$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0230b6ca-af11-3bf2-afe7-143dedd3e979.roa File: 0230b6ca-af11-3bf2-afe7-143dedd3e979.roa (raw, json) Hash identifier: 8W4Rkl4HxNc8XaYizZcp6a5C3Gnm3yEXatyGo5pbZ3Y= Subject key identifier: 67:0C:F6:7A:32:8B:19:50:3A:21:06:B6:8B:93:CB:5A:47:2E:1E:01 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8FD9F1D4B67AA18DF38E0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0230b6ca-af11-3bf2-afe7-143dedd3e979.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 98.250.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:fd:9f:1d:4b:67:aa:18:df:38:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=7a2de785-b415-47d4-8cf3-810be7400b5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:72:51:53:c7:5c:4f:b0:07:66:2a:ba:20:3d: b0:a0:9b:be:9a:98:ea:5b:3d:d0:46:65:73:82:39: c0:a1:c7:4a:7a:f5:00:f5:02:88:68:a6:c6:3b:96: 2f:76:89:d6:5e:2b:41:45:ff:28:76:db:6e:18:a9: 07:8e:86:64:91:c2:f7:a6:c3:5d:29:b3:3a:ac:21: b0:09:c1:25:64:62:d2:b3:4f:ab:b2:0d:eb:5c:1b: 2e:7c:cc:41:55:51:d5:60:df:14:86:5a:35:f1:6c: ff:8c:65:f6:88:91:e8:bb:47:98:fb:9f:f8:02:36: e6:b2:fc:3e:34:bb:a3:e3:58:f8:23:e0:b3:27:d9: 90:0a:3a:6a:b0:a9:52:4d:03:4d:02:67:1c:f9:ab: e9:e4:5e:b9:c4:eb:d0:33:b7:5f:97:07:f8:ff:82: 38:1f:fc:65:3a:37:7a:87:d5:08:ab:ce:01:d0:0c: 40:77:03:19:6b:29:b1:8f:e4:ca:20:d0:92:28:27: 2f:e3:d4:7d:e7:0d:62:69:f7:30:37:81:97:e1:11: 8e:39:40:db:c4:7e:f7:1d:a8:fd:35:7a:f5:79:5f: 8b:6d:10:18:eb:0d:f3:95:8f:fe:92:d2:48:0a:1f: 46:8a:c2:bd:ef:cb:1d:40:23:69:cf:2a:d3:97:9b: 3d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:0C:F6:7A:32:8B:19:50:3A:21:06:B6:8B:93:CB:5A:47:2E:1E:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0230b6ca-af11-3bf2-afe7-143dedd3e979.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.250.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:7b:5f:d0:fb:2d:49:f3:60:24:ed:f7:21:7e:74:02:d1:80: 8c:d6:f3:46:85:6a:d8:e6:d1:ea:9e:7c:ae:09:0e:c7:06:44: 4d:73:02:c8:08:ff:c0:e1:33:24:37:d8:aa:c7:9c:85:b8:f5: 5e:2e:98:a4:f6:f9:5c:49:a0:aa:73:9c:6e:22:19:98:cc:60: 00:b0:2a:31:1b:d5:ef:93:9c:dd:99:35:73:23:67:63:c9:8d: 10:c7:4f:f9:6f:6d:df:d2:26:1b:8e:66:5b:c8:c7:8f:08:ce: 5b:73:0e:59:51:74:3d:23:37:99:35:d1:71:5f:16:46:51:d5: ba:13:09:67:e7:f8:6f:6a:be:5c:0e:0f:39:43:8f:9b:df:1c: 9c:56:3c:6e:81:b7:cb:ca:8f:79:02:45:b9:0b:ec:99:25:69: e5:5c:50:37:da:e7:c1:82:a1:00:ca:f5:c7:36:bc:bd:d6:3d: 8c:74:10:ec:e8:2b:f9:0b:6e:51:82:53:29:05:82:35:55:78: 21:0e:6e:45:ac:70:5f:16:86:8b:23:72:ed:ef:af:3a:b5:25: fa:c0:f1:de:fc:82:c9:8d:36:a1:f5:52:be:9b:f2:51:28:46: 4f:c3:76:60:e4:e5:65:88:a7:86:64:7b:4b:9c:cb:15:05:59: 26:46:e4:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqP2fHUtnqhjfOOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk N2EyZGU3ODUtYjQxNS00N2Q0LThjZjMtODEwYmU3NDAwYjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnJRU8dcT7AHZiq6ID2woJu+mpjqWz3QRmVz gjnAocdKevUA9QKIaKbGO5YvdonWXitBRf8odttuGKkHjoZkkcL3psNdKbM6rCGw CcElZGLSs0+rsg3rXBsufMxBVVHVYN8Uhlo18Wz/jGX2iJHou0eY+5/4Ajbmsvw+ NLuj41j4I+CzJ9mQCjpqsKlSTQNNAmcc+avp5F65xOvQM7dflwf4/4I4H/xlOjd6 h9UIq84B0AxAdwMZaymxj+TKINCSKCcv49R95w1iafcwN4GX4RGOOUDbxH73Haj9 NXr1eV+LbRAY6w3zlY/+ktJICh9GisK978sdQCNpzyrTl5s9xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGcM9noyixlQOiEGtouTy1pHLh4BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDIzMGI2Y2EtYWYxMS0z YmYyLWFmZTctMTQzZGVkZDNlOTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYvpWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACV7X9D7LUnzYCTt9yF+dALRgIzW80aFatjm0eqefK4JDscGRE1zAsgI /8DhMyQ32KrHnIW49V4umKT2+VxJoKpznG4iGZjMYACwKjEb1e+TnN2ZNXMjZ2PJ jRDHT/lvbd/SJhuOZlvIx48IzltzDllRdD0jN5k10XFfFkZR1boTCWfn+G9qvlwO DzlDj5vfHJxWPG6Bt8vKj3kCRbkL7JklaeVcUDfa58GCoQDK9cc2vL3WPYx0EOzo K/kLblGCUykFgjVVeCEObkWscF8Whosjcu3vrzq1JfrA8d78gsmNNqH1Ur6b8lEo Rk/DdmDk5WWIp4Zke0ucyxUFWSZG5MQ= -----END CERTIFICATE-----Generated at Tue Oct 21 19:35:04 2025 by rpki-client