$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3875645a-5899-3763-80f7-408eaea32446.roa File: 3875645a-5899-3763-80f7-408eaea32446.roa (raw, json) Hash identifier: TwAZlfaoUfzHsHP6hrAn70HBmjASUhuyaGGaH5tihJk= Subject key identifier: C1:31:E2:92:EB:50:9A:1B:3E:20:D9:B3:C2:F1:28:14:05:24:3F:CD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119FCE76130F17FB4951ED60 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3875645a-5899-3763-80f7-408eaea32446.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33491 IP address blocks: 98.220.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9f:ce:76:13:0f:17:fb:49:51:ed:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=88cc4691-e924-4431-8e5c-7aab49abff54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:59:7a:fb:a1:32:3c:8f:7c:bd:43:75:f8:6a: 85:90:85:90:7e:2f:88:88:f5:5c:12:a4:b6:c8:03: d2:42:9d:24:25:d1:1a:03:b4:ab:33:2b:6b:59:10: 32:ca:96:e2:18:18:78:3d:c1:7e:ae:ca:ac:35:7a: 68:e7:a7:89:68:5f:64:c4:fc:8d:02:2c:60:1e:31: 85:f3:82:e7:24:11:64:08:a1:57:1d:8c:4a:ca:48: d7:83:4d:d8:6b:e0:9f:f5:cd:81:b7:ec:31:46:94: 52:13:a2:53:0e:97:16:f3:fc:d2:2c:c2:fd:2f:35: a0:11:d5:fa:3b:0f:c4:e7:0e:b3:5d:8d:1c:37:db: 36:08:c6:04:1a:c5:1a:69:82:f0:58:1d:ed:3e:42: e2:dd:3e:15:5c:c9:da:a0:c0:ab:7f:39:df:f3:2a: 3a:b2:67:1e:5e:c5:c5:e2:66:8f:28:6d:b1:b5:14: 63:ab:d1:7f:18:79:e5:19:6f:80:1c:50:ee:48:f8: 28:2c:00:39:4b:00:04:af:d3:8c:1b:ea:ab:19:09: 8d:a5:10:df:59:a5:42:54:4a:50:2e:89:40:b8:75: 37:89:b5:13:b0:97:bb:eb:dd:c4:04:72:37:fb:7a: fe:e9:b7:d9:4d:91:26:c5:5a:e4:39:bc:ff:59:6f: d1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:31:E2:92:EB:50:9A:1B:3E:20:D9:B3:C2:F1:28:14:05:24:3F:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3875645a-5899-3763-80f7-408eaea32446.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.220.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:10:d5:ab:d2:6c:43:b8:19:6f:94:95:e5:29:eb:ea:f2:4f: 82:c9:c6:84:e0:72:76:fd:18:75:e2:2a:20:c9:f6:91:3b:eb: d9:b5:fb:7f:58:f1:55:76:f2:47:94:b0:cb:cd:10:7f:6a:f9: eb:83:50:39:4e:c4:8c:91:f7:0a:e8:40:b7:d4:cd:9f:67:85: 66:41:c5:56:30:6d:5b:4f:34:43:3a:6c:1a:7a:b4:17:82:4e: e6:a2:aa:82:38:97:5f:0b:9d:47:96:61:62:30:a6:d9:a6:b1: 8a:4f:1d:60:c1:5d:d9:ae:5f:61:39:06:63:72:b9:14:45:6a: f1:2f:68:e9:78:a5:ed:53:92:16:f8:86:6c:e3:6c:91:fd:65: 7b:ea:f6:0b:60:8d:f3:47:98:8b:f9:45:e2:ed:cc:38:b6:05: c6:22:a6:03:96:f2:7d:61:91:f9:a0:18:38:fc:ae:d1:a7:bf: 49:bf:87:17:4f:f9:88:63:b4:67:fa:56:7e:50:c8:50:f8:21: 9c:fd:3c:07:15:36:2d:8b:3a:08:f6:cb:8d:1e:14:52:bc:eb: 18:97:5b:30:d0:ea:8b:61:c9:e6:1a:51:4a:c1:32:1a:49:7a: 72:00:78:21:8a:9f:bb:8e:88:5a:20:d6:c7:28:b5:5f:4d:fe: 7e:6d:49:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Rn852Ew8X+0lR7WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ODhjYzQ2OTEtZTkyNC00NDMxLThlNWMtN2FhYjQ5YWJmZjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVl6+6EyPI98vUN1+GqFkIWQfi+IiPVcEqS2 yAPSQp0kJdEaA7SrMytrWRAyypbiGBh4PcF+rsqsNXpo56eJaF9kxPyNAixgHjGF 84LnJBFkCKFXHYxKykjXg03Ya+Cf9c2Bt+wxRpRSE6JTDpcW8/zSLML9LzWgEdX6 Ow/E5w6zXY0cN9s2CMYEGsUaaYLwWB3tPkLi3T4VXMnaoMCrfznf8yo6smceXsXF 4maPKG2xtRRjq9F/GHnlGW+AHFDuSPgoLAA5SwAEr9OMG+qrGQmNpRDfWaVCVEpQ LolAuHU3ibUTsJe7693EBHI3+3r+6bfZTZEmxVrkObz/WW/RSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMEx4pLrUJobPiDZs8LxKBQFJD/NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzg3NTY0NWEtNTg5OS0z NzYzLTgwZjctNDA4ZWFlYTMyNDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYtzeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgQ1avSbEO4GW+UleUp6+ryT4LJxoTgcnb9GHXiKiDJ9pE769m1+39Y 8VV28keUsMvNEH9q+euDUDlOxIyR9wroQLfUzZ9nhWZBxVYwbVtPNEM6bBp6tBeC TuaiqoI4l18LnUeWYWIwptmmsYpPHWDBXdmuX2E5BmNyuRRFavEvaOl4pe1Tkhb4 hmzjbJH9ZXvq9gtgjfNHmIv5ReLtzDi2BcYipgOW8n1hkfmgGDj8rtGnv0m/hxdP +YhjtGf6Vn5QyFD4IZz9PAcVNi2LOgj2y40eFFK86xiXWzDQ6othyeYaUUrBMhpJ enIAeCGKn7uOiFog1scotV9N/n5tSWw= -----END CERTIFICATE-----Generated at Sat Sep 5 14:29:07 2026 by rpki-client