$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c69bac5-f781-3ff2-b784-1e7eefc6510e.roa File: 3c69bac5-f781-3ff2-b784-1e7eefc6510e.roa (raw, json) Hash identifier: rmXOjrcMm+FjhPWo4Sz7jg6NZu41ASj+t8HG6KHazLg= Subject key identifier: A8:CF:D2:7D:FB:36:0A:3F:31:2B:87:D3:55:0E:C4:41:8B:27:DD:0A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119FCCBCD866FB6AD35B7380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c69bac5-f781-3ff2-b784-1e7eefc6510e.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33491 IP address blocks: 98.220.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9f:cc:bc:d8:66:fb:6a:d3:5b:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=4b1634b1-0070-4d28-bc57-d8e67db3017e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d3:58:40:23:63:d6:37:9a:98:1c:e4:e2:12: f0:6e:7d:6a:45:7b:c2:55:7e:fc:b6:ef:50:6a:07: 24:69:96:44:fb:e9:19:e4:b5:90:35:c4:50:32:a8: 60:25:46:46:8b:39:ea:33:5e:b6:62:bd:52:15:92: a4:f7:db:aa:cc:11:50:c1:20:3a:a5:88:91:8a:d3: 51:f8:b4:e8:c6:d3:97:b3:eb:21:69:d5:ec:df:cd: 67:37:66:d0:ef:5e:03:f1:b4:6f:b3:ab:54:3e:69: ce:de:85:f4:9c:41:f5:4b:92:04:1f:6f:26:8b:ec: b6:56:92:4a:f6:76:27:7c:4f:8f:9b:b1:9c:a2:98: f8:8b:9c:dd:4a:96:90:4d:a3:c3:97:02:6a:8c:ea: a2:7a:bb:60:c9:78:d1:e4:50:fe:12:03:2f:0b:ee: a4:28:b1:18:ed:dd:53:83:4c:b7:ab:0f:ba:0e:f2: c0:f5:70:88:1a:a7:d7:60:35:bc:ef:c9:6c:de:1c: 4d:93:b2:03:c4:bd:b4:97:44:c4:4d:76:67:e6:b9: 02:19:04:81:83:42:68:6b:81:54:3b:ac:63:aa:27: 8f:de:52:3b:53:3b:1f:65:cb:f8:6a:4b:48:9a:b5: 46:29:c4:f1:9b:f0:6c:55:1b:ea:f7:1d:2c:cf:3f: 95:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:CF:D2:7D:FB:36:0A:3F:31:2B:87:D3:55:0E:C4:41:8B:27:DD:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c69bac5-f781-3ff2-b784-1e7eefc6510e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.220.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:d1:bb:cc:aa:49:69:37:fc:a4:30:67:d4:69:ac:8a:be:1c: 9d:85:76:96:3c:e4:00:00:cd:05:74:f2:12:7b:db:89:48:8e: da:36:40:64:35:3e:40:76:41:ab:e6:2f:c8:1d:b0:12:00:f6: 39:fb:01:f5:55:9c:d0:c9:c3:66:cf:db:d7:95:0d:b9:ab:76: 7a:71:f4:10:13:4f:1f:f5:97:7e:6a:55:6c:2c:2d:cf:43:10: e0:ec:a5:49:7c:d2:ce:de:b0:71:09:2c:e5:fd:1c:83:ab:e8: c9:fc:a0:56:54:25:9d:95:7b:fe:0a:ae:58:a0:1c:d2:bf:6c: bd:30:bc:37:29:ea:e1:ee:da:10:59:0b:c6:8c:71:63:76:65: c4:fe:e3:42:22:42:f7:08:49:8b:a9:c6:68:7e:ab:18:13:3d: 34:95:ad:fa:be:68:34:a0:89:4b:06:53:18:3d:f2:bb:eb:77: 59:56:c6:3d:8c:cb:b6:23:85:aa:fe:b1:2c:d8:9a:3d:fb:72: 36:2a:77:c4:87:70:66:75:55:05:64:7d:00:15:b3:5d:d2:0b: b0:8d:cd:08:a9:82:25:34:1d:ea:d1:0b:07:c6:2b:3b:c0:e2: dc:e6:ca:d5:f9:0c:60:ce:89:6a:f3:b9:59:d8:00:c2:43:ae: 5c:ad:74:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Rn8y82Gb7atNbc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk NGIxNjM0YjEtMDA3MC00ZDI4LWJjNTctZDhlNjdkYjMwMTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9NYQCNj1jeamBzk4hLwbn1qRXvCVX78tu9Q agckaZZE++kZ5LWQNcRQMqhgJUZGiznqM162Yr1SFZKk99uqzBFQwSA6pYiRitNR +LToxtOXs+shadXs381nN2bQ714D8bRvs6tUPmnO3oX0nEH1S5IEH28mi+y2VpJK 9nYnfE+Pm7Gcopj4i5zdSpaQTaPDlwJqjOqiertgyXjR5FD+EgMvC+6kKLEY7d1T g0y3qw+6DvLA9XCIGqfXYDW878ls3hxNk7IDxL20l0TETXZn5rkCGQSBg0Joa4FU O6xjqieP3lI7UzsfZcv4aktImrVGKcTxm/BsVRvq9x0szz+V2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKjP0n37Ngo/MSuH01UOxEGLJ90KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2M2OWJhYzUtZjc4MS0z ZmYyLWI3ODQtMWU3ZWVmYzY1MTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYtycMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXRu8yqSWk3/KQwZ9RprIq+HJ2FdpY85AAAzQV08hJ724lIjto2QGQ1 PkB2QavmL8gdsBIA9jn7AfVVnNDJw2bP29eVDbmrdnpx9BATTx/1l35qVWwsLc9D EODspUl80s7esHEJLOX9HIOr6Mn8oFZUJZ2Ve/4KrligHNK/bL0wvDcp6uHu2hBZ C8aMcWN2ZcT+40IiQvcISYupxmh+qxgTPTSVrfq+aDSgiUsGUxg98rvrd1lWxj2M y7Yjhar+sSzYmj37cjYqd8SHcGZ1VQVkfQAVs13SC7CNzQipgiU0HerRCwfGKzvA 4tzmytX5DGDOiWrzuVnYAMJDrlytdAw= -----END CERTIFICATE-----Generated at Sat Sep 5 15:22:38 2026 by rpki-client