$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c89f158-b76e-3812-857b-6c7ca1429a96.roa File: 8c89f158-b76e-3812-857b-6c7ca1429a96.roa (raw, json) Hash identifier: sBJZYU+JdtM4+jpbV8rnE00k22Xx/Gjp8HiYOPclxoE= Subject key identifier: 12:A4:7B:84:D1:16:39:A4:E8:37:22:E4:36:74:22:2C:BA:65:29:62 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA8E7122F26502EDEB2780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c89f158-b76e-3812-857b-6c7ca1429a96.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 98.209.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:8e:71:22:f2:65:02:ed:eb:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=4626c020-4e49-41ff-ab2a-52e4aee23f56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:59:5b:c2:bc:0e:4a:c7:88:4c:79:07:25:6e: f8:e8:d9:46:48:bb:f7:bf:4f:97:ad:f9:79:bd:46: fe:f1:6e:be:85:19:96:83:76:74:1c:c9:f9:0f:1f: 45:89:45:87:82:40:26:f2:e8:67:57:42:3e:37:b8: d0:06:61:ce:85:38:38:dd:3d:a8:08:cf:8b:6b:6a: 32:e0:a2:a7:0c:31:48:eb:05:8a:be:17:99:1d:47: c7:e7:9c:ec:54:1e:4c:c2:63:e4:46:29:e9:7c:6f: 45:83:3b:76:cf:0d:94:70:c8:f3:24:a7:e9:c7:10: d3:7d:04:98:01:72:72:b1:3a:1e:43:18:5e:3c:6c: 7e:0e:e1:2e:8e:29:50:d9:10:96:66:96:5d:40:af: 08:41:66:2c:0a:dc:d9:24:3b:28:26:f8:69:33:c1: 69:a7:59:21:a7:a2:0d:61:79:e1:01:d4:08:df:f4: 53:b8:f2:17:cb:60:8a:96:84:6e:d2:ec:0a:42:a8: c0:13:5c:85:cd:49:14:19:d7:8a:ae:d3:15:c8:8f: 31:e0:d5:4a:7a:98:63:03:ef:22:d6:8f:0d:a7:39: 47:9e:66:4d:bc:60:55:27:84:bd:8a:04:9a:3c:8b: af:9d:5b:7d:94:4b:1b:a0:e3:56:80:f2:25:81:cf: 36:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A4:7B:84:D1:16:39:A4:E8:37:22:E4:36:74:22:2C:BA:65:29:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c89f158-b76e-3812-857b-6c7ca1429a96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.209.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:9a:90:c7:e7:1d:88:02:27:1d:39:33:81:c6:5b:36:46:d8: 6b:dc:00:56:76:2b:45:95:12:72:34:38:b0:ed:79:8f:02:19: df:c6:02:ee:a4:4c:03:4b:8e:34:c7:ef:95:79:ee:b1:68:2f: bc:eb:09:eb:a3:6b:a1:4d:cb:36:0e:05:5c:3c:0b:60:0b:dd: cc:f7:47:c2:ea:54:01:be:bc:81:96:10:d6:e9:10:c1:e5:d0: f5:d7:25:08:17:07:38:ba:c4:b0:0b:75:f5:4f:a0:79:9e:e7: 88:89:83:fb:c2:6a:af:8c:86:6a:57:73:c9:c3:ab:9b:68:63: 0b:56:b5:a2:00:04:ab:a8:01:7f:f8:08:3e:08:67:68:8d:d2: 41:71:e3:e9:90:9e:19:e4:e3:4d:c5:e4:b8:6e:1e:c0:c4:fe: 59:ae:3e:c8:d8:70:ad:ba:bf:fb:e0:70:82:a2:3f:6f:e4:e8: c7:7c:c1:8d:57:29:de:4b:14:a1:b6:d0:80:c3:19:83:69:4a: de:02:20:c4:6c:34:ed:f6:58:40:73:7a:42:d1:90:c2:b4:c0: bd:4b:dc:04:e9:8f:72:ed:19:db:d6:1b:0f:2a:21:ba:02:6d: 96:b7:33:c1:29:a6:05:54:ce:9a:a5:69:71:c7:be:e1:73:c7: af:15:27:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqo5xIvJlAu3rJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NDYyNmMwMjAtNGU0OS00MWZmLWFiMmEtNTJlNGFlZTIzZjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFlbwrwOSseITHkHJW746NlGSLv3v0+Xrfl5 vUb+8W6+hRmWg3Z0HMn5Dx9FiUWHgkAm8uhnV0I+N7jQBmHOhTg43T2oCM+La2oy 4KKnDDFI6wWKvheZHUfH55zsVB5MwmPkRinpfG9Fgzt2zw2UcMjzJKfpxxDTfQSY AXJysToeQxhePGx+DuEujilQ2RCWZpZdQK8IQWYsCtzZJDsoJvhpM8Fpp1khp6IN YXnhAdQI3/RTuPIXy2CKloRu0uwKQqjAE1yFzUkUGdeKrtMVyI8x4NVKephjA+8i 1o8NpzlHnmZNvGBVJ4S9igSaPIuvnVt9lEsboONWgPIlgc82OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKke4TRFjmk6Dci5DZ0Iiy6ZSliMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGM4OWYxNTgtYjc2ZS0z ODEyLTg1N2ItNmM3Y2ExNDI5YTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYtG5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmakMfnHYgCJx05M4HGWzZG2GvcAFZ2K0WVEnI0OLDteY8CGd/GAu6k TANLjjTH75V57rFoL7zrCeuja6FNyzYOBVw8C2AL3cz3R8LqVAG+vIGWENbpEMHl 0PXXJQgXBzi6xLALdfVPoHme54iJg/vCaq+MhmpXc8nDq5toYwtWtaIABKuoAX/4 CD4IZ2iN0kFx4+mQnhnk403F5LhuHsDE/lmuPsjYcK26v/vgcIKiP2/k6Md8wY1X Kd5LFKG20IDDGYNpSt4CIMRsNO32WEBzekLRkMK0wL1L3ATpj3LtGdvWGw8qIboC bZa3M8EppgVUzpqlaXHHvuFzx68VJ64= -----END CERTIFICATE-----Generated at Tue Oct 21 22:02:41 2025 by rpki-client