$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35153832-2568-35a6-b1d6-d1d65dec08e2.roa File: 35153832-2568-35a6-b1d6-d1d65dec08e2.roa (raw, json) Hash identifier: xdq51P1F4epHOhBN7Cna5J/cpJxJwFwQD7gzZ1gCTpk= Subject key identifier: 52:50:7A:C6:F5:0A:48:42:08:3D:7A:D7:DC:C2:A2:A5:B9:88:28:DE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119FD325398AF2426E9C8C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35153832-2568-35a6-b1d6-d1d65dec08e2.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33491 IP address blocks: 98.223.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9f:d3:25:39:8a:f2:42:6e:9c:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=80ffc5ec-6c74-4554-a3da-426425126d04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:fd:d4:33:4e:6b:92:d3:e1:2d:83:c1:e1:8a: d0:62:00:bc:98:88:2e:1d:5c:0f:05:6b:b9:9a:2a: b9:a5:17:f6:3a:59:85:fc:05:97:ce:cf:6c:73:10: f5:7f:41:44:7f:07:de:68:cd:f0:b2:12:ab:88:56: 04:f7:66:fa:f5:7e:dc:02:9c:0e:76:8d:2a:aa:8a: c0:18:b6:81:fd:1a:83:73:f9:18:e5:87:6e:88:91: 31:f2:98:6b:a9:6a:35:d3:3b:db:6e:a7:b0:91:e1: cc:91:3f:db:e5:1c:5f:27:05:87:13:ec:23:5a:41: 09:d3:d2:0d:af:f8:a1:2d:2e:6b:b0:7c:07:86:c0: df:f0:c5:05:1a:30:b6:75:33:8c:b7:c0:a4:7d:fd: a6:63:e8:36:8e:6c:ce:4e:e1:bc:81:81:84:e0:9f: ba:71:76:85:3e:5e:17:72:d1:44:58:f4:0d:0c:66: 1a:00:8d:12:44:a8:dd:e1:f5:ef:2e:01:2c:b4:3e: 2e:a6:32:29:e9:cb:ee:60:c6:6b:1e:be:f7:2c:06: bb:76:26:af:af:b8:08:22:05:ad:05:a1:56:9c:59: a0:f5:7e:b0:1f:98:5d:af:82:d5:8d:98:d7:55:cf: 51:a5:67:71:fd:f0:89:ee:a6:87:37:a3:65:43:dd: 88:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:50:7A:C6:F5:0A:48:42:08:3D:7A:D7:DC:C2:A2:A5:B9:88:28:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35153832-2568-35a6-b1d6-d1d65dec08e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.223.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:a4:72:e7:d5:88:c5:97:18:ed:52:ba:94:e3:8d:bd:b4:88: e4:9b:aa:50:db:08:df:03:5e:00:f9:9e:e8:cd:bc:19:a7:5f: 70:ea:2a:fd:3d:07:ba:f2:a4:e7:9a:b2:b6:bd:40:4e:aa:e0: b3:fb:95:58:7c:dc:77:59:74:c7:24:34:28:25:6b:0c:01:38: 47:1c:75:49:61:e5:45:b5:f2:2e:b1:23:65:a0:33:bd:1e:9a: 92:28:74:40:87:ab:62:fc:59:6a:79:6f:e2:f2:58:ab:ca:d3: 85:4b:47:14:28:12:ab:f3:c7:45:7c:55:43:85:52:48:df:10: 2a:3b:5a:e3:3e:d4:b9:5e:a7:87:34:d5:ba:a8:b7:4c:82:40: a2:5e:b7:13:06:a7:f4:d9:e9:94:12:79:a6:eb:bd:77:a0:0e: 44:e4:c3:40:d5:22:3f:dc:84:cb:8b:ed:a5:da:c9:58:53:a1: e3:cc:40:5f:3c:b0:df:54:73:b7:37:54:9b:25:36:57:92:5d: 13:7a:7c:e7:7a:9a:d3:fe:47:65:e0:7b:3a:94:dc:a0:9e:20: 28:b2:ff:93:90:14:4c:04:2a:bb:84:dd:1d:f0:c7:99:b8:8b: ec:69:09:98:4b:3a:d1:f3:dc:f0:ab:96:5d:90:23:bc:54:94: 5f:55:f4:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Rn9MlOYryQm6cjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ODBmZmM1ZWMtNmM3NC00NTU0LWEzZGEtNDI2NDI1MTI2ZDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiv3UM05rktPhLYPB4YrQYgC8mIguHVwPBWu5 miq5pRf2OlmF/AWXzs9scxD1f0FEfwfeaM3wshKriFYE92b69X7cApwOdo0qqorA GLaB/RqDc/kY5YduiJEx8phrqWo10zvbbqewkeHMkT/b5RxfJwWHE+wjWkEJ09IN r/ihLS5rsHwHhsDf8MUFGjC2dTOMt8Ckff2mY+g2jmzOTuG8gYGE4J+6cXaFPl4X ctFEWPQNDGYaAI0SRKjd4fXvLgEstD4upjIp6cvuYMZrHr73LAa7diavr7gIIgWt BaFWnFmg9X6wH5hdr4LVjZjXVc9RpWdx/fCJ7qaHN6NlQ92IxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJQesb1CkhCCD1619zCoqW5iCjeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzUxNTM4MzItMjU2OC0z NWE2LWIxZDYtZDFkNjVkZWMwOGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYt/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHakcufViMWXGO1SupTjjb20iOSbqlDbCN8DXgD5nujNvBmnX3DqKv09 B7rypOeasra9QE6q4LP7lVh83HdZdMckNCglawwBOEccdUlh5UW18i6xI2WgM70e mpIodECHq2L8WWp5b+LyWKvK04VLRxQoEqvzx0V8VUOFUkjfECo7WuM+1Llep4c0 1bqot0yCQKJetxMGp/TZ6ZQSeabrvXegDkTkw0DVIj/chMuL7aXayVhToePMQF88 sN9Uc7c3VJslNleSXRN6fOd6mtP+R2XgezqU3KCeICiy/5OQFEwEKruE3R3wx5m4 i+xpCZhLOtHz3PCrll2QI7xUlF9V9GA= -----END CERTIFICATE-----Generated at Sat Sep 5 14:24:12 2026 by rpki-client