$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64b24e17-1dc7-33ad-a2dd-a7e112e16286.roa File: 64b24e17-1dc7-33ad-a2dd-a7e112e16286.roa (raw, json) Hash identifier: jKN+ctqG0MsTK6bF8o6W3jWjWKoUlsNnFPcyZnfB9P0= Subject key identifier: EF:0A:F1:4E:9F:E6:85:25:77:AA:4E:46:A1:FA:89:30:6F:2B:19:21 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4ED22E0BF97DAF28698500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64b24e17-1dc7-33ad-a2dd-a7e112e16286.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33662 IP address blocks: 98.39.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4e:d2:2e:0b:f9:7d:af:28:69:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=3ba4e48b-e1ba-4af3-b19f-a4c6864bb990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b0:ca:51:88:b3:75:d2:4b:81:8c:1a:6f:04: e1:1d:6d:95:25:1f:ba:81:17:2a:4f:e8:14:8f:62: 8d:e1:61:c1:33:28:ff:89:da:4a:43:cd:83:0a:0b: f0:e9:f3:49:8c:89:7b:d3:d2:2a:a8:06:22:b6:f6: 21:98:48:56:02:a5:57:5b:0e:ed:aa:d4:5b:ec:cd: 39:9c:8d:5b:17:e6:ad:62:09:bf:d9:31:ee:0a:81: f2:d3:3b:dc:17:1a:50:9f:33:07:47:81:da:ae:40: 5d:41:13:7f:fe:bd:2b:2e:4e:2e:9d:cd:15:05:be: bf:c9:28:27:a6:09:2c:7f:5b:07:22:8b:db:fc:8d: a7:72:92:5b:d0:fb:14:2c:b3:5d:f5:88:e2:b6:c5: 1f:ad:23:3d:7c:21:79:0f:06:74:4e:38:23:d7:af: 2c:af:56:ba:42:61:77:54:d0:b7:25:56:6f:ad:d3: c0:92:eb:ba:83:16:6d:0f:fa:06:7e:a8:6d:d5:9a: 06:59:d1:c6:6e:46:d6:db:f2:e4:f8:9a:ae:e5:ce: dd:5f:ff:7e:0e:9a:8e:c3:fe:95:d0:13:0c:4b:2f: 83:57:ee:38:b8:d7:c3:bf:e4:42:a0:db:a3:96:4e: b2:b8:58:c4:72:3f:20:81:bd:d8:d9:56:5b:91:43: c5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:0A:F1:4E:9F:E6:85:25:77:AA:4E:46:A1:FA:89:30:6F:2B:19:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64b24e17-1dc7-33ad-a2dd-a7e112e16286.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.39.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:c8:5b:bc:96:36:f2:07:a6:69:c5:4a:10:3a:c2:4c:d6:3e: 5a:ca:47:8d:6a:6f:96:2c:70:eb:4c:29:bb:7d:9c:b0:19:6b: 34:c6:33:3b:7e:98:7b:79:b5:15:5b:d0:67:c9:ae:dc:b1:54: 03:2f:5a:4b:ff:7e:68:4d:a0:70:6c:e7:1d:05:fb:56:2e:c5: 26:77:38:22:7d:2f:68:69:93:0a:4f:c5:6d:04:17:fd:ff:3e: fe:1d:ea:d5:a3:86:a9:5a:40:4e:bc:8d:d4:9e:6f:83:52:3f: 55:08:22:49:cf:b5:15:21:ff:b7:1d:06:57:b5:bf:21:da:74: 34:c1:f1:43:8a:7c:76:86:1f:46:30:1c:47:cb:b5:71:26:c0: e6:c6:6d:e0:4d:75:4e:d8:7d:c9:07:24:90:f2:e6:e2:2c:05: 43:26:ce:a1:9a:14:a2:9b:98:27:a3:15:24:61:83:5e:4e:60: fe:d1:75:80:6f:8c:db:9e:31:d6:cd:52:00:7c:a4:b1:54:03: bd:66:37:97:32:97:8c:46:09:c0:3b:b7:71:bb:b8:05:0b:78: 4c:ed:45:a0:d8:72:92:67:92:f9:46:60:fb:70:d5:f5:df:e7: 30:2f:f7:28:51:50:a3:a2:2b:02:f0:3b:94:f1:73:81:70:39: e9:a1:d8:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TtIuC/l9ryhphQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk M2JhNGU0OGItZTFiYS00YWYzLWIxOWYtYTRjNjg2NGJiOTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLDKUYizddJLgYwabwThHW2VJR+6gRcqT+gU j2KN4WHBMyj/idpKQ82DCgvw6fNJjIl709IqqAYitvYhmEhWAqVXWw7tqtRb7M05 nI1bF+atYgm/2THuCoHy0zvcFxpQnzMHR4HarkBdQRN//r0rLk4unc0VBb6/ySgn pgksf1sHIovb/I2ncpJb0PsULLNd9YjitsUfrSM9fCF5DwZ0Tjgj168sr1a6QmF3 VNC3JVZvrdPAkuu6gxZtD/oGfqht1ZoGWdHGbkbW2/Lk+Jqu5c7dX/9+DpqOw/6V 0BMMSy+DV+44uNfDv+RCoNujlk6yuFjEcj8ggb3Y2VZbkUPFMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO8K8U6f5oUld6pORqH6iTBvKxkhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjRiMjRlMTctMWRjNy0z M2FkLWEyZGQtYTdlMTEyZTE2Mjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYidAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3IW7yWNvIHpmnFShA6wkzWPlrKR41qb5YscOtMKbt9nLAZazTGMzt+ mHt5tRVb0GfJrtyxVAMvWkv/fmhNoHBs5x0F+1YuxSZ3OCJ9L2hpkwpPxW0EF/3/ Pv4d6tWjhqlaQE68jdSeb4NSP1UIIknPtRUh/7cdBle1vyHadDTB8UOKfHaGH0Yw HEfLtXEmwObGbeBNdU7YfckHJJDy5uIsBUMmzqGaFKKbmCejFSRhg15OYP7RdYBv jNueMdbNUgB8pLFUA71mN5cyl4xGCcA7t3G7uAULeEztRaDYcpJnkvlGYPtw1fXf 5zAv9yhRUKOiKwLwO5Txc4FwOemh2Aw= -----END CERTIFICATE-----Generated at Sun Oct 25 04:55:45 2026 by rpki-client