$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4868273e-91b9-3ebe-aaaa-eed1b7a5e3b1.roa File: 4868273e-91b9-3ebe-aaaa-eed1b7a5e3b1.roa (raw, json) Hash identifier: OMfhn+oI1QIrGhiMWg9TvEfoZ4xEF3cRo3/tkTXErXw= Subject key identifier: 4F:7E:EF:A0:61:D7:D9:42:66:41:4F:01:C6:2E:1E:56:17:F2:E9:44 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119FC568A2FCE5C31DE33C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4868273e-91b9-3ebe-aaaa-eed1b7a5e3b1.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33491 IP address blocks: 98.213.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9f:c5:68:a2:fc:e5:c3:1d:e3:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=7853f5b8-8068-4f43-b9cf-9bad64954f7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9d:7a:8c:73:58:26:f5:82:cf:5b:94:25:b4: 13:6f:35:e0:92:ef:9c:49:fe:2a:5e:88:68:42:fa: 2f:8b:a9:25:0d:43:d8:0d:1e:ba:29:41:40:b6:c7: bd:1d:a5:7b:15:62:4f:1b:36:72:ad:86:70:0d:ad: 08:bf:62:b9:54:27:69:9d:5a:ab:00:64:73:e1:4f: 74:d4:bc:f3:bb:0a:bb:31:af:45:12:8a:f8:98:67: 8a:eb:49:40:34:17:82:36:fa:77:a6:86:ac:aa:1e: 40:02:7a:da:86:17:5a:89:17:d2:0e:bc:6f:8d:39: 21:03:90:23:37:4d:26:63:c9:bb:10:63:5f:b6:38: 00:dc:33:5c:79:72:51:4e:62:a9:cb:4a:65:13:c0: 7f:2b:0f:50:d9:8a:0a:b3:66:8c:ee:cf:31:f6:dc: e0:73:c9:a5:da:89:f8:9a:48:ca:64:12:21:28:1f: f9:27:0a:ce:03:11:1e:aa:37:0a:0a:df:cb:16:8b: 22:d1:cf:20:67:15:35:af:22:bf:48:8c:e1:eb:b9: f2:03:3b:83:b8:e7:e7:b1:f0:f5:dd:86:68:6c:6f: fd:ea:70:2c:5f:d1:8a:3c:4b:e1:08:98:6f:cf:3f: 37:00:75:22:6f:ff:ed:93:f7:a6:7c:a4:90:7f:12: 20:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:7E:EF:A0:61:D7:D9:42:66:41:4F:01:C6:2E:1E:56:17:F2:E9:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4868273e-91b9-3ebe-aaaa-eed1b7a5e3b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.213.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:4a:39:7f:eb:b2:40:89:fd:1f:ab:8f:4e:43:88:51:09:24: 00:13:36:25:29:9e:95:bc:7e:bb:f5:e9:09:19:f6:ac:e0:27: 2d:d9:d3:52:31:d4:93:eb:ec:a4:78:f5:46:a3:99:61:b0:10: ef:e7:4b:d8:0b:c0:13:52:ba:cd:67:80:08:11:b9:98:fc:62: 25:3c:4f:de:03:ac:9a:13:33:9e:3e:f7:e2:a6:99:5a:e3:8a: 5e:09:94:ad:61:fe:2a:0e:9b:1f:35:7f:b0:ab:f4:1e:48:6e: 62:d9:6f:63:57:13:62:43:18:c4:57:d0:7e:37:79:75:1c:eb: cd:8c:a2:96:a4:81:28:eb:86:35:cd:f0:72:26:01:24:a1:0a: fc:f8:43:38:a9:d2:38:d7:bf:12:e2:97:e7:13:c4:41:e0:c7: 50:d9:3a:3f:aa:7b:24:d8:22:33:b1:49:1b:9e:a4:7f:08:0e: d4:b8:ed:94:e3:c4:71:24:05:c1:98:8b:e8:6d:e4:7c:4a:33: f0:02:12:2a:42:1d:b9:8f:5f:90:a4:ee:2d:50:35:6a:ca:65: 92:dc:34:61:49:4a:30:ec:c8:7b:bc:79:ae:84:ea:13:d3:bb: af:10:65:07:79:88:de:da:e5:d5:51:83:f4:37:cc:1c:f9:cd: da:05:10:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Rn8Voovzlwx3jPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk Nzg1M2Y1YjgtODA2OC00ZjQzLWI5Y2YtOWJhZDY0OTU0ZjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwp16jHNYJvWCz1uUJbQTbzXgku+cSf4qXoho Qvovi6klDUPYDR66KUFAtse9HaV7FWJPGzZyrYZwDa0Iv2K5VCdpnVqrAGRz4U90 1Lzzuwq7Ma9FEor4mGeK60lANBeCNvp3poasqh5AAnrahhdaiRfSDrxvjTkhA5Aj N00mY8m7EGNftjgA3DNceXJRTmKpy0plE8B/Kw9Q2YoKs2aM7s8x9tzgc8ml2on4 mkjKZBIhKB/5JwrOAxEeqjcKCt/LFosi0c8gZxU1ryK/SIzh67nyAzuDuOfnsfD1 3YZobG/96nAsX9GKPEvhCJhvzz83AHUib//tk/emfKSQfxIgiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE9+76Bh19lCZkFPAcYuHlYX8ulEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDg2ODI3M2UtOTFiOS0z ZWJlLWFhYWEtZWVkMWI3YTVlM2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYtVAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFKOX/rskCJ/R+rj05DiFEJJAATNiUpnpW8frv16QkZ9qzgJy3Z01Ix 1JPr7KR49UajmWGwEO/nS9gLwBNSus1ngAgRuZj8YiU8T94DrJoTM54+9+KmmVrj il4JlK1h/ioOmx81f7Cr9B5IbmLZb2NXE2JDGMRX0H43eXUc682MopakgSjrhjXN 8HImASShCvz4Qzip0jjXvxLil+cTxEHgx1DZOj+qeyTYIjOxSRuepH8IDtS47ZTj xHEkBcGYi+ht5HxKM/ACEipCHbmPX5Ck7i1QNWrKZZLcNGFJSjDsyHu8ea6E6hPT u68QZQd5iN7a5dVRg/Q3zBz5zdoFEAM= -----END CERTIFICATE-----Generated at Sat Sep 5 16:09:55 2026 by rpki-client