$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4/f09bf350-282f-3141-8416-ce348e7976d3.roa File: f09bf350-282f-3141-8416-ce348e7976d3.roa (raw, json) Hash identifier: 7TOdeIAUNsNFpLa47xA21emmS4zSr836ncmYxIwBXZM= Subject key identifier: E4:C6:60:CA:8C:58:18:86:CF:80:22:DC:A4:6C:AF:2D:CD:04:D5:B8 Certificate issuer: /CN=98b0e4c3-1653-497d-83ba-9d8b10e9f1a4 Certificate serial: 010D0C9F4328584F6A1AA4D094A8E8290AF62440 Authority key identifier: 61:4F:BC:D9:31:24:42:A0:57:62:2F:C5:0A:17:B1:DC:38:92:C9:97 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4/f09bf350-282f-3141-8416-ce348e7976d3.roa Signing time: Tue 06 Oct 2026 17:44:49 +0000 ROA not before: Tue 06 Oct 2026 17:44:49 +0000 ROA not after: Mon 04 Jan 2027 18:44:49 +0000 asID: 198949 IP address blocks: 131.96.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6a:1a:a4:d0:94:a8:e8:29:0a:f6:24:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98b0e4c3-1653-497d-83ba-9d8b10e9f1a4 Validity Not Before: Oct 6 17:44:49 2026 GMT Not After : Jan 4 18:44:49 2027 GMT Subject: CN=8896c91e-31f8-4e8f-a1b2-216ace2b3a11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:21:90:96:f0:8e:64:c3:87:18:3b:62:36:18: 49:80:de:0a:fa:bb:c1:74:cc:82:be:62:d3:48:48: eb:21:f9:34:4d:dc:77:97:15:f9:fa:3e:8e:38:c4: 54:eb:52:f6:b2:ef:11:ac:0c:b4:9e:96:6e:4b:5f: d8:4f:6d:45:3f:3b:5d:80:f2:d9:a5:ea:9e:b7:ec: fa:07:20:8a:a6:d6:f1:fe:c5:df:df:92:09:af:f3: 8d:03:90:03:0c:f3:f0:ac:d2:31:7e:05:e5:d3:69: bc:d7:08:93:60:f5:0a:91:e8:d8:b1:cb:6d:cc:e2: 2c:1d:a2:5e:07:98:80:7d:a2:10:0d:e9:9c:0e:5e: af:ae:e2:d9:3b:7f:20:ca:97:eb:d7:5f:dd:0c:a7: b1:9b:e9:f0:58:5a:b4:8a:39:26:f1:72:2a:7f:a2: 62:f3:af:ff:b5:cc:7b:59:e1:25:1b:f4:cb:09:45: 8d:1f:ae:2e:3e:3d:46:2e:c0:1f:86:77:a6:65:47: 0a:f3:c8:a1:a1:3c:c1:0d:d6:03:2d:75:d5:d2:bc: 3b:2a:ca:f0:03:2e:f8:af:38:97:37:06:b2:fa:79: d1:47:4c:58:18:2b:3c:70:10:ef:57:b6:67:bb:f2: da:bc:dc:bc:b8:d0:3c:23:3e:94:c8:aa:1a:64:5f: 8c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:C6:60:CA:8C:58:18:86:CF:80:22:DC:A4:6C:AF:2D:CD:04:D5:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4/f09bf350-282f-3141-8416-ce348e7976d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4.crl X509v3 Authority Key Identifier: keyid:61:4F:BC:D9:31:24:42:A0:57:62:2F:C5:0A:17:B1:DC:38:92:C9:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4.cer sbgp-ipAddrBlock: critical IPv4: 131.96.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:a1:bd:0f:2b:01:f1:43:d6:51:d4:e6:b7:c4:25:aa:16:4b: 76:e2:32:93:a1:cf:08:9d:16:e7:b5:0e:a5:95:cc:02:5e:8c: e0:61:f4:ac:9d:28:1c:5a:d1:8c:1e:1a:5f:15:26:f2:7c:5f: c3:1d:b6:a5:06:a1:b5:88:15:96:85:7c:1a:6a:94:a3:db:48: d9:bb:3b:2a:55:9e:e5:b3:37:b2:35:be:e0:e6:3b:33:59:f6: 27:13:25:dd:15:09:2f:3f:9d:38:38:4e:b2:5b:3c:20:1f:48: e3:ad:eb:31:ac:72:30:da:e9:e1:d0:e5:b0:41:4c:20:11:ab: 68:b8:5e:fb:a0:4f:ec:4a:66:53:0d:56:f0:51:3b:68:88:be: 8b:3c:df:b0:fc:d9:f4:e3:07:b3:a5:3b:f2:a7:94:ae:41:49: 88:9f:f0:6d:a8:4f:8c:49:4b:30:22:22:0d:f1:4e:58:e4:21: e5:6a:56:65:0f:27:5e:3b:24:d4:1b:48:28:9d:a3:19:7d:f2: 5e:c6:45:43:3c:e0:42:b1:25:1d:16:80:6b:d2:07:08:d5:25: 32:d5:ac:c4:ef:14:ae:5c:be:1f:3b:c1:ae:c1:e4:19:5b:5e: 2c:4c:1b:63:68:94:5e:1d:d7:7c:ec:a8:c2:42:a5:fc:67:9e: 29:c4:d4:45 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9qGqTQlKjoKQr2JEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOThiMGU0YzMtMTY1My00OTdkLTgzYmEtOWQ4YjEwZTlm MWE0MB4XDTI2MTAwNjE3NDQ0OVoXDTI3MDEwNDE4NDQ0OVowLzEtMCsGA1UEAxMk ODg5NmM5MWUtMzFmOC00ZThmLWExYjItMjE2YWNlMmIzYTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSGQlvCOZMOHGDtiNhhJgN4K+rvBdMyCvmLT SEjrIfk0Tdx3lxX5+j6OOMRU61L2su8RrAy0npZuS1/YT21FPztdgPLZpeqet+z6 ByCKptbx/sXf35IJr/ONA5ADDPPwrNIxfgXl02m81wiTYPUKkejYscttzOIsHaJe B5iAfaIQDemcDl6vruLZO38gypfr11/dDKexm+nwWFq0ijkm8XIqf6Ji86//tcx7 WeElG/TLCUWNH64uPj1GLsAfhnemZUcK88ihoTzBDdYDLXXV0rw7KsrwAy74rziX Nway+nnRR0xYGCs8cBDvV7Znu/LavNy8uNA8Iz6UyKoaZF+MQwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFOTGYMqMWBiGz4Ai3KRsry3NBNW4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85OGIw ZTRjMy0xNjUzLTQ5N2QtODNiYS05ZDhiMTBlOWYxYTQvZjA5YmYzNTAtMjgyZi0z MTQxLTg0MTYtY2UzNDhlNzk3NmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOThiMGU0YzMtMTY1My00OTdkLTgz YmEtOWQ4YjEwZTlmMWE0Lzk4YjBlNGMzLTE2NTMtNDk3ZC04M2JhLTlkOGIxMGU5 ZjFhNC5jcmwwHwYDVR0jBBgwFoAUYU+82TEkQqBXYi/FChex3DiSyZcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85OGIwZTRjMy0xNjUzLTQ5N2QtODNiYS05ZDhi MTBlOWYxYTQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAg2AwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAAKG9DysB8UPWUdTmt8QlqhZLduIyk6HPCJ0W57UOpZXMAl6M4GH0rJ0o HFrRjB4aXxUm8nxfwx22pQahtYgVloV8GmqUo9tI2bs7KlWe5bM3sjW+4OY7M1n2 JxMl3RUJLz+dODhOsls8IB9I463rMaxyMNrp4dDlsEFMIBGraLhe+6BP7EpmUw1W 8FE7aIi+izzfsPzZ9OMHs6U78qeUrkFJiJ/wbahPjElLMCIiDfFOWOQh5WpWZQ8n Xjsk1BtIKJ2jGX3yXsZFQzzgQrElHRaAa9IHCNUlMtWsxO8Urly+HzvBrsHkGVte LEwbY2iUXh3XfOyowkKl/GeeKcTURQ== -----END CERTIFICATE-----Generated at Sun Oct 11 08:44:24 2026 by rpki-client