$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89790c66-bfed-3ef3-b12c-daef191eae2b.roa File: 89790c66-bfed-3ef3-b12c-daef191eae2b.roa (raw, json) Hash identifier: /MQe66e2YzjUtsQVcenK4hNpGNOML7BqDHGV7MaXgdw= Subject key identifier: 4E:20:1F:02:A8:0F:5A:35:D0:7D:F4:70:AB:D6:C6:AD:01:14:8C:66 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A993EC5EDEC3ADFB663880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89790c66-bfed-3ef3-b12c-daef191eae2b.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33490 IP address blocks: 98.246.78.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:93:ec:5e:de:c3:ad:fb:66:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=9ad28339-2721-4e0f-803e-d24e4b2a9c5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:63:f9:8a:df:cc:6b:03:73:b7:80:36:08:db: 17:54:10:65:7e:16:1e:0a:4c:14:96:ff:25:01:2c: f5:94:c9:28:05:e1:a7:18:61:6c:30:e7:5a:99:44: 65:c2:39:a0:4b:46:53:4e:49:da:f3:0d:a5:4a:b8: f3:2e:3a:05:8c:ed:32:03:20:a8:c0:11:4c:67:11: 1c:07:9e:a8:47:ab:39:55:19:f3:94:c0:b7:3c:33: 67:fc:c4:e5:13:2f:b0:92:2c:d3:fc:dd:70:da:24: 91:85:a4:f6:2a:6b:04:e9:8c:90:c7:4f:60:4b:b2: 6f:fc:57:80:da:1b:8c:d6:f7:df:49:19:2e:ab:43: 0f:8a:66:9f:c2:2a:c5:20:d5:e4:7c:2b:ae:0e:0c: c0:50:a5:c3:9f:4a:dd:ba:7a:ac:35:81:41:f6:84: 8b:37:c4:14:5d:bb:94:cd:87:8e:ca:91:75:f3:91: 41:bc:59:41:46:96:14:5a:f6:5c:4e:ec:ca:9a:99: 45:17:43:ed:ed:70:02:75:b3:60:f2:53:f9:3b:39: 7b:e0:82:c8:62:06:82:aa:20:c0:e8:d1:15:d0:bd: 01:07:b0:8d:f8:b1:22:8b:99:fd:16:f9:08:8b:3c: 6a:19:99:3b:6e:88:4e:6e:0a:b5:45:48:2f:71:6c: 8b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:20:1F:02:A8:0F:5A:35:D0:7D:F4:70:AB:D6:C6:AD:01:14:8C:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89790c66-bfed-3ef3-b12c-daef191eae2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.246.78.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:bc:a0:5c:15:b9:77:e2:0e:f8:d8:13:04:1c:31:e4:a9:06: 8b:b4:48:92:29:db:aa:bb:80:c6:25:3f:36:c9:ee:1b:f1:bd: ef:de:4b:81:27:49:b3:e2:d8:bd:6b:87:4e:42:cf:9a:33:93: 7f:07:2c:2f:8b:93:3b:6c:41:97:f1:b5:ef:ea:0d:6b:b2:b1: c7:65:f1:6f:c7:93:31:26:1a:c4:24:f5:91:00:47:6c:56:0d: c6:43:37:16:a9:a7:a5:2b:4c:96:fd:dd:9e:95:79:e3:ae:19: 20:e8:33:01:ba:ae:ea:3f:87:c6:a4:ad:c8:2a:c9:3a:50:6c: 2e:6e:5d:02:0a:36:5b:2f:28:d1:94:c2:dc:23:77:58:f5:94: 16:02:81:73:46:a1:c2:0d:9a:f8:06:c4:fe:fa:b0:de:5c:56: e5:2d:8d:d1:66:d2:16:03:76:d4:4a:b2:f5:96:a3:d2:2d:f0: 4b:b6:37:ed:d3:08:8e:d7:35:10:ea:4d:22:19:8e:36:5e:4b: 7e:cc:fa:b9:88:89:b2:59:d4:49:e6:79:f9:e0:ac:65:5c:d7: 68:e0:4b:6e:9e:71:cd:0d:58:6e:5c:fc:ec:a0:6b:50:d9:cf: a2:d2:dd:bc:69:25:46:f0:28:e4:7c:d3:da:d1:d5:ed:eb:a8: af:57:6e:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqZPsXt7DrftmOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk OWFkMjgzMzktMjcyMS00ZTBmLTgwM2UtZDI0ZTRiMmE5YzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2P5it/MawNzt4A2CNsXVBBlfhYeCkwUlv8l ASz1lMkoBeGnGGFsMOdamURlwjmgS0ZTTkna8w2lSrjzLjoFjO0yAyCowBFMZxEc B56oR6s5VRnzlMC3PDNn/MTlEy+wkizT/N1w2iSRhaT2KmsE6YyQx09gS7Jv/FeA 2huM1vffSRkuq0MPimafwirFINXkfCuuDgzAUKXDn0rdunqsNYFB9oSLN8QUXbuU zYeOypF185FBvFlBRpYUWvZcTuzKmplFF0Pt7XACdbNg8lP5Ozl74ILIYgaCqiDA 6NEV0L0BB7CN+LEii5n9FvkIizxqGZk7bohObgq1RUgvcWyLSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4gHwKoD1o10H30cKvWxq0BFIxmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODk3OTBjNjYtYmZlZC0z ZWYzLWIxMmMtZGFlZjE5MWVhZTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYvZOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+8oFwVuXfiDvjYEwQcMeSpBou0SJIp26q7gMYlPzbJ7hvxve/eS4En SbPi2L1rh05Cz5ozk38HLC+LkztsQZfxte/qDWuyscdl8W/HkzEmGsQk9ZEAR2xW DcZDNxapp6UrTJb93Z6VeeOuGSDoMwG6ruo/h8akrcgqyTpQbC5uXQIKNlsvKNGU wtwjd1j1lBYCgXNGocINmvgGxP76sN5cVuUtjdFm0hYDdtRKsvWWo9It8Eu2N+3T CI7XNRDqTSIZjjZeS37M+rmIibJZ1EnmefngrGVc12jgS26ecc0NWG5c/Oyga1DZ z6LS3bxpJUbwKOR809rR1e3rqK9XboM= -----END CERTIFICATE-----Generated at Wed Oct 22 00:24:18 2025 by rpki-client