$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/396f1663-a36e-38e5-8c23-f5d007529714.roa File: 396f1663-a36e-38e5-8c23-f5d007529714.roa (raw, json) Hash identifier: roCuqvz62Yrfn+XxvNT998WjgNgtOOtfhfWX01E2ULQ= Subject key identifier: FA:8C:00:CD:5B:7D:4E:B7:1F:C7:95:31:68:6A:47:07:C9:32:D8:BC Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584B33F1A1E3BAFB4816C2E51100 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/396f1663-a36e-38e5-8c23-f5d007529714.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 53607 IP address blocks: 98.142.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:a1:e3:ba:fb:48:16:c2:e5:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=41ea5bc3-a438-459f-b66e-e59937c1ed6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:45:47:83:e4:d3:c6:63:02:4e:c5:61:c6:1a: 63:85:71:af:8d:c4:d2:14:93:cd:8e:42:d5:f8:2c: 32:24:14:11:b1:c1:77:11:e8:25:de:f2:7d:26:d4: 16:c8:2e:d0:70:56:37:bb:c7:c0:22:36:f7:7f:e3: fb:dc:7a:c2:84:a5:62:e6:6f:d5:00:65:6c:8b:72: 4b:f3:b9:da:87:a1:88:ea:69:9c:b1:5c:1e:0b:70: 80:9b:cc:d2:dc:49:d0:c4:0c:7b:32:df:23:db:39: 74:35:68:0e:08:41:ba:db:7a:77:24:94:29:94:6a: 3b:85:24:77:53:1c:2a:e0:d6:cf:20:ae:6b:d5:20: 09:98:28:2b:1f:af:9a:41:35:b6:8c:e1:58:4a:5a: ec:bd:14:ed:09:08:84:a6:40:9b:3a:c8:6c:7f:1a: 90:43:03:5f:f1:dd:39:0e:cb:1d:2e:99:e6:d7:1c: c3:99:48:8b:6f:4a:ad:22:c3:77:69:3a:a3:3a:eb: 01:ae:38:4e:74:64:e2:3f:a0:90:61:3d:04:a6:f0: 9d:ea:65:92:23:9a:f0:57:2d:6f:89:ed:7b:4b:65: 2f:ab:04:bd:fd:2b:11:92:c9:c9:d2:9d:cf:5c:bb: f9:a0:50:b0:b6:37:e2:48:26:4e:41:3b:be:d6:57: 64:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:8C:00:CD:5B:7D:4E:B7:1F:C7:95:31:68:6A:47:07:C9:32:D8:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/396f1663-a36e-38e5-8c23-f5d007529714.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 98.142.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:9c:63:fb:be:80:63:95:89:0d:b3:f7:9c:6e:f9:c0:cf:1c: 64:f5:e3:ad:1e:ea:19:62:97:07:cc:e3:ca:c1:82:87:7a:19: 2a:92:34:4f:0f:e7:8b:3a:65:cf:23:06:9e:f3:42:33:31:0e: 53:fe:80:46:85:b2:0e:d0:a4:ec:87:f9:eb:40:4c:3a:ff:9d: 33:2f:db:5a:0e:54:50:54:db:e2:36:21:78:fb:4a:49:26:88: a1:c1:00:32:55:2c:4b:0d:bf:1b:86:c5:6e:a8:33:19:c1:82: 14:34:1f:b6:ad:44:91:50:82:a9:98:1f:75:f5:5e:8a:9c:fe: a6:81:66:7a:d7:c8:16:49:1e:7e:35:4d:de:c4:d8:a5:5c:db: e3:9f:9a:24:81:fc:f8:3e:89:a6:c4:9e:36:3c:6f:ce:3e:c0: 3f:13:3f:0f:02:10:9d:4b:09:15:6b:3e:19:6e:0c:c2:21:45: 08:a0:19:ea:07:41:b8:5a:dd:9a:7e:7f:fd:46:01:29:9a:df: a0:82:33:87:cc:fc:62:6a:d6:a5:a6:e8:a1:73:ed:74:5e:21: d1:f2:36:3b:9b:46:29:aa:69:cb:d3:e9:08:b6:5d:08:15:a8: 7d:45:d2:47:eb:6a:88:9e:d5:7c:f6:8e:aa:9e:25:22:be:25: 79:ad:2c:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsz8aHjuvtIFsLlEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk NDFlYTViYzMtYTQzOC00NTlmLWI2NmUtZTU5OTM3YzFlZDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokVHg+TTxmMCTsVhxhpjhXGvjcTSFJPNjkLV +CwyJBQRscF3Eegl3vJ9JtQWyC7QcFY3u8fAIjb3f+P73HrChKVi5m/VAGVsi3JL 87nah6GI6mmcsVweC3CAm8zS3EnQxAx7Mt8j2zl0NWgOCEG623p3JJQplGo7hSR3 Uxwq4NbPIK5r1SAJmCgrH6+aQTW2jOFYSlrsvRTtCQiEpkCbOshsfxqQQwNf8d05 DssdLpnm1xzDmUiLb0qtIsN3aTqjOusBrjhOdGTiP6CQYT0EpvCd6mWSI5rwVy1v ie17S2UvqwS9/SsRksnJ0p3PXLv5oFCwtjfiSCZOQTu+1ldk2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqMAM1bfU63H8eVMWhqRwfJMti8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvMzk2ZjE2NjMtYTM2ZS0z OGU1LThjMjMtZjVkMDA3NTI5NzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYo4gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKcY/u+gGOViQ2z95xu+cDPHGT1460e6hlilwfM48rBgod6GSqSNE8P 54s6Zc8jBp7zQjMxDlP+gEaFsg7QpOyH+etATDr/nTMv21oOVFBU2+I2IXj7Skkm iKHBADJVLEsNvxuGxW6oMxnBghQ0H7atRJFQgqmYH3X1Xoqc/qaBZnrXyBZJHn41 Td7E2KVc2+OfmiSB/Pg+iabEnjY8b84+wD8TPw8CEJ1LCRVrPhluDMIhRQigGeoH Qbha3Zp+f/1GASma36CCM4fM/GJq1qWm6KFz7XReIdHyNjubRimqacvT6Qi2XQgV qH1F0kfraoie1Xz2jqqeJSK+JXmtLPw= -----END CERTIFICATE-----Generated at Fri Oct 10 23:38:50 2025 by rpki-client