$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a8e459d5-3cdc-3d1d-a5d7-6436b5c0d2f2.roa File: a8e459d5-3cdc-3d1d-a5d7-6436b5c0d2f2.roa (raw, json) Hash identifier: 4SiSPZ6FT+D1ljMiMWa7GhuBys87xR1lDe8Sk9jNmyo= Subject key identifier: 99:3D:75:54:B9:10:15:E9:D6:D8:84:F0:7D:74:82:AE:35:DB:CA:71 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119E13CDD4ED63FDA86AFA00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a8e459d5-3cdc-3d1d-a5d7-6436b5c0d2f2.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33491 IP address blocks: 98.222.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9e:13:cd:d4:ed:63:fd:a8:6a:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=3c28c298-326a-465d-9c3d-c285199ddd0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ed:fc:c2:9c:d9:bc:03:a4:f6:af:85:81:5b: 85:fc:e4:ee:cc:6d:cb:2f:4b:08:3e:40:68:b0:8f: 29:f7:52:65:5b:89:a4:6a:c5:46:39:5b:ec:83:94: 77:b2:84:65:24:3f:e2:67:22:e2:12:44:d0:5a:24: ef:a2:cc:2f:57:1c:37:11:8e:1c:7e:02:a7:35:38: 27:f9:2a:3d:22:16:40:15:c3:74:e2:d6:6d:f1:03: 3e:91:b9:c5:e3:84:8c:05:47:cf:c4:29:94:b4:8e: 36:81:79:3b:de:ab:d8:a3:7c:a0:d9:bb:3c:27:b4: e3:c4:95:b1:de:16:ce:6f:9f:70:27:9d:24:e7:f8: 67:74:2f:d7:f3:c4:44:e8:1e:01:2d:77:ca:9d:e4: 6a:4c:f5:13:bd:c2:42:d2:68:08:07:51:0f:fb:bc: 6c:c0:4f:cf:e6:54:60:17:25:4c:cf:dc:54:9d:00: 58:68:5f:52:10:7e:de:82:c8:20:ad:b6:71:36:d7: 09:6c:a8:06:ff:aa:2f:73:75:8d:40:e8:70:ee:42: 4a:3f:4d:7f:ea:98:17:8d:3c:9f:9b:3a:0d:aa:aa: 2f:2b:24:4c:cd:e3:96:94:4c:6d:29:5c:3f:83:c2: a4:22:b8:fd:4a:98:82:cd:e1:68:06:c1:27:c0:f5: 2b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:3D:75:54:B9:10:15:E9:D6:D8:84:F0:7D:74:82:AE:35:DB:CA:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a8e459d5-3cdc-3d1d-a5d7-6436b5c0d2f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.222.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:79:48:9d:bc:0a:11:d0:b9:aa:c1:3a:d0:f4:a5:b0:4b:80: 27:29:bc:70:f7:be:99:ca:4c:cb:fe:69:c6:18:7e:33:d6:29: d2:99:f9:5c:ca:3e:1e:87:b0:5d:53:c5:a6:5b:64:3c:0c:22: 20:91:0f:2d:b0:81:ac:d6:c7:a0:cf:4b:96:cd:cb:77:b0:06: 68:da:ff:a5:fc:10:2a:c9:11:2e:bd:6c:7f:5f:c8:5f:29:ff: 6b:4a:8f:4a:f3:59:fb:3c:5f:88:67:48:3b:5d:1e:d6:a1:87: 84:20:26:6b:5f:e6:47:b4:5e:a3:31:66:54:df:3b:a7:0c:bf: 90:7d:87:3d:fd:0b:f9:ae:7a:a4:f8:fd:b1:26:2f:95:03:83: 8d:8e:4b:2e:02:42:31:82:38:b1:26:f3:e0:0d:91:5b:76:6f: 18:c1:da:9a:54:04:0d:55:3b:47:6f:d7:79:5a:da:27:40:85: d2:3d:4e:20:27:72:f5:db:ca:92:a7:c6:a6:de:36:d4:27:c3: ae:37:f4:50:a1:d1:89:58:e8:04:86:8d:03:d5:29:fd:87:c8: 8e:02:3f:21:a9:6f:75:50:1d:de:64:06:a8:85:c6:d9:01:ea: 02:cd:a1:f6:aa:de:61:f2:68:40:67:fa:72:3e:1a:58:03:95: 04:42:14:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnhPN1O1j/ahq+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk M2MyOGMyOTgtMzI2YS00NjVkLTljM2QtYzI4NTE5OWRkZDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgu38wpzZvAOk9q+FgVuF/OTuzG3LL0sIPkBo sI8p91JlW4mkasVGOVvsg5R3soRlJD/iZyLiEkTQWiTvoswvVxw3EY4cfgKnNTgn +So9IhZAFcN04tZt8QM+kbnF44SMBUfPxCmUtI42gXk73qvYo3yg2bs8J7TjxJWx 3hbOb59wJ50k5/hndC/X88RE6B4BLXfKneRqTPUTvcJC0mgIB1EP+7xswE/P5lRg FyVMz9xUnQBYaF9SEH7egsggrbZxNtcJbKgG/6ovc3WNQOhw7kJKP01/6pgXjTyf mzoNqqovKyRMzeOWlExtKVw/g8KkIrj9SpiCzeFoBsEnwPUrzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJk9dVS5EBXp1tiE8H10gq4128pxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYThlNDU5ZDUtM2NkYy0z ZDFkLWE1ZDctNjQzNmI1YzBkMmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYt70MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKF5SJ28ChHQuarBOtD0pbBLgCcpvHD3vpnKTMv+acYYfjPWKdKZ+VzK Ph6HsF1TxaZbZDwMIiCRDy2wgazWx6DPS5bNy3ewBmja/6X8ECrJES69bH9fyF8p /2tKj0rzWfs8X4hnSDtdHtahh4QgJmtf5ke0XqMxZlTfO6cMv5B9hz39C/mueqT4 /bEmL5UDg42OSy4CQjGCOLEm8+ANkVt2bxjB2ppUBA1VO0dv13la2idAhdI9TiAn cvXbypKnxqbeNtQnw6439FCh0YlY6ASGjQPVKf2HyI4CPyGpb3VQHd5kBqiFxtkB 6gLNofaq3mHyaEBn+nI+GlgDlQRCFOY= -----END CERTIFICATE-----Generated at Sat Sep 5 12:36:01 2026 by rpki-client