$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/f5d3b087-8e5e-3e55-b47f-37848135a7c4.roa File: f5d3b087-8e5e-3e55-b47f-37848135a7c4.roa (raw, json) Hash identifier: tNe0ZjnSJyNUjDCJ/U2Al8tU+m5joWui9OzzWY6d0So= Subject key identifier: A5:A6:D5:5A:98:50:E9:3F:1E:DC:B0:AB:74:5F:51:CD:A7:A2:D4:20 Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584E6C6F65C15978E40E9B81FF40 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/f5d3b087-8e5e-3e55-b47f-37848135a7c4.roa Signing time: Tue 07 Jul 2026 21:00:13 +0000 ROA not before: Tue 07 Jul 2026 21:00:13 +0000 ROA not after: Mon 05 Oct 2026 21:00:13 +0000 asID: 21859 IP address blocks: 98.98.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6c:6f:65:c1:59:78:e4:0e:9b:81:ff:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Jul 7 21:00:13 2026 GMT Not After : Oct 5 21:00:13 2026 GMT Subject: CN=b5a50cca-4d3e-499d-8ad1-5fd208d43576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:0c:2a:9b:ab:da:a2:7d:5c:35:96:02:73:44: 82:9b:52:c1:6b:98:c8:31:f0:ba:2d:5d:aa:79:dd: f9:da:e3:d4:21:7f:c1:fb:47:5c:f8:20:8c:c0:2f: 10:5c:65:20:d9:09:df:c0:7b:f3:19:ac:6a:49:34: d0:b4:9b:7f:a4:ae:f0:9c:92:8e:99:3b:66:26:e8: 76:b7:2a:a8:d8:fa:54:48:fc:35:69:9b:79:96:d5: e2:1c:14:69:7d:b2:8c:10:cc:6a:e0:82:3e:0a:4c: e9:84:98:41:ef:54:ab:76:52:7e:28:f7:07:d4:af: 6e:6f:e1:dc:27:f4:28:9c:96:9b:e2:94:b6:3d:c9: 34:93:52:05:50:1f:57:22:d7:eb:80:8a:aa:6a:37: 1d:87:8e:0a:18:6f:94:37:67:b5:4f:0d:9b:e6:35: f3:54:1e:24:2d:57:b1:2a:3e:48:6e:f3:95:3d:a8: 42:7f:82:51:ed:fa:5e:72:4b:9b:55:eb:46:8e:6e: bc:2e:1e:05:33:8d:d6:f2:9b:49:63:ef:89:72:77: 04:af:13:03:f9:06:80:31:cc:32:0c:a0:5e:77:68: 4e:68:2c:79:5c:51:fc:4b:d0:37:aa:25:c1:a9:45: 99:2e:98:88:88:cc:5f:02:6b:28:e1:cc:cc:64:d5: ed:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:A6:D5:5A:98:50:E9:3F:1E:DC:B0:AB:74:5F:51:CD:A7:A2:D4:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/f5d3b087-8e5e-3e55-b47f-37848135a7c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 98.98.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:d0:59:28:7e:af:c3:4a:93:32:d5:5a:7f:34:3a:fe:32:63: 28:b9:e1:38:cc:64:fd:22:06:37:5c:a6:f6:fa:ac:a9:a0:79: 4e:27:a6:a4:62:fe:d1:a7:ac:85:0f:7a:26:d7:c8:5a:b6:c4: 23:a2:87:8f:f5:f2:fe:4f:c2:3d:f7:bb:59:68:57:64:91:2a: 51:d2:ed:f5:c8:b0:92:98:4e:32:65:eb:4b:48:0d:14:8f:ca: 7f:01:e1:fd:ff:b4:55:00:c4:53:ac:15:81:c8:1b:67:93:25: fb:d2:d2:0d:a3:aa:ea:dd:c6:3f:34:8e:99:53:05:1f:44:d2: 90:d7:20:1e:4d:99:31:8e:6a:e4:14:e8:ca:6d:5d:d4:fe:63: a8:63:d4:48:4e:3e:b2:82:20:d4:06:15:bc:bb:62:24:f5:f3: 06:3f:88:f5:f0:10:da:42:fc:db:c3:9b:05:35:ce:62:10:7d: f9:df:a2:ed:33:1b:0d:40:73:96:3d:8c:df:2b:a5:ff:ad:6b: 41:d2:52:a7:78:af:61:1a:a5:f2:d9:57:fe:c0:1f:02:89:39: d5:9b:68:a1:b7:49:f2:a9:02:ae:f8:95:e5:b4:f5:36:3b:c3: b3:22:59:fe:a6:b2:1c:f9:d8:d9:3f:0a:b4:c3:54:55:85:ce: 55:d5:fe:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5sb2XBWXjkDpuB/0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI2MDcwNzIxMDAxM1oXDTI2MTAwNTIxMDAxM1owLzEtMCsGA1UEAxMk YjVhNTBjY2EtNGQzZS00OTlkLThhZDEtNWZkMjA4ZDQzNTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQwqm6vaon1cNZYCc0SCm1LBa5jIMfC6LV2q ed352uPUIX/B+0dc+CCMwC8QXGUg2QnfwHvzGaxqSTTQtJt/pK7wnJKOmTtmJuh2 tyqo2PpUSPw1aZt5ltXiHBRpfbKMEMxq4II+CkzphJhB71SrdlJ+KPcH1K9ub+Hc J/QonJab4pS2Pck0k1IFUB9XItfrgIqqajcdh44KGG+UN2e1Tw2b5jXzVB4kLVex Kj5IbvOVPahCf4JR7fpeckubVetGjm68Lh4FM43W8ptJY++JcncErxMD+QaAMcwy DKBed2hOaCx5XFH8S9A3qiXBqUWZLpiIiMxfAmso4czMZNXtFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKWm1VqYUOk/Htywq3RfUc2notQgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvZjVkM2IwODctOGU1ZS0z ZTU1LWI0N2YtMzc4NDgxMzVhN2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYmLvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrQWSh+r8NKkzLVWn80Ov4yYyi54TjMZP0iBjdcpvb6rKmgeU4npqRi /tGnrIUPeibXyFq2xCOih4/18v5Pwj33u1loV2SRKlHS7fXIsJKYTjJl60tIDRSP yn8B4f3/tFUAxFOsFYHIG2eTJfvS0g2jqurdxj80jplTBR9E0pDXIB5NmTGOauQU 6MptXdT+Y6hj1EhOPrKCINQGFby7YiT18wY/iPXwENpC/NvDmwU1zmIQffnfou0z Gw1Ac5Y9jN8rpf+ta0HSUqd4r2EapfLZV/7AHwKJOdWbaKG3SfKpAq74leW09TY7 w7MiWf6mshz52Nk/CrTDVFWFzlXV/pE= -----END CERTIFICATE-----Generated at Tue Jul 21 14:58:18 2026 by rpki-client