$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f7568c4-9b24-3f85-ac1b-3d3a9ba0d761.roa File: 4f7568c4-9b24-3f85-ac1b-3d3a9ba0d761.roa (raw, json) Hash identifier: ycnPU5UeiOJJV581UpTebWDtR4dccX1JH15S6HtKTaM= Subject key identifier: F6:8B:01:B5:60:A4:EE:91:87:24:46:D8:40:C5:79:1B:47:0E:6F:A7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4FB96126AA2AF5C6D659A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f7568c4-9b24-3f85-ac1b-3d3a9ba0d761.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33668 IP address blocks: 98.209.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4f:b9:61:26:aa:2a:f5:c6:d6:59:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=29a77379-ac2b-4636-9832-c494a28c7258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3f:ee:11:2e:2c:46:9a:fa:b7:5c:45:0c:83: 9a:a4:49:33:58:73:a6:99:60:5c:41:60:16:18:38: 61:fc:bd:84:b2:5b:07:9a:06:8e:9d:16:e0:eb:7a: 7f:78:b7:db:e6:41:53:88:c0:a2:36:75:b1:fb:cf: 6d:12:cc:8c:79:67:8a:ec:db:ef:d7:07:c0:43:6f: a7:18:c1:7d:71:47:48:f9:e5:9a:e8:ba:b1:fc:42: 9f:3f:70:29:7a:88:d7:e0:8a:cd:9d:18:14:77:ae: 92:2e:2e:62:e8:cd:df:f0:a8:74:e6:10:b5:78:dc: 09:2d:94:12:b4:d0:e6:0f:bb:47:a8:96:f2:fc:43: b0:e0:a6:37:cc:f7:c5:f7:d0:37:78:e8:03:34:8d: b2:fb:f8:9b:8b:51:d0:26:7e:3b:88:ee:55:e9:9b: 03:c5:54:6f:42:b7:64:aa:db:e8:52:84:e5:f1:ff: 0d:c1:6b:d2:dc:a4:5c:ab:39:7c:1b:ba:70:45:ff: a6:71:0c:c7:76:d4:6b:23:29:09:6a:11:78:b7:96: 55:56:26:a5:21:6d:22:62:2d:f5:2f:a0:99:95:69: 42:f5:4c:5e:16:2c:3e:11:c0:c9:19:36:ef:b1:01: 01:0f:52:42:30:c0:c7:8d:40:2f:da:d5:29:0f:c0: 3d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:8B:01:B5:60:A4:EE:91:87:24:46:D8:40:C5:79:1B:47:0E:6F:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f7568c4-9b24-3f85-ac1b-3d3a9ba0d761.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.209.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:27:1e:50:7c:a1:6d:af:48:85:86:37:0a:60:fd:87:f5:5f: a2:6f:57:84:04:a5:b5:1a:7e:26:5b:c9:25:29:a7:56:9a:3c: c1:a5:2e:31:b8:23:aa:4e:84:e9:b5:9c:ca:89:87:81:3e:8b: c4:71:58:0f:b8:62:ad:72:20:dc:61:0c:ac:cb:c7:ba:73:8f: b3:db:ff:f6:4f:3e:f9:2e:8e:7a:1b:6c:28:6f:b4:2f:c7:ed: f7:92:08:ec:d5:8d:88:c1:2e:ee:bc:18:9b:31:fe:07:f5:a3: ae:1e:42:9c:7c:87:63:bd:02:10:f2:4d:45:7d:d3:72:b0:19: 36:b2:8c:56:8d:a9:6b:0f:6f:5c:90:c1:7a:f5:bf:b8:ca:2d: b2:84:42:c9:41:d2:cb:7b:fc:41:bb:24:e0:cc:85:0b:37:f9: cc:34:3d:30:39:89:60:35:3d:8f:2f:00:a5:6c:25:f1:2c:5d: c9:33:ec:f5:b9:05:4a:f6:e9:29:98:4a:47:81:f4:8e:c6:06: 81:3f:24:5d:d2:eb:59:4e:51:d4:03:b3:45:21:6f:29:11:c9: 25:d7:01:dd:44:96:94:28:33:cd:0e:47:5c:7d:5a:be:ab:b2: 99:21:6d:ac:e4:68:b4:76:2b:55:66:a9:de:5d:f1:4b:2a:94: c8:fb:a9:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96T7lhJqoq9cbWWaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk MjlhNzczNzktYWMyYi00NjM2LTk4MzItYzQ5NGEyOGM3MjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArj/uES4sRpr6t1xFDIOapEkzWHOmmWBcQWAW GDhh/L2EslsHmgaOnRbg63p/eLfb5kFTiMCiNnWx+89tEsyMeWeK7Nvv1wfAQ2+n GMF9cUdI+eWa6Lqx/EKfP3ApeojX4IrNnRgUd66SLi5i6M3f8Kh05hC1eNwJLZQS tNDmD7tHqJby/EOw4KY3zPfF99A3eOgDNI2y+/ibi1HQJn47iO5V6ZsDxVRvQrdk qtvoUoTl8f8NwWvS3KRcqzl8G7pwRf+mcQzHdtRrIykJahF4t5ZVVialIW0iYi31 L6CZlWlC9UxeFiw+EcDJGTbvsQEBD1JCMMDHjUAv2tUpD8A9qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPaLAbVgpO6RhyRG2EDFeRtHDm+nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGY3NTY4YzQtOWIyNC0z Zjg1LWFjMWItM2QzYTliYTBkNzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYtHIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUnHlB8oW2vSIWGNwpg/Yf1X6JvV4QEpbUafiZbySUpp1aaPMGlLjG4 I6pOhOm1nMqJh4E+i8RxWA+4Yq1yINxhDKzLx7pzj7Pb//ZPPvkujnobbChvtC/H 7feSCOzVjYjBLu68GJsx/gf1o64eQpx8h2O9AhDyTUV903KwGTayjFaNqWsPb1yQ wXr1v7jKLbKEQslB0st7/EG7JODMhQs3+cw0PTA5iWA1PY8vAKVsJfEsXckz7PW5 BUr26SmYSkeB9I7GBoE/JF3S61lOUdQDs0UhbykRySXXAd1ElpQoM80OR1x9Wr6r spkhbazkaLR2K1Vmqd5d8UsqlMj7qY4= -----END CERTIFICATE-----Generated at Tue Oct 20 11:27:51 2026 by rpki-client