$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91c71dfd-1768-3fb4-8d63-1c652a291df3.roa File: 91c71dfd-1768-3fb4-8d63-1c652a291df3.roa (raw, json) Hash identifier: 4qxyeI2cAQcQ/pjFKzr2hq4uFCR4fnFI5vZFLIgjnwQ= Subject key identifier: 56:B0:B5:18:28:14:6E:CB:3C:47:06:95:C2:68:AD:11:A0:08:0A:06 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4FF8695BBE8AE394AAAE80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91c71dfd-1768-3fb4-8d63-1c652a291df3.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33662 IP address blocks: 98.198.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4f:f8:69:5b:be:8a:e3:94:aa:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=4d31a956-9fa3-4a82-a6cb-3b341ad7dfbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:42:b8:5e:82:bc:26:cf:d2:b8:e2:47:b2:24: e0:e8:3d:e0:13:92:1b:bc:36:18:af:5c:ec:ac:a7: 58:e0:b3:34:f2:fc:97:2c:9a:33:43:4c:df:7f:3b: 88:1f:18:8a:58:d3:a7:84:48:4f:39:73:a4:8b:28: 5c:08:4b:e0:6d:33:6b:f4:fd:8e:9a:ce:41:18:95: fe:a6:9d:e7:55:8b:8e:56:36:fd:31:25:a0:2a:fd: 05:68:b9:8d:f8:00:66:31:7f:68:b8:3f:da:54:4d: 30:1d:15:79:fd:47:5d:7c:57:fc:3e:f8:9e:15:da: 34:bc:81:40:77:f5:8b:9c:4e:14:18:8b:90:f2:0b: 44:0c:9b:06:8d:64:3e:48:df:53:2a:ab:a6:c0:6e: a4:02:05:5e:d1:60:de:50:43:fa:f6:c4:0c:6b:aa: db:05:8a:96:39:85:63:1a:a4:1a:a4:bd:66:91:06: 00:bc:99:4b:2b:5c:86:7c:16:d8:e3:e3:38:f1:ca: 53:ab:78:21:f4:ba:76:54:fd:db:0f:da:32:42:1e: 87:0b:84:75:01:f4:b0:41:f3:28:a3:86:85:5b:7c: 25:1b:77:55:1f:ed:92:e2:88:16:b7:7e:68:aa:c8: a9:42:ac:d7:fb:97:5b:0b:1b:6e:40:f8:f6:63:5d: 1e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:B0:B5:18:28:14:6E:CB:3C:47:06:95:C2:68:AD:11:A0:08:0A:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91c71dfd-1768-3fb4-8d63-1c652a291df3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.198.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:04:b9:e4:54:95:05:67:a9:84:8b:1d:f6:89:be:ff:6f:19: e7:0f:90:fb:61:e5:4a:9d:6a:fa:9b:fd:7f:cd:75:94:79:f8: 91:10:90:3c:b8:60:ae:dd:84:9e:85:d2:fe:bf:84:fa:1f:52: 8c:9d:6d:7d:bc:13:73:b7:92:eb:7f:ce:82:8a:71:72:96:7b: 95:0f:13:01:29:80:cc:ee:69:ff:45:35:92:e0:40:16:60:57: ae:3e:c3:5d:d0:b5:dd:fe:1d:7a:4a:71:45:2f:27:56:b6:c3: 47:e6:93:6d:8c:eb:52:eb:24:2f:ec:aa:dd:2a:81:22:07:0b: b6:01:99:45:d1:30:b7:e6:17:b2:d9:b3:c3:b3:bd:51:de:7c: f5:ae:58:0e:45:82:6c:77:a2:70:f8:70:3b:8d:e4:ce:ae:2a: 61:87:65:41:51:ee:e7:78:73:a8:aa:49:74:1a:26:2d:7f:70: 4d:56:d6:a4:66:5b:91:00:72:85:44:fe:3f:2c:3a:d1:88:84: 07:c2:b0:12:fa:be:2c:91:df:19:d8:7c:69:56:55:f1:43:ca: 9b:37:7c:b9:a1:ad:cd:bf:5d:1f:6f:34:4d:39:28:17:7e:2d: 1a:5a:5b:00:80:75:1a:f5:0d:cc:de:b9:b2:2d:d5:c1:b8:34: f2:37:95:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96T/hpW76K45SqroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk NGQzMWE5NTYtOWZhMy00YTgyLWE2Y2ItM2IzNDFhZDdkZmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikK4XoK8Js/SuOJHsiTg6D3gE5IbvDYYr1zs rKdY4LM08vyXLJozQ0zffzuIHxiKWNOnhEhPOXOkiyhcCEvgbTNr9P2Oms5BGJX+ pp3nVYuOVjb9MSWgKv0FaLmN+ABmMX9ouD/aVE0wHRV5/UddfFf8PvieFdo0vIFA d/WLnE4UGIuQ8gtEDJsGjWQ+SN9TKqumwG6kAgVe0WDeUEP69sQMa6rbBYqWOYVj GqQapL1mkQYAvJlLK1yGfBbY4+M48cpTq3gh9Lp2VP3bD9oyQh6HC4R1AfSwQfMo o4aFW3wlG3dVH+2S4ogWt35oqsipQqzX+5dbCxtuQPj2Y10etwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFawtRgoFG7LPEcGlcJorRGgCAoGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTFjNzFkZmQtMTc2OC0z ZmI0LThkNjMtMWM2NTJhMjkxZGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYsaoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYEueRUlQVnqYSLHfaJvv9vGecPkPth5Uqdavqb/X/NdZR5+JEQkDy4 YK7dhJ6F0v6/hPofUoydbX28E3O3kut/zoKKcXKWe5UPEwEpgMzuaf9FNZLgQBZg V64+w13Qtd3+HXpKcUUvJ1a2w0fmk22M61LrJC/sqt0qgSIHC7YBmUXRMLfmF7LZ s8OzvVHefPWuWA5Fgmx3onD4cDuN5M6uKmGHZUFR7ud4c6iqSXQaJi1/cE1W1qRm W5EAcoVE/j8sOtGIhAfCsBL6viyR3xnYfGlWVfFDyps3fLmhrc2/XR9vNE05KBd+ LRpaWwCAdRr1DczeubIt1cG4NPI3lUc= -----END CERTIFICATE-----Generated at Tue Oct 20 09:17:40 2026 by rpki-client