$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7831fb90-8c55-38fb-81d2-9ce4f29f5e43.roa File: 7831fb90-8c55-38fb-81d2-9ce4f29f5e43.roa (raw, json) Hash identifier: lCbRbflbkpZdfYQwd8rwONbg9JyIe/bPi/+v4ExaPWI= Subject key identifier: A0:C8:95:F7:2E:60:DF:CF:B6:08:9A:75:45:83:14:A2:78:92:72:58 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AAF080292273A411B69170 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7831fb90-8c55-38fb-81d2-9ce4f29f5e43.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 98.34.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:f0:80:29:22:73:a4:11:b6:91:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=8a449a85-0457-412a-94f8-5e0874c0f56b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:51:82:9a:49:d3:b6:26:39:ef:11:38:ae:3e: 4d:8b:e7:91:01:42:71:74:01:ee:ae:fb:f7:db:31: 66:9d:fe:e9:8e:45:74:da:82:f2:53:8f:e5:aa:4f: 2e:76:fe:2e:a6:80:26:2f:21:65:31:fd:25:89:de: d1:cb:5d:b4:8d:cd:4a:93:35:7c:5c:a2:79:98:17: ca:cd:41:b2:2f:63:f4:98:26:01:4a:18:d2:b1:3a: 0f:d2:63:d8:03:02:31:b3:ce:3e:ad:e8:91:99:a1: 73:13:f4:4b:e9:39:9f:7d:6b:06:e4:dd:76:ba:99: f0:64:72:1b:f4:69:47:96:b3:fb:e2:d6:13:6b:39: f3:c9:03:0e:76:dd:1e:80:18:bc:0e:cb:04:5c:86: d7:b1:36:44:96:b7:48:94:d5:fc:74:31:0a:1a:1f: aa:f4:de:c9:56:84:57:6d:dd:e7:e7:b9:68:60:a6: 4b:cb:da:46:ff:2b:69:ec:e3:10:3d:35:b1:d6:7e: e8:f2:41:f1:b2:10:83:36:02:fe:e4:8c:a6:7b:02: ec:48:c1:97:ba:e5:41:35:07:80:5c:b8:b1:01:03: 56:f8:56:b8:16:73:75:0e:a7:88:d2:6e:c5:10:f5: 21:29:9b:a6:fd:c6:e8:86:c7:c4:58:68:c1:0f:0c: 6b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C8:95:F7:2E:60:DF:CF:B6:08:9A:75:45:83:14:A2:78:92:72:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7831fb90-8c55-38fb-81d2-9ce4f29f5e43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.34.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:69:89:98:d7:e6:c0:0d:c1:4d:93:63:62:b0:3b:cd:95:60: a1:20:f6:b4:83:4e:57:59:33:bf:07:b4:ee:4c:d6:f4:91:c5: 39:3e:c5:db:f0:4a:98:8f:0a:a0:04:25:df:dd:b7:35:8b:62: 3d:88:3b:72:5b:9f:3a:41:c5:41:53:3c:bd:7c:39:bf:28:c5: cb:d4:aa:35:70:20:75:76:a2:48:a2:70:15:6c:86:75:34:d9: 15:be:dc:21:11:ed:a7:4a:ed:11:a5:28:84:5e:4e:73:c9:9c: 62:5f:f2:53:80:f5:e2:82:d7:f1:fe:90:91:7c:23:c8:9d:87: 63:24:b8:76:df:5f:ca:bb:38:bd:0f:d1:c9:92:52:c1:40:05: a4:b1:01:45:36:77:79:94:77:35:7f:63:78:7b:9f:0e:74:58: 63:03:80:bb:92:94:f8:c2:8a:29:b9:36:be:50:cc:aa:2c:f0: 56:7f:05:60:a2:86:c3:5b:6f:27:51:e9:a4:96:bf:4b:b7:7a: 54:a9:45:47:10:04:a6:07:08:aa:27:cc:a8:3b:97:34:71:e1: 03:7e:68:a5:54:47:74:c4:d2:e8:77:cc:0d:c1:78:07:2e:a1: 6e:84:1d:9d:11:4d:1a:7f:da:7b:4a:8d:f3:03:bd:ef:6a:89: 78:19:65:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqvCAKSJzpBG2kXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk OGE0NDlhODUtMDQ1Ny00MTJhLTk0ZjgtNWUwODc0YzBmNTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVGCmknTtiY57xE4rj5Ni+eRAUJxdAHurvv3 2zFmnf7pjkV02oLyU4/lqk8udv4upoAmLyFlMf0lid7Ry120jc1KkzV8XKJ5mBfK zUGyL2P0mCYBShjSsToP0mPYAwIxs84+reiRmaFzE/RL6TmffWsG5N12upnwZHIb 9GlHlrP74tYTaznzyQMOdt0egBi8DssEXIbXsTZElrdIlNX8dDEKGh+q9N7JVoRX bd3n57loYKZLy9pG/ytp7OMQPTWx1n7o8kHxshCDNgL+5IymewLsSMGXuuVBNQeA XLixAQNW+Fa4FnN1DqeI0m7FEPUhKZum/cbohsfEWGjBDwxrVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDIlfcuYN/PtgiadUWDFKJ4knJYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzgzMWZiOTAtOGM1NS0z OGZiLTgxZDItOWNlNGYyOWY1ZTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYiKJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFpiZjX5sANwU2TY2KwO82VYKEg9rSDTldZM78HtO5M1vSRxTk+xdvw SpiPCqAEJd/dtzWLYj2IO3JbnzpBxUFTPL18Ob8oxcvUqjVwIHV2okiicBVshnU0 2RW+3CER7adK7RGlKIReTnPJnGJf8lOA9eKC1/H+kJF8I8idh2MkuHbfX8q7OL0P 0cmSUsFABaSxAUU2d3mUdzV/Y3h7nw50WGMDgLuSlPjCiim5Nr5QzKos8FZ/BWCi hsNbbydR6aSWv0u3elSpRUcQBKYHCKonzKg7lzRx4QN+aKVUR3TE0uh3zA3BeAcu oW6EHZ0RTRp/2ntKjfMDve9qiXgZZQc= -----END CERTIFICATE-----Generated at Tue Oct 21 21:46:44 2025 by rpki-client