$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2038e34c-9d86-3bde-8854-0f3045164f75.roa File: 2038e34c-9d86-3bde-8854-0f3045164f75.roa (raw, json) Hash identifier: SvSHc8HoVmNslXZhZ62sgbgZsqTZ1Tjx14Cq0oFrY4w= Subject key identifier: 17:13:92:3A:07:51:7E:EC:2C:5F:C2:FA:D1:69:9A:14:BE:EF:AE:0A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119E75B07621954465EB8300 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2038e34c-9d86-3bde-8854-0f3045164f75.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33651 IP address blocks: 98.42.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9e:75:b0:76:21:95:44:65:eb:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=0ef27b32-034a-4c80-a64e-5cf2eecc341a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:08:7c:7e:ed:ab:b1:d5:90:72:1b:43:cc:17: ee:dc:64:64:37:a0:12:92:26:f2:af:6c:40:a8:db: ea:cd:0e:6f:ad:92:1d:f3:6b:00:65:da:64:d5:2b: 1f:46:8e:eb:86:50:87:90:5b:0d:8d:02:05:45:90: 77:95:70:42:a4:64:eb:ab:98:52:fd:23:a0:4d:fc: 2b:c9:94:17:4b:50:29:00:07:90:62:19:d1:cd:d7: 00:11:da:2d:cb:a7:77:01:2d:79:fe:a5:22:8f:c4: 3d:b1:9f:45:d6:cd:4c:d0:be:93:4e:5f:3a:36:bd: 2f:f3:3f:3a:20:6f:50:c7:c1:4c:85:a2:82:96:b5: c1:fa:ff:93:0c:1d:a8:0e:75:3a:f3:d3:54:e6:29: 2f:c3:3b:55:b2:ee:9c:a3:d8:c1:14:3e:4f:d6:50: 56:30:59:01:58:85:49:ac:34:70:cc:f0:9f:77:35: 00:4f:ce:06:bd:50:0a:20:fe:9b:67:2f:d8:3c:c9: 5b:76:41:e1:17:32:45:f9:7d:f4:bf:53:d8:b2:10: d5:7d:00:01:fb:40:88:d5:94:7d:ac:6e:94:ac:da: 06:8d:95:1b:7f:ea:5e:8d:dc:de:c5:05:82:e4:6b: 7f:ba:3c:d1:0b:c0:ca:7b:87:78:62:9b:c5:22:70: 50:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:13:92:3A:07:51:7E:EC:2C:5F:C2:FA:D1:69:9A:14:BE:EF:AE:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2038e34c-9d86-3bde-8854-0f3045164f75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.42.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:d0:ea:e7:06:1e:17:a5:96:82:a0:ab:40:68:b3:73:9a:8e: d6:76:68:b2:da:2e:eb:46:d5:63:47:34:27:54:4f:29:e9:b8: 8e:f1:13:1e:65:a0:79:d1:1b:fc:70:8c:20:91:72:93:b7:18: 72:14:1b:c0:e8:15:51:87:f0:db:39:76:3b:31:6d:ae:87:2b: e9:42:a0:40:d5:25:8d:51:7d:e9:69:c3:e1:a0:4e:89:4b:e7: 31:ec:c6:ad:fc:5a:52:fe:9e:5a:de:bc:8c:f2:9f:1f:19:d8: 05:d5:b7:11:5c:32:e6:e3:01:80:15:75:a5:8b:1c:67:dc:18: 9a:ae:76:ba:d9:03:95:f9:1d:3d:80:f0:25:f0:33:1c:7c:1e: 54:1a:20:d4:3f:75:2a:e6:9a:35:c0:e5:71:2d:01:bf:10:d0: bf:4a:38:cb:f3:98:16:7f:88:aa:65:3f:b3:f5:83:96:b2:c7: 30:f6:46:94:b1:db:b3:f1:fb:eb:bf:13:5f:10:20:9d:0e:58: 87:ae:4d:01:f0:03:04:25:1d:fd:ed:67:69:a0:dc:9e:85:5c: 7d:5f:cd:3a:58:1e:58:e8:86:cd:fe:d6:92:1c:7f:9a:e6:93: 5e:8e:e2:d6:41:9c:da:69:b6:b6:3e:a5:ef:4b:f2:64:aa:3d: ad:d8:44:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnnWwdiGVRGXrgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MGVmMjdiMzItMDM0YS00YzgwLWE2NGUtNWNmMmVlY2MzNDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwh8fu2rsdWQchtDzBfu3GRkN6ASkibyr2xA qNvqzQ5vrZId82sAZdpk1SsfRo7rhlCHkFsNjQIFRZB3lXBCpGTrq5hS/SOgTfwr yZQXS1ApAAeQYhnRzdcAEdoty6d3AS15/qUij8Q9sZ9F1s1M0L6TTl86Nr0v8z86 IG9Qx8FMhaKClrXB+v+TDB2oDnU689NU5ikvwztVsu6co9jBFD5P1lBWMFkBWIVJ rDRwzPCfdzUAT84GvVAKIP6bZy/YPMlbdkHhFzJF+X30v1PYshDVfQAB+0CI1ZR9 rG6UrNoGjZUbf+pejdzexQWC5Gt/ujzRC8DKe4d4YpvFInBQowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBcTkjoHUX7sLF/C+tFpmhS+764KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjAzOGUzNGMtOWQ4Ni0z YmRlLTg4NTQtMGYzMDQ1MTY0Zjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYipdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfQ6ucGHhelloKgq0Bos3OajtZ2aLLaLutG1WNHNCdUTynpuI7xEx5l oHnRG/xwjCCRcpO3GHIUG8DoFVGH8Ns5djsxba6HK+lCoEDVJY1Rfelpw+GgTolL 5zHsxq38WlL+nlrevIzynx8Z2AXVtxFcMubjAYAVdaWLHGfcGJqudrrZA5X5HT2A 8CXwMxx8HlQaINQ/dSrmmjXA5XEtAb8Q0L9KOMvzmBZ/iKplP7P1g5ayxzD2RpSx 27Px++u/E18QIJ0OWIeuTQHwAwQlHf3tZ2mg3J6FXH1fzTpYHljohs3+1pIcf5rm k16O4tZBnNpptrY+pe9L8mSqPa3YREs= -----END CERTIFICATE-----Generated at Sat Sep 5 06:48:50 2026 by rpki-client