$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33751d1e-8d1b-36dd-b25b-96a4254407e6.roa File: 33751d1e-8d1b-36dd-b25b-96a4254407e6.roa (raw, json) Hash identifier: hHFhDna86jQmFf/H+gVRqwlaxQAHXiVYeEsSfo4CsfM= Subject key identifier: 92:6E:A6:B8:01:0E:C7:4F:89:55:6B:2F:99:B2:35:6A:18:05:73:AF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F77831EE0C82CA9FB4FFCF500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33751d1e-8d1b-36dd-b25b-96a4254407e6.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 13367 IP address blocks: 98.240.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:83:1e:e0:c8:2c:a9:fb:4f:fc:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=815172be-85ba-4eb8-b135-0350d99dbabc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b4:0e:29:ea:f2:19:29:6c:13:ec:bd:4e:51: 1a:45:2a:97:1b:aa:0c:80:50:fc:e7:78:81:3d:03: a6:49:cf:72:da:b5:0f:b2:22:50:1b:49:e1:9a:5b: cc:ec:1a:bb:b9:da:58:7b:38:89:bb:e4:5d:be:4a: 0a:cc:65:40:d0:3b:7c:b7:e3:ab:f2:1d:32:7b:53: 31:d3:17:77:7a:77:22:49:0c:6e:26:44:8b:6a:d4: 88:9e:f4:1d:67:a3:0e:dd:de:6a:0a:4b:58:4a:3a: d6:6a:3b:c4:37:84:99:e8:1b:80:53:2c:50:8d:b9: ec:16:28:55:77:90:64:7d:da:8a:54:da:25:7d:24: bd:b9:73:3d:4c:92:53:65:62:cb:aa:b6:f6:b8:f2: 91:22:4c:cc:84:63:db:08:63:15:af:a9:b9:26:61: c7:24:99:24:20:4a:4d:1c:bc:33:30:0c:79:a5:f9: 49:d3:62:1e:e8:ea:12:bf:eb:28:35:ee:db:9e:ae: 81:30:6b:da:b3:3e:85:87:82:43:25:68:dc:36:12: 91:b2:04:f7:7c:76:97:cc:56:9b:01:a9:cb:60:51: 4b:04:b5:a3:8c:fe:69:ad:c1:ae:da:18:11:80:58: f7:98:b4:65:2b:c6:4f:d2:bc:90:71:34:43:43:2f: d6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:6E:A6:B8:01:0E:C7:4F:89:55:6B:2F:99:B2:35:6A:18:05:73:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33751d1e-8d1b-36dd-b25b-96a4254407e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.240.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:c0:34:54:29:cd:70:27:20:fe:19:93:df:d8:f3:c5:81:59: 02:08:e6:da:63:92:d4:a8:cd:38:cd:16:d1:73:94:a9:3f:80: a0:2d:b1:ce:b7:0f:53:87:7d:ea:7b:a1:74:24:67:5a:ce:77: a5:09:1a:a4:44:cc:ad:25:41:4e:b3:b1:28:cf:c2:02:7c:ea: de:db:a8:14:39:4f:81:d7:2d:b3:e6:5a:4d:52:d0:36:38:5e: 3c:98:f2:ed:ba:1c:55:fe:4d:b1:ac:c2:da:12:3a:b1:9d:68: cb:71:41:b8:b6:55:80:1f:5c:64:00:b4:51:36:17:9e:c1:a6: b6:f1:1b:06:99:6f:3e:6e:a5:89:29:01:7a:66:48:e2:81:ba: 22:a9:f3:83:55:bd:05:b6:c3:83:7a:8b:da:ca:63:8f:65:b7: 53:79:48:1d:f2:1b:69:91:31:08:a0:af:17:80:58:4a:33:4a: ec:b9:67:09:38:34:fc:e4:40:fb:52:79:bb:3a:86:a2:74:06: f0:5d:a2:fd:8b:b3:47:8d:8f:fc:06:ae:e9:7c:43:f2:2a:3e: 75:c0:e6:2f:06:45:ed:73:6d:a9:7f:ad:9d:ac:22:0d:ae:c7: 9d:ea:da:07:ae:8b:76:38:b5:0d:09:ef:e6:ba:ea:60:67:c8: c3:04:f2:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93gx7gyCyp+0/89QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk ODE1MTcyYmUtODViYS00ZWI4LWIxMzUtMDM1MGQ5OWRiYWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbQOKeryGSlsE+y9TlEaRSqXG6oMgFD853iB PQOmSc9y2rUPsiJQG0nhmlvM7Bq7udpYeziJu+RdvkoKzGVA0Dt8t+Or8h0ye1Mx 0xd3enciSQxuJkSLatSInvQdZ6MO3d5qCktYSjrWajvEN4SZ6BuAUyxQjbnsFihV d5BkfdqKVNolfSS9uXM9TJJTZWLLqrb2uPKRIkzMhGPbCGMVr6m5JmHHJJkkIEpN HLwzMAx5pflJ02Ie6OoSv+soNe7bnq6BMGvasz6Fh4JDJWjcNhKRsgT3fHaXzFab AanLYFFLBLWjjP5prcGu2hgRgFj3mLRlK8ZP0ryQcTRDQy/W2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJuprgBDsdPiVVrL5myNWoYBXOvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzM3NTFkMWUtOGQxYi0z NmRkLWIyNWItOTZhNDI1NDQwN2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYvC8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPANFQpzXAnIP4Zk9/Y88WBWQII5tpjktSozTjNFtFzlKk/gKAtsc63 D1OHfep7oXQkZ1rOd6UJGqREzK0lQU6zsSjPwgJ86t7bqBQ5T4HXLbPmWk1S0DY4 XjyY8u26HFX+TbGswtoSOrGdaMtxQbi2VYAfXGQAtFE2F57BprbxGwaZbz5upYkp AXpmSOKBuiKp84NVvQW2w4N6i9rKY49lt1N5SB3yG2mRMQigrxeAWEozSuy5Zwk4 NPzkQPtSebs6hqJ0BvBdov2Ls0eNj/wGrul8Q/IqPnXA5i8GRe1zbal/rZ2sIg2u x53q2geui3Y4tQ0J7+a66mBnyMME8oA= -----END CERTIFICATE-----Generated at Tue Oct 20 18:37:16 2026 by rpki-client