$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1419c553-54dd-3269-9ab4-3941c224ff4c.roa File: 1419c553-54dd-3269-9ab4-3941c224ff4c.roa (raw, json) Hash identifier: 9uVUnmszat0PcSIAPNyoI4TcXcr6cuUIC0xQaTFicK0= Subject key identifier: CB:7F:7A:83:43:4B:44:58:56:FE:0A:13:48:0E:75:AA:EA:76:37:F6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8F4CCBD5C897EEAE07E80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1419c553-54dd-3269-9ab4-3941c224ff4c.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 98.243.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:f4:cc:bd:5c:89:7e:ea:e0:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=ca192159-1048-44ef-8ecb-ab3c51190dbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e8:aa:33:f4:25:ac:1b:11:cf:ca:c9:77:b9: 85:b1:61:d3:c9:7b:c5:56:cd:ff:39:eb:24:d3:f2: 05:68:b9:90:44:93:f6:c4:18:ed:fd:0a:4d:5b:81: 0f:ac:4e:b5:67:02:4f:ea:a0:03:00:c8:c0:77:3b: 61:13:7a:c8:6a:d3:ee:3c:e4:14:49:e2:ac:de:bc: 6c:52:b3:39:ef:3d:c0:61:f5:20:e5:d4:14:6c:21: e3:f7:c1:01:93:53:f6:61:fc:61:c2:1b:c3:77:d7: ed:ae:fb:27:82:38:00:98:3c:40:f9:9c:49:79:87: 8f:50:58:7c:0a:0d:28:3a:6f:d8:3b:ee:3d:00:a7: 3c:67:ec:e7:0b:6d:d9:f6:63:08:b4:a3:81:81:a8: 52:93:62:05:0f:17:f4:6a:32:ae:d7:f1:b0:43:a5: a8:fd:77:71:34:f9:65:a8:40:75:b6:26:8c:66:be: c3:73:eb:01:52:f8:9b:2c:59:c4:ae:6c:ea:12:b8: 55:e7:b1:e2:cb:e0:ee:db:b5:0d:06:17:34:9e:11: bf:8e:e4:70:f4:35:08:8f:fd:02:07:13:ba:fd:24: 8c:48:59:e5:40:eb:2a:fe:73:cf:8c:36:ca:4d:8d: b3:42:0c:b2:04:92:fd:f2:c9:05:0f:9e:24:be:a2: 66:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:7F:7A:83:43:4B:44:58:56:FE:0A:13:48:0E:75:AA:EA:76:37:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1419c553-54dd-3269-9ab4-3941c224ff4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.243.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:e6:39:65:aa:6c:26:eb:50:ce:b8:29:e3:0f:64:d3:5d:26: 69:75:89:ba:49:9d:e7:bc:2c:c7:f6:79:44:aa:f6:40:c3:ce: e1:14:d2:35:13:a1:03:63:b2:c5:20:d5:fc:5a:52:78:46:c7: 00:37:fa:50:e5:9f:31:24:70:59:a5:4c:79:be:26:92:99:32: 2b:99:9b:71:1e:97:88:06:30:7d:0d:90:88:98:7d:ec:a0:f9: 57:4a:c0:5a:7b:e5:5c:9f:6f:ad:54:ad:6b:97:9b:3e:75:d4: f1:13:3c:a6:8b:ed:85:6d:9b:ff:84:dd:23:8e:9a:41:b6:c8: 60:12:88:44:4c:d8:51:e6:ff:61:19:76:35:92:d8:66:f7:44: a1:be:75:63:3f:d3:02:fe:e8:44:a0:de:10:69:9a:56:69:17: 15:d2:ed:d2:9a:af:13:f5:5c:f9:91:4d:47:67:c6:16:2f:33: cd:92:65:78:dc:37:72:25:bd:59:bc:e1:0a:54:9b:a5:2c:29: 09:52:09:80:3b:4f:b6:c4:d1:a5:05:39:07:9c:7a:b6:56:88: 31:32:bf:8d:3b:14:8c:db:b8:43:d4:c3:aa:e1:d9:55:3f:7f: 90:6e:8c:9a:e5:48:3c:39:96:a9:22:45:38:00:10:0d:95:39: 5d:65:bf:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqPTMvVyJfurgfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk Y2ExOTIxNTktMTA0OC00NGVmLThlY2ItYWIzYzUxMTkwZGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+iqM/QlrBsRz8rJd7mFsWHTyXvFVs3/Oesk 0/IFaLmQRJP2xBjt/QpNW4EPrE61ZwJP6qADAMjAdzthE3rIatPuPOQUSeKs3rxs UrM57z3AYfUg5dQUbCHj98EBk1P2YfxhwhvDd9ftrvsngjgAmDxA+ZxJeYePUFh8 Cg0oOm/YO+49AKc8Z+znC23Z9mMItKOBgahSk2IFDxf0ajKu1/GwQ6Wo/XdxNPll qEB1tiaMZr7Dc+sBUvibLFnErmzqErhV57Hiy+Du27UNBhc0nhG/juRw9DUIj/0C BxO6/SSMSFnlQOsq/nPPjDbKTY2zQgyyBJL98skFD54kvqJm2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMt/eoNDS0RYVv4KE0gOdarqdjf2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTQxOWM1NTMtNTRkZC0z MjY5LTlhYjQtMzk0MWMyMjRmZjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYvN4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXmOWWqbCbrUM64KeMPZNNdJml1ibpJnee8LMf2eUSq9kDDzuEU0jUT oQNjssUg1fxaUnhGxwA3+lDlnzEkcFmlTHm+JpKZMiuZm3Eel4gGMH0NkIiYfeyg +VdKwFp75Vyfb61UrWuXmz511PETPKaL7YVtm/+E3SOOmkG2yGASiERM2FHm/2EZ djWS2Gb3RKG+dWM/0wL+6ESg3hBpmlZpFxXS7dKarxP1XPmRTUdnxhYvM82SZXjc N3IlvVm84QpUm6UsKQlSCYA7T7bE0aUFOQecerZWiDEyv407FIzbuEPUw6rh2VU/ f5BujJrlSDw5lqkiRTgAEA2VOV1lv1w= -----END CERTIFICATE-----Generated at Tue Oct 21 19:37:31 2025 by rpki-client