$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3525e454-e4be-3405-9b37-dff6d16bb198.roa File: 3525e454-e4be-3405-9b37-dff6d16bb198.roa (raw, json) Hash identifier: 4wGbrEaHSHRN1s43EuINc1tegtpqgg+UnNga8ysGgAk= Subject key identifier: B6:9E:19:95:D4:69:F2:AD:19:EC:32:82:87:A5:95:A7:D0:BB:2A:20 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AAD54BCE857D6E8CDA9380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3525e454-e4be-3405-9b37-dff6d16bb198.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 98.194.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:d5:4b:ce:85:7d:6e:8c:da:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=b585e017-f4ae-4ad4-ad19-43b2b7f2f826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:37:5f:f7:2f:7e:34:7d:48:55:cd:e9:1f:6d: 33:a3:ec:d0:3c:ab:6f:33:15:6e:f5:c1:08:7f:be: 2e:25:d3:7f:89:0d:d7:31:4d:a8:89:da:eb:bf:b9: f9:72:b2:22:18:3a:48:f7:c7:35:8f:72:7e:03:4e: d8:2a:c9:e9:fd:16:0f:b3:e7:14:85:2b:5c:f3:04: c0:29:78:bf:0e:23:40:4e:ed:39:9a:bc:a7:82:65: 10:2c:b1:6d:f6:ef:f9:7f:6d:c5:ea:3e:e5:55:f7: d5:e5:5c:74:e3:1c:d9:96:e1:cf:af:1d:a0:38:1b: 37:1f:5c:3f:ea:99:3d:fc:60:84:b3:b3:ed:6f:d6: bc:a6:ad:bd:2c:70:2c:8a:7f:67:18:2b:68:31:fb: eb:43:e4:e0:13:00:84:c5:8a:05:d8:2f:dd:a1:c4: 97:ea:98:ca:50:43:8c:bc:2d:dc:d1:e3:f2:c5:45: 83:23:f3:42:a1:94:64:9c:ae:46:a7:ea:e3:72:d2: 24:f1:a2:c1:5a:b6:0d:d1:b7:03:e2:71:9c:6c:de: 8c:ed:cf:1e:46:b8:a4:6c:19:1d:1f:e6:9d:2a:1f: 4c:fc:35:1c:3e:fc:31:ab:9a:bf:a4:58:67:b9:ec: 51:f0:42:65:e3:c4:6e:60:69:08:37:27:cd:0d:c1: 81:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:9E:19:95:D4:69:F2:AD:19:EC:32:82:87:A5:95:A7:D0:BB:2A:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3525e454-e4be-3405-9b37-dff6d16bb198.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.194.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:2d:68:f8:b4:73:51:ca:89:3c:df:f2:a0:01:76:bf:6c:53: 4f:d6:91:1a:59:74:02:97:3e:8d:68:78:4c:90:1d:57:cc:e3: 2d:17:f8:8b:e8:78:6c:97:0f:75:cf:c4:c9:93:b8:1f:f1:0c: 22:f6:cb:ad:bd:b2:dd:7f:a2:0c:3c:51:17:dc:5b:18:a7:26: a6:70:fb:e1:94:d1:fd:2a:73:aa:5a:9a:8f:43:00:f8:ad:be: f5:6e:bb:c2:d4:18:95:ba:b3:da:5d:75:7a:d9:99:58:d2:08: aa:57:40:64:1b:77:ef:7c:c8:e1:e1:37:0e:9f:54:4e:8a:d8: c8:da:9b:4e:cf:a9:af:ae:41:82:9b:eb:04:24:dc:6e:a2:d1: 8c:b3:06:d7:ca:4a:f3:5e:e4:d8:8d:81:4f:3d:f7:d7:68:f2: 00:ec:85:6e:6a:42:6e:99:bf:39:09:43:d8:b7:9d:cf:27:72: 76:4d:c1:4e:9c:53:47:4c:3d:7f:e0:65:10:2c:ab:d5:e3:b7: 5b:26:12:db:d6:c4:54:4a:bf:99:3f:8e:0c:4a:f1:03:32:e3: 41:81:76:fd:f1:ba:93:1c:dd:09:df:30:ba:71:db:71:8e:90: e7:d5:e1:11:0d:42:3d:4b:87:61:6f:2c:bb:00:eb:a6:a2:a3: 32:d5:82:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqtVLzoV9bozak4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YjU4NWUwMTctZjRhZS00YWQ0LWFkMTktNDNiMmI3ZjJmODI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzdf9y9+NH1IVc3pH20zo+zQPKtvMxVu9cEI f74uJdN/iQ3XMU2oidrrv7n5crIiGDpI98c1j3J+A07YKsnp/RYPs+cUhStc8wTA KXi/DiNATu05mryngmUQLLFt9u/5f23F6j7lVffV5Vx04xzZluHPrx2gOBs3H1w/ 6pk9/GCEs7Ptb9a8pq29LHAsin9nGCtoMfvrQ+TgEwCExYoF2C/docSX6pjKUEOM vC3c0ePyxUWDI/NCoZRknK5Gp+rjctIk8aLBWrYN0bcD4nGcbN6M7c8eRrikbBkd H+adKh9M/DUcPvwxq5q/pFhnuexR8EJl48RuYGkINyfNDcGBlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLaeGZXUafKtGewygoellafQuyogMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzUyNWU0NTQtZTRiZS0z NDA1LTliMzctZGZmNmQxNmJiMTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYsJsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYtaPi0c1HKiTzf8qABdr9sU0/WkRpZdAKXPo1oeEyQHVfM4y0X+Ivo eGyXD3XPxMmTuB/xDCL2y629st1/ogw8URfcWxinJqZw++GU0f0qc6pamo9DAPit vvVuu8LUGJW6s9pddXrZmVjSCKpXQGQbd+98yOHhNw6fVE6K2Mjam07Pqa+uQYKb 6wQk3G6i0YyzBtfKSvNe5NiNgU8999do8gDshW5qQm6ZvzkJQ9i3nc8ncnZNwU6c U0dMPX/gZRAsq9Xjt1smEtvWxFRKv5k/jgxK8QMy40GBdv3xupMc3QnfMLpx23GO kOfV4RENQj1Lh2FvLLsA66aiozLVgmg= -----END CERTIFICATE-----Generated at Tue Oct 21 19:31:50 2025 by rpki-client