$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/54fac094-64cc-3241-b1a7-6342a5b961f6.roa File: 54fac094-64cc-3241-b1a7-6342a5b961f6.roa (raw, json) Hash identifier: Rkcr6ifPv/DWx/yiXGXKuM7cXo3vCYnlAmdkCv1U114= Subject key identifier: D3:54:9C:4A:EF:79:A7:61:11:88:6B:7E:E1:53:9D:C0:69:F6:23:C9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4ECB708A91015E0DB39600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/54fac094-64cc-3241-b1a7-6342a5b961f6.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33662 IP address blocks: 98.200.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4e:cb:70:8a:91:01:5e:0d:b3:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=b86fbf94-ce1a-4119-8244-48f878c698ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:77:28:7f:25:c1:b6:cb:1a:07:85:86:9b:ae: 4d:8c:61:f0:05:64:7e:1e:d5:a2:4f:01:fa:b7:f1: b7:62:85:da:e9:07:2f:b3:54:d4:1f:e0:8d:60:6c: 26:04:7c:2e:b4:5d:be:d7:a5:36:f9:70:43:25:ce: aa:1f:58:95:c8:fd:be:8e:e6:d3:d3:7c:ff:1b:c6: f7:b7:2f:15:e1:ea:ce:72:34:73:ca:b7:80:18:64: 79:57:a0:e9:9b:23:2e:ac:bf:d0:b8:cb:8f:09:72: a1:ff:69:8c:72:be:61:8e:87:dd:63:85:d0:38:f0: 60:85:11:2a:13:f9:c4:28:2f:2c:03:6d:f5:45:cb: df:6b:c2:1e:45:b8:09:c8:28:2c:d4:d2:fc:86:89: 46:cd:9b:f5:34:22:6e:19:c5:00:e3:0d:e5:72:0f: 26:7c:31:90:9e:b9:1b:d8:1f:41:eb:67:6b:3f:84: 04:06:37:01:77:ff:35:f7:f8:ae:7f:d4:1e:d3:c9: b1:12:14:d1:5c:80:48:1a:17:f0:9f:63:3f:7a:df: 92:16:90:be:c0:b7:5f:0f:e0:ba:d7:66:a6:b0:29: 54:d0:15:75:5b:25:43:33:fb:56:6c:54:40:94:d0: b9:a1:3a:ba:a3:90:7d:2d:13:63:1a:5e:8a:d5:22: 3c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:54:9C:4A:EF:79:A7:61:11:88:6B:7E:E1:53:9D:C0:69:F6:23:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/54fac094-64cc-3241-b1a7-6342a5b961f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.200.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:b0:8b:73:a8:f0:c3:50:84:d7:a3:ba:98:b3:ac:f5:c3:79: e7:03:ac:84:4d:41:d1:9b:5e:b2:bb:a2:fe:20:54:04:af:99: 93:13:02:6a:a4:f4:ff:70:6b:57:34:85:b1:6e:aa:aa:63:1f: 95:2f:20:3b:f7:c6:83:01:fc:52:fc:bd:dc:dc:03:dd:ee:ea: 5e:c3:98:0e:2f:77:e4:82:b0:a0:ee:31:f8:a6:ab:3f:25:c0: b8:e0:35:47:b1:05:83:92:21:b3:3c:1c:6d:94:cf:af:a0:40: 7d:f5:a9:02:40:4d:56:04:06:f6:ed:94:5f:a1:0a:f7:f7:56: c7:2d:af:5a:4d:fd:f7:b7:af:6b:f7:0c:09:e2:33:15:a2:f4: ef:b4:7d:2f:2f:41:38:8d:83:88:ad:37:62:96:93:d8:3a:cf: f2:b3:7b:02:77:ac:43:a6:b9:03:f2:87:53:c1:c1:97:62:5c: 4d:f4:21:d9:74:c5:10:12:84:16:ad:bd:91:11:c4:cd:1c:9e: a6:fc:79:c3:a2:84:d2:1c:b6:58:27:4b:ca:61:a8:b7:fe:ab: 63:13:3a:50:b1:4a:01:c1:69:71:c1:5b:17:b3:6e:14:72:ca: 3c:51:f3:e6:9f:56:e8:42:9d:78:c1:03:8f:2b:a8:30:fa:94: 30:85:e4:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TstwipEBXg2zlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk Yjg2ZmJmOTQtY2UxYS00MTE5LTgyNDQtNDhmODc4YzY5OGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAincofyXBtssaB4WGm65NjGHwBWR+HtWiTwH6 t/G3YoXa6Qcvs1TUH+CNYGwmBHwutF2+16U2+XBDJc6qH1iVyP2+jubT03z/G8b3 ty8V4erOcjRzyreAGGR5V6DpmyMurL/QuMuPCXKh/2mMcr5hjofdY4XQOPBghREq E/nEKC8sA231Rcvfa8IeRbgJyCgs1NL8holGzZv1NCJuGcUA4w3lcg8mfDGQnrkb 2B9B62drP4QEBjcBd/819/iuf9Qe08mxEhTRXIBIGhfwn2M/et+SFpC+wLdfD+C6 12amsClU0BV1WyVDM/tWbFRAlNC5oTq6o5B9LRNjGl6K1SI8sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNUnErveadhEYhrfuFTncBp9iPJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTRmYWMwOTQtNjRjYy0z MjQxLWIxYTctNjM0MmE1Yjk2MWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYshwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmwi3Oo8MNQhNejupizrPXDeecDrIRNQdGbXrK7ov4gVASvmZMTAmqk 9P9wa1c0hbFuqqpjH5UvIDv3xoMB/FL8vdzcA93u6l7DmA4vd+SCsKDuMfimqz8l wLjgNUexBYOSIbM8HG2Uz6+gQH31qQJATVYEBvbtlF+hCvf3Vsctr1pN/fe3r2v3 DAniMxWi9O+0fS8vQTiNg4itN2KWk9g6z/KzewJ3rEOmuQPyh1PBwZdiXE30Idl0 xRAShBatvZERxM0cnqb8ecOihNIctlgnS8phqLf+q2MTOlCxSgHBaXHBWxezbhRy yjxR8+afVuhCnXjBA48rqDD6lDCF5Hk= -----END CERTIFICATE-----Generated at Sun Oct 25 14:25:07 2026 by rpki-client