$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52b8df0f-57f3-30a3-9343-474b1a7d7f9b.roa File: 52b8df0f-57f3-30a3-9343-474b1a7d7f9b.roa (raw, json) Hash identifier: BN+mXCErXsPNm1LndNQ2Vf0wCMNvJihhFBWRPifvtDA= Subject key identifier: 77:8B:0A:78:05:A3:DD:2D:E4:9A:B7:7A:EA:43:93:E3:12:73:4F:AF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119E0EF47033972998134900 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52b8df0f-57f3-30a3-9343-474b1a7d7f9b.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33491 IP address blocks: 98.213.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9e:0e:f4:70:33:97:29:98:13:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=31dfb267-f38a-4619-b69a-7fe1210b4b4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5f:5f:d3:1c:fd:17:9c:69:99:a7:41:ab:78: ff:5e:1d:b9:f2:06:60:07:d4:1b:48:ca:ed:91:9b: 77:13:35:53:38:f9:83:b9:78:0a:33:d1:22:3e:7c: c4:52:42:44:00:62:21:cf:41:ea:1e:3e:54:39:4f: b3:25:62:07:3a:17:1d:fc:c9:8b:ab:03:5c:d2:1d: 78:41:3f:60:f8:0c:39:ee:1e:1d:1c:d2:4d:36:3b: e8:41:b1:21:5c:e6:1f:63:2d:75:60:a9:cc:53:17: 03:68:09:8f:c9:89:46:3f:4a:c3:15:2c:a1:79:75: cc:36:df:98:5f:59:c9:01:4f:c7:54:08:f2:46:3f: f5:d6:e1:99:91:b5:6f:90:99:fd:7b:f9:3e:05:ff: a3:9f:13:d4:e4:aa:a6:03:4f:ea:92:55:bd:ee:44: f9:4d:df:e0:73:14:0b:fd:c9:b0:ad:88:90:54:34: 21:b4:6f:d5:55:8b:45:0b:45:68:e2:93:b0:bc:d7: cd:4b:ec:23:9e:9e:2c:e5:d2:46:76:5a:c2:9c:31: 34:ed:a1:45:d6:79:fd:e9:b2:0d:ba:de:87:87:45: 0e:fe:d7:26:1d:1a:0c:38:45:df:e4:c7:43:6f:05: dc:fc:d8:aa:99:4d:25:96:3e:be:61:c3:f5:e1:77: 7a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:8B:0A:78:05:A3:DD:2D:E4:9A:B7:7A:EA:43:93:E3:12:73:4F:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52b8df0f-57f3-30a3-9343-474b1a7d7f9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.213.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:d4:6e:5a:20:86:02:0f:3a:a7:04:fb:4a:66:10:4d:fa:e2: 6c:fe:8b:b6:9d:bc:9d:42:4b:fb:33:43:f8:ee:ae:77:2d:dc: 56:5d:51:14:f0:03:16:09:95:7b:c8:5c:15:23:96:9f:49:08: be:71:10:6b:e6:4d:10:26:b0:42:20:f5:f0:ff:ea:be:09:d5: af:a6:42:86:c0:df:73:94:4a:3b:79:5d:ed:22:b6:47:2d:cb: d8:5d:a3:d6:91:e0:de:7b:92:c3:29:65:72:30:f6:b0:ab:41: 65:8a:2b:f8:61:7a:2e:8b:9c:02:5f:76:90:79:4c:cb:09:f3: ea:b5:76:6d:73:47:b9:b5:4a:89:c2:d5:7b:22:15:4d:59:57: e4:d7:9f:dd:3b:7c:11:87:2f:da:61:54:7c:6a:1a:22:ea:28: fa:d0:ca:0e:18:c1:f2:a0:42:6e:9c:00:74:39:18:12:f9:65: 0c:f0:11:be:e9:50:e6:31:79:5f:ea:5e:d6:ed:21:a1:fa:5c: db:c2:f6:8a:26:75:dc:e7:4c:75:ba:6f:14:68:2d:d9:8b:58: dd:1f:67:fa:98:60:ad:03:4f:47:08:6b:cf:54:97:71:47:39: d7:1e:16:1f:f9:c4:63:a6:79:57:11:84:ad:7a:f4:12:6c:04: 37:77:40:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Rng70cDOXKZgTSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MzFkZmIyNjctZjM4YS00NjE5LWI2OWEtN2ZlMTIxMGI0YjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp19f0xz9F5xpmadBq3j/Xh258gZgB9QbSMrt kZt3EzVTOPmDuXgKM9EiPnzEUkJEAGIhz0HqHj5UOU+zJWIHOhcd/MmLqwNc0h14 QT9g+Aw57h4dHNJNNjvoQbEhXOYfYy11YKnMUxcDaAmPyYlGP0rDFSyheXXMNt+Y X1nJAU/HVAjyRj/11uGZkbVvkJn9e/k+Bf+jnxPU5KqmA0/qklW97kT5Td/gcxQL /cmwrYiQVDQhtG/VVYtFC0Vo4pOwvNfNS+wjnp4s5dJGdlrCnDE07aFF1nn96bIN ut6Hh0UO/tcmHRoMOEXf5MdDbwXc/NiqmU0llj6+YcP14Xd6fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHeLCngFo90t5Jq3eupDk+MSc0+vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTJiOGRmMGYtNTdmMy0z MGEzLTkzNDMtNDc0YjFhN2Q3ZjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYtWsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/UbloghgIPOqcE+0pmEE364mz+i7advJ1CS/szQ/jurnct3FZdURTw AxYJlXvIXBUjlp9JCL5xEGvmTRAmsEIg9fD/6r4J1a+mQobA33OUSjt5Xe0itkct y9hdo9aR4N57ksMpZXIw9rCrQWWKK/hhei6LnAJfdpB5TMsJ8+q1dm1zR7m1SonC 1XsiFU1ZV+TXn907fBGHL9phVHxqGiLqKPrQyg4YwfKgQm6cAHQ5GBL5ZQzwEb7p UOYxeV/qXtbtIaH6XNvC9oomddznTHW6bxRoLdmLWN0fZ/qYYK0DT0cIa89Ul3FH OdceFh/5xGOmeVcRhK169BJsBDd3QHg= -----END CERTIFICATE-----Generated at Sat Sep 5 14:23:14 2026 by rpki-client