4:4c:b5:dd:d2:7b:1d:f7:66:e0:91:b2: 9c:9b:62:ae:67:44:da:f7:70:1e:83:cf:47:56:5c:86:5c:85: 53:c5:16:4e:18:9d:85:88:17:94:38:da:4e:53:26:8f:58:55: aa:6a:7e:00:48:3d:3a:3c:ac:1c:25:9e:ff:1b:b6:b8:6a:07: 77:94:58:4a:b8:3c:3f:42:4b:ea:30:47:80:18:e3:07:85:04: b8:ae:fb:d0:94:16:2a:e3:0a:94:1a:eb:56:9c:02:1b:81:55: 10:a9:16:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96UAt3sUl8MoBvuXgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk MzNmY2QyY2MtNjNmZS00NTk2LWE5NDAtNjgzMGQ5ODZhZjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6cv0ueQpdmGuURtOBjOAWH3ytmG/PUeIvReA u6fatvCROt532XDx8HXeMDTccIeiq1yRfbfgtKB+QT0NSO0mWJHNP9AQhKnFiWz5 kz65ykPxrP+0M1fexgXVhEXLb1C6YEFQRxSVhnSR4PUYooJY125XxD5AcfTnJdHa 4YYIcZxsHOM5Jtt9GyHLiUYP0mU8vzEmPD17RIOs9ohFPVHs//JMld3qAq1dXXni +BnXyfSQuyqBRVTaxtwzBkSDO8BxydjaPvd5Mo5vdpR2lIhj+j+EBliMpy7dzd0C AMjs9sBb6vgtxuZGE5ZqOH2JpHBCVGwqChjGHhMQa9dgYdzVmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNmpx8J1z2b0EMJuQXyPH9GKA4wCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGM5ZDFhMjAtM2RlNS0z YTFiLWFkYzctY2IwZmZmMDM3MjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYij8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfsYQgmd1h7WRkQGBQPDYPTcDbbRzzeewZp5jk3YKmgpZaArLduptg8 CXn1l9sdkHXVSv2LPS6055zNUslFthjdNYLJIwrxH8FIqttRC9HH1ikhdqMhoBsn wdwYdUALRg8QCKmlM1dP+BbqCBMM+kF3P2q+/27ktCQZmfmg2HoyHgiu0DOj5apP j8cxmceT/4VdBHfffdRMtd3Sex33ZuCRspybYq5nRNr3cB6Dz0dWXIZchVPFFk4Y nYWIF5Q42k5TJo9YVapqfgBIPTo8rBwlnv8btrhqB3eUWEq4PD9CS+owR4AY4weF BLiu+9CUFirjCpQa61acAhuBVRCpFg8= -----END CERTIFICATE-----Generated at Tue Oct 20 18:42:49 2026 by rpki-client