$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/620b5401-c8a3-3918-bf07-a422bc50d1c0.roa File: 620b5401-c8a3-3918-bf07-a422bc50d1c0.roa (raw, json) Hash identifier: +m9dcgDTY+Vu3Qv0OJWTHwK2Jx/nUSXdSt+HQn9kUtM= Subject key identifier: 7A:09:65:32:79:70:73:EC:05:15:03:D2:97:3A:D6:8F:E2:5D:99:5F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A98FD6AF5104CC8B27CE00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/620b5401-c8a3-3918-bf07-a422bc50d1c0.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33490 IP address blocks: 98.232.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:8f:d6:af:51:04:cc:8b:27:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=19346cbb-9243-4758-b7c4-b9ed3e784774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:72:1a:d4:27:a5:02:6f:6c:01:d0:15:4b:b8: ea:8f:ed:bd:ee:df:bc:b7:09:68:64:4a:de:59:91: ea:d8:5d:b4:dc:8d:09:c8:b2:b6:8c:df:4b:1c:10: c6:28:39:95:68:3a:c7:b0:02:f6:24:80:76:95:94: 37:e1:18:e6:08:c1:67:e4:0a:bb:91:02:27:31:4f: 5c:1f:28:61:fb:26:c5:01:dc:63:58:ff:09:34:03: a7:5e:86:24:e3:16:b8:b7:6b:30:70:28:a1:59:17: 71:df:94:43:2e:8c:aa:2f:c5:91:c0:ec:c2:16:e3: a4:f0:81:64:05:cd:dd:5c:d8:2f:6a:4e:dd:f0:99: cc:b4:b2:23:6c:ad:74:d5:85:35:76:c0:f5:28:ad: 7c:97:f3:8c:7e:43:ea:46:63:f2:f6:e9:5c:3d:fd: 50:d3:c9:30:c5:14:54:0b:05:04:9d:29:09:42:f1: 5b:27:69:e8:53:7d:f5:81:13:40:83:87:34:3f:f0: 6b:c5:48:44:79:b3:bb:42:06:eb:c9:e4:d9:45:0d: 6f:96:d3:b3:65:c5:47:06:2e:52:9d:f8:9b:a7:73: 94:0f:26:69:d3:e2:18:d5:09:22:e5:98:13:57:f7: d4:c5:9d:d9:02:ec:0a:6b:f9:c0:ac:68:71:ed:32: ef:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:09:65:32:79:70:73:EC:05:15:03:D2:97:3A:D6:8F:E2:5D:99:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/620b5401-c8a3-3918-bf07-a422bc50d1c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.232.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:d2:0e:fd:f3:6d:33:c0:a6:34:9c:59:0d:0e:02:f6:8b:e8: 41:f4:d0:57:aa:6b:d5:70:20:6b:dd:63:a4:9d:90:62:53:68: fc:19:be:5e:7d:c6:3a:86:91:41:c1:33:d4:b3:24:c6:0e:05: e0:de:b4:b7:85:5f:1d:6d:d5:c4:5a:8b:50:de:bf:c2:f7:d2: 06:51:4b:fe:bd:c1:07:4e:71:f0:b5:2a:7c:38:1a:1e:ab:10: ad:58:d8:d5:2e:23:81:4d:a7:c6:54:9c:dd:58:ed:d2:03:bd: e7:77:2f:34:e3:b9:07:6b:2c:48:58:e4:89:89:b6:52:3b:7c: a9:b4:91:bf:6a:9a:54:4b:ce:52:56:70:43:91:ae:80:60:54: 5c:7f:e6:38:a0:b2:06:b4:5f:8b:d9:1f:55:44:77:bb:3d:9c: dd:ff:0a:4d:ef:db:28:a9:42:12:90:45:69:39:15:82:14:f5: 5d:2c:1d:93:b2:79:d8:b9:e8:0f:bb:bf:4f:f8:97:4b:15:a1: 69:c8:4d:cc:ba:c5:3a:bf:dc:a4:3f:4a:ee:c3:a9:8d:1f:62: 40:15:49:02:79:fc:42:bb:73:9c:c4:a8:34:4a:bb:4c:67:c8: 24:97:42:3e:69:68:ff:ba:52:21:8c:cb:c0:0e:12:bb:21:26: f0:10:7f:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqY/Wr1EEzIsnzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MTkzNDZjYmItOTI0My00NzU4LWI3YzQtYjllZDNlNzg0Nzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnIa1CelAm9sAdAVS7jqj+297t+8twloZEre WZHq2F203I0JyLK2jN9LHBDGKDmVaDrHsAL2JIB2lZQ34RjmCMFn5Aq7kQInMU9c Hyhh+ybFAdxjWP8JNAOnXoYk4xa4t2swcCihWRdx35RDLoyqL8WRwOzCFuOk8IFk Bc3dXNgvak7d8JnMtLIjbK101YU1dsD1KK18l/OMfkPqRmPy9ulcPf1Q08kwxRRU CwUEnSkJQvFbJ2noU331gRNAg4c0P/BrxUhEebO7QgbryeTZRQ1vltOzZcVHBi5S nfibp3OUDyZp0+IY1Qki5ZgTV/fUxZ3ZAuwKa/nArGhx7TLvvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHoJZTJ5cHPsBRUD0pc61o/iXZlfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjIwYjU0MDEtYzhhMy0z OTE4LWJmMDctYTQyMmJjNTBkMWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYujQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL3SDv3zbTPApjScWQ0OAvaL6EH00Feqa9VwIGvdY6SdkGJTaPwZvl59 xjqGkUHBM9SzJMYOBeDetLeFXx1t1cRai1Dev8L30gZRS/69wQdOcfC1Knw4Gh6r EK1Y2NUuI4FNp8ZUnN1Y7dIDved3LzTjuQdrLEhY5ImJtlI7fKm0kb9qmlRLzlJW cEORroBgVFx/5jigsga0X4vZH1VEd7s9nN3/Ck3v2yipQhKQRWk5FYIU9V0sHZOy edi56A+7v0/4l0sVoWnITcy6xTq/3KQ/Su7DqY0fYkAVSQJ5/EK7c5zEqDRKu0xn yCSXQj5paP+6UiGMy8AOErshJvAQf6w= -----END CERTIFICATE-----Generated at Tue Oct 21 21:30:26 2025 by rpki-client