$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2cd77722-b280-3018-a1e3-3a8837c0435e.roa File: 2cd77722-b280-3018-a1e3-3a8837c0435e.roa (raw, json) Hash identifier: cx1nxSbgWwAB+itBMEbyYgu3fq1cHDMAejWUXKMAEmU= Subject key identifier: 65:F6:DB:ED:44:68:77:6A:F9:59:3B:D3:EC:3E:98:01:EE:54:80:C1 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584EF7179FA0D4E10F58E6669980 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2cd77722-b280-3018-a1e3-3a8837c0435e.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 701 IP address blocks: 98.118.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 15 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:9f:a0:d4:e1:0f:58:e6:66:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=cb21dfa8-e105-4244-b321-75e42d9d14e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:87:4d:83:17:e9:71:58:a4:e6:4b:3b:0f:01: 22:94:1d:72:2b:bf:b9:8e:df:42:85:d2:e4:3b:56: b2:1b:69:c5:a7:2b:de:10:50:b6:34:3f:cd:a2:7e: 08:d5:1e:c2:c2:04:f7:ee:47:5c:9d:36:57:2a:91: 96:3b:e4:d7:73:98:f4:ef:61:68:1b:c3:27:aa:6a: 39:5a:1b:c3:6c:de:cd:46:d4:0e:dc:df:f1:cc:b6: b1:ca:e2:af:43:e2:d5:cd:e6:c3:b2:f4:1a:aa:89: 1b:fe:9a:5d:a7:2f:42:7e:d9:95:b3:81:9e:e6:4b: 3c:05:2c:df:33:61:e3:41:ee:96:1a:ca:6d:52:7e: 76:94:1a:a0:78:b2:e3:fe:71:11:0f:7e:89:99:d8: bf:e7:eb:7e:02:0e:8f:5b:ee:fd:71:06:04:69:f8: bd:19:62:61:3d:88:20:c8:ca:c8:1e:bf:f2:52:2e: 8d:b1:5c:31:b6:29:0d:d3:dc:15:07:60:58:33:45: e6:e0:c2:76:35:d6:6f:33:01:79:61:b8:98:64:b1: 8a:ea:2f:c7:73:22:95:9a:58:c1:a4:e7:a3:09:bd: 00:48:d1:bb:cb:d0:e7:13:d9:9f:26:20:55:a7:21: 46:0b:e3:ae:16:2b:36:5c:54:ac:8f:6d:02:b4:84: 27:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:F6:DB:ED:44:68:77:6A:F9:59:3B:D3:EC:3E:98:01:EE:54:80:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2cd77722-b280-3018-a1e3-3a8837c0435e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 98.118.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:9f:6b:f2:8b:31:a0:9f:1d:46:6e:fc:26:24:4d:9c:c7:70: 19:e3:27:d1:13:62:96:30:52:90:8c:5f:47:17:b5:1e:1a:11: 34:2b:e3:05:7d:75:c2:2b:f5:16:0b:02:21:2c:b7:f2:71:91: 9d:2c:15:bc:cc:b9:2a:dc:d5:2d:fc:13:f5:5e:48:09:58:b9: 7f:ce:dc:a9:c2:7b:5a:d4:31:3c:87:c9:26:8b:5b:56:b6:56: e6:a4:35:95:82:72:1b:b0:8a:86:35:ff:0f:c4:00:7c:59:d1: df:46:be:f0:c2:0d:e2:c4:95:d2:0a:2a:67:ee:fd:f3:a6:e8: 19:fe:4e:30:45:e0:04:dd:d1:54:b5:ad:b9:b1:63:eb:e3:2a: 15:04:6c:f5:85:4a:b8:23:31:b6:be:54:ed:a6:d9:27:4c:c7: 4a:f7:25:03:ce:4e:ce:b5:63:23:29:bf:f2:f8:46:49:8b:19: c0:7b:73:db:c9:ad:9e:0d:8a:19:b7:51:31:75:7d:dc:2e:1d: 1d:94:26:8c:d2:65:08:ca:26:d3:ce:2e:5e:72:f6:d4:03:9f: 4b:89:ac:70:16:05:88:a3:be:b4:34:33:50:b0:ec:88:70:af: bc:51:6d:3c:17:36:5f:96:99:e8:18:b0:01:52:0b:a4:c3:ce: d4:44:24:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F5+g1OEPWOZmmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk Y2IyMWRmYTgtZTEwNS00MjQ0LWIzMjEtNzVlNDJkOWQxNGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4dNgxfpcVik5ks7DwEilB1yK7+5jt9ChdLk O1ayG2nFpyveEFC2ND/Non4I1R7CwgT37kdcnTZXKpGWO+TXc5j072FoG8Mnqmo5 WhvDbN7NRtQO3N/xzLaxyuKvQ+LVzebDsvQaqokb/ppdpy9CftmVs4Ge5ks8BSzf M2HjQe6WGsptUn52lBqgeLLj/nERD36Jmdi/5+t+Ag6PW+79cQYEafi9GWJhPYgg yMrIHr/yUi6NsVwxtikN09wVB2BYM0Xm4MJ2NdZvMwF5YbiYZLGK6i/HcyKVmljB pOejCb0ASNG7y9DnE9mfJiBVpyFGC+OuFis2XFSsj20CtIQndwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGX22+1EaHdq+Vk70+w+mAHuVIDBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmNkNzc3MjItYjI4MC0z MDE4LWExZTMtM2E4ODM3YzA0MzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGYnaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKfa/KLMaCfHUZu/CYkTZzHcBnjJ9ETYpYwUpCMX0cXtR4aETQr4wV9 dcIr9RYLAiEst/JxkZ0sFbzMuSrc1S38E/VeSAlYuX/O3KnCe1rUMTyHySaLW1a2 VuakNZWCchuwioY1/w/EAHxZ0d9GvvDCDeLEldIKKmfu/fOm6Bn+TjBF4ATd0VS1 rbmxY+vjKhUEbPWFSrgjMba+VO2m2SdMx0r3JQPOTs61YyMpv/L4RkmLGcB7c9vJ rZ4Nihm3UTF1fdwuHR2UJozSZQjKJtPOLl5y9tQDn0uJrHAWBYijvrQ0M1Cw7Ihw r7xRbTwXNl+WmegYsAFSC6TDztREJFo= -----END CERTIFICATE-----Generated at Sun Sep 13 16:41:15 2026 by rpki-client