$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24b12128-c2a3-36a2-bbcf-10b3379bff70.roa File: 24b12128-c2a3-36a2-bbcf-10b3379bff70.roa (raw, json) Hash identifier: 45hcMeKAv8q7qzJVTd6+O+4TTv+uTG3j8VLutD5sBQ0= Subject key identifier: 6A:BF:B6:B6:DB:17:D8:D0:C2:AD:A1:7E:6E:62:98:11:2F:44:4B:E8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AADC3879CA6F2EC82830C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24b12128-c2a3-36a2-bbcf-10b3379bff70.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 98.196.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:dc:38:79:ca:6f:2e:c8:28:30:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=3d41cee5-f7d3-43bf-8fe8-b9376e119725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:b6:31:a0:7c:ea:10:a3:1d:9b:62:c8:c1:7d: 2c:7e:5d:cf:77:4a:fd:74:46:77:17:05:80:78:9e: 04:e2:fa:a6:aa:7c:e6:aa:d2:48:99:26:d7:2f:3e: c3:e6:ec:18:73:48:9c:29:c7:8b:35:53:de:06:83: 91:76:0f:36:9f:cc:10:ee:40:6a:1b:26:89:28:95: 5c:b9:26:e6:58:71:9f:69:8e:79:3a:a0:0e:b9:a6: a9:91:c0:bd:db:3c:5c:83:40:2a:59:aa:c8:38:9a: de:8b:9a:16:bb:1c:d3:5b:2f:83:7f:1f:12:57:9f: 71:59:2d:c2:c3:9c:3d:85:85:9e:88:cc:f1:7b:22: 6a:4a:ad:d7:4c:16:c5:76:dc:4b:08:42:9a:23:80: 88:31:9d:79:af:07:5d:da:53:c6:6a:60:9f:25:5a: 97:7e:46:9e:7b:4c:a7:dd:c3:09:8d:02:f4:83:5f: 87:e3:4b:72:2f:68:50:90:22:e8:eb:78:49:ee:85: 12:cd:bf:b6:f9:41:3e:80:f4:ce:14:87:12:7d:f7: f6:77:9f:f0:fc:bb:06:c2:1a:c0:66:f1:85:08:b2: 2a:26:0f:d0:7e:ae:b9:dc:9c:66:9b:78:cd:b8:14: 46:4c:83:ff:ef:c0:af:b4:2c:8e:96:09:e3:ca:4e: 64:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:BF:B6:B6:DB:17:D8:D0:C2:AD:A1:7E:6E:62:98:11:2F:44:4B:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24b12128-c2a3-36a2-bbcf-10b3379bff70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.196.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:3d:d5:db:98:57:f8:5e:aa:ca:44:12:42:c3:de:0d:3a:00: 20:c7:5f:80:c1:9a:94:e2:6b:b7:a2:c4:00:d9:32:a0:01:af: 75:02:40:4c:05:06:df:31:4c:36:43:81:d3:f6:4f:cc:a8:a0: 4b:fd:c4:62:c7:dc:1f:0a:01:e4:a9:2c:e4:cb:c8:74:7f:a4: 15:7a:d2:b0:a2:93:2f:de:e0:3b:65:61:9f:1b:20:e5:ec:3e: 36:84:5f:d6:78:47:fe:e8:98:bc:a7:25:4d:c3:28:ba:ac:bf: de:a1:c6:40:e3:7b:cb:f6:a0:1e:95:6b:5e:5f:d0:84:2e:b4: 40:00:36:66:3b:cb:32:93:ad:a1:93:33:29:fc:41:ef:83:12: ef:ea:77:14:17:f7:ae:e6:93:bb:c2:fc:96:d4:87:75:15:65: 84:33:74:d2:bc:0d:c4:c5:f0:be:2d:91:d3:8e:84:bb:ff:bb: 9c:c3:2e:58:8c:e0:e4:0e:ea:e7:d2:fe:4f:80:d8:66:3c:b2: c7:7e:48:68:b3:96:07:6d:b0:31:31:4e:b6:00:78:90:ec:ea: 26:85:a7:c5:a6:d4:0a:00:a6:db:97:f7:70:bf:24:40:84:3f: fa:1a:35:53:03:fd:c6:a8:a9:19:6e:c2:98:64:d1:be:4a:82: 50:1c:70:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqtw4ecpvLsgoMMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk M2Q0MWNlZTUtZjdkMy00M2JmLThmZTgtYjkzNzZlMTE5NzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA97YxoHzqEKMdm2LIwX0sfl3Pd0r9dEZ3FwWA eJ4E4vqmqnzmqtJImSbXLz7D5uwYc0icKceLNVPeBoORdg82n8wQ7kBqGyaJKJVc uSbmWHGfaY55OqAOuaapkcC92zxcg0AqWarIOJrei5oWuxzTWy+Dfx8SV59xWS3C w5w9hYWeiMzxeyJqSq3XTBbFdtxLCEKaI4CIMZ15rwdd2lPGamCfJVqXfkaee0yn 3cMJjQL0g1+H40tyL2hQkCLo63hJ7oUSzb+2+UE+gPTOFIcSfff2d5/w/LsGwhrA ZvGFCLIqJg/Qfq653Jxmm3jNuBRGTIP/78CvtCyOlgnjyk5kBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGq/trbbF9jQwq2hfm5imBEvREvoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjRiMTIxMjgtYzJhMy0z NmEyLWJiY2YtMTBiMzM3OWJmZjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYsSQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQ91duYV/heqspEEkLD3g06ACDHX4DBmpTia7eixADZMqABr3UCQEwF Bt8xTDZDgdP2T8yooEv9xGLH3B8KAeSpLOTLyHR/pBV60rCiky/e4DtlYZ8bIOXs PjaEX9Z4R/7omLynJU3DKLqsv96hxkDje8v2oB6Va15f0IQutEAANmY7yzKTraGT Myn8Qe+DEu/qdxQX967mk7vC/JbUh3UVZYQzdNK8DcTF8L4tkdOOhLv/u5zDLliM 4OQO6ufS/k+A2GY8ssd+SGizlgdtsDExTrYAeJDs6iaFp8Wm1AoAptuX93C/JECE P/oaNVMD/caoqRluwphk0b5KglAccHE= -----END CERTIFICATE-----Generated at Wed Oct 22 00:25:15 2025 by rpki-client