$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53a65475-cab9-34ef-9d4e-81199f131832.roa File: 53a65475-cab9-34ef-9d4e-81199f131832.roa (raw, json) Hash identifier: Vyfoy2nuiSMatqwlLItPSu9Rc6oB6LpD7QkHM+4w2qs= Subject key identifier: F0:3D:AB:C9:6A:17:2D:0B:76:3D:27:2B:D8:65:94:6E:5C:60:A1:12 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8914D0E7A707190D9C080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53a65475-cab9-34ef-9d4e-81199f131832.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 98.217.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:91:4d:0e:7a:70:71:90:d9:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=4d37f39c-fbfd-4d19-aef7-621980749cb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d7:a9:11:e3:7e:19:27:57:02:00:78:ab:15: 2a:bc:0b:f1:c8:d1:06:e6:ce:c9:fa:50:82:1b:e7: a8:d7:9e:99:5b:be:ba:13:8a:41:3c:e7:83:67:9c: 78:3f:71:46:40:30:78:bd:fb:5e:1b:8b:29:d6:a8: 07:e3:44:e2:fb:11:25:0a:25:4b:83:68:9c:d2:cb: 70:86:89:4c:7d:11:e2:5f:dc:40:10:45:8d:94:38: 1d:04:b0:1a:6c:13:96:c5:83:08:77:b3:8f:2d:8e: 38:33:19:63:14:b3:d0:fe:e4:c1:72:0f:ef:d0:d3: 43:95:31:c3:f0:8e:93:92:22:56:e9:51:df:d8:b1: 76:2e:f1:75:97:57:88:86:93:72:02:3f:4b:ec:85: 1b:1a:80:99:04:02:f7:c8:ed:fa:4f:04:9d:47:75: c4:2c:95:c2:a5:d2:47:43:3a:9e:15:3f:5f:34:44: f6:20:89:16:4b:03:53:f0:8b:4e:80:77:95:9d:20: b8:b1:49:d9:95:d7:5d:2d:d5:d3:6f:db:27:9b:70: b2:88:45:71:4e:eb:80:18:95:a3:89:fb:e7:2b:54: ef:6f:eb:35:06:6e:16:e4:b3:8b:fc:93:f3:0a:17: bf:a2:f3:4c:ac:6e:31:8f:71:dd:4e:38:27:60:03: 93:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:3D:AB:C9:6A:17:2D:0B:76:3D:27:2B:D8:65:94:6E:5C:60:A1:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53a65475-cab9-34ef-9d4e-81199f131832.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.217.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:1b:0b:1e:1b:1c:2f:05:a0:bc:83:54:fc:fd:aa:a8:b9:64: 71:1a:18:cf:60:a7:69:44:0a:0b:e4:25:aa:5d:4c:e0:32:3c: b2:31:15:c9:18:f1:8f:28:90:c1:d4:18:24:42:01:6f:ce:3e: c6:6b:2e:34:92:bf:59:0d:0a:e5:5b:f2:39:dd:8e:c5:aa:e2: 91:91:f5:e1:af:09:92:ee:0f:60:54:cc:c7:da:98:d8:45:14: 13:fa:64:19:f4:90:9e:9f:03:cb:ee:bc:62:26:74:6c:25:06: 70:4e:dd:1b:e8:8b:07:99:27:e7:b4:e2:f5:37:5f:4a:c0:e0: 8b:a7:aa:96:07:8a:d5:2e:57:37:7d:df:4f:ca:52:c8:0a:86: a7:b1:f3:ee:e2:11:ca:dc:bd:42:61:c5:da:00:fa:17:b1:db: 25:30:84:37:b2:3d:25:df:08:3c:a7:28:f7:25:95:87:d7:67: 32:e6:79:49:e8:62:80:81:5c:d0:41:7d:43:9a:41:42:85:f2: 78:30:0d:84:31:c8:c8:75:6b:9a:c8:32:54:32:58:68:6b:a3: 05:4f:cf:6e:c2:21:d9:ea:1b:32:87:63:09:4b:13:96:31:51: 04:49:b3:c5:59:00:d7:27:3d:5c:2a:c5:71:e4:ae:43:14:f5: d8:bd:55:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqJFNDnpwcZDZwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NGQzN2YzOWMtZmJmZC00ZDE5LWFlZjctNjIxOTgwNzQ5Y2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtepEeN+GSdXAgB4qxUqvAvxyNEG5s7J+lCC G+eo156ZW766E4pBPOeDZ5x4P3FGQDB4vfteG4sp1qgH40Ti+xElCiVLg2ic0stw holMfRHiX9xAEEWNlDgdBLAabBOWxYMId7OPLY44MxljFLPQ/uTBcg/v0NNDlTHD 8I6TkiJW6VHf2LF2LvF1l1eIhpNyAj9L7IUbGoCZBAL3yO36TwSdR3XELJXCpdJH QzqeFT9fNET2IIkWSwNT8ItOgHeVnSC4sUnZldddLdXTb9snm3CyiEVxTuuAGJWj ifvnK1Tvb+s1Bm4W5LOL/JPzChe/ovNMrG4xj3HdTjgnYAOTuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPA9q8lqFy0Ldj0nK9hllG5cYKESMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTNhNjU0NzUtY2FiOS0z NGVmLTlkNGUtODExOTlmMTMxODMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYtloMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEbCx4bHC8FoLyDVPz9qqi5ZHEaGM9gp2lECgvkJapdTOAyPLIxFckY 8Y8okMHUGCRCAW/OPsZrLjSSv1kNCuVb8jndjsWq4pGR9eGvCZLuD2BUzMfamNhF FBP6ZBn0kJ6fA8vuvGImdGwlBnBO3RvoiweZJ+e04vU3X0rA4IunqpYHitUuVzd9 30/KUsgKhqex8+7iEcrcvUJhxdoA+hex2yUwhDeyPSXfCDynKPcllYfXZzLmeUno YoCBXNBBfUOaQUKF8ngwDYQxyMh1a5rIMlQyWGhrowVPz27CIdnqGzKHYwlLE5Yx UQRJs8VZANcnPVwqxXHkrkMU9di9VZs= -----END CERTIFICATE-----Generated at Wed Oct 22 00:24:49 2025 by rpki-client