$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a21bc0af-e61d-3c7e-9051-5e89744fe032.roa File: a21bc0af-e61d-3c7e-9051-5e89744fe032.roa (raw, json) Hash identifier: jkYY2WHUPNn8r815iBRrDvKvlbLXg48VS7AvfksbjM4= Subject key identifier: 22:76:36:C9:17:46:4F:0A:D7:9F:5C:8D:E4:50:F1:D1:62:63:F6:4A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4FBCA1D38D054C86D41B40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a21bc0af-e61d-3c7e-9051-5e89744fe032.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33668 IP address blocks: 98.243.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4f:bc:a1:d3:8d:05:4c:86:d4:1b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=e8d393cb-e6db-4d37-b1eb-dbe0e3bfca69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ea:32:6a:70:c4:b0:7d:8e:30:bf:61:a8:53: f5:56:8e:45:69:4c:54:b8:6d:6d:ae:fb:98:eb:71: 95:21:2e:4b:1a:fa:28:53:15:dd:5e:77:14:9c:d7: 73:a0:bf:d0:41:30:38:5c:9b:10:ce:3b:ce:ab:2b: 29:4f:1e:de:e5:d2:9f:19:95:e9:23:75:5c:53:d0: 3c:eb:60:05:eb:9c:c0:ed:54:28:e9:77:83:2a:da: ac:f0:34:dc:f0:f9:93:f0:ce:e9:eb:3f:1b:ce:2d: 83:df:f8:42:e7:e1:16:b1:d6:61:78:eb:6e:5e:88: 9f:5c:18:19:91:a0:56:80:ca:2e:5a:c4:39:da:d4: e6:db:55:b1:43:87:14:af:4d:38:10:6a:6d:fa:f3: 52:75:af:72:4d:8e:14:54:b3:8d:9f:01:56:87:8b: ef:a7:f9:92:5d:fd:cf:77:6a:b2:34:f2:5b:b9:0b: 80:b8:5e:be:5b:a7:55:c1:b6:1b:77:6a:b1:19:e8: 59:3e:de:f5:6f:ae:04:7f:4c:82:d9:03:69:26:35: e9:08:d5:83:f1:dd:7c:21:1b:b9:de:15:1d:b2:20: 21:d9:db:fd:6a:6f:0a:d8:0d:4a:8c:90:18:45:d8: d3:84:ef:44:8f:18:73:83:8c:7e:c8:74:28:a4:7c: 77:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:76:36:C9:17:46:4F:0A:D7:9F:5C:8D:E4:50:F1:D1:62:63:F6:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a21bc0af-e61d-3c7e-9051-5e89744fe032.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.243.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:f3:1e:56:5d:76:2f:be:78:f5:fa:c2:41:b9:07:04:8d:42: 0f:c7:84:d9:b9:8b:fc:66:fd:6c:5a:bf:fd:bc:c3:91:75:ad: 15:26:fc:fd:22:04:fa:2c:a3:f3:16:5b:d7:a0:be:35:73:c1: bd:7c:8e:1c:87:ad:cf:13:54:ce:1e:49:99:08:17:9a:aa:fc: 1a:78:c1:bc:21:2c:fa:f6:73:61:3d:5f:bc:6b:47:5e:92:7d: 21:68:fb:74:8d:07:45:fe:76:10:8b:6d:99:8b:82:1f:36:9d: 42:07:e9:92:8f:e6:d0:24:17:87:6c:ea:71:af:aa:eb:e3:46: 87:87:ba:50:0f:a7:3c:09:a6:0f:db:d9:13:7b:10:a6:fd:ad: e4:3e:da:5a:37:7b:50:ab:e8:99:6a:b1:db:e5:9a:02:8c:2a: 08:7e:be:33:a9:2b:1d:52:80:e0:eb:aa:2d:3a:9f:47:10:59: b6:2b:fc:46:1e:fd:b2:82:49:0f:c3:be:de:1a:3d:76:f1:c3: 59:0b:e6:12:43:7c:eb:b4:b3:aa:94:54:9e:53:20:c1:00:12: 0b:f6:d1:ed:58:46:2b:26:7c:7a:93:ff:ef:31:8f:6a:f9:a5: 99:f5:31:2b:e3:9f:f9:39:37:56:fd:64:d3:81:5f:23:dd:30: 62:4a:46:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96T7yh040FTIbUG0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk ZThkMzkzY2ItZTZkYi00ZDM3LWIxZWItZGJlMGUzYmZjYTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4uoyanDEsH2OML9hqFP1Vo5FaUxUuG1trvuY 63GVIS5LGvooUxXdXncUnNdzoL/QQTA4XJsQzjvOqyspTx7e5dKfGZXpI3VcU9A8 62AF65zA7VQo6XeDKtqs8DTc8PmT8M7p6z8bzi2D3/hC5+EWsdZheOtuXoifXBgZ kaBWgMouWsQ52tTm21WxQ4cUr004EGpt+vNSda9yTY4UVLONnwFWh4vvp/mSXf3P d2qyNPJbuQuAuF6+W6dVwbYbd2qxGehZPt71b64Ef0yC2QNpJjXpCNWD8d18IRu5 3hUdsiAh2dv9am8K2A1KjJAYRdjThO9Ejxhzg4x+yHQopHx3gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJ2NskXRk8K159cjeRQ8dFiY/ZKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTIxYmMwYWYtZTYxZC0z YzdlLTkwNTEtNWU4OTc0NGZlMDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYvP+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjzHlZddi++ePX6wkG5BwSNQg/HhNm5i/xm/Wxav/28w5F1rRUm/P0i BPoso/MWW9egvjVzwb18jhyHrc8TVM4eSZkIF5qq/Bp4wbwhLPr2c2E9X7xrR16S fSFo+3SNB0X+dhCLbZmLgh82nUIH6ZKP5tAkF4ds6nGvquvjRoeHulAPpzwJpg/b 2RN7EKb9reQ+2lo3e1Cr6JlqsdvlmgKMKgh+vjOpKx1SgODrqi06n0cQWbYr/EYe /bKCSQ/Dvt4aPXbxw1kL5hJDfOu0s6qUVJ5TIMEAEgv20e1YRismfHqT/+8xj2r5 pZn1MSvjn/k5N1b9ZNOBXyPdMGJKRt8= -----END CERTIFICATE-----Generated at Sat Oct 24 18:44:09 2026 by rpki-client