$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac0eb08b-e940-3897-a1a2-c92aa0a3f2ad.roa File: ac0eb08b-e940-3897-a1a2-c92aa0a3f2ad.roa (raw, json) Hash identifier: anVx1QlJzo1F8gwrdjnQvTPg0hiofgZfSvpkMNVJO/A= Subject key identifier: D0:D9:76:0D:3B:F1:3A:0C:5B:11:68:FA:49:12:8B:42:FC:C1:5B:34 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119E737D38F764C36B863280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac0eb08b-e940-3897-a1a2-c92aa0a3f2ad.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33651 IP address blocks: 98.37.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9e:73:7d:38:f7:64:c3:6b:86:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=4e04eb78-69ba-45f3-b648-4f27d7029baf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8f:46:11:ef:e4:71:27:af:66:f5:94:36:9d: bf:5f:f4:3b:17:b8:68:15:de:1f:f6:6d:73:45:4e: 00:b2:74:21:e8:a9:84:28:08:17:00:5f:27:21:b7: 1f:73:06:2d:e6:d4:f2:82:9c:7b:24:f9:be:b7:18: 8d:1c:15:4b:39:ee:14:c8:d1:ee:80:cc:68:5d:5f: 14:a5:a8:62:ce:28:9d:dd:a0:50:76:c0:2c:2e:71: 63:23:d6:3c:e0:83:ea:b0:e7:71:99:97:41:82:b6: 22:d8:60:14:53:cc:db:b3:1d:6b:e1:c1:fe:21:ba: 9e:a2:d1:d1:95:d4:76:3b:11:9e:32:4a:bf:f3:4d: ca:bb:1e:03:c3:98:88:9f:6c:17:34:2b:e2:87:9b: 5c:08:29:f4:b8:d1:32:2b:34:d5:c9:b2:e2:7e:22: 32:47:4c:3a:b6:95:8a:bd:26:93:a1:9f:e0:4f:89: cf:e5:6c:ae:a8:1a:0d:a4:43:01:ce:27:8f:0f:f1: 5e:55:63:79:f6:11:58:04:59:b6:04:79:78:c8:65: f1:10:b8:c4:c7:8e:ab:06:af:f1:f5:05:9c:a5:3c: b5:bd:96:66:4d:b2:86:bf:18:70:67:1f:e9:ac:63: b8:34:30:d9:72:5f:69:b0:5f:d5:66:86:10:93:5e: d5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D9:76:0D:3B:F1:3A:0C:5B:11:68:FA:49:12:8B:42:FC:C1:5B:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac0eb08b-e940-3897-a1a2-c92aa0a3f2ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.37.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:7a:c8:97:9a:cc:ac:4e:8f:3b:20:43:c7:d2:e8:8b:31:ee: e1:42:40:34:6e:00:0b:e6:df:61:d1:95:08:97:5b:66:dc:b1: 40:d4:d3:8f:b5:69:1b:11:7d:45:ed:25:35:b1:6b:ca:a4:76: 24:62:f9:3a:70:be:ca:c0:18:a4:75:f8:69:d8:da:ac:94:13: 84:d7:ac:6f:07:d7:e0:7b:48:8a:14:34:4d:20:6a:97:f0:ca: e1:0a:bb:6a:12:fb:42:32:62:89:99:8f:38:93:a6:4b:ce:93: 40:a0:7d:dd:73:0e:17:9a:88:28:5d:1e:19:14:bb:08:42:66: f6:60:89:f7:35:00:cd:b0:4b:24:f3:7d:a2:e1:5c:f9:63:f1: 3c:2d:9f:37:29:d3:e2:02:8e:03:65:df:8f:c6:aa:7a:12:60: 0c:65:82:c8:8f:63:39:09:77:5b:b9:8b:8e:54:48:8b:8b:4d: dd:7a:ef:d1:65:80:83:3a:7e:60:8d:9f:d1:67:5b:9c:ef:e4: a1:b6:dc:32:65:94:a4:7c:03:ae:a4:9f:a6:24:7e:b1:0e:b7: 8d:84:d9:d0:9a:d9:20:f4:04:a4:96:67:47:30:01:93:d0:4c: 19:a7:1e:9d:59:1a:52:a5:ed:28:c9:bf:c3:8f:0b:25:a9:48: 8a:44:a4:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnnN9OPdkw2uGMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk NGUwNGViNzgtNjliYS00NWYzLWI2NDgtNGYyN2Q3MDI5YmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApo9GEe/kcSevZvWUNp2/X/Q7F7hoFd4f9m1z RU4AsnQh6KmEKAgXAF8nIbcfcwYt5tTygpx7JPm+txiNHBVLOe4UyNHugMxoXV8U pahiziid3aBQdsAsLnFjI9Y84IPqsOdxmZdBgrYi2GAUU8zbsx1r4cH+IbqeotHR ldR2OxGeMkq/803Kux4Dw5iIn2wXNCvih5tcCCn0uNEyKzTVybLifiIyR0w6tpWK vSaToZ/gT4nP5WyuqBoNpEMBziePD/FeVWN59hFYBFm2BHl4yGXxELjEx46rBq/x 9QWcpTy1vZZmTbKGvxhwZx/prGO4NDDZcl9psF/VZoYQk17V9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDZdg078ToMWxFo+kkSi0L8wVs0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWMwZWIwOGItZTk0MC0z ODk3LWExYTItYzkyYWEwYTNmMmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYiVYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL56yJeazKxOjzsgQ8fS6Isx7uFCQDRuAAvm32HRlQiXW2bcsUDU04+1 aRsRfUXtJTWxa8qkdiRi+TpwvsrAGKR1+GnY2qyUE4TXrG8H1+B7SIoUNE0gapfw yuEKu2oS+0IyYomZjziTpkvOk0Cgfd1zDheaiChdHhkUuwhCZvZgifc1AM2wSyTz faLhXPlj8Twtnzcp0+ICjgNl34/GqnoSYAxlgsiPYzkJd1u5i45USIuLTd1679Fl gIM6fmCNn9FnW5zv5KG23DJllKR8A66kn6YkfrEOt42E2dCa2SD0BKSWZ0cwAZPQ TBmnHp1ZGlKl7SjJv8OPCyWpSIpEpBg= -----END CERTIFICATE-----Generated at Sat Sep 5 04:28:03 2026 by rpki-client