$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38370ba9-ba60-3f25-8b1d-3b1401001fb5.roa File: 38370ba9-ba60-3f25-8b1d-3b1401001fb5.roa (raw, json) Hash identifier: 6TeduHXzLZIcBsAH/GTg6aBlMWp2EWU4gz3sQmmzzT8= Subject key identifier: 8F:BE:C8:E4:5C:62:6A:A1:A8:06:90:C5:42:38:BB:57:93:A1:78:1E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A93BF5841C95DC225AFC80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38370ba9-ba60-3f25-8b1d-3b1401001fb5.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 98.196.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:3b:f5:84:1c:95:dc:22:5a:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=d14e6cbf-ca92-48fa-a3b0-9664e2f300d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e9:b8:c7:b2:2e:c3:55:61:7b:a1:e6:de:18: c6:21:f0:d9:a4:be:57:3a:3d:db:0d:35:1c:95:97: e8:25:16:b7:a9:67:dc:ba:1e:26:0c:98:39:5f:f3: 6e:1e:01:9a:b0:49:e2:c0:24:71:41:13:92:01:d3: 21:74:bc:59:46:cd:fb:97:60:84:71:d8:29:51:77: 41:5e:b8:20:56:df:bf:1b:d5:68:5a:a1:d2:88:d5: 90:8f:27:6b:06:3c:65:db:a3:88:92:ae:0a:a9:25: a5:c1:70:42:b2:69:41:41:d2:87:47:08:be:6f:b0: 43:46:f4:c0:e9:d7:3b:d3:65:35:28:ba:42:d4:41: a6:07:a7:c1:7b:6c:7f:05:be:89:36:3a:e3:07:aa: 7a:29:e6:4f:57:60:b0:9a:02:d5:53:19:51:35:b3: e6:b2:a3:37:26:72:ad:20:66:2b:ed:cf:52:43:f2: 73:79:1b:b0:8d:76:94:3e:5f:66:77:6b:82:3e:ab: a6:7f:c9:54:98:20:f3:3e:30:aa:0d:3c:3b:0f:a6: d4:18:30:0e:74:e9:42:b8:9e:71:c0:19:26:5a:c8: 9b:57:12:bd:11:8a:a3:44:a2:39:2e:ea:3f:eb:45: 44:55:68:b3:0c:8b:43:50:7f:41:8d:78:8d:e4:b4: e6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:BE:C8:E4:5C:62:6A:A1:A8:06:90:C5:42:38:BB:57:93:A1:78:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38370ba9-ba60-3f25-8b1d-3b1401001fb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.196.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:80:1c:da:85:5b:93:f6:3a:15:06:7f:d8:6c:f3:e8:4d:1b: 3b:bf:d9:c5:0b:99:53:47:8c:e9:20:03:81:96:e1:ab:9c:20: b0:dc:d5:90:33:ab:f4:60:2b:bd:4b:5d:2a:3b:1f:fb:a9:64: 59:35:66:35:3c:a4:88:d1:2d:29:74:b1:58:81:7c:e7:36:2b: fa:25:ea:17:b4:47:7a:3c:36:27:d4:b8:ae:76:fe:4f:66:cb: bb:31:3c:e0:ab:cb:8d:55:5f:51:e4:c5:21:a8:f3:60:4d:74: bf:d6:ce:a4:dd:66:7b:86:02:71:d6:5c:83:d2:9f:fe:0f:a7: f7:e2:8c:95:39:11:f5:0e:15:56:58:8b:99:17:e5:94:1b:a3: cb:50:e5:5a:e5:b7:0a:1c:82:ca:72:6e:d8:53:2d:3f:9c:5f: 7d:e5:5c:a2:26:15:3c:eb:ef:1c:e1:02:85:81:a3:b9:ee:95: dd:1c:04:9e:cf:60:22:05:9f:97:de:6b:f5:48:fb:76:59:d1: 92:1f:07:ca:66:cd:02:30:2b:37:5d:93:e2:b7:f6:b1:71:c2: 93:d5:64:fb:48:f4:34:97:e5:52:ad:32:fa:87:e6:2a:de:cd: 43:48:1d:b9:88:45:f8:fe:f4:01:2e:c2:70:10:e0:38:1b:b4: 1f:b6:f8:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqTv1hByV3CJa/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZDE0ZTZjYmYtY2E5Mi00OGZhLWEzYjAtOTY2NGUyZjMwMGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAium4x7Iuw1Vhe6Hm3hjGIfDZpL5XOj3bDTUc lZfoJRa3qWfcuh4mDJg5X/NuHgGasEniwCRxQROSAdMhdLxZRs37l2CEcdgpUXdB XrggVt+/G9VoWqHSiNWQjydrBjxl26OIkq4KqSWlwXBCsmlBQdKHRwi+b7BDRvTA 6dc702U1KLpC1EGmB6fBe2x/Bb6JNjrjB6p6KeZPV2CwmgLVUxlRNbPmsqM3JnKt IGYr7c9SQ/JzeRuwjXaUPl9md2uCPqumf8lUmCDzPjCqDTw7D6bUGDAOdOlCuJ5x wBkmWsibVxK9EYqjRKI5Luo/60VEVWizDItDUH9BjXiN5LTm/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI++yORcYmqhqAaQxUI4u1eToXgeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzgzNzBiYTktYmE2MC0z ZjI1LThiMWQtM2IxNDAxMDAxZmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYsR6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWAHNqFW5P2OhUGf9hs8+hNGzu/2cULmVNHjOkgA4GW4aucILDc1ZAz q/RgK71LXSo7H/upZFk1ZjU8pIjRLSl0sViBfOc2K/ol6he0R3o8NifUuK52/k9m y7sxPOCry41VX1HkxSGo82BNdL/WzqTdZnuGAnHWXIPSn/4Pp/fijJU5EfUOFVZY i5kX5ZQbo8tQ5VrltwocgspybthTLT+cX33lXKImFTzr7xzhAoWBo7nuld0cBJ7P YCIFn5fea/VI+3ZZ0ZIfB8pmzQIwKzddk+K39rFxwpPVZPtI9DSX5VKtMvqH5ire zUNIHbmIRfj+9AEuwnAQ4DgbtB+2+Do= -----END CERTIFICATE-----Generated at Tue Oct 21 19:46:40 2025 by rpki-client