$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2528e009-2f80-3eba-a987-ae15dd9f9a2e.roa File: 2528e009-2f80-3eba-a987-ae15dd9f9a2e.roa (raw, json) Hash identifier: tyuS1aLL2ot/aepHYS2tK1QinIiPcxLALNR4wlCH74c= Subject key identifier: 0E:8B:C6:74:C8:84:E1:E6:9D:75:67:5A:31:7A:DB:06:54:F5:A5:6E Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F4328584F655E05D9C74FBCB2C2023180 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2528e009-2f80-3eba-a987-ae15dd9f9a2e.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 10796 IP address blocks: 98.120.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5e:05:d9:c7:4f:bc:b2:c2:02:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=9ba12eaa-e9f8-493d-a8b8-e36284045ef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f7:9e:30:27:9c:6e:52:73:f0:f0:bb:38:eb: f5:67:d3:31:2e:79:d5:c4:36:59:f7:a5:f2:c9:5f: 4e:01:06:46:35:89:45:10:b6:38:f4:53:66:2d:b5: 60:f0:6e:6d:46:05:94:63:3a:23:08:cf:66:dc:62: 4f:e4:53:71:5d:c5:ec:a4:00:25:94:69:e1:db:a5: 55:44:74:62:6f:8b:3f:30:9d:44:41:99:9c:10:74: df:53:94:d0:eb:2d:68:dc:c6:7f:cf:80:42:9f:f8: dd:dd:74:26:c9:04:75:84:b9:39:49:40:2e:83:76: 41:ae:56:c6:ce:59:a7:30:23:be:c6:31:00:11:4d: b2:92:e4:f6:87:a1:f6:04:b1:eb:36:a0:9d:a9:94: 32:83:35:8c:02:a1:c3:d2:c9:3f:40:f4:bf:d1:72: eb:eb:21:2a:80:4c:44:c0:5c:8b:ab:ed:88:ff:ad: 37:86:93:f9:e3:25:d9:f4:ca:3c:5a:62:6e:40:09: a8:d3:04:ae:5d:e8:e4:8a:b5:a4:d0:0f:c9:73:41: b8:8b:85:1e:30:79:65:6d:bf:4f:16:a0:f3:6c:1d: 91:b7:44:97:54:95:e4:61:25:78:0f:b7:2f:fe:9f: 29:07:87:a8:55:42:8f:2a:37:00:d3:98:61:20:43: 5f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:8B:C6:74:C8:84:E1:E6:9D:75:67:5A:31:7A:DB:06:54:F5:A5:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2528e009-2f80-3eba-a987-ae15dd9f9a2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 98.120.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:11:95:5b:5c:09:00:91:8c:79:22:35:d6:ac:5c:47:89:2d: 9a:6c:06:a6:62:2f:06:04:da:81:04:e4:3b:47:5e:98:37:f3: 8b:01:6f:9a:cc:8b:ce:62:1e:ef:c4:91:b1:a3:f5:c5:a5:94: 9a:9a:2a:6c:eb:c9:d5:90:db:c1:11:00:2a:52:38:c0:fe:f9: bd:57:9b:fb:79:60:81:7f:cc:cf:14:e0:e9:7b:61:de:3a:82: f1:1b:b2:4b:95:d7:da:37:68:36:37:79:5a:97:50:d0:91:cf: 5d:92:91:cc:52:69:55:c5:ec:a1:5a:27:62:7d:e2:8d:cc:84: e5:ef:e8:30:c9:29:4e:14:a8:b3:30:19:26:c7:ed:60:1e:b1: 28:65:f0:a3:c8:25:99:06:2c:da:4d:d2:f4:b2:f1:c7:08:78: 30:57:55:46:76:e4:d9:16:c8:1a:fd:6c:45:95:88:52:2e:fa: f3:cd:a1:f1:da:d8:f7:b5:a9:7e:51:29:e7:24:3d:41:3c:64: 3c:c3:d2:fa:45:b1:1e:80:26:ae:04:f9:69:f3:87:59:de:19: e8:ff:1b:ca:b3:5a:3c:c4:96:a4:2f:1c:ff:37:62:31:4a:eb: 14:51:9d:aa:66:e1:2d:c8:d7:f5:8a:48:1e:2f:d9:c1:b8:e8: 45:9c:0e:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXgXZx0+8ssICMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk OWJhMTJlYWEtZTlmOC00OTNkLWE4YjgtZTM2Mjg0MDQ1ZWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPeeMCecblJz8PC7OOv1Z9MxLnnVxDZZ96Xy yV9OAQZGNYlFELY49FNmLbVg8G5tRgWUYzojCM9m3GJP5FNxXcXspAAllGnh26VV RHRib4s/MJ1EQZmcEHTfU5TQ6y1o3MZ/z4BCn/jd3XQmyQR1hLk5SUAug3ZBrlbG zlmnMCO+xjEAEU2ykuT2h6H2BLHrNqCdqZQygzWMAqHD0sk/QPS/0XLr6yEqgExE wFyLq+2I/603hpP54yXZ9Mo8WmJuQAmo0wSuXejkirWk0A/Jc0G4i4UeMHllbb9P FqDzbB2Rt0SXVJXkYSV4D7cv/p8pB4eoVUKPKjcA05hhIENfXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA6LxnTIhOHmnXVnWjF62wZU9aVuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvMjUyOGUwMDktMmY4MC0z ZWJhLWE5ODctYWUxNWRkOWY5YTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYnhtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgRlVtcCQCRjHkiNdasXEeJLZpsBqZiLwYE2oEE5DtHXpg384sBb5rM i85iHu/EkbGj9cWllJqaKmzrydWQ28ERACpSOMD++b1Xm/t5YIF/zM8U4Ol7Yd46 gvEbskuV19o3aDY3eVqXUNCRz12SkcxSaVXF7KFaJ2J94o3MhOXv6DDJKU4UqLMw GSbH7WAesShl8KPIJZkGLNpN0vSy8ccIeDBXVUZ25NkWyBr9bEWViFIu+vPNofHa 2Pe1qX5RKeckPUE8ZDzD0vpFsR6AJq4E+Wnzh1neGej/G8qzWjzElqQvHP83YjFK 6xRRnapm4S3I1/WKSB4v2cG46EWcDiE= -----END CERTIFICATE-----Generated at Wed Oct 21 15:38:17 2026 by rpki-client