$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3571cdb1-3574-3de6-a047-2228779fa3ec.roa File: 3571cdb1-3574-3de6-a047-2228779fa3ec.roa (raw, json) Hash identifier: t68sXRP+084Pq/jwQu8KA7qgjO+9cWcs/wlHAiKtMDo= Subject key identifier: 55:7B:B1:84:72:6B:E0:DB:2E:EA:F0:C5:76:D0:6E:08:36:98:61:B9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119FCE8DF37B08E7D7BB9980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3571cdb1-3574-3de6-a047-2228779fa3ec.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33491 IP address blocks: 98.220.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9f:ce:8d:f3:7b:08:e7:d7:bb:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=f026d002-507f-4e72-b978-f3ca0fd246ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ba:ad:de:d1:b9:b4:e6:5c:c7:b9:30:9b:16: fe:ed:44:20:86:84:e1:64:48:13:4b:e9:a5:c1:e9: dd:94:40:c7:6f:bf:46:30:c6:04:ee:41:f1:2f:eb: a1:a4:fb:b3:c3:01:f0:a6:ff:a7:ba:05:3c:41:93: ea:bb:96:2c:76:72:41:bc:06:37:74:15:12:d7:f7: 1a:3c:b7:66:24:69:14:35:35:af:c5:cf:31:aa:73: e6:9e:9b:76:f4:be:89:72:73:5f:58:a8:60:e1:01: 2a:85:ef:de:80:14:c4:ae:d0:10:15:c6:77:8e:6b: 50:3f:05:ef:99:16:16:06:79:f0:ca:d3:b1:c8:6b: d4:29:5a:90:b8:c8:71:27:4d:7b:e2:a0:db:6a:64: b7:02:a6:16:ca:81:65:f8:1d:00:96:31:68:be:55: 14:53:74:18:2f:87:2a:2a:f5:54:5c:b1:24:7d:69: 05:69:a5:2d:5e:83:15:2e:e7:58:f9:0b:64:65:db: 0b:d1:df:e0:bf:89:1f:a3:94:38:54:6e:ba:4b:8a: 9d:85:31:5a:df:27:b0:ec:96:19:94:dd:51:47:bc: 57:d4:35:09:73:1e:85:32:d8:54:14:96:d0:c0:57: 42:40:92:63:3c:92:ea:8b:bb:08:45:86:14:3b:c2: 48:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:7B:B1:84:72:6B:E0:DB:2E:EA:F0:C5:76:D0:6E:08:36:98:61:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3571cdb1-3574-3de6-a047-2228779fa3ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.220.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:ac:af:08:76:2b:fb:af:cf:39:7d:b9:2e:9a:b2:3b:5d:5d: 2c:fd:bd:3c:f1:3a:2d:87:44:5b:90:02:20:a6:cc:e9:ce:cb: 8f:7c:87:3e:aa:67:ac:26:5b:91:91:ee:71:0f:07:86:c4:8c: 88:6e:79:d3:97:bf:b3:54:1f:99:c2:46:45:91:73:24:f9:d6: 5e:c5:b5:ef:b0:7d:00:9d:69:b2:f4:bd:2f:20:db:c8:f9:7e: b4:fe:6a:e5:e2:35:de:79:d1:c4:82:6b:65:3c:df:6b:b6:b1: 1b:e9:2a:0e:bb:9f:4a:91:2a:0d:c6:5f:4a:a7:ef:77:66:69: d3:ed:51:a1:dc:d6:56:c3:7c:76:86:f9:c2:02:da:8d:72:53: 67:e3:a3:67:2f:06:36:27:f6:23:c7:da:4d:c6:56:25:01:cd: bc:ff:25:90:73:0e:18:d5:2a:b9:9a:9d:32:17:ae:28:0f:d3: 10:7c:b2:3e:80:62:e0:a9:14:26:d7:b7:9c:72:94:48:7b:2a: 51:fe:35:c6:f3:08:34:66:d4:34:bd:f6:2c:d7:62:66:35:9f: 35:62:9d:ab:b8:42:5f:fe:25:9f:45:7c:ce:ff:82:1f:4c:7f: 46:72:d1:ba:95:81:61:51:d2:5d:a1:ba:69:91:79:67:97:66: 00:3f:49:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Rn86N83sI59e7mYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjAyNmQwMDItNTA3Zi00ZTcyLWI5NzgtZjNjYTBmZDI0NmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrqt3tG5tOZcx7kwmxb+7UQghoThZEgTS+ml wendlEDHb79GMMYE7kHxL+uhpPuzwwHwpv+nugU8QZPqu5YsdnJBvAY3dBUS1/ca PLdmJGkUNTWvxc8xqnPmnpt29L6JcnNfWKhg4QEqhe/egBTErtAQFcZ3jmtQPwXv mRYWBnnwytOxyGvUKVqQuMhxJ0174qDbamS3AqYWyoFl+B0AljFovlUUU3QYL4cq KvVUXLEkfWkFaaUtXoMVLudY+QtkZdsL0d/gv4kfo5Q4VG66S4qdhTFa3yew7JYZ lN1RR7xX1DUJcx6FMthUFJbQwFdCQJJjPJLqi7sIRYYUO8JIRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFV7sYRya+DbLurwxXbQbgg2mGG5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzU3MWNkYjEtMzU3NC0z ZGU2LWEwNDctMjIyODc3OWZhM2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYtzwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADusrwh2K/uvzzl9uS6asjtdXSz9vTzxOi2HRFuQAiCmzOnOy498hz6q Z6wmW5GR7nEPB4bEjIhuedOXv7NUH5nCRkWRcyT51l7Fte+wfQCdabL0vS8g28j5 frT+auXiNd550cSCa2U832u2sRvpKg67n0qRKg3GX0qn73dmadPtUaHc1lbDfHaG +cIC2o1yU2fjo2cvBjYn9iPH2k3GViUBzbz/JZBzDhjVKrmanTIXrigP0xB8sj6A YuCpFCbXt5xylEh7KlH+NcbzCDRm1DS99izXYmY1nzVinau4Ql/+JZ9FfM7/gh9M f0Zy0bqVgWFR0l2hummReWeXZgA/ST0= -----END CERTIFICATE-----Generated at Sat Sep 5 16:08:26 2026 by rpki-client