$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59949d7f-ae4d-36e1-af69-a03c286a1a09.roa File: 59949d7f-ae4d-36e1-af69-a03c286a1a09.roa (raw, json) Hash identifier: k/kmRZVHOFwFwAU9zIrE697CNQ1WbbWct5pKUYN0Q3M= Subject key identifier: 14:AD:6C:54:58:13:2F:D4:45:42:5A:03:59:78:75:43:32:D6:4C:72 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AAEBABAAAE2C8AF84F1700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59949d7f-ae4d-36e1-af69-a03c286a1a09.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 98.200.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:eb:ab:aa:ae:2c:8a:f8:4f:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=e416b61d-a7d5-4256-b5f2-264a5286f94d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:93:61:bf:99:56:72:57:c6:5f:d0:1c:a9:68: b9:be:c2:92:37:06:e4:41:5e:f7:8f:9d:2e:dc:0a: 9b:c0:b2:74:c7:30:94:fe:a8:2e:33:b8:79:19:3a: 47:79:ea:76:ff:57:ad:71:70:72:e2:95:c7:f5:11: 5e:0b:db:0a:4c:c7:84:e5:64:81:59:0b:0e:1e:5d: 66:ec:6d:54:f6:56:e3:77:51:4b:70:e1:16:d2:dd: f8:31:a2:94:b2:af:fe:10:df:22:f0:84:17:a1:2d: b0:f1:6d:66:6a:d0:16:47:22:9f:cc:24:aa:27:8a: 65:c0:cb:71:2b:a3:ea:88:e1:75:e9:ab:02:c9:ea: a5:ad:15:ac:e3:3a:3c:fb:d0:8c:df:75:e2:13:ba: 2c:75:15:dc:bf:b5:13:b2:69:df:e5:ff:7e:c5:db: d3:f4:f3:14:9c:c2:ea:bc:d2:41:5e:09:8f:97:7c: 4a:8a:e0:29:0d:7b:28:96:e9:74:44:65:67:5c:0e: 44:78:71:ff:b5:2a:73:ba:4e:2a:d9:bf:66:5d:80: 42:32:e6:dd:5b:e8:11:0e:52:e3:fe:be:75:5d:d1: fb:09:f0:83:20:3c:e5:05:67:64:dd:5d:34:45:55: fe:2e:5c:52:41:20:da:f1:1c:37:46:7c:d6:2e:07: 4a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:AD:6C:54:58:13:2F:D4:45:42:5A:03:59:78:75:43:32:D6:4C:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59949d7f-ae4d-36e1-af69-a03c286a1a09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.200.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dd:4f:c9:f9:b1:f6:89:d9:14:87:aa:0c:f2:c9:dc:41:5d:76: 9a:44:56:9e:b1:b0:77:52:fd:93:64:fe:66:52:b7:ed:37:ff: f2:b3:25:5b:38:be:42:f7:de:d9:21:9d:63:cd:d4:8b:f9:76: c2:c5:7b:df:9b:93:36:fc:f5:e1:65:4b:c0:f9:7f:06:2d:32: e5:63:e7:16:59:44:9f:a5:bb:10:3a:e9:4e:5a:47:69:c7:80: 22:06:f4:0b:fb:b9:c3:2f:80:5a:e9:e3:21:7c:fd:8e:f7:12: 7c:5c:2f:47:7c:28:f4:77:e7:d3:ca:c8:48:5a:00:39:64:2f: d7:8a:e7:20:54:06:20:2a:18:16:f3:6e:95:1d:0e:08:55:80: 44:7e:8b:0f:3b:a1:97:4e:35:e1:2d:1b:41:07:6b:09:46:49: cf:97:83:c6:01:ac:1b:79:81:2f:8d:fe:41:71:41:b6:17:29: e5:ec:f8:5a:fd:bb:c2:29:1d:f5:7c:06:e4:16:a7:1a:26:51: 7f:fe:62:bf:e1:26:db:e1:22:8e:4e:04:1b:1d:57:0e:a6:2c: 07:44:1e:b6:ab:79:45:26:ee:3c:5c:bf:1b:a7:02:9a:9b:31: 1a:35:84:c2:d1:e5:d3:f7:77:60:3a:03:bb:26:1b:8a:55:ef: a0:1e:71:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVquurqq4sivhPFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZTQxNmI2MWQtYTdkNS00MjU2LWI1ZjItMjY0YTUyODZmOTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5Nhv5lWclfGX9AcqWi5vsKSNwbkQV73j50u 3AqbwLJ0xzCU/qguM7h5GTpHeep2/1etcXBy4pXH9RFeC9sKTMeE5WSBWQsOHl1m 7G1U9lbjd1FLcOEW0t34MaKUsq/+EN8i8IQXoS2w8W1matAWRyKfzCSqJ4plwMtx K6PqiOF16asCyeqlrRWs4zo8+9CM33XiE7osdRXcv7UTsmnf5f9+xdvT9PMUnMLq vNJBXgmPl3xKiuApDXsolul0RGVnXA5EeHH/tSpzuk4q2b9mXYBCMubdW+gRDlLj /r51XdH7CfCDIDzlBWdk3V00RVX+LlxSQSDa8Rw3RnzWLgdKCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBStbFRYEy/URUJaA1l4dUMy1kxyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTk5NDlkN2YtYWU0ZC0z NmUxLWFmNjktYTAzYzI4NmExYTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYsgmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAN1Pyfmx9onZFIeqDPLJ3EFddppEVp6xsHdS/ZNk/mZSt+03//KzJVs4 vkL33tkhnWPN1Iv5dsLFe9+bkzb89eFlS8D5fwYtMuVj5xZZRJ+luxA66U5aR2nH gCIG9Av7ucMvgFrp4yF8/Y73EnxcL0d8KPR359PKyEhaADlkL9eK5yBUBiAqGBbz bpUdDghVgER+iw87oZdONeEtG0EHawlGSc+Xg8YBrBt5gS+N/kFxQbYXKeXs+Fr9 u8IpHfV8BuQWpxomUX/+Yr/hJtvhIo5OBBsdVw6mLAdEHrareUUm7jxcvxunApqb MRo1hMLR5dP3d2A6A7smG4pV76AecZg= -----END CERTIFICATE-----Generated at Tue Oct 21 21:39:31 2025 by rpki-client