$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d2425a7-bca9-3051-a662-520557c720c9.roa File: 5d2425a7-bca9-3051-a662-520557c720c9.roa (raw, json) Hash identifier: x3y0ZKtMQOH0uNCfZ9JltVnkSYRQVQ8zoJdN+QqOw1k= Subject key identifier: 4C:02:56:F3:F5:F9:A2:9A:D7:B8:C2:BA:C5:D8:39:26:EC:42:FB:43 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8FBAA3DBCD08C9A7ECB00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d2425a7-bca9-3051-a662-520557c720c9.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 98.250.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:fb:aa:3d:bc:d0:8c:9a:7e:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=c2e4be57-8d18-4108-bafa-ccdfe29be4a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:aa:0d:74:85:49:94:6e:be:9d:59:a3:a9:12: f0:5a:bf:4b:eb:e9:24:cd:dd:96:c4:7d:15:ac:51: 3b:8d:fd:49:06:40:c2:10:76:ac:30:e9:dd:7c:5c: bd:7a:65:b0:a6:cf:13:a8:48:1a:df:cc:09:48:eb: 06:be:75:cc:47:65:42:75:b7:2b:be:73:ce:ac:ab: 33:e7:29:8b:90:ed:3b:d8:8e:09:ce:69:22:51:75: ce:6e:46:8c:6c:28:bb:3d:52:fc:8b:35:9d:6b:68: 1e:79:66:26:53:e3:e5:37:b3:d1:20:e9:ec:8d:9f: cc:c4:2a:b4:2d:a4:32:43:4b:c9:7e:5e:57:2d:12: 9d:3e:77:d7:6e:f6:2c:dc:b1:5e:80:59:e4:f0:07: 84:eb:c0:11:34:19:07:3a:f3:2a:81:47:15:5d:07: 2e:b2:ea:7b:24:42:96:9f:ff:73:8d:71:5d:0a:a9: db:b2:93:7d:c6:d3:ec:0e:e2:13:e1:47:21:53:41: cc:9b:97:af:49:ab:76:d4:5b:a2:44:f7:08:e0:6c: a2:12:cc:93:93:58:c7:b8:76:be:dd:f7:2b:89:a7: 3e:a5:95:f0:55:f1:95:b9:d1:7d:db:5f:0b:dd:0a: 99:5c:68:7b:21:08:ed:96:49:b1:19:91:b8:0e:6e: 68:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:02:56:F3:F5:F9:A2:9A:D7:B8:C2:BA:C5:D8:39:26:EC:42:FB:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d2425a7-bca9-3051-a662-520557c720c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.250.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:09:a9:51:ba:3f:75:65:6e:99:1d:51:33:60:25:fb:2b:72: 10:b5:2a:9c:6a:84:96:16:cb:7b:74:10:84:27:92:26:c5:34: 39:cb:22:3d:66:70:d7:49:47:57:84:61:7f:99:71:6c:72:07: a3:28:40:54:cc:7c:1b:88:ba:8d:03:71:31:2e:56:b6:4a:8a: 42:a0:94:6b:dd:de:dd:6c:08:d2:3f:48:f8:bb:9b:71:bf:79: 75:2f:22:1a:04:10:46:33:71:cf:68:72:fe:27:8a:a2:3b:7e: 43:36:36:b8:ea:9e:fd:16:d7:31:01:12:30:12:00:81:85:7a: 38:06:7e:2c:40:e3:8b:9f:0d:93:5b:f4:37:7a:c4:20:bd:f0: 7a:18:76:9c:fe:90:aa:f1:4d:9f:29:c1:31:38:68:69:94:c5: ca:e1:b6:ea:2d:f7:89:0d:b7:59:41:00:4f:d8:88:20:12:2a: 37:d7:4d:40:4b:16:4b:d9:6b:49:00:22:d0:7d:af:c9:27:64: b5:28:b4:39:b7:01:03:6b:f5:fd:92:5e:1c:67:a1:73:62:f7: 19:25:ce:3f:a4:42:5b:fd:bf:7c:bd:d0:fd:d1:91:48:17:55: 00:e1:0e:ab:d9:c5:14:6a:8c:2d:43:b5:4b:ff:26:0e:f8:45: 66:18:cb:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqPuqPbzQjJp+ywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YzJlNGJlNTctOGQxOC00MTA4LWJhZmEtY2NkZmUyOWJlNGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaoNdIVJlG6+nVmjqRLwWr9L6+kkzd2WxH0V rFE7jf1JBkDCEHasMOndfFy9emWwps8TqEga38wJSOsGvnXMR2VCdbcrvnPOrKsz 5ymLkO072I4JzmkiUXXObkaMbCi7PVL8izWda2geeWYmU+PlN7PRIOnsjZ/MxCq0 LaQyQ0vJfl5XLRKdPnfXbvYs3LFegFnk8AeE68ARNBkHOvMqgUcVXQcusup7JEKW n/9zjXFdCqnbspN9xtPsDuIT4UchU0HMm5evSat21FuiRPcI4GyiEsyTk1jHuHa+ 3fcriac+pZXwVfGVudF9218L3QqZXGh7IQjtlkmxGZG4Dm5ouwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEwCVvP1+aKa17jCusXYOSbsQvtDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWQyNDI1YTctYmNhOS0z MDUxLWE2NjItNTIwNTU3YzcyMGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYvrmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJsJqVG6P3VlbpkdUTNgJfsrchC1KpxqhJYWy3t0EIQnkibFNDnLIj1m cNdJR1eEYX+ZcWxyB6MoQFTMfBuIuo0DcTEuVrZKikKglGvd3t1sCNI/SPi7m3G/ eXUvIhoEEEYzcc9ocv4niqI7fkM2Nrjqnv0W1zEBEjASAIGFejgGfixA44ufDZNb 9Dd6xCC98HoYdpz+kKrxTZ8pwTE4aGmUxcrhtuot94kNt1lBAE/YiCASKjfXTUBL FkvZa0kAItB9r8knZLUotDm3AQNr9f2SXhxnoXNi9xklzj+kQlv9v3y90P3RkUgX VQDhDqvZxRRqjC1DtUv/Jg74RWYYy/Y= -----END CERTIFICATE-----Generated at Wed Oct 22 00:25:32 2025 by rpki-client