$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a87d905-500b-3b42-96b8-c3aaf552bdd3.roa File: 4a87d905-500b-3b42-96b8-c3aaf552bdd3.roa (raw, json) Hash identifier: jygrTaQV6xgDkz5vawJhIaoZA3jeQZ17DgTj4MrQNoM= Subject key identifier: 41:36:53:F9:3A:CF:7A:8C:C7:61:D9:8B:54:E2:17:22:8D:F9:B8:ED Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A946AEBB2258C0EE9ECF80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a87d905-500b-3b42-96b8-c3aaf552bdd3.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 98.200.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:46:ae:bb:22:58:c0:ee:9e:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=a06971d5-25c7-4219-bb5e-430697ac2160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:39:21:13:46:93:dc:76:3b:28:eb:ec:13:d3: f7:39:35:32:df:59:3b:61:91:af:aa:b7:00:30:15: 56:7b:63:e1:60:af:36:56:a3:e8:8f:11:ce:f1:c1: 41:b4:19:0d:7e:87:e1:07:87:cf:6f:6f:4e:11:86: 5d:ab:dc:25:1d:13:a1:77:5e:f0:e5:27:44:aa:8b: 21:e5:9e:10:24:5e:88:4f:cb:71:19:38:d1:74:ab: 6d:dd:0e:e4:18:1c:70:9f:66:b2:02:90:8a:23:9f: a0:c2:22:bb:90:13:3a:3a:40:8a:6c:d2:e5:08:1d: c1:65:48:86:c1:c8:8e:6c:c2:f0:0c:ba:e7:ad:05: dc:61:0d:23:8f:64:44:19:44:83:7d:3a:79:04:10: 45:36:a1:ca:16:c1:50:ff:ad:a4:6a:f3:f6:87:6e: fc:c8:84:63:64:92:bd:92:25:1b:15:e3:47:eb:63: b0:4d:61:97:88:3a:1c:8d:57:60:99:94:82:30:b0: fb:14:34:6a:33:c1:33:0e:6f:10:10:ea:48:27:0f: 75:6e:69:80:e1:c4:92:27:f2:5d:6f:37:84:ad:4d: 5d:78:77:01:89:b5:e5:74:14:03:30:a0:82:6d:e4: b3:9a:20:6a:e0:3f:81:3b:ed:8f:f2:3c:91:6c:10: 8c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:36:53:F9:3A:CF:7A:8C:C7:61:D9:8B:54:E2:17:22:8D:F9:B8:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a87d905-500b-3b42-96b8-c3aaf552bdd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.200.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:54:1c:62:8f:ec:75:a9:70:c3:46:8f:1f:40:ec:18:a3:e0: 90:9d:ce:bc:a8:f3:d5:dd:19:a7:58:5e:69:f0:ec:80:18:14: d8:7f:c7:87:02:67:e6:6e:ae:25:63:f6:5a:11:86:d7:58:2e: d7:98:99:e8:6a:7e:b1:3a:f4:cb:55:60:d5:b5:80:00:86:1f: 8e:23:ab:b1:4b:d3:bd:e4:f9:a5:e6:0d:4a:6a:0d:ee:85:91: 88:fc:0a:f5:d8:34:28:44:11:67:59:34:51:5b:fc:3d:ad:60: a4:03:c9:90:11:78:63:38:23:22:ba:c4:c1:cd:99:0f:9b:36: 8a:ad:3c:45:1f:c0:92:d6:2f:a6:dd:64:00:8e:28:0a:80:cb: d2:08:b1:df:00:8d:b1:3d:ec:a1:aa:eb:fa:1f:08:8f:fa:24: 27:a3:d9:8d:53:11:4c:34:26:1c:ed:f2:2a:94:97:f0:b3:70: 38:52:53:dd:c7:1c:51:94:5d:0a:c0:19:d4:5a:8f:b4:82:9c: c7:64:e2:e0:96:df:90:50:1f:7c:06:25:2c:d1:eb:b8:8e:4c: 5e:32:29:9a:c0:35:2e:a9:9a:38:3f:c3:e4:a3:fb:d6:b1:c8: 17:65:16:05:92:3e:02:4c:85:ef:5c:38:cb:65:30:27:85:42: e9:78:d2:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqUauuyJYwO6ez4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YTA2OTcxZDUtMjVjNy00MjE5LWJiNWUtNDMwNjk3YWMyMTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjkhE0aT3HY7KOvsE9P3OTUy31k7YZGvqrcA MBVWe2PhYK82VqPojxHO8cFBtBkNfofhB4fPb29OEYZdq9wlHROhd17w5SdEqosh 5Z4QJF6IT8txGTjRdKtt3Q7kGBxwn2ayApCKI5+gwiK7kBM6OkCKbNLlCB3BZUiG wciObMLwDLrnrQXcYQ0jj2REGUSDfTp5BBBFNqHKFsFQ/62kavP2h278yIRjZJK9 kiUbFeNH62OwTWGXiDocjVdgmZSCMLD7FDRqM8EzDm8QEOpIJw91bmmA4cSSJ/Jd bzeErU1deHcBibXldBQDMKCCbeSzmiBq4D+BO+2P8jyRbBCMHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEE2U/k6z3qMx2HZi1TiFyKN+bjtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGE4N2Q5MDUtNTAwYi0z YjQyLTk2YjgtYzNhYWY1NTJiZGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYsggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMhUHGKP7HWpcMNGjx9A7Bij4JCdzryo89XdGadYXmnw7IAYFNh/x4cC Z+ZuriVj9loRhtdYLteYmehqfrE69MtVYNW1gACGH44jq7FL073k+aXmDUpqDe6F kYj8CvXYNChEEWdZNFFb/D2tYKQDyZAReGM4IyK6xMHNmQ+bNoqtPEUfwJLWL6bd ZACOKAqAy9IIsd8AjbE97KGq6/ofCI/6JCej2Y1TEUw0Jhzt8iqUl/CzcDhSU93H HFGUXQrAGdRaj7SCnMdk4uCW35BQH3wGJSzR67iOTF4yKZrANS6pmjg/w+Sj+9ax yBdlFgWSPgJMhe9cOMtlMCeFQul40uk= -----END CERTIFICATE-----Generated at Wed Oct 22 00:25:43 2025 by rpki-client