$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/d182f315-ad79-3ce1-af87-7b51558a1546.roa File: d182f315-ad79-3ce1-af87-7b51558a1546.roa (raw, json) Hash identifier: u29cuFx7IH8dTIXJMRGkiB5fjBDWnBTLiaTh34BxZYo= Subject key identifier: 89:2E:B3:E3:88:B2:CC:AC:90:C1:9C:9B:6A:B1:3F:CB:12:A2:A2:6C Certificate issuer: /CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398 Certificate serial: 010D0C9F4328584F8F3DB8601EB2C124C6CCC620 Authority key identifier: E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/d182f315-ad79-3ce1-af87-7b51558a1546.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 11425 IP address blocks: 98.143.32.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:b8:60:1e:b2:c1:24:c6:cc:c6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398 Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=6615cd56-4c86-4501-8d80-6029b62608aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4e:85:90:a4:20:d3:d4:c8:f7:4b:86:68:8c: 62:67:38:43:50:a9:f7:ec:6a:1a:8d:27:70:42:52: 3e:ae:d2:0f:11:a3:23:cf:be:8f:3d:ab:5d:4b:f8: 54:2f:8c:8e:1e:ac:b5:4a:81:7a:46:65:ce:dc:fd: 64:fe:d6:ed:a2:40:42:42:34:55:71:d8:69:a5:25: 75:ea:91:1f:41:90:57:61:e9:7c:db:f0:a5:72:af: 39:b7:75:1b:45:1f:97:4c:f5:7d:e5:7f:af:b2:cd: ed:b0:92:d8:95:f2:e7:6b:4c:17:e9:8f:23:b4:a6: b0:54:1c:71:7b:e1:5b:9e:fb:3d:35:e4:38:09:c6: 82:44:42:9e:d4:be:d3:56:eb:e0:92:4c:fa:53:13: b8:f1:c0:46:5e:18:3a:2a:d2:75:87:6d:65:a9:47: f1:b4:6a:fb:fd:e7:b0:b7:2a:36:6f:71:56:45:5e: 38:8c:0d:46:0d:ff:be:47:e8:01:10:88:0e:a8:22: ef:6a:b7:f7:6d:95:eb:ed:3f:fd:2a:22:82:e4:2a: a1:ff:87:6b:6c:0c:f9:43:c3:6a:41:c4:8e:d9:0c: fe:b8:12:6d:95:08:3b:2a:5c:10:98:63:45:41:56: 0c:c4:f0:11:ed:a4:15:e7:5d:0c:8b:9c:5c:5c:d2: 44:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:2E:B3:E3:88:B2:CC:AC:90:C1:9C:9B:6A:B1:3F:CB:12:A2:A2:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/d182f315-ad79-3ce1-af87-7b51558a1546.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl X509v3 Authority Key Identifier: keyid:E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer sbgp-ipAddrBlock: critical IPv4: 98.143.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:27:7b:d5:2a:85:c3:e0:b7:7d:bf:13:b8:9d:ef:81:53:b4: 58:8b:93:f2:ca:a8:d2:f3:b4:de:13:e2:dc:77:09:01:3a:6a: 44:cd:f1:57:ad:ac:43:64:de:87:cb:c5:46:48:40:5f:3f:b9: 6e:73:fb:90:e5:64:24:73:98:b1:c3:e2:97:61:f4:39:34:d2: fd:e8:6b:5c:a9:35:f3:d6:b7:ee:aa:0f:44:ff:79:a3:c5:6e: 35:b5:b4:12:6d:cc:7e:24:20:bb:27:66:32:e7:4b:b8:73:01: 05:4a:d6:9d:0a:3d:af:bd:f0:dd:9e:eb:3c:26:43:87:42:94: e4:a3:a9:2d:78:35:ba:77:55:59:79:56:a6:ac:98:d8:94:9f: 4f:6d:e8:45:ac:7a:6f:d1:b3:b8:e5:e1:b2:5e:a6:3a:68:46: 86:1c:8e:56:34:1b:5f:87:4b:b4:2b:06:6b:4c:55:d9:f0:e3: a7:4f:5a:52:c7:9f:20:45:bc:7c:9e:e9:23:95:ea:e7:11:66: ab:f1:c1:38:86:57:51:f7:5f:ae:73:b1:2c:7b:4f:b4:f7:4c: 88:85:d7:af:5b:f4:44:5e:25:f8:63:d6:b1:40:88:ef:c8:8f: d1:cd:c8:9c:e1:00:17:1d:bf:83:31:77:b8:27:31:19:03:2f: ba:2c:4f:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+PPbhgHrLBJMbMxiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODAyMzEzZTYtNTZiZi00ZmQ4LWFlMGQtYzllMDU3ZDNi Mzk4MB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk NjYxNWNkNTYtNGM4Ni00NTAxLThkODAtNjAyOWI2MjYwOGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuU6FkKQg09TI90uGaIxiZzhDUKn37GoajSdw QlI+rtIPEaMjz76PPatdS/hUL4yOHqy1SoF6RmXO3P1k/tbtokBCQjRVcdhppSV1 6pEfQZBXYel82/Clcq85t3UbRR+XTPV95X+vss3tsJLYlfLna0wX6Y8jtKawVBxx e+Fbnvs9NeQ4CcaCREKe1L7TVuvgkkz6UxO48cBGXhg6KtJ1h21lqUfxtGr7/eew tyo2b3FWRV44jA1GDf++R+gBEIgOqCLvarf3bZXr7T/9KiKC5Cqh/4drbAz5Q8Nq QcSO2Qz+uBJtlQg7KlwQmGNFQVYMxPAR7aQV510Mi5xcXNJE6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIkus+OIssyskMGcm2qxP8sSoqJsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84MDIz MTNlNi01NmJmLTRmZDgtYWUwZC1jOWUwNTdkM2IzOTgvZDE4MmYzMTUtYWQ3OS0z Y2UxLWFmODctN2I1MTU1OGExNTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODAyMzEzZTYtNTZiZi00ZmQ4LWFl MGQtYzllMDU3ZDNiMzk4LzgwMjMxM2U2LTU2YmYtNGZkOC1hZTBkLWM5ZTA1N2Qz YjM5OC5jcmwwHwYDVR0jBBgwFoAU6Nx8ybbq227grPfqrNCHZurVu2gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84MDIzMTNlNi01NmJmLTRmZDgtYWUwZC1jOWUw NTdkM2IzOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYo8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMne9UqhcPgt32/E7id74FTtFiLk/LKqNLztN4T4tx3CQE6akTN8Vet rENk3ofLxUZIQF8/uW5z+5DlZCRzmLHD4pdh9Dk00v3oa1ypNfPWt+6qD0T/eaPF bjW1tBJtzH4kILsnZjLnS7hzAQVK1p0KPa+98N2e6zwmQ4dClOSjqS14Nbp3VVl5 VqasmNiUn09t6EWsem/Rs7jl4bJepjpoRoYcjlY0G1+HS7QrBmtMVdnw46dPWlLH nyBFvHye6SOV6ucRZqvxwTiGV1H3X65zsSx7T7T3TIiF169b9EReJfhj1rFAiO/I j9HNyJzhABcdv4Mxd7gnMRkDL7osT6Q= -----END CERTIFICATE-----Generated at Mon Oct 26 21:24:05 2026 by rpki-client