$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3605c208-2809-32ec-a591-d1fca39892dc.roa File: 3605c208-2809-32ec-a591-d1fca39892dc.roa (raw, json) Hash identifier: cIhhg8yjwoscWKYC66PDkjjALqZdsSYeMPqJ0CQ1uH4= Subject key identifier: EB:DF:CA:9A:84:C5:BD:A5:3A:B9:F1:6D:57:58:AA:5F:60:6F:1F:F2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A942E4E44B6DBA05CB7800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3605c208-2809-32ec-a591-d1fca39892dc.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 98.199.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:42:e4:e4:4b:6d:ba:05:cb:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=576cf4ce-3b1d-43c8-a610-fc9804fd2d51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d8:f6:5a:11:58:6e:1c:53:1f:24:e7:cd:2d: ac:34:6f:42:07:26:34:86:6b:56:35:12:74:c3:51: 87:50:33:af:e6:57:36:6f:06:f8:60:19:0a:6d:02: ee:a1:8f:ed:4d:ab:d9:ea:f4:a0:7e:01:22:7b:f8: fa:e1:d9:6b:7f:b7:d2:a3:3f:e4:2d:2b:f2:a9:e3: 0a:68:76:3f:65:8d:ea:cf:d5:e5:b8:5d:61:fa:f1: 21:df:5c:36:94:5e:5c:04:1f:d4:25:ee:c8:93:03: 92:1f:a7:13:d2:2f:e6:34:d8:8e:2d:df:12:52:01: 31:48:ff:5a:49:66:ce:bc:01:e5:64:95:c5:8b:7e: 6c:90:ae:88:41:67:12:10:97:46:00:84:12:62:8e: d6:09:53:81:88:6b:84:bb:98:42:96:34:f8:86:cd: 9d:49:c0:bb:ad:cf:23:b5:3e:3e:5b:4f:bf:d8:06: 16:c0:1c:e0:0d:f3:eb:d5:75:69:c7:23:4a:d6:da: 25:d3:ae:68:51:81:b5:4a:1e:5d:7a:24:ef:e1:df: f6:f0:0a:c0:5e:e9:b7:c8:2e:4b:97:e5:fb:0e:db: 33:2f:b3:e4:5e:98:93:22:2a:cc:fa:c2:f6:ef:69: 96:8f:28:d5:90:c5:14:50:a3:ac:7d:4b:45:b7:36: 0e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:DF:CA:9A:84:C5:BD:A5:3A:B9:F1:6D:57:58:AA:5F:60:6F:1F:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3605c208-2809-32ec-a591-d1fca39892dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.199.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:48:5a:0e:ee:f7:d2:8c:b2:fa:ac:62:c3:dd:25:d5:7b:c8: 05:3b:de:c0:2b:c3:7c:7e:2b:58:e6:f9:dc:5d:5c:e3:ab:0b: f9:72:14:82:09:0e:60:66:07:bc:0c:7d:22:f8:36:80:d3:cd: 10:b2:05:f0:af:27:31:05:4a:48:ff:fb:ce:47:7d:74:05:bd: 83:6e:13:78:4e:56:33:3c:34:8e:95:74:a0:d3:2b:1a:f8:f3: e3:12:2b:39:d5:5a:f3:4f:99:c4:b1:90:f2:a9:90:26:2d:13: c6:56:c4:d6:b4:40:6e:a6:0c:5d:40:b8:3e:cd:26:94:98:b1: 95:73:dc:b5:95:76:e4:0c:48:dc:d5:b2:74:59:bf:7c:60:28: 8c:7f:68:83:c0:19:c6:dd:6c:8b:a8:c2:a1:9e:38:c7:a5:bf: 6e:38:5c:c8:af:75:2e:46:ad:16:c0:0d:69:eb:80:b8:e8:40: b1:cf:87:be:b7:e9:27:8e:a5:26:79:85:4f:a7:59:0d:b3:a5: 83:d7:d1:22:a3:91:cc:41:0e:a7:f9:ab:52:d1:5f:ed:0e:e8: a7:8d:41:9a:9b:45:ba:45:09:e9:95:ba:98:ab:00:66:39:39: 10:45:86:d6:1e:c4:d1:8a:64:19:38:2b:8e:3a:17:5c:ce:b7: e0:ce:e3:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqULk5EttugXLeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NTc2Y2Y0Y2UtM2IxZC00M2M4LWE2MTAtZmM5ODA0ZmQyZDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNj2WhFYbhxTHyTnzS2sNG9CByY0hmtWNRJ0 w1GHUDOv5lc2bwb4YBkKbQLuoY/tTavZ6vSgfgEie/j64dlrf7fSoz/kLSvyqeMK aHY/ZY3qz9XluF1h+vEh31w2lF5cBB/UJe7IkwOSH6cT0i/mNNiOLd8SUgExSP9a SWbOvAHlZJXFi35skK6IQWcSEJdGAIQSYo7WCVOBiGuEu5hCljT4hs2dScC7rc8j tT4+W0+/2AYWwBzgDfPr1XVpxyNK1tol065oUYG1Sh5deiTv4d/28ArAXum3yC5L l+X7DtszL7PkXpiTIirM+sL272mWjyjVkMUUUKOsfUtFtzYOsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOvfypqExb2lOrnxbVdYql9gbx/yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzYwNWMyMDgtMjgwOS0z MmVjLWE1OTEtZDFmY2EzOTg5MmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYscAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKhIWg7u99KMsvqsYsPdJdV7yAU73sArw3x+K1jm+dxdXOOrC/lyFIIJ DmBmB7wMfSL4NoDTzRCyBfCvJzEFSkj/+85HfXQFvYNuE3hOVjM8NI6VdKDTKxr4 8+MSKznVWvNPmcSxkPKpkCYtE8ZWxNa0QG6mDF1AuD7NJpSYsZVz3LWVduQMSNzV snRZv3xgKIx/aIPAGcbdbIuowqGeOMelv244XMivdS5GrRbADWnrgLjoQLHPh763 6SeOpSZ5hU+nWQ2zpYPX0SKjkcxBDqf5q1LRX+0O6KeNQZqbRbpFCemVupirAGY5 ORBFhtYexNGKZBk4K446F1zOt+DO40w= -----END CERTIFICATE-----Generated at Tue Oct 21 19:46:01 2025 by rpki-client