$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c6c65ed-c691-301c-a85a-f02d47f2e86b.roa File: 2c6c65ed-c691-301c-a85a-f02d47f2e86b.roa (raw, json) Hash identifier: v9utU3rcN39Uzfe4ejtIL59VJEWf6sDuPdn45tfXnfQ= Subject key identifier: 07:BD:19:2F:35:37:36:44:28:59:D7:5B:34:B6:D8:75:89:58:C9:CF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F11A002263C5AB06FE14DC080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c6c65ed-c691-301c-a85a-f02d47f2e86b.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33491 IP address blocks: 98.52.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a0:02:26:3c:5a:b0:6f:e1:4d:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=c8fa04f9-7b48-4002-9e3c-6b7e886735b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:07:38:ff:83:2c:af:fe:22:1d:17:02:a9:7a: 3e:30:5b:d8:a7:4f:69:69:a5:c9:e2:a9:6e:85:3b: 17:9a:5e:fa:72:8f:cd:1f:82:fc:44:5c:a3:de:a5: c6:d5:de:d9:86:1e:62:e1:47:22:55:27:6f:94:21: 35:bb:e1:b3:49:0f:ee:92:4c:18:f4:2c:73:8b:fa: f5:b5:47:25:c1:33:e8:31:a8:b7:a1:85:1b:51:38: 08:c0:a6:01:e5:38:a0:47:31:41:63:fd:5a:47:16: 36:8b:c0:1b:62:9c:ad:79:01:03:51:46:1f:60:99: 36:1b:54:e0:9a:e6:cf:55:51:00:17:85:86:2d:11: 34:83:45:19:2d:44:87:ee:5c:dc:3f:86:33:95:af: 60:be:4f:15:c0:02:1c:c4:d3:b4:89:76:84:8c:22: 31:fb:48:d7:41:12:73:08:29:c6:96:47:a7:43:e8: d6:00:55:2a:99:bf:94:9c:85:dc:de:48:d9:a4:0c: 70:8f:da:05:0e:bb:b5:d3:9f:ad:fd:d1:51:40:05: d4:96:de:67:26:ee:29:35:d8:1c:b6:a5:16:65:d6: 77:86:69:ed:7b:a3:40:d9:50:0e:1b:43:b6:04:35: cb:6c:96:38:56:e3:63:d0:9b:97:d8:f8:70:c7:5e: 54:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:BD:19:2F:35:37:36:44:28:59:D7:5B:34:B6:D8:75:89:58:C9:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c6c65ed-c691-301c-a85a-f02d47f2e86b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.52.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:10:bf:1e:a0:a2:6a:30:33:42:cf:29:f5:9a:06:ef:79:3f: b7:18:da:de:34:0d:6a:2c:a9:79:f9:df:cc:ea:81:ea:8d:ef: 11:c4:66:ae:be:00:46:5e:72:34:ee:f2:c8:68:de:c9:57:22: 35:54:cc:b9:3a:9e:e4:72:22:3b:eb:00:11:d1:6d:96:15:77: 0b:97:0f:f3:a0:4d:5d:64:e5:03:a9:d1:93:4f:75:8c:f2:41: f8:d8:45:4a:6d:c4:8e:fa:ca:9e:bb:e7:03:1b:82:4e:68:3a: 8f:09:2a:08:c5:5b:fd:43:8e:08:58:6b:d6:7b:8d:ef:b4:9b: f4:8e:54:7f:28:17:d3:8c:f5:df:7d:7a:ef:ff:42:f1:0f:15: d4:b8:25:99:1d:6a:2b:eb:01:3b:72:a3:6a:fb:86:6b:15:15: d8:bd:40:21:77:fd:6b:07:54:f8:c7:69:46:3d:e9:4e:1f:10: 24:9f:5b:96:c4:d0:75:2e:a8:ba:93:91:f7:28:0c:b9:96:ea: 1f:d3:c1:e5:27:66:5e:ff:ee:0a:4a:30:a8:dd:97:43:64:47: 38:6d:36:73:d4:6b:ca:6e:cd:de:b5:3e:72:3f:a2:eb:06:be: 85:6e:c4:1e:2c:3c:7b:24:99:1c:92:78:23:4e:d5:5d:e8:49: 80:ff:18:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoAImPFqwb+FNwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk YzhmYTA0ZjktN2I0OC00MDAyLTllM2MtNmI3ZTg4NjczNWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwc4/4Msr/4iHRcCqXo+MFvYp09paaXJ4qlu hTsXml76co/NH4L8RFyj3qXG1d7Zhh5i4UciVSdvlCE1u+GzSQ/ukkwY9Cxzi/r1 tUclwTPoMai3oYUbUTgIwKYB5TigRzFBY/1aRxY2i8AbYpyteQEDUUYfYJk2G1Tg mubPVVEAF4WGLRE0g0UZLUSH7lzcP4Yzla9gvk8VwAIcxNO0iXaEjCIx+0jXQRJz CCnGlkenQ+jWAFUqmb+UnIXc3kjZpAxwj9oFDru105+t/dFRQAXUlt5nJu4pNdgc tqUWZdZ3hmnte6NA2VAOG0O2BDXLbJY4VuNj0JuX2Phwx15UBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAe9GS81NzZEKFnXWzS22HWJWMnPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmM2YzY1ZWQtYzY5MS0z MDFjLWE4NWEtZjAyZDQ3ZjJlODZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYjRUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8Qvx6gomowM0LPKfWaBu95P7cY2t40DWosqXn538zqgeqN7xHEZq6+ AEZecjTu8sho3slXIjVUzLk6nuRyIjvrABHRbZYVdwuXD/OgTV1k5QOp0ZNPdYzy QfjYRUptxI76yp675wMbgk5oOo8JKgjFW/1DjghYa9Z7je+0m/SOVH8oF9OM9d99 eu//QvEPFdS4JZkdaivrATtyo2r7hmsVFdi9QCF3/WsHVPjHaUY96U4fECSfW5bE 0HUuqLqTkfcoDLmW6h/TweUnZl7/7gpKMKjdl0NkRzhtNnPUa8puzd61PnI/ousG voVuxB4sPHskmRySeCNO1V3oSYD/GFE= -----END CERTIFICATE-----Generated at Sat Sep 5 14:26:53 2026 by rpki-client