$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c4edecf3-cb73-33e2-9eac-a7ffde2b3920.roa File: c4edecf3-cb73-33e2-9eac-a7ffde2b3920.roa (raw, json) Hash identifier: 0tg/2fxeIiKwmGy4OdL99WBDVONr4tyz3iGwWXkZYCc= Subject key identifier: 8A:B9:B7:C9:14:A4:A8:27:39:D8:B8:40:25:BA:D7:D1:56:88:04:13 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4E8EBB96F6A0DFBF18D700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c4edecf3-cb73-33e2-9eac-a7ffde2b3920.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33668 IP address blocks: 98.243.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4e:8e:bb:96:f6:a0:df:bf:18:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=0301ef27-b7a9-4f48-9e1e-07ff2a38cda3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:96:f8:95:43:00:b1:36:ee:ca:07:fa:70:dd: 6b:80:21:75:35:90:c4:a4:be:df:30:76:88:0c:4d: 7d:26:10:0f:45:5e:0d:08:3a:96:20:2e:a7:87:8d: e4:eb:2f:63:10:35:5d:3e:45:84:2d:72:68:cc:18: ad:dc:53:ab:16:e9:bc:dd:99:8c:76:16:5d:dd:af: f0:e3:6e:1a:44:df:d8:f3:c4:0b:23:76:30:e6:d7: 34:b9:76:cf:14:81:e6:d5:06:d4:e4:a4:ec:a1:ad: a5:56:ce:d8:12:a4:5c:b8:91:3f:da:a8:6f:2d:7d: 67:c7:30:05:5a:9e:47:39:cc:84:72:b4:58:e2:d8: d0:aa:0c:90:15:06:c0:6e:93:64:ef:d4:f2:60:b1: fb:0e:b7:37:27:9e:d8:f5:57:74:78:2f:cb:38:85: 91:15:2d:b7:70:52:de:7e:c5:61:85:ae:f6:eb:a9: bb:50:64:41:82:a6:a0:f9:af:ed:3a:6f:09:a5:35: 85:c2:3a:52:30:0c:1b:bd:42:63:e4:86:31:fd:16: c3:a7:f2:fa:69:f9:89:eb:af:63:87:60:8a:18:c4: 7d:45:8a:77:b3:f3:9a:04:38:ff:9d:80:09:43:1d: 84:26:7a:e8:8e:84:51:c4:97:7b:4a:c3:ec:dc:c5: bb:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:B9:B7:C9:14:A4:A8:27:39:D8:B8:40:25:BA:D7:D1:56:88:04:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c4edecf3-cb73-33e2-9eac-a7ffde2b3920.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.243.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:6b:f2:6c:4b:0d:20:55:fe:d5:d2:a1:2d:49:8f:27:15:cc: 22:72:36:df:d5:4c:5a:42:28:6c:51:9c:ba:44:37:96:94:01: 92:58:51:08:5f:da:8a:59:3a:b3:23:14:28:16:ec:5e:59:74: 23:20:d4:97:9a:f7:84:f0:c6:f5:4b:c5:5b:46:d1:2e:cf:2f: 96:67:e5:11:0a:17:6d:06:50:23:d4:b7:75:d3:94:f5:dc:04: 81:55:5f:63:3a:de:84:fc:9c:c5:49:8a:bb:5e:9e:54:2e:46: c3:46:06:39:37:94:44:f1:91:ad:ae:d7:31:5c:6a:e9:0e:3a: f6:f8:c2:26:b4:1e:2e:c4:ba:77:6f:2a:ca:16:27:c3:cd:91: 4a:e2:b4:85:2c:d2:77:9f:85:ea:dd:7a:56:33:eb:0c:06:78: 11:e2:32:04:bc:c2:d2:62:66:b9:e9:96:0a:36:4c:16:76:39: ed:cb:0c:13:df:a3:11:c1:30:1b:00:16:41:a3:d8:7b:fc:34: 61:f9:5c:d3:e8:f4:7b:b3:5f:d1:b9:78:de:63:86:8b:be:9f: 9a:6b:32:ec:ea:5e:b6:11:6b:9f:dd:f4:e5:4f:1d:47:9b:9f: ab:d7:c7:37:35:82:34:29:f7:3c:5d:1a:9f:6f:7c:4b:86:83: 51:39:ae:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96To67lvag378Y1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk MDMwMWVmMjctYjdhOS00ZjQ4LTllMWUtMDdmZjJhMzhjZGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJb4lUMAsTbuygf6cN1rgCF1NZDEpL7fMHaI DE19JhAPRV4NCDqWIC6nh43k6y9jEDVdPkWELXJozBit3FOrFum83ZmMdhZd3a/w 424aRN/Y88QLI3Yw5tc0uXbPFIHm1QbU5KTsoa2lVs7YEqRcuJE/2qhvLX1nxzAF Wp5HOcyEcrRY4tjQqgyQFQbAbpNk79TyYLH7Drc3J57Y9Vd0eC/LOIWRFS23cFLe fsVhha7266m7UGRBgqag+a/tOm8JpTWFwjpSMAwbvUJj5IYx/RbDp/L6afmJ669j h2CKGMR9RYp3s/OaBDj/nYAJQx2EJnrojoRRxJd7SsPs3MW7IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIq5t8kUpKgnOdi4QCW619FWiAQTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzRlZGVjZjMtY2I3My0z M2UyLTllYWMtYTdmZmRlMmIzOTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYvOYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJr8mxLDSBV/tXSoS1JjycVzCJyNt/VTFpCKGxRnLpEN5aUAZJYUQhf 2opZOrMjFCgW7F5ZdCMg1Jea94TwxvVLxVtG0S7PL5Zn5REKF20GUCPUt3XTlPXc BIFVX2M63oT8nMVJirtenlQuRsNGBjk3lETxka2u1zFcaukOOvb4wia0Hi7Eundv KsoWJ8PNkUritIUs0nefherdelYz6wwGeBHiMgS8wtJiZrnplgo2TBZ2Oe3LDBPf oxHBMBsAFkGj2Hv8NGH5XNPo9HuzX9G5eN5jhou+n5prMuzqXrYRa5/d9OVPHUeb n6vXxzc1gjQp9zxdGp9vfEuGg1E5roM= -----END CERTIFICATE-----Generated at Wed Oct 21 10:21:00 2026 by rpki-client