$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a94f1aa-ec01-3c25-b36e-e4b16a4e9a98.roa File: 8a94f1aa-ec01-3c25-b36e-e4b16a4e9a98.roa (raw, json) Hash identifier: gvUoIEP+67gnbquUpekBJpSm5AToTh6fLMegp4LKlvE= Subject key identifier: F8:B4:83:08:3F:5C:C1:5C:7F:D3:6A:D9:DB:23:16:2B:62:12:AC:1D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4E911A3012E8AB5DE23F00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a94f1aa-ec01-3c25-b36e-e4b16a4e9a98.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33668 IP address blocks: 98.243.94.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4e:91:1a:30:12:e8:ab:5d:e2:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=ccf4ea3e-ed9a-4095-a90a-d1a9694701b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:20:da:03:33:37:78:4b:1a:0f:5d:8d:ef:cb: 69:0c:fe:c9:ae:b4:84:09:06:c2:e4:bf:dc:02:29: e5:08:31:68:ab:a8:b6:5d:14:1b:88:43:e4:dc:0e: f1:77:5d:94:74:bc:7f:ee:c0:ef:61:22:78:48:bd: eb:2a:19:4a:c4:53:15:eb:de:2a:14:49:6a:d5:5b: e9:3b:30:ce:50:0a:88:87:84:2c:b3:df:26:7f:fc: 10:a6:8c:dd:7e:89:6f:d3:c2:67:5e:1c:23:e2:c9: 87:9d:61:a9:72:4c:60:f3:32:e3:b0:63:b7:93:45: 05:cc:89:1f:fa:02:1c:26:71:0f:96:8e:3e:d3:76: 88:a4:43:c0:fd:e7:0f:8a:f9:54:70:ab:97:d4:48: b3:8d:56:d2:f1:c0:5c:0a:f2:3d:c6:00:ed:31:e5: 30:44:9a:f0:37:e2:fb:6c:90:1b:fd:71:c8:92:cf: d9:04:e5:4d:74:59:f4:ed:8a:bf:87:53:df:23:f8: e5:d5:58:a5:63:13:7f:32:27:55:06:f5:ca:5c:77: 1b:2b:50:bc:7c:27:8e:7c:52:55:8a:8c:b5:2a:8b: 0a:fe:c7:e7:bb:3f:cd:55:9e:cd:e0:78:ba:22:77: e1:d5:55:25:f9:03:32:f1:24:9e:7d:fd:51:8f:9b: e0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B4:83:08:3F:5C:C1:5C:7F:D3:6A:D9:DB:23:16:2B:62:12:AC:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a94f1aa-ec01-3c25-b36e-e4b16a4e9a98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.243.94.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:12:b2:98:fb:53:73:25:f9:a3:72:b5:c5:5e:4f:4a:c5:3f: 3c:7c:c7:af:1a:64:d7:a0:74:65:cb:f3:ce:1b:bd:f6:7b:6e: 49:48:ca:d3:e9:e5:1c:ef:74:ce:00:66:79:ec:0c:2a:44:46: 85:75:06:0b:8c:13:5d:84:65:fb:43:ed:2b:62:97:2a:18:c5: 51:1a:d2:51:88:97:0f:bd:62:e3:98:05:41:9c:85:bd:32:a5: 35:b9:96:0b:31:4e:ce:2e:fc:51:72:9b:74:5b:a1:54:b4:bc: 56:2d:5f:a5:e2:52:ac:00:5b:9c:45:5e:36:85:67:ee:e4:ee: b0:c3:0a:ae:b6:f3:4f:0e:95:98:45:9c:96:31:4b:38:6a:1e: ce:2d:73:e0:bf:9a:b3:25:5f:11:67:fe:d1:c9:48:e6:57:58: 11:94:16:69:fa:b5:0a:a4:5a:53:20:c0:b3:72:0f:73:30:a1: 8e:3a:15:fe:35:26:1a:7d:f1:8c:34:e9:a8:ae:82:7e:95:60: 76:b2:8b:4c:48:d9:5b:16:56:12:84:e3:7e:92:78:09:5a:5c: a5:c5:06:59:d3:c7:d2:e3:73:bf:f5:64:67:79:ce:81:d4:cc: 77:28:3f:2f:0d:62:bd:2f:1c:49:88:d9:cf:3f:1a:e3:2f:89: 26:cf:f9:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TpEaMBLoq13iPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk Y2NmNGVhM2UtZWQ5YS00MDk1LWE5MGEtZDFhOTY5NDcwMWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCDaAzM3eEsaD12N78tpDP7JrrSECQbC5L/c AinlCDFoq6i2XRQbiEPk3A7xd12UdLx/7sDvYSJ4SL3rKhlKxFMV694qFElq1Vvp OzDOUAqIh4Qss98mf/wQpozdfolv08JnXhwj4smHnWGpckxg8zLjsGO3k0UFzIkf +gIcJnEPlo4+03aIpEPA/ecPivlUcKuX1EizjVbS8cBcCvI9xgDtMeUwRJrwN+L7 bJAb/XHIks/ZBOVNdFn07Yq/h1PfI/jl1VilYxN/MidVBvXKXHcbK1C8fCeOfFJV ioy1KosK/sfnuz/NVZ7N4Hi6Infh1VUl+QMy8SSeff1Rj5vguwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPi0gwg/XMFcf9Nq2dsjFitiEqwdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGE5NGYxYWEtZWMwMS0z YzI1LWIzNmUtZTRiMTZhNGU5YTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYvNeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL0Sspj7U3Ml+aNytcVeT0rFPzx8x68aZNegdGXL884bvfZ7bklIytPp 5RzvdM4AZnnsDCpERoV1BguME12EZftD7StilyoYxVEa0lGIlw+9YuOYBUGchb0y pTW5lgsxTs4u/FFym3RboVS0vFYtX6XiUqwAW5xFXjaFZ+7k7rDDCq62808OlZhF nJYxSzhqHs4tc+C/mrMlXxFn/tHJSOZXWBGUFmn6tQqkWlMgwLNyD3MwoY46Ff41 Jhp98Yw06aiugn6VYHayi0xI2VsWVhKE436SeAlaXKXFBlnTx9Ljc7/1ZGd5zoHU zHcoPy8NYr0vHEmI2c8/GuMviSbP+ek= -----END CERTIFICATE-----Generated at Wed Oct 21 09:23:19 2026 by rpki-client