$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/436d733d-131d-380d-a3df-a92dd67583e3.roa File: 436d733d-131d-380d-a3df-a92dd67583e3.roa (raw, json) Hash identifier: /eWY1iMQ6PMCpMTA+pcTzF+MDegG79hykCJqEbIU3V8= Subject key identifier: C1:BB:38:21:94:AC:93:F2:0B:23:19:42:D0:C2:FF:59:63:DC:0B:3E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4FBA05FE29259DFFD4D180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/436d733d-131d-380d-a3df-a92dd67583e3.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33668 IP address blocks: 98.209.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4f:ba:05:fe:29:25:9d:ff:d4:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=785cc076-0201-40a0-b920-b1136fdf6ff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:88:19:b2:97:13:1f:b1:dd:3a:68:19:06:d3: 13:59:52:d0:7a:8b:97:a6:c3:b1:3f:89:c9:37:f9: 0e:6d:89:2e:4c:f3:08:7f:77:8a:fd:92:fa:58:a3: f7:0d:7f:ac:b3:0e:e8:35:4a:bd:6c:3c:ca:81:68: 6e:87:0e:6f:e1:f7:26:67:88:a1:84:7b:da:65:cd: ec:51:d1:9c:8a:23:29:90:19:86:a4:9f:6b:70:d3: f1:ca:af:b4:d0:08:7f:50:04:24:0f:75:13:2e:88: 57:1a:bf:86:1d:ea:35:da:69:4a:95:aa:37:01:95: bb:4c:ae:ed:e6:a9:50:b0:23:8e:25:75:a0:0b:fc: 10:82:2c:78:13:8a:ae:e4:6b:7b:e4:30:28:49:f9: a6:cc:66:ef:7c:3b:fc:8c:d6:95:fb:98:22:e5:c5: 0c:3d:11:df:a0:bc:cf:0b:8f:fb:1f:0a:61:d4:35: 88:93:c3:ab:16:20:76:d6:db:0c:07:08:8c:70:1c: 6e:fb:e0:05:71:8e:c3:31:24:41:17:78:e6:dc:e5: 74:c1:dc:dd:b1:d5:cd:0e:6c:8c:33:f9:55:ec:de: 0a:42:65:1b:fd:09:21:02:67:4e:c8:80:d9:e2:68: eb:6e:24:b8:d7:c4:8e:cf:69:91:34:0b:64:f7:17: 12:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:BB:38:21:94:AC:93:F2:0B:23:19:42:D0:C2:FF:59:63:DC:0B:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/436d733d-131d-380d-a3df-a92dd67583e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.209.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption db:e7:92:51:4b:2f:4e:c7:5d:be:23:b6:0c:6a:c5:97:23:b3: 80:58:0f:3a:5b:49:9b:6b:73:da:18:b9:0d:d9:cf:4e:ec:49: ae:1a:97:00:08:ac:1a:1a:4f:56:37:1b:58:de:bf:df:88:65: 13:08:fb:a0:d0:bd:03:28:11:48:28:1e:2c:52:1a:6e:6e:96: 44:97:13:28:01:34:d4:73:e1:06:26:7d:26:5b:3c:a3:32:b4: e6:6c:7e:fc:c6:dd:f2:87:e4:a3:e8:43:30:27:19:72:00:bb: c7:87:bb:cd:8d:f6:32:a3:e7:04:55:38:68:5d:dc:ef:bc:6d: f2:f6:ef:53:13:dd:08:16:b0:d1:1e:c5:de:16:00:33:46:bb: 87:6b:86:f6:b1:5a:87:a1:02:32:26:fc:a8:22:74:4e:a6:4f: 93:f0:56:d7:74:6d:1e:b2:56:9c:ed:67:85:01:dc:62:1d:60: 0f:13:64:4c:ad:55:0b:61:b5:4f:46:2b:70:c0:ba:ff:b6:dd: 24:03:c8:b5:81:44:ad:33:10:7b:58:f0:19:09:7e:82:54:e1: 22:45:93:c8:0d:63:d9:88:31:9e:ed:00:0b:b6:a8:95:46:d0: 7a:eb:9e:c6:0d:eb:a0:85:ef:ea:bc:95:a1:3c:a0:9d:5a:ac: 19:77:b6:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96T7oF/iklnf/U0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk Nzg1Y2MwNzYtMDIwMS00MGEwLWI5MjAtYjExMzZmZGY2ZmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ogZspcTH7HdOmgZBtMTWVLQeouXpsOxP4nJ N/kObYkuTPMIf3eK/ZL6WKP3DX+ssw7oNUq9bDzKgWhuhw5v4fcmZ4ihhHvaZc3s UdGciiMpkBmGpJ9rcNPxyq+00Ah/UAQkD3UTLohXGr+GHeo12mlKlao3AZW7TK7t 5qlQsCOOJXWgC/wQgix4E4qu5Gt75DAoSfmmzGbvfDv8jNaV+5gi5cUMPRHfoLzP C4/7Hwph1DWIk8OrFiB21tsMBwiMcBxu++AFcY7DMSRBF3jm3OV0wdzdsdXNDmyM M/lV7N4KQmUb/QkhAmdOyIDZ4mjrbiS418SOz2mRNAtk9xcSiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMG7OCGUrJPyCyMZQtDC/1lj3As+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDM2ZDczM2QtMTMxZC0z ODBkLWEzZGYtYTkyZGQ2NzU4M2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYtH+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANvnklFLL07HXb4jtgxqxZcjs4BYDzpbSZtrc9oYuQ3Zz07sSa4alwAI rBoaT1Y3G1jev9+IZRMI+6DQvQMoEUgoHixSGm5ulkSXEygBNNRz4QYmfSZbPKMy tOZsfvzG3fKH5KPoQzAnGXIAu8eHu82N9jKj5wRVOGhd3O+8bfL271MT3QgWsNEe xd4WADNGu4drhvaxWoehAjIm/KgidE6mT5PwVtd0bR6yVpztZ4UB3GIdYA8TZEyt VQthtU9GK3DAuv+23SQDyLWBRK0zEHtY8BkJfoJU4SJFk8gNY9mIMZ7tAAu2qJVG 0HrrnsYN66CF7+q8laE8oJ1arBl3tjk= -----END CERTIFICATE-----Generated at Sun Oct 25 15:52:23 2026 by rpki-client