$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89603526-2ea7-3cf9-a928-666f5014f32a.roa File: 89603526-2ea7-3cf9-a928-666f5014f32a.roa (raw, json) Hash identifier: fRbH9od1+71+v4aKx0nZUW7GuFFjk/jIIFJ2hcQ8gKs= Subject key identifier: 74:CD:1A:DB:AE:DD:CD:88:87:75:28:49:18:F4:7F:C4:40:39:72:E5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A990288D1375C46A4E3C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89603526-2ea7-3cf9-a928-666f5014f32a.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33490 IP address blocks: 98.232.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:90:28:8d:13:75:c4:6a:4e:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=2c373387-fb6e-4908-9803-a9b97402533f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d2:f5:c9:eb:ff:d7:ee:c9:3a:21:c6:cd:89: bb:7d:ec:ab:3e:68:90:27:02:24:10:8b:d2:bd:2c: 79:93:0f:f6:86:6a:b6:e1:e7:bd:08:9c:11:4e:a8: 57:d2:f1:a2:0b:39:c2:2e:27:70:ae:ed:bc:d3:72: af:1f:33:1f:77:64:8a:52:fd:36:1b:88:a8:ea:8a: 52:bf:00:08:6d:c4:b7:36:51:47:35:41:6d:6a:d1: a8:23:8a:df:ee:99:ba:2f:70:de:e4:18:dd:77:4e: 3c:b8:39:bb:69:c7:5c:99:cb:27:70:5d:c7:b1:8f: 56:c0:48:96:eb:a1:a2:91:31:b7:10:80:2f:3d:2a: 7a:4a:89:b1:26:7e:7e:e6:fb:ea:3c:6e:d3:1c:85: 64:81:28:c4:53:5e:96:33:a1:52:28:46:3b:fd:6b: fb:26:49:56:c1:8d:0a:a7:ed:02:50:7b:4c:c6:c1: 24:8e:77:7a:5f:21:48:2d:ad:55:63:76:87:44:9a: 87:88:42:13:37:10:06:26:80:7e:3a:08:5c:7f:95: 46:69:48:9f:0e:ec:66:99:8b:63:09:dd:28:86:bd: 4e:11:f9:5e:54:e3:6d:eb:09:2a:5d:36:97:9d:ae: 27:f9:b0:01:e5:ea:51:3d:5d:b3:9e:ea:97:41:a4: d2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:CD:1A:DB:AE:DD:CD:88:87:75:28:49:18:F4:7F:C4:40:39:72:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89603526-2ea7-3cf9-a928-666f5014f32a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.232.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:19:10:ef:76:69:62:8f:62:46:6d:60:da:83:10:27:f5:66: d3:b5:b1:ed:a1:da:cc:ce:cf:40:94:44:d4:2d:4c:1d:43:fe: 0b:ca:a5:c2:17:6d:05:2e:b6:b2:8e:00:64:13:f9:21:23:ae: e6:45:e4:8b:22:e3:0c:f8:0f:36:19:84:a7:78:15:80:7f:07: dc:ca:ba:2e:74:87:d5:3c:6a:55:1e:2c:32:0b:2c:a7:6f:2d: aa:92:1d:33:e7:c4:cb:1e:dc:dd:73:65:c3:f0:6c:ff:0c:fa: 1e:94:c5:14:bc:2a:77:2f:a0:7e:f9:39:ac:75:e8:da:4b:6c: 28:ba:ae:b2:bd:ff:ea:7c:1b:00:b1:8b:20:b1:69:39:4b:0d: e1:71:11:2d:11:a9:72:1c:65:66:43:e3:da:d4:91:66:85:07: cb:95:de:66:6f:8f:39:f6:39:fa:f2:5b:30:3e:d3:2b:a0:48: 1f:44:6f:79:db:75:61:a8:9d:ef:e5:ef:d8:79:60:2e:02:b9: aa:15:9c:6e:d1:5a:48:68:9c:c9:e7:b0:8f:e7:73:51:58:52: 36:87:0b:9e:e3:a9:87:a9:89:bf:fc:b7:37:22:2a:41:ea:93: 3a:e3:f7:c9:d3:c8:15:82:16:c2:b2:21:6d:a8:98:49:4e:89: 66:67:81:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqZAojRN1xGpOPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MmMzNzMzODctZmI2ZS00OTA4LTk4MDMtYTliOTc0MDI1MzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9L1yev/1+7JOiHGzYm7feyrPmiQJwIkEIvS vSx5kw/2hmq24ee9CJwRTqhX0vGiCznCLidwru2803KvHzMfd2SKUv02G4io6opS vwAIbcS3NlFHNUFtatGoI4rf7pm6L3De5Bjdd048uDm7acdcmcsncF3HsY9WwEiW 66GikTG3EIAvPSp6SomxJn5+5vvqPG7THIVkgSjEU16WM6FSKEY7/Wv7JklWwY0K p+0CUHtMxsEkjnd6XyFILa1VY3aHRJqHiEITNxAGJoB+Oghcf5VGaUifDuxmmYtj Cd0ohr1OEfleVONt6wkqXTaXna4n+bAB5epRPV2znuqXQaTSRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTNGtuu3c2Ih3UoSRj0f8RAOXLlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODk2MDM1MjYtMmVhNy0z Y2Y5LWE5MjgtNjY2ZjUwMTRmMzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYujwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMZEO92aWKPYkZtYNqDECf1ZtO1se2h2szOz0CURNQtTB1D/gvKpcIX bQUutrKOAGQT+SEjruZF5Isi4wz4DzYZhKd4FYB/B9zKui50h9U8alUeLDILLKdv LaqSHTPnxMse3N1zZcPwbP8M+h6UxRS8KncvoH75Oax16NpLbCi6rrK9/+p8GwCx iyCxaTlLDeFxES0RqXIcZWZD49rUkWaFB8uV3mZvjzn2OfryWzA+0yugSB9Eb3nb dWGone/l79h5YC4CuaoVnG7RWkhonMnnsI/nc1FYUjaHC57jqYepib/8tzciKkHq kzrj98nTyBWCFsKyIW2omElOiWZngT8= -----END CERTIFICATE-----Generated at Tue Oct 21 21:58:56 2025 by rpki-client