$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9e50d57f-9fa4-3073-a97c-1dc33e45f6a7.roa File: 9e50d57f-9fa4-3073-a97c-1dc33e45f6a7.roa (raw, json) Hash identifier: aS6uqFncv99HhL0IYTJ/NywVVc6FJ+YZ135SayHupZU= Subject key identifier: 2C:E3:83:E9:80:9C:0A:48:6E:C3:5B:EA:C5:2B:F8:14:A2:51:24:22 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED862D819FC19B099F087F0A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9e50d57f-9fa4-3073-a97c-1dc33e45f6a7.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33668 IP address blocks: 98.209.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:62:d8:19:fc:19:b0:99:f0:87:f0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=78da1130-8856-4b6c-8f79-b4ae7dc4c0bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d9:d4:85:e1:c8:88:dd:77:6b:60:1f:2f:18: 9a:95:fb:a3:b6:66:ce:a2:e4:23:f4:2b:1a:01:1b: e8:52:32:5f:87:ec:6e:7a:94:fb:48:6a:58:81:13: af:0b:bf:b5:a0:67:47:85:af:c2:cb:9a:1f:8b:98: 08:19:b9:d4:ca:5b:d9:06:9d:d0:89:11:39:13:95: b8:04:ac:9b:b5:e5:98:4e:50:2a:18:59:e7:f5:e6: 5f:0f:85:c1:50:07:35:d8:ab:c0:9f:0e:f8:d7:00: bb:50:5c:a0:0e:50:95:c7:ce:1d:bb:5f:93:8e:7e: ff:46:ae:53:f5:bc:20:04:af:c5:f9:0f:c3:d5:4e: 9d:e8:ea:de:3b:0b:cd:47:55:e1:1a:82:7f:aa:62: 5d:18:53:7d:4f:32:53:a4:47:74:d3:55:70:c0:e1: 53:fa:7d:41:c6:2b:ef:a6:60:7f:af:d9:1d:41:1a: 6a:fb:96:89:dc:9f:c0:f8:13:15:65:51:f1:57:8f: db:d5:1c:1a:6c:0c:29:6e:a2:ba:4a:8a:b4:16:39: 25:a4:3a:be:83:80:e5:9b:ff:b5:22:66:de:b5:0c: 79:a9:f3:d0:9c:f7:7e:e6:bf:de:0c:5e:9c:bd:a6: c1:42:75:77:b5:12:69:40:14:db:05:e8:d8:08:28: 9b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E3:83:E9:80:9C:0A:48:6E:C3:5B:EA:C5:2B:F8:14:A2:51:24:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9e50d57f-9fa4-3073-a97c-1dc33e45f6a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.209.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:dc:95:bb:16:eb:3e:67:ae:56:b9:a7:49:3f:c0:2e:cd:c1: 33:10:b2:a3:22:6a:d6:85:8d:d2:d1:74:6b:76:0d:ad:cb:04: 7a:39:7f:fb:13:d1:53:2d:cb:dd:a8:fa:c6:3c:77:66:71:bd: 59:d1:65:fc:35:27:2e:2b:65:0f:f7:a6:e2:47:ce:42:be:d1: d6:c3:93:3b:03:b8:2e:95:76:1e:a3:7b:4d:69:75:17:23:e3: 35:75:37:39:95:8b:f1:a3:1c:22:b3:63:ea:46:7b:db:7d:c4: d0:fd:ca:e8:b5:93:88:ca:8c:ce:e9:ed:47:7e:2a:ec:ad:89: 73:0d:a9:2d:62:f8:8c:69:5f:3c:7c:ea:ee:b6:12:58:73:d6: 49:25:a5:5d:64:7a:8d:b1:2a:5a:0a:71:cd:1d:4b:ee:ab:fa: 83:50:12:c3:ff:68:06:b6:d1:25:a4:a5:1b:a8:44:ae:79:ba: 01:db:7e:2c:29:58:b5:54:88:04:be:d9:4b:93:85:66:9c:f5: 15:14:1f:cd:46:c0:c0:13:d1:63:be:9e:c8:fd:0e:32:5e:a0: ac:77:2e:95:47:fc:b0:93:96:0c:53:41:0d:5a:37:12:72:88: ff:e9:e2:ad:79:d9:ae:02:88:d1:00:d5:22:5b:00:9d:93:23: 67:45:e3:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYtgZ/BmwmfCH8KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk NzhkYTExMzAtODg1Ni00YjZjLThmNzktYjRhZTdkYzRjMGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstnUheHIiN13a2AfLxialfujtmbOouQj9Csa ARvoUjJfh+xuepT7SGpYgROvC7+1oGdHha/Cy5ofi5gIGbnUylvZBp3QiRE5E5W4 BKybteWYTlAqGFnn9eZfD4XBUAc12KvAnw741wC7UFygDlCVx84du1+Tjn7/Rq5T 9bwgBK/F+Q/D1U6d6OreOwvNR1XhGoJ/qmJdGFN9TzJTpEd001VwwOFT+n1Bxivv pmB/r9kdQRpq+5aJ3J/A+BMVZVHxV4/b1RwabAwpbqK6Soq0FjklpDq+g4Dlm/+1 ImbetQx5qfPQnPd+5r/eDF6cvabBQnV3tRJpQBTbBejYCCibMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCzjg+mAnApIbsNb6sUr+BSiUSQiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWU1MGQ1N2YtOWZhNC0z MDczLWE5N2MtMWRjMzNlNDVmNmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYtFWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrclbsW6z5nrla5p0k/wC7NwTMQsqMiataFjdLRdGt2Da3LBHo5f/sT 0VMty92o+sY8d2ZxvVnRZfw1Jy4rZQ/3puJHzkK+0dbDkzsDuC6Vdh6je01pdRcj 4zV1NzmVi/GjHCKzY+pGe9t9xND9yui1k4jKjM7p7Ud+KuytiXMNqS1i+IxpXzx8 6u62Elhz1kklpV1keo2xKloKcc0dS+6r+oNQEsP/aAa20SWkpRuoRK55ugHbfiwp WLVUiAS+2UuThWac9RUUH81GwMAT0WO+nsj9DjJeoKx3LpVH/LCTlgxTQQ1aNxJy iP/p4q152a4CiNEA1SJbAJ2TI2dF40E= -----END CERTIFICATE-----Generated at Tue Sep 1 05:30:30 2026 by rpki-client