$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc2ca973-bc34-3d2b-af18-8957072c327b.roa File: dc2ca973-bc34-3d2b-af18-8957072c327b.roa (raw, json) Hash identifier: 6xysGZL4l+dFzwFcymy9X9gb9Q7oiI1l6gkRE5PwIkc= Subject key identifier: FC:FC:F5:33:37:0F:CD:E0:AE:FF:0D:3D:70:83:43:71:31:C4:FE:DA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4FF9AC6D1520EB3B6BB800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc2ca973-bc34-3d2b-af18-8957072c327b.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33662 IP address blocks: 98.199.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4f:f9:ac:6d:15:20:eb:3b:6b:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=8119912f-9abb-4891-a1eb-f2500f432a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ef:24:20:4d:f9:18:a5:d7:4d:21:32:73:a3: ef:80:56:3a:dc:36:98:6c:7f:4c:99:4f:55:71:95: 6d:33:e4:ec:f8:c9:44:c5:6d:ae:ab:48:dd:83:fb: 13:51:f9:de:b9:5e:5a:a1:78:2c:fd:f7:9a:7d:1f: c6:e3:90:74:de:4b:a7:ed:79:7a:af:81:42:4a:21: 82:26:b9:b7:a6:ec:cc:22:66:fb:b5:f8:d3:19:c4: c2:70:c5:e7:63:e4:e0:83:5b:bb:e2:c8:fc:66:c0: d3:38:66:ce:f2:42:ce:cf:9c:32:e2:06:8d:0a:fb: 93:a1:61:51:32:a2:67:25:5a:d0:69:27:e5:1d:34: 79:58:b1:07:7f:de:fd:6f:89:61:12:4c:b3:4e:10: ce:a5:a5:86:de:df:da:24:9c:b1:39:94:55:47:32: 22:00:e5:37:d5:b2:9a:67:d4:a5:37:16:bd:7f:6b: 3d:f6:11:62:24:dc:2d:76:28:28:81:b1:35:e6:29: a8:5c:0f:dd:54:71:ba:24:27:7c:fc:9b:5a:f8:49: 4a:82:95:32:72:28:7a:7f:94:55:61:10:5a:9e:90: f8:18:11:a6:c7:cc:33:aa:f6:63:8d:fb:59:88:dc: 51:a8:31:ef:32:bf:f6:d2:81:e4:76:a6:72:e6:14: 82:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:FC:F5:33:37:0F:CD:E0:AE:FF:0D:3D:70:83:43:71:31:C4:FE:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc2ca973-bc34-3d2b-af18-8957072c327b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.199.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:dd:43:59:74:95:35:1c:ad:6e:de:42:d8:39:7f:04:47:37: 03:2a:24:7b:3b:80:96:a1:3f:65:9a:21:dd:d5:4a:22:f8:ac: f7:3e:19:a0:ca:dc:dc:9d:5c:86:b2:7d:fa:4e:1e:12:5d:60: dd:c3:cb:6d:73:95:ca:ae:63:d4:6c:4b:ae:45:b3:28:a2:95: c0:81:09:0e:53:43:48:b6:2e:13:06:6f:10:8a:18:22:9f:33: 6f:43:e7:9a:d4:07:03:60:f9:77:4e:8a:95:9e:66:7f:a2:64: 9e:4c:4b:62:1d:ea:2f:5a:65:35:f3:52:1a:d5:f0:a5:60:26: 85:24:5c:3c:a0:dd:bc:de:89:25:67:df:c9:d3:c4:ae:33:11: c2:24:47:c7:42:fe:d9:f3:2d:9e:b7:50:9d:7b:cb:b5:e3:c4: cf:38:88:eb:c5:a0:31:c8:16:f1:94:a7:af:cd:0b:62:fe:bb: 61:ba:50:b3:9d:22:5d:45:c1:45:4f:3f:c5:a1:76:0c:61:1e: f3:83:75:2d:ad:84:4e:af:b5:34:c5:fb:d0:1b:65:f2:c9:b5: ea:43:ed:53:09:87:cc:34:51:0e:4f:59:37:28:25:02:d9:1f: b3:cd:79:76:1a:9b:56:2f:ee:2b:b1:29:74:91:d1:8b:cb:66: aa:44:fb:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96T/msbRUg6ztruAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk ODExOTkxMmYtOWFiYi00ODkxLWExZWItZjI1MDBmNDMyYTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+8kIE35GKXXTSEyc6PvgFY63DaYbH9MmU9V cZVtM+Ts+MlExW2uq0jdg/sTUfneuV5aoXgs/feafR/G45B03kun7Xl6r4FCSiGC Jrm3puzMImb7tfjTGcTCcMXnY+Tgg1u74sj8ZsDTOGbO8kLOz5wy4gaNCvuToWFR MqJnJVrQaSflHTR5WLEHf979b4lhEkyzThDOpaWG3t/aJJyxOZRVRzIiAOU31bKa Z9SlNxa9f2s99hFiJNwtdigogbE15imoXA/dVHG6JCd8/Jta+ElKgpUycih6f5RV YRBanpD4GBGmx8wzqvZjjftZiNxRqDHvMr/20oHkdqZy5hSC7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPz89TM3D83grv8NPXCDQ3ExxP7aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGMyY2E5NzMtYmMzNC0z ZDJiLWFmMTgtODk1NzA3MmMzMjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYseaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPdQ1l0lTUcrW7eQtg5fwRHNwMqJHs7gJahP2WaId3VSiL4rPc+GaDK 3NydXIayffpOHhJdYN3Dy21zlcquY9RsS65FsyiilcCBCQ5TQ0i2LhMGbxCKGCKf M29D55rUBwNg+XdOipWeZn+iZJ5MS2Id6i9aZTXzUhrV8KVgJoUkXDyg3bzeiSVn 38nTxK4zEcIkR8dC/tnzLZ63UJ17y7XjxM84iOvFoDHIFvGUp6/NC2L+u2G6ULOd Il1FwUVPP8WhdgxhHvODdS2thE6vtTTF+9AbZfLJtepD7VMJh8w0UQ5PWTcoJQLZ H7PNeXYam1Yv7iuxKXSR0YvLZqpE+1o= -----END CERTIFICATE-----Generated at Tue Oct 20 09:24:15 2026 by rpki-client