$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68a2e72b-2648-3383-8ad9-9d07f5f2ca78.roa File: 68a2e72b-2648-3383-8ad9-9d07f5f2ca78.roa (raw, json) Hash identifier: +7+ndkg40GN5ef6iHr1dGti8PBkCHbTMHbuxPAhOFyc= Subject key identifier: 2A:EB:31:2F:22:74:24:8E:22:60:15:D3:BB:AB:AF:61:F0:9F:DE:05 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4FB9B4A93095FD2556FF00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68a2e72b-2648-3383-8ad9-9d07f5f2ca78.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33668 IP address blocks: 98.209.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4f:b9:b4:a9:30:95:fd:25:56:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=561c3d85-6db4-4be6-9d4e-f6c498e883ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9e:86:d3:29:f2:3d:d6:11:3e:42:98:9b:94: be:f0:68:bc:bd:55:dd:20:4d:56:0d:27:53:42:67: 23:c5:31:07:57:b2:21:8f:e2:f3:1f:2d:7d:57:5c: b7:d7:1c:b7:17:b1:ab:8b:51:44:82:5d:3c:89:91: 14:4d:26:75:14:71:26:56:c2:bd:58:1f:93:6b:3b: 5b:22:cc:bb:f0:21:df:f9:ad:44:3a:75:fa:4a:18: a8:f7:e6:6d:f7:df:50:60:c3:a4:26:bf:37:24:5e: 9a:89:7c:b5:c6:2d:6f:ae:fd:63:58:40:79:0f:f0: 6a:a0:16:f4:84:7d:21:9b:f1:78:00:a5:e0:c0:fa: 95:f2:76:a5:aa:0f:64:eb:2e:d9:a6:58:f9:d4:d7: 07:53:66:37:f6:50:1c:11:0c:19:6d:7f:75:21:a7: 68:fb:2a:c8:9c:0f:40:80:da:ff:f0:ac:9f:b0:79: 87:43:d5:74:54:4d:af:76:66:11:54:04:e5:d6:e4: 6a:3f:c7:4f:e5:96:29:b5:c6:e3:f5:ab:03:e9:d3: c7:a3:92:cb:ce:1d:3f:72:2c:10:a3:62:6d:82:1c: bd:a7:81:17:31:35:ab:5e:3e:7b:49:35:59:01:5d: d0:d7:fa:e7:d2:7a:8f:27:3d:26:89:7e:e1:21:fe: 2d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:EB:31:2F:22:74:24:8E:22:60:15:D3:BB:AB:AF:61:F0:9F:DE:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68a2e72b-2648-3383-8ad9-9d07f5f2ca78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.209.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:bd:6c:b4:f7:09:c8:2f:96:14:86:b9:5f:36:59:1d:44:2b: d7:e0:b3:c0:04:d2:e4:20:e9:3b:5c:9a:dc:d6:46:9c:3d:08: 81:5e:b8:33:9e:d9:97:91:05:4b:fe:61:aa:bc:8f:1f:32:f5: 16:ff:4f:61:fe:c2:37:95:74:59:8f:37:3b:84:73:15:86:17: 4b:c3:3f:19:f1:79:79:bb:9a:09:ed:be:f6:5b:b1:2b:d3:7b: 8a:30:38:b1:a2:f8:dd:c9:0a:7e:9a:81:6b:98:97:0f:69:fa: 18:34:9a:ae:31:be:c3:39:a2:e2:90:e0:40:30:c3:3e:92:5e: e6:0d:36:76:2a:d3:82:cc:a0:28:a3:73:74:28:12:f6:b9:27: a5:0b:55:39:0e:c3:09:db:98:44:95:94:5a:2c:1d:52:02:a9: 6a:90:18:45:0b:06:a1:6f:99:40:81:4b:6b:5e:29:81:6c:95: 26:a9:8b:59:73:5b:dd:ff:55:93:24:8b:5d:b2:3a:1b:cf:da: ae:9f:d0:9c:9c:df:2c:f3:ff:0d:e0:3d:83:b6:74:74:63:0e: 60:c7:ab:5d:d2:53:46:79:ef:21:df:b6:c3:9f:5d:76:c5:36: 73:1e:df:7b:b1:a7:52:e1:67:0f:a0:d0:73:b5:bf:67:28:aa: a6:a9:7c:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96T7m0qTCV/SVW/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk NTYxYzNkODUtNmRiNC00YmU2LTlkNGUtZjZjNDk4ZTg4M2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZ6G0ynyPdYRPkKYm5S+8Gi8vVXdIE1WDSdT QmcjxTEHV7Ihj+LzHy19V1y31xy3F7Gri1FEgl08iZEUTSZ1FHEmVsK9WB+Taztb Isy78CHf+a1EOnX6Shio9+Zt999QYMOkJr83JF6aiXy1xi1vrv1jWEB5D/BqoBb0 hH0hm/F4AKXgwPqV8nalqg9k6y7Zplj51NcHU2Y39lAcEQwZbX91Iado+yrInA9A gNr/8KyfsHmHQ9V0VE2vdmYRVATl1uRqP8dP5ZYptcbj9asD6dPHo5LLzh0/ciwQ o2Jtghy9p4EXMTWrXj57STVZAV3Q1/rn0nqPJz0miX7hIf4tkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCrrMS8idCSOImAV07urr2Hwn94FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjhhMmU3MmItMjY0OC0z MzgzLThhZDktOWQwN2Y1ZjJjYTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYtHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAa9bLT3CcgvlhSGuV82WR1EK9fgs8AE0uQg6TtcmtzWRpw9CIFeuDOe 2ZeRBUv+Yaq8jx8y9Rb/T2H+wjeVdFmPNzuEcxWGF0vDPxnxeXm7mgntvvZbsSvT e4owOLGi+N3JCn6agWuYlw9p+hg0mq4xvsM5ouKQ4EAwwz6SXuYNNnYq04LMoCij c3QoEva5J6ULVTkOwwnbmESVlFosHVICqWqQGEULBqFvmUCBS2teKYFslSapi1lz W93/VZMki12yOhvP2q6f0Jyc3yzz/w3gPYO2dHRjDmDHq13SU0Z57yHftsOfXXbF NnMe33uxp1LhZw+g0HO1v2coqqapfAc= -----END CERTIFICATE-----Generated at Tue Oct 20 11:17:10 2026 by rpki-client