$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ba8e0a7-5f28-3d1f-af92-7bc6b1f7564c.roa File: 3ba8e0a7-5f28-3d1f-af92-7bc6b1f7564c.roa (raw, json) Hash identifier: MhZFR0PxTUrmf168qomRSMOTReoMZx/3QAlPMHXMNrg= Subject key identifier: FE:CB:2C:EB:6E:A5:D9:8F:BA:DB:60:B0:87:1E:9E:D2:9E:0A:99:61 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119FDEEA33E7DF9E79C41580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ba8e0a7-5f28-3d1f-af92-7bc6b1f7564c.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33491 IP address blocks: 98.228.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9f:de:ea:33:e7:df:9e:79:c4:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=25055715-1b63-4e96-bd73-f9be0a425f8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3b:21:0e:a9:74:0a:f7:7c:2a:9a:30:27:72: b1:d4:ad:02:8e:53:db:38:e4:53:59:56:3f:e6:48: a9:37:16:71:16:49:0c:8c:ae:28:c7:47:24:03:4d: 32:82:84:ab:0b:0e:d1:3d:db:87:7c:18:da:0c:38: 9a:0b:9a:64:7f:c2:fd:b1:8b:6d:8b:29:45:9b:a7: b3:bd:ed:98:b7:3f:48:e5:ed:de:51:d4:f1:36:50: e1:39:e9:fa:bc:7b:e7:2d:fe:9c:d3:38:d6:0a:a9: 8d:42:78:eb:af:d0:f8:2c:ee:29:22:0c:06:b5:a4: d4:7a:41:ce:b0:f1:83:51:62:be:5d:41:d8:74:e7: 09:66:60:f6:ff:06:d5:b8:3e:14:d3:15:1f:75:36: a5:5a:1f:2b:b4:48:d0:63:64:c5:62:ee:58:11:b1: 35:af:59:8b:c3:b6:8c:07:d3:70:e4:e2:4b:2f:4e: c0:80:bb:e5:97:10:df:e9:46:ef:7c:d0:60:73:3e: 5b:36:9c:60:73:0d:c7:90:c7:a7:85:c9:1b:dc:47: e8:74:0d:b4:f1:0c:cf:c5:7d:af:6a:6d:6c:52:25: 05:37:f0:f0:2e:fa:11:0b:f3:b9:59:43:7b:83:79: 19:c4:92:15:66:87:7f:4e:c0:da:d3:6a:75:78:56: 52:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:CB:2C:EB:6E:A5:D9:8F:BA:DB:60:B0:87:1E:9E:D2:9E:0A:99:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ba8e0a7-5f28-3d1f-af92-7bc6b1f7564c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.228.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:c8:0c:8e:c4:05:1a:83:8e:66:af:d6:bc:f8:f6:28:9e:b7: 7b:57:f5:3e:c0:ab:9d:fa:77:6b:df:3b:27:a6:c2:52:6e:c1: 41:66:5d:42:1b:0c:8a:61:5a:4e:2f:b3:3a:55:11:2c:2b:74: 4c:9d:94:c9:81:56:ff:ba:09:37:33:62:fc:00:2f:02:48:35: a4:b1:12:34:26:0b:1f:46:12:fe:2a:ba:2d:ca:4b:be:78:d7: 4e:19:38:d6:a2:21:63:72:2d:e6:33:aa:49:c1:b4:9b:37:19: 0c:b3:5c:0e:d4:28:83:24:9d:6e:b7:5b:00:e1:62:81:fc:ce: cc:51:94:b5:bc:d8:45:7d:d5:37:7a:a8:3f:be:e8:cb:b0:40: b7:91:03:13:f7:cf:e4:6e:ec:e4:e8:5c:69:d4:57:36:e4:56: 32:29:3e:52:65:77:ce:0d:f3:33:46:7d:7b:df:f5:6d:91:76: 56:b0:43:cf:d6:29:a7:5b:bd:10:48:5a:dc:29:c8:b9:b3:ab: e1:ac:65:0b:52:42:37:ad:87:82:20:12:a1:ea:46:53:94:26: 50:76:0d:e2:09:8e:21:7d:a1:d5:91:8c:e8:bd:96:a7:03:71: 39:09:bd:31:94:66:c8:09:b6:bf:1e:bb:f7:94:65:72:d4:3e: 42:6a:99:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Rn97qM+ffnnnEFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MjUwNTU3MTUtMWI2My00ZTk2LWJkNzMtZjliZTBhNDI1ZjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDshDql0Cvd8KpowJ3Kx1K0CjlPbOORTWVY/ 5kipNxZxFkkMjK4ox0ckA00ygoSrCw7RPduHfBjaDDiaC5pkf8L9sYttiylFm6ez ve2Ytz9I5e3eUdTxNlDhOen6vHvnLf6c0zjWCqmNQnjrr9D4LO4pIgwGtaTUekHO sPGDUWK+XUHYdOcJZmD2/wbVuD4U0xUfdTalWh8rtEjQY2TFYu5YEbE1r1mLw7aM B9Nw5OJLL07AgLvllxDf6UbvfNBgcz5bNpxgcw3HkMenhckb3EfodA208QzPxX2v am1sUiUFN/DwLvoRC/O5WUN7g3kZxJIVZod/TsDa02p1eFZSVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP7LLOtupdmPuttgsIcentKeCplhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2JhOGUwYTctNWYyOC0z ZDFmLWFmOTItN2JjNmIxZjc1NjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYuRyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3IDI7EBRqDjmav1rz49iiet3tX9T7Aq536d2vfOyemwlJuwUFmXUIb DIphWk4vszpVESwrdEydlMmBVv+6CTczYvwALwJINaSxEjQmCx9GEv4qui3KS754 104ZONaiIWNyLeYzqknBtJs3GQyzXA7UKIMknW63WwDhYoH8zsxRlLW82EV91Td6 qD++6MuwQLeRAxP3z+Ru7OToXGnUVzbkVjIpPlJld84N8zNGfXvf9W2RdlawQ8/W KadbvRBIWtwpyLmzq+GsZQtSQjeth4IgEqHqRlOUJlB2DeIJjiF9odWRjOi9lqcD cTkJvTGUZsgJtr8eu/eUZXLUPkJqmeY= -----END CERTIFICATE-----Generated at Sat Sep 5 12:39:11 2026 by rpki-client