$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/229dd958-5fdc-3d3e-86c4-f1f16f351c2d.roa File: 229dd958-5fdc-3d3e-86c4-f1f16f351c2d.roa (raw, json) Hash identifier: VPvpmqRD7fwSv5vxu6JULKHxnu2YzL2qjqmmgU2DWOs= Subject key identifier: DE:A1:4B:1A:B6:66:76:1D:CA:41:1F:70:B2:D0:B9:CA:7D:5E:FA:B5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4E8DA3DA8113991D12B680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/229dd958-5fdc-3d3e-86c4-f1f16f351c2d.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33668 IP address blocks: 98.224.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4e:8d:a3:da:81:13:99:1d:12:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=3ae3fa03-3c91-47dc-8382-6d5e2d3287da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:87:32:02:e1:3d:a0:76:11:9a:e3:56:ef:6f: a6:44:fc:75:48:9c:a8:6b:92:97:d8:3c:1f:70:8a: 2b:3a:4f:7d:df:e5:17:18:73:80:39:96:0f:46:a6: 57:26:91:5d:99:5a:99:e7:c0:0f:05:bc:da:45:a7: 82:a7:61:2d:c8:99:25:04:12:bc:5a:90:f9:15:ff: 2e:93:74:40:69:02:fd:3f:93:88:84:b0:59:e7:01: 35:10:70:70:a8:73:66:0b:69:9f:93:e9:77:f6:2b: d3:cc:aa:d5:3f:09:31:95:e5:2d:69:67:6c:e7:f0: 39:66:c9:10:77:b8:f3:7f:18:46:de:66:80:f8:57: 88:d2:de:9e:c4:94:81:1e:91:7e:bd:e6:3e:51:bf: 5b:d3:39:73:e5:73:6e:28:99:d7:a1:38:2a:53:f0: d4:b9:18:ba:37:5e:6e:06:67:b9:f0:55:c5:f1:b1: ae:bb:72:c3:e7:a3:b0:3a:81:bf:83:c9:37:bc:31: d1:2f:ee:9e:76:22:75:e5:18:76:1c:26:74:7b:8e: c6:86:b5:2b:41:f4:b0:1b:e9:48:46:df:da:17:e5: 94:f0:d4:70:b6:e5:9e:1e:ad:fe:fc:ca:c5:81:51: 05:79:f6:47:d8:41:78:4c:f8:a9:4e:16:da:e9:2a: 30:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:A1:4B:1A:B6:66:76:1D:CA:41:1F:70:B2:D0:B9:CA:7D:5E:FA:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/229dd958-5fdc-3d3e-86c4-f1f16f351c2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.224.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:2e:2b:b6:e8:22:a4:33:22:84:ff:93:91:8c:a7:61:45:2f: 20:9c:21:f8:5f:f0:fd:d8:23:1a:34:56:d3:cd:4d:ff:7f:55: 97:fe:95:d4:11:c4:0f:d0:f5:86:cf:d7:30:48:11:6d:1c:93: 89:c1:08:51:e4:17:75:a5:1f:9e:33:ba:85:eb:16:19:90:8a: e5:ea:12:ed:e7:ea:33:aa:ab:f0:81:82:bd:19:88:2f:6f:4c: 66:d5:f3:e7:5f:77:8f:35:b1:5c:be:11:e8:72:9e:b5:f1:a7: 56:44:d0:d3:f4:32:b1:d6:bf:19:9b:cc:6e:e7:db:fb:b2:ef: 68:d1:52:d3:b0:de:ba:dc:b1:48:e9:7a:96:de:57:39:86:db: 11:4e:98:06:19:e2:00:77:bb:92:3a:89:c5:e6:1a:7a:34:5b: cf:cd:9b:a8:6a:5f:00:ab:f1:29:2f:1d:95:23:e5:bf:d5:5f: c6:52:cf:88:06:70:52:f2:c2:14:5a:3a:92:49:87:d4:aa:d7: fd:fb:42:ff:25:2f:c7:9a:7d:e3:30:4c:3f:f8:cc:48:23:97: 5a:e6:eb:ff:2e:8c:d5:76:53:af:30:58:c2:22:6b:e8:47:ad: 07:df:d6:39:b4:26:95:79:d8:fa:05:05:8c:b2:d5:f4:f2:c0: 73:ca:39:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96To2j2oETmR0StoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk M2FlM2ZhMDMtM2M5MS00N2RjLTgzODItNmQ1ZTJkMzI4N2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYcyAuE9oHYRmuNW72+mRPx1SJyoa5KX2Dwf cIorOk993+UXGHOAOZYPRqZXJpFdmVqZ58APBbzaRaeCp2EtyJklBBK8WpD5Ff8u k3RAaQL9P5OIhLBZ5wE1EHBwqHNmC2mfk+l39ivTzKrVPwkxleUtaWds5/A5ZskQ d7jzfxhG3maA+FeI0t6exJSBHpF+veY+Ub9b0zlz5XNuKJnXoTgqU/DUuRi6N15u Bme58FXF8bGuu3LD56OwOoG/g8k3vDHRL+6ediJ15Rh2HCZ0e47GhrUrQfSwG+lI Rt/aF+WU8NRwtuWeHq3+/MrFgVEFefZH2EF4TPipThba6SowpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6hSxq2ZnYdykEfcLLQucp9Xvq1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjI5ZGQ5NTgtNWZkYy0z ZDNlLTg2YzQtZjFmMTZmMzUxYzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYuDqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMYuK7boIqQzIoT/k5GMp2FFLyCcIfhf8P3YIxo0VtPNTf9/VZf+ldQR xA/Q9YbP1zBIEW0ck4nBCFHkF3WlH54zuoXrFhmQiuXqEu3n6jOqq/CBgr0ZiC9v TGbV8+dfd481sVy+EehynrXxp1ZE0NP0MrHWvxmbzG7n2/uy72jRUtOw3rrcsUjp epbeVzmG2xFOmAYZ4gB3u5I6icXmGno0W8/Nm6hqXwCr8SkvHZUj5b/VX8ZSz4gG cFLywhRaOpJJh9Sq1/37Qv8lL8eafeMwTD/4zEgjl1rm6/8ujNV2U68wWMIia+hH rQff1jm0JpV52PoFBYyy1fTywHPKOWQ= -----END CERTIFICATE-----Generated at Sat Oct 24 19:05:39 2026 by rpki-client