$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c9cd69f-c6d9-346f-a2e3-dd6322a78cde.roa File: 2c9cd69f-c6d9-346f-a2e3-dd6322a78cde.roa (raw, json) Hash identifier: lQAvU/B+VgEAc1iRjX3JwlJr1vIU3mpHew9Hv3LPpAw= Subject key identifier: DC:32:A0:A7:12:77:B6:A0:20:F8:5C:FF:42:A7:A2:EC:78:33:F9:96 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F778353E07B1FBEC2D2B3F200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c9cd69f-c6d9-346f-a2e3-dd6322a78cde.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 22258 IP address blocks: 98.251.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:83:53:e0:7b:1f:be:c2:d2:b3:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=c692ca4f-42ad-4328-b854-e34a93f71e2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4b:4f:2c:17:06:0a:ee:84:b7:21:c8:e0:55: b5:21:40:3b:bb:56:8c:a8:cc:2f:68:23:43:5b:81: de:90:26:c3:05:6f:2d:14:2f:3e:cc:dc:db:e9:6a: 0c:1a:f8:aa:bf:60:68:7f:34:b2:73:21:f9:33:97: a1:23:71:68:fc:f8:33:c0:51:24:5b:c1:0d:53:18: 47:a9:19:60:d8:42:3a:af:eb:06:bf:23:10:6b:19: 82:20:b3:eb:91:bf:1b:85:6c:4f:9a:66:bf:a6:7f: ec:68:96:e4:2b:e5:45:30:d0:52:47:0c:9e:f2:60: 69:34:7b:f0:35:12:95:e6:4d:aa:13:a4:37:1f:af: e8:e7:12:40:e3:06:8e:c4:3d:e2:ad:1c:c2:74:bb: e8:b0:56:c8:c2:87:34:5b:e6:f9:64:14:94:01:e7: 4f:9d:22:87:1d:f2:ea:2a:51:91:0f:32:23:08:be: 44:52:ff:97:7c:59:5a:70:9e:64:76:49:de:b7:cd: c7:79:58:01:81:79:7e:71:f0:10:91:1a:5f:40:dc: 41:7f:0a:4d:a1:34:56:00:e5:c4:ed:3e:30:70:52: 45:9d:22:c1:e2:60:9b:cb:2f:ef:a2:be:9f:1e:85: 95:d7:c7:cf:c7:9c:1e:44:6d:ca:8a:78:e9:bb:18: a3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:32:A0:A7:12:77:B6:A0:20:F8:5C:FF:42:A7:A2:EC:78:33:F9:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c9cd69f-c6d9-346f-a2e3-dd6322a78cde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.251.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:c7:b4:7f:7c:f3:0f:66:4b:a9:51:4e:a9:fc:cb:99:39:92: 27:25:ae:8a:96:cb:fa:22:b5:fe:82:98:5b:02:ec:cc:65:32: 58:d8:ec:7c:cb:23:bd:c0:42:38:30:af:0f:f3:de:68:eb:a3: 2d:83:30:a6:4a:93:be:13:81:06:51:f4:ce:a2:0e:6c:de:48: 6d:03:12:09:fa:6b:61:96:01:88:6c:4d:c9:c4:d3:93:ce:51: 67:9e:a2:26:e3:44:9d:f4:dd:d7:45:46:04:3f:ae:30:47:4a: 79:19:3a:36:96:08:fd:b0:97:55:ca:5b:21:78:22:52:1e:a3: 48:b9:ac:47:fe:8b:1c:1d:b6:85:f9:0a:5b:bd:9c:c7:0e:12: 86:41:e6:b5:7d:0e:59:ff:3b:b9:c2:93:4b:8c:08:3a:df:dc: d2:54:75:7b:7a:ff:2a:14:f4:75:f0:ae:07:fd:d3:a6:54:81: 53:b7:82:1d:08:81:58:2f:fc:20:aa:26:6d:2b:f1:f1:6d:93: 89:49:a0:f6:93:05:b0:9a:6d:46:73:a1:59:1d:b8:3a:50:1c: 2f:3a:cf:4b:76:e1:7b:38:f8:93:bb:46:80:33:ca:4b:76:ce: 8a:99:6b:38:a6:89:7c:6b:f4:89:83:f4:47:ce:d1:a7:5b:64: 18:9f:6d:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93g1Pgex++wtKz8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk YzY5MmNhNGYtNDJhZC00MzI4LWI4NTQtZTM0YTkzZjcxZTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EtPLBcGCu6EtyHI4FW1IUA7u1aMqMwvaCND W4HekCbDBW8tFC8+zNzb6WoMGviqv2BofzSycyH5M5ehI3Fo/PgzwFEkW8ENUxhH qRlg2EI6r+sGvyMQaxmCILPrkb8bhWxPmma/pn/saJbkK+VFMNBSRwye8mBpNHvw NRKV5k2qE6Q3H6/o5xJA4waOxD3irRzCdLvosFbIwoc0W+b5ZBSUAedPnSKHHfLq KlGRDzIjCL5EUv+XfFlacJ5kdknet83HeVgBgXl+cfAQkRpfQNxBfwpNoTRWAOXE 7T4wcFJFnSLB4mCbyy/vor6fHoWV18fPx5weRG3KinjpuxijRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNwyoKcSd7agIPhc/0Knoux4M/mWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmM5Y2Q2OWYtYzZkOS0z NDZmLWEyZTMtZGQ2MzIyYTc4Y2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYvvCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLHtH988w9mS6lRTqn8y5k5kiclroqWy/oitf6CmFsC7MxlMljY7HzL I73AQjgwrw/z3mjroy2DMKZKk74TgQZR9M6iDmzeSG0DEgn6a2GWAYhsTcnE05PO UWeeoibjRJ303ddFRgQ/rjBHSnkZOjaWCP2wl1XKWyF4IlIeo0i5rEf+ixwdtoX5 Clu9nMcOEoZB5rV9Dln/O7nCk0uMCDrf3NJUdXt6/yoU9HXwrgf906ZUgVO3gh0I gVgv/CCqJm0r8fFtk4lJoPaTBbCabUZzoVkduDpQHC86z0t24Xs4+JO7RoAzykt2 zoqZazimiXxr9ImD9EfO0adbZBifbaA= -----END CERTIFICATE-----Generated at Wed Oct 21 03:14:14 2026 by rpki-client