$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f7ddd5e-6db2-37e2-b1e5-58a1ea570990.roa File: 3f7ddd5e-6db2-37e2-b1e5-58a1ea570990.roa (raw, json) Hash identifier: UJ/K9WfOYYiDNgCZq2PBeWaVvbBJubXbtC2KgKN/uQA= Subject key identifier: 03:F5:83:11:9C:DE:B1:19:6B:72:9C:D2:C8:66:2A:AC:E1:0C:70:48 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8FCE52AB062DD3040D5FC Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f7ddd5e-6db2-37e2-b1e5-58a1ea570990.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 98.250.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:fc:e5:2a:b0:62:dd:30:40:d5:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=d48bb5f2-c1ce-4c98-aa86-2e6a9edc5120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:71:de:8d:61:d6:53:f7:02:c2:3b:47:91:db: f5:06:72:9f:6a:8a:01:4c:01:5a:51:22:3b:9e:71: be:b9:5f:dc:ff:99:2c:98:00:20:af:ec:1f:6e:98: 2e:71:e5:d0:52:38:8d:28:12:66:0a:8e:3a:0e:39: 72:55:3c:b8:89:0d:33:ca:0c:5f:bb:a3:7f:2f:24: 5d:b0:d2:7d:b2:77:5b:a0:2d:ff:c0:da:e5:7c:12: 5a:4e:dd:f6:56:b2:6a:6f:73:75:73:d3:03:68:84: a0:93:fd:2b:9a:1f:79:89:4e:0c:6f:7b:3c:13:fb: e1:5a:0e:21:00:9b:bd:05:2f:18:a2:26:97:79:b2: 46:01:cf:2a:08:27:68:65:84:ea:41:93:77:54:6b: 04:c5:dd:9c:79:44:5a:c2:72:93:c3:ca:84:2a:05: a1:85:22:e1:4e:57:54:4e:dc:4a:33:1e:a7:eb:6a: 45:30:89:bc:10:b3:ab:35:0a:ab:5f:6e:1c:2f:4b: 58:f5:44:ea:43:5a:cf:ee:fa:9b:e1:53:68:22:3f: ff:f0:4e:a3:7a:8f:26:ea:d5:df:19:37:2b:62:95: 95:28:50:bc:a8:8d:bb:41:05:76:6c:c8:d0:a5:08: 1c:c7:34:40:a6:3a:af:43:58:41:25:6e:f1:d0:7b: 0e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:F5:83:11:9C:DE:B1:19:6B:72:9C:D2:C8:66:2A:AC:E1:0C:70:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f7ddd5e-6db2-37e2-b1e5-58a1ea570990.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.250.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:67:06:ab:a8:76:16:48:3d:ba:c8:a3:98:20:9b:bb:04:7b: 92:af:d7:c1:30:8a:1f:aa:e8:d9:8a:94:c5:d0:db:ca:49:2a: b7:52:c3:79:fe:8c:cb:5b:67:66:5d:28:78:60:58:3d:45:d9: 4d:21:a7:c1:60:64:02:96:d1:bf:ee:7a:e6:54:11:48:de:3a: a4:89:f1:f4:78:b5:13:76:8b:b0:76:eb:de:9c:bd:89:54:3e: cb:b5:b2:9d:38:8d:dd:e5:21:0c:c4:e1:a6:a8:45:77:b3:6e: f4:0d:73:58:e8:40:7b:74:64:a5:d3:84:67:9b:15:8a:db:fd: 89:72:bf:19:05:3e:4f:82:8e:3d:71:d9:60:5e:6c:51:b8:e6: 5e:b5:7d:b2:1d:fb:17:35:fc:ae:ce:f7:4d:da:ed:5f:d9:1b: 81:e4:05:0b:9a:18:4d:1f:34:02:0b:75:b2:f3:e5:ac:b9:d0: 19:75:ea:2e:95:93:a5:1e:40:cb:51:7a:31:9a:1b:1b:5c:9c: bd:2e:dc:2f:ed:ae:e0:b3:15:f7:51:5f:3c:8e:70:5f:53:3f: c6:c6:a5:5c:5e:6b:f8:73:df:cf:75:ad:b7:a7:d4:ad:d6:b8: 63:54:fb:a9:61:ea:d6:ad:5f:89:53:24:95:b7:c7:df:79:1a: 37:25:03:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqPzlKrBi3TBA1fwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZDQ4YmI1ZjItYzFjZS00Yzk4LWFhODYtMmU2YTllZGM1MTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHHejWHWU/cCwjtHkdv1BnKfaooBTAFaUSI7 nnG+uV/c/5ksmAAgr+wfbpguceXQUjiNKBJmCo46DjlyVTy4iQ0zygxfu6N/LyRd sNJ9sndboC3/wNrlfBJaTt32VrJqb3N1c9MDaISgk/0rmh95iU4Mb3s8E/vhWg4h AJu9BS8YoiaXebJGAc8qCCdoZYTqQZN3VGsExd2ceURawnKTw8qEKgWhhSLhTldU TtxKMx6n62pFMIm8ELOrNQqrX24cL0tY9UTqQ1rP7vqb4VNoIj//8E6jeo8m6tXf GTcrYpWVKFC8qI27QQV2bMjQpQgcxzRApjqvQ1hBJW7x0HsOTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAP1gxGc3rEZa3Kc0shmKqzhDHBIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2Y3ZGRkNWUtNmRiMi0z N2UyLWIxZTUtNThhMWVhNTcwOTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYvpAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApnBquodhZIPbrIo5ggm7sEe5Kv18Ewih+q6NmKlMXQ28pJKrdSw3n+ jMtbZ2ZdKHhgWD1F2U0hp8FgZAKW0b/ueuZUEUjeOqSJ8fR4tRN2i7B2696cvYlU Psu1sp04jd3lIQzE4aaoRXezbvQNc1joQHt0ZKXThGebFYrb/YlyvxkFPk+Cjj1x 2WBebFG45l61fbId+xc1/K7O903a7V/ZG4HkBQuaGE0fNAILdbLz5ay50Bl16i6V k6UeQMtRejGaGxtcnL0u3C/truCzFfdRXzyOcF9TP8bGpVxea/hz3891rben1K3W uGNU+6lh6tatX4lTJJW3x995GjclA2E= -----END CERTIFICATE-----Generated at Wed Oct 22 00:25:36 2025 by rpki-client