$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21cf510c-74f4-3e86-afe7-367005e91366.roa File: 21cf510c-74f4-3e86-afe7-367005e91366.roa (raw, json) Hash identifier: qLVs8vQ7wHCKrXqPDo17cienDVWaPtZCzEbGTNv4/ic= Subject key identifier: 7C:E8:58:EF:99:61:77:62:09:01:51:13:03:C9:A0:2C:23:28:F3:82 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AAEB8A0D9DBD756169E400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21cf510c-74f4-3e86-afe7-367005e91366.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 98.200.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:eb:8a:0d:9d:bd:75:61:69:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=fad748fe-057e-4684-b530-74425a3c34c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b7:b2:6b:eb:e3:50:19:4e:df:c3:c1:63:13: f4:93:3f:37:33:9d:1b:48:85:25:c8:84:8a:d5:c4: 2a:32:f6:df:ce:71:6c:6d:1b:72:06:26:15:fa:0b: c6:8b:0e:e1:18:d6:93:37:33:d1:37:1d:b5:fe:a7: c3:f7:66:7f:a7:d6:54:45:87:d7:fd:28:c4:c7:00: 09:72:ee:87:a4:d6:5d:50:77:e7:71:5f:cf:b8:82: 9b:5f:f5:81:6b:57:2f:d9:ca:24:ef:03:64:57:71: ff:c0:54:6e:40:09:11:97:d9:4f:63:5f:d5:de:df: b9:82:83:c8:13:6e:ac:a8:97:85:46:94:13:e7:f7: 62:e4:7d:57:a4:41:37:5e:22:a1:17:95:12:31:50: 55:84:ad:f8:00:9d:be:88:83:a1:b3:3e:10:2d:c4: 4f:ed:03:27:5f:54:0d:13:ec:26:4c:ab:b8:15:3e: a5:88:94:4f:0c:a6:bf:b1:8a:8c:8e:55:c6:16:46: 2f:cc:c5:79:1a:9e:ce:24:cc:60:eb:b9:0d:ec:79: 29:83:17:07:4f:9e:a8:bb:6d:31:f6:70:81:71:5b: 27:97:1c:bc:da:39:24:40:6c:fc:80:05:61:2c:93: 3d:17:d6:61:85:18:13:25:88:a0:45:ee:4c:06:e5: 7b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:E8:58:EF:99:61:77:62:09:01:51:13:03:C9:A0:2C:23:28:F3:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21cf510c-74f4-3e86-afe7-367005e91366.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.200.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:f6:f2:71:ea:60:7e:bb:8f:31:e5:c0:42:56:85:2a:42:47: b3:a4:51:6b:ed:3e:6c:d8:0a:72:bf:c4:9c:c8:17:ae:c5:0e: 81:f2:ea:c0:9f:bc:75:9d:6c:e6:0f:38:23:2d:ba:ce:8e:77: 03:33:66:28:4d:cc:90:c9:fb:9b:9b:ba:c8:4e:c8:7b:2e:e1: 61:6c:b8:20:d0:2b:62:6e:14:24:cf:c6:c3:ee:02:49:fd:95: 9d:d2:54:66:b2:e2:2f:76:0d:45:34:ef:0d:ac:72:1a:5b:ef: 7c:3f:14:ea:52:97:89:1b:1a:6f:97:02:21:80:6c:e3:eb:03: c3:23:b2:4e:31:4e:ea:c0:0d:35:dd:d1:4e:60:b5:f1:67:d8: f0:b5:a7:ef:53:49:ee:87:36:21:ce:c5:cd:ba:6d:8d:52:f3: 74:2e:6c:ed:89:c2:02:73:a7:8a:cd:cc:db:da:6f:43:1b:68: cf:98:ef:65:8e:b9:36:1d:40:04:82:d5:08:f5:0c:12:85:f2: 72:a4:0a:44:86:26:3d:52:07:60:18:86:8d:ab:76:08:cf:ef: b4:ba:26:2e:b1:64:25:b7:c9:80:b3:57:e0:e6:6c:11:46:84: bc:07:36:29:c3:a0:9a:07:cc:c2:25:29:9e:04:14:cd:fb:bc: 18:e1:05:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVquuKDZ29dWFp5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZmFkNzQ4ZmUtMDU3ZS00Njg0LWI1MzAtNzQ0MjVhM2MzNGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7eya+vjUBlO38PBYxP0kz83M50bSIUlyISK 1cQqMvbfznFsbRtyBiYV+gvGiw7hGNaTNzPRNx21/qfD92Z/p9ZURYfX/SjExwAJ cu6HpNZdUHfncV/PuIKbX/WBa1cv2cok7wNkV3H/wFRuQAkRl9lPY1/V3t+5goPI E26sqJeFRpQT5/di5H1XpEE3XiKhF5USMVBVhK34AJ2+iIOhsz4QLcRP7QMnX1QN E+wmTKu4FT6liJRPDKa/sYqMjlXGFkYvzMV5Gp7OJMxg67kN7HkpgxcHT56ou20x 9nCBcVsnlxy82jkkQGz8gAVhLJM9F9ZhhRgTJYigRe5MBuV7OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHzoWO+ZYXdiCQFREwPJoCwjKPOCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjFjZjUxMGMtNzRmNC0z ZTg2LWFmZTctMzY3MDA1ZTkxMzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYsj+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADv28nHqYH67jzHlwEJWhSpCR7OkUWvtPmzYCnK/xJzIF67FDoHy6sCf vHWdbOYPOCMtus6OdwMzZihNzJDJ+5ubushOyHsu4WFsuCDQK2JuFCTPxsPuAkn9 lZ3SVGay4i92DUU07w2schpb73w/FOpSl4kbGm+XAiGAbOPrA8Mjsk4xTurADTXd 0U5gtfFn2PC1p+9TSe6HNiHOxc26bY1S83QubO2JwgJzp4rNzNvab0MbaM+Y72WO uTYdQASC1Qj1DBKF8nKkCkSGJj1SB2AYho2rdgjP77S6Ji6xZCW3yYCzV+DmbBFG hLwHNinDoJoHzMIlKZ4EFM37vBjhBT0= -----END CERTIFICATE-----Generated at Tue Oct 21 19:22:12 2025 by rpki-client