$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/05d014b2-e85a-3499-8c2f-04aa3256225a.roa File: 05d014b2-e85a-3499-8c2f-04aa3256225a.roa (raw, json) Hash identifier: s7t9yz/6s2SXC5N3Ykdk7dqYAf8kuQ/djvY+RfjSU98= Subject key identifier: 7B:3D:E6:D0:7D:C7:38:0B:CF:C1:F6:2C:90:46:07:F8:FD:0A:4F:C0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA9348559099258E0A9760 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/05d014b2-e85a-3499-8c2f-04aa3256225a.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 98.243.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:93:48:55:90:99:25:8e:0a:97:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=a84110d2-d39b-44ea-b47e-c5a3ff4356f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:48:e1:d3:ac:56:6f:8a:66:01:f4:6e:17:12: ad:a2:e1:56:40:ce:27:86:45:31:9d:57:d7:84:1a: 98:68:5b:cd:38:15:64:2f:e7:8e:3d:47:84:e7:a8: 6b:f7:b4:21:85:46:f9:95:f6:05:e1:e1:78:0d:70: 65:0f:1b:72:14:fd:11:aa:20:13:f6:77:d2:d8:e4: ac:08:31:96:63:77:01:4d:f3:e1:93:e7:b6:e5:75: fb:f8:0b:f2:2d:d0:77:5b:88:1b:15:61:a3:4a:78: de:69:c7:87:38:4b:1b:df:8b:17:4c:c3:27:36:91: 38:a3:11:63:f3:20:85:8f:7b:4f:d6:41:c7:2b:33: d5:74:33:d4:10:6f:66:43:05:4c:3a:ec:83:7b:15: f7:33:45:86:be:25:d5:fc:52:f3:e7:2f:fc:60:58: 69:b3:c0:d6:8d:f8:e7:c9:51:d6:64:2a:be:80:30: 43:43:d0:ae:53:26:10:9a:35:95:67:2a:f1:8c:38: d9:2c:61:38:3a:15:b4:59:d0:fe:8c:09:02:5e:63: f1:02:3b:14:90:46:83:5c:46:ce:c5:0f:8d:66:79: a5:47:07:ee:d6:d1:94:d9:1b:6c:2d:33:33:c8:eb: 46:e0:d7:f9:ea:85:b2:9b:47:42:57:db:ea:c3:a6: 78:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:3D:E6:D0:7D:C7:38:0B:CF:C1:F6:2C:90:46:07:F8:FD:0A:4F:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/05d014b2-e85a-3499-8c2f-04aa3256225a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.243.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:92:45:ae:43:d4:ef:f6:40:24:2f:aa:31:3e:e8:1c:2e:c5: 92:d8:13:e4:d2:36:3b:3e:42:f9:90:87:e2:59:5b:15:09:5a: 2d:26:66:8a:dd:73:35:69:49:f6:d9:7f:cf:3d:a8:9a:5d:9d: d0:01:5e:e1:7b:c3:2b:f7:ea:f3:10:28:1b:ee:48:65:42:2e: ad:7b:3b:9f:06:f4:5a:3b:98:04:a8:c3:1b:22:18:41:91:e7: 57:44:86:9c:bd:cf:8f:af:15:d9:2d:4a:34:4f:25:01:b4:4d: 03:c8:a9:1d:31:f4:a5:bd:08:63:34:0a:48:93:db:ee:42:c9: 6a:e8:65:7a:28:36:7d:fb:fc:73:59:7c:ff:db:59:cb:e3:fc: e2:b9:eb:c1:1c:e2:b0:de:31:b9:20:50:24:ef:58:13:2a:1a: 2f:d6:20:26:36:b0:86:be:81:5e:46:92:88:5e:5f:3e:5d:60: 59:0c:15:21:d6:51:1d:43:48:c2:4f:43:37:0c:bd:6a:03:5b: 83:63:a4:af:09:25:12:a9:f4:5a:97:5e:49:58:a3:0b:26:5d: 90:35:59:29:83:a8:74:41:bc:04:44:aa:7b:05:68:fa:c7:7e: ce:e0:81:eb:90:b8:39:f0:46:6c:7f:e8:90:74:1e:c4:b1:f6: f5:63:88:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqpNIVZCZJY4Kl2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YTg0MTEwZDItZDM5Yi00NGVhLWI0N2UtYzVhM2ZmNDM1NmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEjh06xWb4pmAfRuFxKtouFWQM4nhkUxnVfX hBqYaFvNOBVkL+eOPUeE56hr97QhhUb5lfYF4eF4DXBlDxtyFP0RqiAT9nfS2OSs CDGWY3cBTfPhk+e25XX7+AvyLdB3W4gbFWGjSnjeaceHOEsb34sXTMMnNpE4oxFj 8yCFj3tP1kHHKzPVdDPUEG9mQwVMOuyDexX3M0WGviXV/FLz5y/8YFhps8DWjfjn yVHWZCq+gDBDQ9CuUyYQmjWVZyrxjDjZLGE4OhW0WdD+jAkCXmPxAjsUkEaDXEbO xQ+NZnmlRwfu1tGU2RtsLTMzyOtG4Nf56oWym0dCV9vqw6Z4VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHs95tB9xzgLz8H2LJBGB/j9Ck/AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDVkMDE0YjItZTg1YS0z NDk5LThjMmYtMDRhYTMyNTYyMjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYvPzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6SRa5D1O/2QCQvqjE+6BwuxZLYE+TSNjs+QvmQh+JZWxUJWi0mZord czVpSfbZf889qJpdndABXuF7wyv36vMQKBvuSGVCLq17O58G9Fo7mASowxsiGEGR 51dEhpy9z4+vFdktSjRPJQG0TQPIqR0x9KW9CGM0CkiT2+5CyWroZXooNn37/HNZ fP/bWcvj/OK568Ec4rDeMbkgUCTvWBMqGi/WICY2sIa+gV5GkoheXz5dYFkMFSHW UR1DSMJPQzcMvWoDW4NjpK8JJRKp9FqXXklYowsmXZA1WSmDqHRBvAREqnsFaPrH fs7ggeuQuDnwRmx/6JB0HsSx9vVjiLI= -----END CERTIFICATE-----Generated at Tue Oct 21 19:33:03 2025 by rpki-client