$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c8868f4-548c-3295-82d0-ccb06c6a033a.roa File: 1c8868f4-548c-3295-82d0-ccb06c6a033a.roa (raw, json) Hash identifier: svb8hwADKOaaYCDliY9hcTs7kZBn1KELR+/0UKWCGl4= Subject key identifier: D0:40:5E:4B:E1:88:5E:2C:8E:8D:9A:49:DB:CE:E1:BF:0B:77:07:64 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA8F45A1446D62EA2A7800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c8868f4-548c-3295-82d0-ccb06c6a033a.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 98.209.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:8f:45:a1:44:6d:62:ea:2a:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=4597403e-0b77-4d6f-a3e7-234c0c3e13c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:6f:0c:3d:72:98:9f:11:13:cd:a8:e1:a1:ec: db:30:34:7e:14:31:48:fa:e3:cb:1e:86:b3:b2:8b: d0:84:1b:70:99:e2:92:46:a9:60:b1:71:a0:23:83: 54:f1:23:94:d3:19:07:18:ef:50:0a:72:7a:0b:45: d8:a0:ad:2e:01:7e:a2:8a:19:0d:f2:2d:55:76:9d: fa:53:22:d2:bd:75:3e:4a:8d:a8:f7:1e:d2:1b:d6: 36:25:ca:41:9f:7d:12:2e:e1:83:9f:bf:a6:bd:a3: 96:86:5e:de:0f:70:46:71:f9:c0:05:58:c0:cb:d5: 3a:1f:3c:67:2d:c1:b3:c1:1e:4a:2a:87:a7:5a:d2: f2:62:0c:92:99:16:1c:4d:4f:3e:72:be:eb:87:8a: 9c:e7:54:b0:69:7c:9f:17:94:a9:38:1d:6d:2b:01: ed:85:bc:ff:cd:a5:9c:74:af:4c:52:82:f3:1d:7c: cc:e1:1b:8c:d3:e5:2e:36:f9:90:53:47:83:51:a8: e0:c0:dc:51:30:8f:38:0b:af:57:14:91:c3:7a:b5: 3d:18:de:4a:d7:3a:ef:2a:eb:4d:0d:3e:7f:db:83: 59:b8:9e:c1:7d:03:62:4d:70:bb:7c:19:fb:af:6b: e3:20:db:6c:f5:66:01:4c:9a:78:f6:a0:80:53:68: 14:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:40:5E:4B:E1:88:5E:2C:8E:8D:9A:49:DB:CE:E1:BF:0B:77:07:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c8868f4-548c-3295-82d0-ccb06c6a033a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.209.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:05:d4:71:8d:15:a3:ce:17:a3:e1:6a:6e:3f:09:de:58:d7: 10:7d:19:5a:99:1f:97:ca:46:85:45:f9:b2:87:23:ad:44:11: 47:a8:a6:9e:1c:11:a5:9a:91:3d:28:cd:c9:b7:f1:c8:e0:a7: 1e:63:eb:3f:da:1f:9f:a3:fc:79:fd:37:b8:67:2c:29:1f:17: e5:2e:69:26:10:05:5a:fb:03:0b:eb:15:b4:08:b1:7e:b0:84: d2:36:8f:78:c1:10:24:fc:e7:14:99:49:d5:42:43:59:3f:6b: 68:2b:b1:ce:a6:ae:a2:8b:7f:0a:88:f1:07:28:1d:05:df:8b: a4:48:4e:3e:82:3b:bb:53:6d:62:9f:82:a2:1e:97:22:66:fd: dc:44:a9:db:e9:31:4c:f9:7d:cd:5d:e6:88:2f:10:04:98:ea: 68:eb:97:a8:ed:ce:51:c9:0e:0f:2f:8d:34:54:ea:3b:b6:1b: ce:f7:ab:7e:2f:14:d3:94:87:6e:c9:64:a5:c2:ae:89:81:dd: 2d:e6:29:1e:4c:2f:ac:89:80:c1:8d:2b:d9:d8:1b:73:68:ab: f5:be:7b:af:9a:4f:d1:9a:75:e2:89:51:4e:35:a8:95:94:23: f9:cd:58:e5:b4:f6:85:d2:0b:f8:44:c4:9d:7e:0a:c9:31:a9: 42:35:bd:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqo9FoURtYuoqeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NDU5NzQwM2UtMGI3Ny00ZDZmLWEzZTctMjM0YzBjM2UxM2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhG8MPXKYnxETzajhoezbMDR+FDFI+uPLHoaz sovQhBtwmeKSRqlgsXGgI4NU8SOU0xkHGO9QCnJ6C0XYoK0uAX6iihkN8i1Vdp36 UyLSvXU+So2o9x7SG9Y2JcpBn30SLuGDn7+mvaOWhl7eD3BGcfnABVjAy9U6Hzxn LcGzwR5KKoenWtLyYgySmRYcTU8+cr7rh4qc51SwaXyfF5SpOB1tKwHthbz/zaWc dK9MUoLzHXzM4RuM0+UuNvmQU0eDUajgwNxRMI84C69XFJHDerU9GN5K1zrvKutN DT5/24NZuJ7BfQNiTXC7fBn7r2vjINts9WYBTJp49qCAU2gUfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNBAXkvhiF4sjo2aSdvO4b8LdwdkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWM4ODY4ZjQtNTQ4Yy0z Mjk1LTgyZDAtY2NiMDZjNmEwMzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYtHyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgF1HGNFaPOF6Pham4/Cd5Y1xB9GVqZH5fKRoVF+bKHI61EEUeopp4c EaWakT0ozcm38cjgpx5j6z/aH5+j/Hn9N7hnLCkfF+UuaSYQBVr7AwvrFbQIsX6w hNI2j3jBECT85xSZSdVCQ1k/a2grsc6mrqKLfwqI8QcoHQXfi6RITj6CO7tTbWKf gqIelyJm/dxEqdvpMUz5fc1d5ogvEASY6mjrl6jtzlHJDg8vjTRU6ju2G873q34v FNOUh27JZKXCromB3S3mKR5ML6yJgMGNK9nYG3Noq/W+e6+aT9GadeKJUU41qJWU I/nNWOW09oXSC/hExJ1+CskxqUI1vZY= -----END CERTIFICATE-----Generated at Tue Oct 21 22:16:51 2025 by rpki-client