$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c8868f4-548c-3295-82d0-ccb06c6a033a.roa File: 1c8868f4-548c-3295-82d0-ccb06c6a033a.roa (raw, json) Hash identifier: kp8GJbWdriPeX/KtKAUv781MixLKgUpYWTXSh1IK29g= Subject key identifier: 63:E2:56:49:40:46:7C:44:5D:40:E4:79:8D:67:8D:1B:B4:3F:2E:74 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4FB9CBF16D85146DFB4480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c8868f4-548c-3295-82d0-ccb06c6a033a.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33668 IP address blocks: 98.209.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4f:b9:cb:f1:6d:85:14:6d:fb:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=e42b9ca6-da1c-4a89-b074-d984c79f4b13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:0c:f2:a2:cf:96:2c:62:db:aa:e2:67:69:96: e1:26:4b:fc:aa:49:37:59:37:a1:8a:99:c1:73:4e: 52:3c:f0:83:36:14:7e:3f:16:f1:79:5d:76:17:68: d4:7b:d8:a5:64:64:8c:7e:5e:4f:8d:94:27:82:6c: 8a:f6:81:7c:b3:d5:58:9f:42:ef:39:0b:b0:04:a2: e3:fb:45:54:16:27:3e:b7:8a:37:ac:92:37:aa:b9: c1:77:ec:55:d3:e1:22:58:0e:97:99:fc:92:5d:63: 90:c3:7b:e3:35:9e:b6:18:ae:57:36:a3:86:a6:7a: 69:56:cb:29:17:17:bf:ba:a9:b6:c6:89:5f:f6:f8: 6b:a3:42:30:69:6f:bd:73:a9:c2:c6:92:f5:c7:1f: 63:05:7a:22:56:f6:d5:38:cd:4c:0d:e4:94:a4:37: a1:82:5e:ee:4f:3a:f6:3e:5c:97:60:bf:fb:7f:c3: 9e:c7:8a:dd:ee:b2:2e:0f:11:e5:70:86:fb:e7:be: eb:c6:02:6a:6b:e1:a0:88:c2:03:9c:f5:d3:20:5b: b0:41:b7:7f:aa:bd:95:f0:dc:e7:57:94:08:d2:db: 34:58:45:68:27:bc:72:1c:88:f2:2b:d4:ff:d2:b0: 9e:15:fe:f6:42:9f:b0:57:27:74:cf:dd:03:04:98: e5:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E2:56:49:40:46:7C:44:5D:40:E4:79:8D:67:8D:1B:B4:3F:2E:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c8868f4-548c-3295-82d0-ccb06c6a033a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.209.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:3f:8b:d3:5f:c1:03:d9:c7:f5:46:91:d1:4a:96:12:3f:c6: bb:26:e8:4f:5a:8a:3a:00:08:f7:d4:e7:7f:70:23:f5:9e:55: 0c:0e:5f:c0:cd:6d:d3:a5:a7:2d:6d:a4:e5:52:06:49:03:f1: 65:cc:4e:18:99:49:4a:36:76:a0:0f:6c:ba:0f:9d:83:9f:64: 16:2c:85:6d:58:31:d5:81:b7:4f:cc:d7:8c:f3:b7:94:12:e7: f4:18:9b:f4:ac:7f:54:d0:4e:a7:77:6c:05:b0:e6:fb:73:60: 7f:bf:30:80:18:4e:6f:01:ed:a3:46:3e:c6:4f:81:15:03:94: 05:ee:58:66:6d:6a:1a:f2:73:bf:f5:6d:d5:54:b8:84:ac:10: 54:85:a8:cf:61:34:54:03:d9:69:fa:f6:d8:7f:d0:7b:5c:d3: 7c:a9:55:fe:cf:2c:d6:6e:41:36:d2:06:71:bd:f9:88:53:a5: ea:03:58:81:54:7d:f3:95:5d:0d:64:28:a1:28:d1:2c:0e:63: c1:6c:80:8f:3a:9a:06:6e:86:5d:9b:97:3a:27:72:22:45:9b: 0e:66:35:0d:de:b4:0a:06:1c:3a:14:f9:07:4a:ee:54:65:cd: 6c:a3:73:9f:89:03:f9:90:39:77:cf:8c:73:06:43:fe:78:72: 09:92:f5:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96T7nL8W2FFG37RIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk ZTQyYjljYTYtZGExYy00YTg5LWIwNzQtZDk4NGM3OWY0YjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAzyos+WLGLbquJnaZbhJkv8qkk3WTehipnB c05SPPCDNhR+PxbxeV12F2jUe9ilZGSMfl5PjZQngmyK9oF8s9VYn0LvOQuwBKLj +0VUFic+t4o3rJI3qrnBd+xV0+EiWA6XmfySXWOQw3vjNZ62GK5XNqOGpnppVssp Fxe/uqm2xolf9vhro0IwaW+9c6nCxpL1xx9jBXoiVvbVOM1MDeSUpDehgl7uTzr2 PlyXYL/7f8Oex4rd7rIuDxHlcIb7577rxgJqa+GgiMIDnPXTIFuwQbd/qr2V8Nzn V5QI0ts0WEVoJ7xyHIjyK9T/0rCeFf72Qp+wVyd0z90DBJjlfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGPiVklARnxEXUDkeY1njRu0Py50MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWM4ODY4ZjQtNTQ4Yy0z Mjk1LTgyZDAtY2NiMDZjNmEwMzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYtHyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIo/i9NfwQPZx/VGkdFKlhI/xrsm6E9aijoACPfU539wI/WeVQwOX8DN bdOlpy1tpOVSBkkD8WXMThiZSUo2dqAPbLoPnYOfZBYshW1YMdWBt0/M14zzt5QS 5/QYm/Ssf1TQTqd3bAWw5vtzYH+/MIAYTm8B7aNGPsZPgRUDlAXuWGZtahryc7/1 bdVUuISsEFSFqM9hNFQD2Wn69th/0Htc03ypVf7PLNZuQTbSBnG9+YhTpeoDWIFU ffOVXQ1kKKEo0SwOY8FsgI86mgZuhl2blzonciJFmw5mNQ3etAoGHDoU+QdK7lRl zWyjc5+JA/mQOXfPjHMGQ/54cgmS9Y4= -----END CERTIFICATE-----Generated at Wed Oct 21 17:14:11 2026 by rpki-client