$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ad1ed80-0761-37be-813a-8385ee92750c.roa File: 2ad1ed80-0761-37be-813a-8385ee92750c.roa (raw, json) Hash identifier: nU8mz4XdMewOhSoJhmzbZHGF/RW/DxWtz6cK060AbdI= Subject key identifier: 28:B7:63:1C:C7:7B:49:9F:CA:19:35:7E:45:01:B0:8D:14:52:D4:2D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED4321F0643BFFE9CE3AD3E20 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ad1ed80-0761-37be-813a-8385ee92750c.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 22258 IP address blocks: 98.251.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:32:1f:06:43:bf:fe:9c:e3:ad:3e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=ebbeb7e8-bf6f-4b76-9162-b1119a2580f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:98:34:25:6c:76:cc:ff:8f:4a:58:2c:40:95: 42:c4:2d:92:dc:8f:ec:37:bc:31:dc:7a:de:87:ca: 7e:01:b7:b1:7b:50:9c:01:dd:ff:a9:96:b3:4d:7b: 50:a3:11:cd:96:da:94:d3:81:d7:16:a9:53:8d:f8: 63:e3:7e:ed:1b:06:c3:45:c7:db:34:b5:8f:21:06: 00:bb:0a:56:5a:57:2d:fc:a5:a2:3f:9a:6a:0f:bf: 1c:82:50:7c:ee:76:8b:7e:fd:b3:ea:f0:d8:f3:49: e1:46:03:07:26:64:68:4e:73:7b:2d:ff:ba:cd:e7: ae:88:99:ec:d3:2c:00:ca:7f:03:a3:67:1f:f7:0e: a1:4d:3e:67:2b:87:60:51:09:c8:22:97:c3:97:b2: 6e:ef:4d:b4:23:cf:3d:ab:42:4a:86:6b:89:61:1b: 2f:b2:13:2c:f1:1f:6f:af:d1:e1:12:07:23:72:94: 40:1f:60:2a:bc:35:fb:4b:f1:9e:46:08:78:9d:53: e6:8b:5d:af:4c:3b:5f:87:41:b3:9e:6f:fc:87:5e: 17:75:e0:e6:07:28:a2:5a:d5:14:f2:28:1d:51:d7: 92:55:3a:9d:6e:2f:7b:8e:c3:08:92:32:b5:e8:3b: a3:31:bd:f1:97:a5:1a:c7:dd:ea:6c:58:14:79:0a: d6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B7:63:1C:C7:7B:49:9F:CA:19:35:7E:45:01:B0:8D:14:52:D4:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ad1ed80-0761-37be-813a-8385ee92750c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.251.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ce:c9:5d:a9:c4:5b:9c:da:3a:13:e4:fd:2c:67:06:d5:53:7c: 0d:ab:38:c0:c9:7f:e0:48:d7:36:4f:23:3d:a3:e0:3e:bb:94: f4:6b:ef:2f:f1:a0:5f:9d:2a:4e:b5:99:58:91:59:a5:cc:94: 32:f9:89:12:a7:39:7d:a7:b7:d4:ce:ab:5e:93:06:8f:69:48: eb:17:4b:cd:00:5f:ed:9d:71:27:1c:84:df:3c:18:f4:17:4d: 37:f2:2e:e5:e4:a2:73:50:41:ff:5c:21:75:18:d5:8e:15:b0: 36:cb:93:cd:78:8f:97:36:37:ea:a5:a0:7a:88:37:34:64:bf: 32:fc:5d:0a:f6:99:14:76:89:82:45:79:34:d0:6f:15:be:3f: 09:3e:7c:3f:db:d6:81:c6:8f:10:3b:b1:b6:c6:e7:1a:28:ed: 98:7e:98:1c:e0:42:4c:a2:ff:9f:a4:7f:65:87:b0:4a:4f:d2: cc:01:13:44:64:6c:b7:02:86:06:46:2e:dc:56:5b:7e:06:49: d5:f9:8c:30:96:14:6e:1b:f5:49:6e:d2:a6:3c:ba:99:63:32: 69:55:4e:57:7a:db:b2:35:61:e5:91:3a:4b:79:b6:1c:98:76: f1:a0:d8:42:7b:e8:93:c3:5d:7d:43:39:9b:d0:cb:62:b8:e9: f5:09:0f:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMh8GQ7/+nOOtPiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk ZWJiZWI3ZTgtYmY2Zi00Yjc2LTkxNjItYjExMTlhMjU4MGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJg0JWx2zP+PSlgsQJVCxC2S3I/sN7wx3Hre h8p+Abexe1CcAd3/qZazTXtQoxHNltqU04HXFqlTjfhj437tGwbDRcfbNLWPIQYA uwpWWlct/KWiP5pqD78cglB87naLfv2z6vDY80nhRgMHJmRoTnN7Lf+6zeeuiJns 0ywAyn8Do2cf9w6hTT5nK4dgUQnIIpfDl7Ju7020I889q0JKhmuJYRsvshMs8R9v r9HhEgcjcpRAH2AqvDX7S/GeRgh4nVPmi12vTDtfh0Gznm/8h14XdeDmByiiWtUU 8igdUdeSVTqdbi97jsMIkjK16DujMb3xl6Uax93qbFgUeQrWewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCi3YxzHe0mfyhk1fkUBsI0UUtQtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmFkMWVkODAtMDc2MS0z N2JlLTgxM2EtODM4NWVlOTI3NTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYvuZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM7JXanEW5zaOhPk/SxnBtVTfA2rOMDJf+BI1zZPIz2j4D67lPRr7y/x oF+dKk61mViRWaXMlDL5iRKnOX2nt9TOq16TBo9pSOsXS80AX+2dcScchN88GPQX TTfyLuXkonNQQf9cIXUY1Y4VsDbLk814j5c2N+qloHqINzRkvzL8XQr2mRR2iYJF eTTQbxW+Pwk+fD/b1oHGjxA7sbbG5xoo7Zh+mBzgQkyi/5+kf2WHsEpP0swBE0Rk bLcChgZGLtxWW34GSdX5jDCWFG4b9Ulu0qY8upljMmlVTld627I1YeWROkt5thyY dvGg2EJ76JPDXX1DOZvQy2K46fUJDy8= -----END CERTIFICATE-----Generated at Sat Sep 5 11:14:27 2026 by rpki-client