$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24218b17-b8f3-37d6-83af-874b8707291e.roa File: 24218b17-b8f3-37d6-83af-874b8707291e.roa (raw, json) Hash identifier: V9n6r0K7jfQCiPd4AKkHXitmmQJdw+VEHW3jibo9xKk= Subject key identifier: 9B:A3:5A:7F:5C:D4:77:B8:F0:D1:B5:42:48:CB:D9:34:37:52:86:9C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A50089CF91D49960E4F7600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24218b17-b8f3-37d6-83af-874b8707291e.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33662 IP address blocks: 98.40.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:50:08:9c:f9:1d:49:96:0e:4f:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=43343a2e-890a-46de-8ace-5f51540ac234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:45:2a:0f:be:f8:a7:80:af:4c:6d:91:83:ef: 58:3f:80:3a:c3:47:03:3a:8e:3f:f1:86:69:11:96: 43:fa:d5:a6:81:96:ca:b5:d5:70:99:3b:1e:20:83: fe:7d:16:6b:0b:c8:10:33:5d:ec:4e:ab:d8:63:4b: d8:65:57:09:3c:87:8f:a9:55:0c:f9:38:f0:09:87: 8c:1b:e3:78:84:b9:a0:7d:9b:09:78:3e:91:2d:a7: 60:41:b5:90:b1:09:81:d3:0a:98:20:1f:d9:0b:7a: 65:af:76:ea:9c:f9:1c:20:f1:b4:ea:c1:c0:3c:4c: 03:a3:3d:f3:28:d8:fb:b2:e4:b2:ba:ca:36:3d:ef: 9d:b6:91:28:56:58:52:11:0a:f6:85:de:f8:18:e5: 0d:a0:ff:15:86:11:af:69:45:82:f3:13:4b:06:cb: d4:c2:58:bc:bb:a2:c4:dd:29:ff:59:6d:5a:88:81: 76:04:53:86:e1:03:8b:53:68:49:98:ef:6f:88:11: 53:20:04:77:d8:44:c9:cb:96:5d:76:09:25:e9:9a: 41:76:dc:cd:65:4f:5f:cf:d3:f8:59:28:4b:5d:89: f8:ca:d3:81:79:dd:83:64:a1:53:87:39:d4:1b:6c: 85:f3:47:f7:38:a2:64:64:da:a1:83:1b:19:ff:5f: 71:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:A3:5A:7F:5C:D4:77:B8:F0:D1:B5:42:48:CB:D9:34:37:52:86:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24218b17-b8f3-37d6-83af-874b8707291e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.40.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:a4:39:76:b1:76:53:f9:c5:46:e6:c2:c8:83:61:11:1a:aa: 11:5b:2b:00:cb:33:75:03:64:7f:a9:c2:da:a5:21:3b:55:4b: d4:c0:72:af:d0:f4:29:cf:bf:96:17:50:69:d7:9e:b4:45:57: 98:49:0b:f4:43:e0:3a:80:03:bc:67:17:83:24:dd:e3:72:56: 41:7d:21:49:98:75:6e:33:67:44:f1:d6:bd:bc:cf:dd:6b:e4: 58:b5:27:d3:1d:38:51:ec:6e:d6:10:24:5d:d5:6c:19:ae:f0: a6:ec:91:28:35:63:98:c4:cc:4a:43:95:09:3e:36:b3:80:d6: ff:a2:19:34:3c:af:c1:35:38:5f:16:43:c0:0a:f0:c0:f0:f5: ba:4c:12:50:78:3d:c8:35:7a:94:ed:1e:e9:e2:f5:5f:d1:2e: e6:71:ce:1c:f4:60:d7:b1:6b:1d:82:b4:2e:d8:6a:72:90:fb: f3:c3:6e:54:b2:5d:98:c6:95:f2:ae:e2:80:37:9b:4f:54:62: 32:97:e0:df:aa:2b:c3:66:4e:38:16:21:df:4c:5b:e5:49:7d: f4:1f:d7:ad:00:b9:09:ce:71:1c:3e:75:b7:a9:74:81:91:af: 1b:85:82:f4:58:9e:6c:24:f2:cd:8a:b1:cb:22:de:db:dd:3f: 55:8e:32:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96UAic+R1Jlg5PdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk NDMzNDNhMmUtODkwYS00NmRlLThhY2UtNWY1MTU0MGFjMjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEUqD774p4CvTG2Rg+9YP4A6w0cDOo4/8YZp EZZD+tWmgZbKtdVwmTseIIP+fRZrC8gQM13sTqvYY0vYZVcJPIePqVUM+TjwCYeM G+N4hLmgfZsJeD6RLadgQbWQsQmB0wqYIB/ZC3plr3bqnPkcIPG06sHAPEwDoz3z KNj7suSyuso2Pe+dtpEoVlhSEQr2hd74GOUNoP8VhhGvaUWC8xNLBsvUwli8u6LE 3Sn/WW1aiIF2BFOG4QOLU2hJmO9viBFTIAR32ETJy5Zddgkl6ZpBdtzNZU9fz9P4 WShLXYn4ytOBed2DZKFThznUG2yF80f3OKJkZNqhgxsZ/19xKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJujWn9c1He48NG1QkjL2TQ3UoacMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjQyMThiMTctYjhmMy0z N2Q2LTgzYWYtODc0Yjg3MDcyOTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYijYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFikOXaxdlP5xUbmwsiDYREaqhFbKwDLM3UDZH+pwtqlITtVS9TAcq/Q 9CnPv5YXUGnXnrRFV5hJC/RD4DqAA7xnF4Mk3eNyVkF9IUmYdW4zZ0Tx1r28z91r 5Fi1J9MdOFHsbtYQJF3VbBmu8KbskSg1Y5jEzEpDlQk+NrOA1v+iGTQ8r8E1OF8W Q8AK8MDw9bpMElB4Pcg1epTtHuni9V/RLuZxzhz0YNexax2CtC7YanKQ+/PDblSy XZjGlfKu4oA3m09UYjKX4N+qK8NmTjgWId9MW+VJffQf160AuQnOcRw+dbepdIGR rxuFgvRYnmwk8s2Kscsi3tvdP1WOMgI= -----END CERTIFICATE-----Generated at Sun Oct 25 00:56:43 2026 by rpki-client