$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d434570a-727f-3938-bbab-8d32afd8a9a5.roa File: d434570a-727f-3938-bbab-8d32afd8a9a5.roa (raw, json) Hash identifier: yHTTA2En/WRkmnkKL81mquraHBJhqTL5sBl1ZdDmNhc= Subject key identifier: AB:92:04:44:18:C8:1D:03:AB:81:03:2A:60:3D:0B:67:C7:54:D9:B5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED862DDA75EDEF86D2C7A43E0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d434570a-727f-3938-bbab-8d32afd8a9a5.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33668 IP address blocks: 98.250.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:62:dd:a7:5e:de:f8:6d:2c:7a:43:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=59a7d343-3016-4d4e-900c-95651f52b002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:9d:a5:6d:8b:60:c2:1a:f0:02:e7:5b:f8:e6: 39:cf:3a:8f:55:6a:a2:af:ac:b8:ff:53:e2:71:24: 13:38:e9:55:72:9b:fa:c3:99:47:fc:09:39:61:24: c7:7a:dc:80:e0:99:fb:3c:7b:57:c6:69:cb:21:e4: c6:2c:a3:50:fb:3e:0d:bf:74:d7:d9:3d:90:03:11: 75:01:78:8d:f7:1b:55:ec:f1:27:e9:b7:62:a7:45: 51:6f:c6:95:3d:ff:66:b0:a6:d9:2e:d8:c6:ac:f6: 27:56:41:0c:a2:49:62:75:60:16:ed:98:cd:9d:b3: ad:62:f4:bd:15:42:49:cf:2d:51:87:23:48:0c:ef: c4:33:13:21:9d:e3:1d:1e:35:60:8b:e7:1d:90:c0: 90:16:2b:ac:07:73:ff:b1:a3:69:b7:72:cd:27:f9: 42:21:0a:a6:eb:37:9c:57:85:fd:be:1e:49:62:4d: ff:af:59:d4:88:7e:f1:09:5a:f2:13:e4:56:56:f8: eb:ef:fd:48:79:7a:07:60:ed:33:e2:4e:38:85:c1: 02:b3:47:fc:25:68:92:51:09:1b:c0:5f:07:a0:4e: 9c:11:7e:ce:bb:db:19:b7:fa:1b:d3:93:c2:2e:49: ba:35:23:e4:0a:73:78:bc:c1:48:f2:9b:90:51:b0: d1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:92:04:44:18:C8:1D:03:AB:81:03:2A:60:3D:0B:67:C7:54:D9:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d434570a-727f-3938-bbab-8d32afd8a9a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.250.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:6b:12:9a:c8:07:e9:39:04:09:4d:03:5d:44:d7:12:0f:02: 3a:96:95:1f:a0:51:8e:e0:cb:d0:03:42:d1:ac:0c:00:39:0b: 35:7f:9d:e1:d5:10:30:44:13:50:66:9a:d6:b2:00:da:f9:d4: 74:4e:a5:ca:b0:c8:4a:bc:e4:93:b9:77:db:ba:b8:5c:31:d8: d4:ca:19:20:6e:af:28:35:1b:05:10:e9:21:05:f9:67:3d:f5: 75:66:3d:41:c8:5c:3e:e0:0e:8d:c3:e6:ae:bb:5d:72:74:34: 62:02:7b:66:42:e2:71:c1:48:ec:cb:37:9f:57:84:e9:a1:11: 2a:c3:cd:96:4c:83:46:90:51:8c:e6:f0:03:b7:67:8a:36:c0: 61:15:9b:ff:e0:59:62:0b:05:87:db:19:87:06:bf:28:5e:6e: a3:df:49:a3:13:25:a7:78:db:18:3c:67:c2:95:20:ec:83:9c: 53:3b:be:d9:1e:98:4f:fe:9f:00:2e:df:03:cf:75:60:77:5f: ed:ee:90:c6:58:03:69:8a:d2:d4:08:b3:32:89:46:9d:9e:4c: 5f:95:b2:a1:5c:a8:cf:a8:5e:4e:7c:7d:1d:84:0b:96:6c:10: 3b:59:43:a3:05:57:e3:f7:72:00:97:0d:29:a4:26:ff:45:c7: 1c:49:b1:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYt2nXt74bSx6Q+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk NTlhN2QzNDMtMzAxNi00ZDRlLTkwMGMtOTU2NTFmNTJiMDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkp2lbYtgwhrwAudb+OY5zzqPVWqir6y4/1Pi cSQTOOlVcpv6w5lH/Ak5YSTHetyA4Jn7PHtXxmnLIeTGLKNQ+z4Nv3TX2T2QAxF1 AXiN9xtV7PEn6bdip0VRb8aVPf9msKbZLtjGrPYnVkEMoklidWAW7ZjNnbOtYvS9 FUJJzy1RhyNIDO/EMxMhneMdHjVgi+cdkMCQFiusB3P/saNpt3LNJ/lCIQqm6zec V4X9vh5JYk3/r1nUiH7xCVryE+RWVvjr7/1IeXoHYO0z4k44hcECs0f8JWiSUQkb wF8HoE6cEX7Ou9sZt/ob05PCLkm6NSPkCnN4vMFI8puQUbDRYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKuSBEQYyB0Dq4EDKmA9C2fHVNm1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDQzNDU3MGEtNzI3Zi0z OTM4LWJiYWItOGQzMmFmZDhhOWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYvoUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFrEprIB+k5BAlNA11E1xIPAjqWlR+gUY7gy9ADQtGsDAA5CzV/neHV EDBEE1BmmtayANr51HROpcqwyEq85JO5d9u6uFwx2NTKGSBuryg1GwUQ6SEF+Wc9 9XVmPUHIXD7gDo3D5q67XXJ0NGICe2ZC4nHBSOzLN59XhOmhESrDzZZMg0aQUYzm 8AO3Z4o2wGEVm//gWWILBYfbGYcGvyhebqPfSaMTJad42xg8Z8KVIOyDnFM7vtke mE/+nwAu3wPPdWB3X+3ukMZYA2mK0tQIszKJRp2eTF+VsqFcqM+oXk58fR2EC5Zs EDtZQ6MFV+P3cgCXDSmkJv9FxxxJsY8= -----END CERTIFICATE-----Generated at Tue Sep 1 05:14:07 2026 by rpki-client