$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8deab83c-0aab-3da5-a7bd-803ee3363601.roa File: 8deab83c-0aab-3da5-a7bd-803ee3363601.roa (raw, json) Hash identifier: aoGJCebU+jeQiFdyN4cwX6/fq1lK6NQmoGQjWsCLDwU= Subject key identifier: C0:A8:0B:95:EA:54:45:5C:5D:69:61:49:0B:5E:74:0E:FE:F4:9D:F4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A94FB520959FE2B1BB99C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8deab83c-0aab-3da5-a7bd-803ee3363601.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 98.44.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:4f:b5:20:95:9f:e2:b1:bb:99:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=56d6af9f-48e7-4c18-ab51-e64de4d11152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:31:42:d1:85:f1:9a:fd:21:36:a0:33:3e:87: b3:29:1a:eb:ca:2e:ce:59:88:68:3f:01:e8:b6:9b: 5f:3a:f4:02:a3:74:9b:69:be:b6:8f:72:c2:73:6f: 8e:1c:59:6e:1b:8f:d0:33:54:bd:98:8c:cf:17:33: 65:09:be:5b:65:51:8b:bc:f6:b2:1c:36:d7:20:3c: 78:c7:9d:83:0e:7d:8e:00:61:1a:a7:6b:0c:b3:ed: 3b:07:4a:00:a4:90:59:c0:5f:8a:20:db:ee:34:04: 55:16:7b:23:42:eb:5d:c1:ed:bc:06:d8:6e:66:ba: bc:dd:28:16:bc:71:1c:e5:d6:d8:75:df:55:30:0a: 8f:b0:88:51:de:43:fa:82:c4:f1:54:b0:55:d1:e6: 63:a9:7a:d9:57:7a:2a:c9:b3:74:86:d4:ab:24:32: 42:4e:c1:30:71:bd:91:82:c3:3a:bc:98:25:35:b0: 13:60:3b:c9:d1:61:42:c7:07:c5:f9:f5:9f:2b:37: 03:cb:57:41:21:23:0c:af:1e:61:80:17:38:74:e6: cb:e4:94:02:94:a6:fe:5e:3e:15:4e:33:26:b1:4f: 69:25:b4:48:88:8b:76:5d:4d:91:6d:ac:15:23:3d: 36:46:92:b3:47:2b:9b:a2:64:0f:4f:41:18:2c:64: 1a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:A8:0B:95:EA:54:45:5C:5D:69:61:49:0B:5E:74:0E:FE:F4:9D:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8deab83c-0aab-3da5-a7bd-803ee3363601.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.44.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:bd:40:d0:ae:3a:1c:99:94:6e:d7:47:80:a4:79:d3:49:92: 1d:f5:c5:c4:50:98:0a:c6:d4:fb:ac:6b:56:11:4c:51:c0:0f: 2e:c9:67:8d:15:34:7d:1d:7c:1e:2f:f3:11:98:d7:35:dc:96: a7:da:f4:03:27:97:5f:5b:67:8a:7a:b8:a4:4d:e7:3f:cf:06: 62:7c:1b:15:22:0d:ee:4c:99:14:33:5d:f8:0c:32:9b:d7:f3: c6:29:d3:80:fc:f8:28:55:16:07:56:88:cc:d3:48:59:fe:76: 19:f3:9b:1d:88:ca:2c:1f:7c:23:25:11:e8:41:c1:87:e5:65: f2:4e:4e:b6:d3:aa:b7:6b:53:5e:cc:72:de:f0:04:b8:80:76: fd:87:11:01:8d:b6:cf:1a:bb:5c:88:66:49:76:04:57:40:25: 53:88:db:e9:13:c7:06:07:4e:e1:0c:aa:4d:fa:45:50:0a:6e: a9:10:ea:2f:3c:f5:4c:cf:de:a6:b4:8d:e5:c1:a3:c7:df:1b: 2a:29:a6:54:3c:37:89:27:09:fb:96:db:85:c7:67:c9:2a:d7: 36:f0:55:38:c2:e3:c4:80:7a:ea:cf:0c:30:a4:19:59:b6:45: c2:8f:b8:8d:b7:fc:94:74:36:c5:f1:66:93:29:05:99:9c:de: 08:cf:91:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqU+1IJWf4rG7mcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NTZkNmFmOWYtNDhlNy00YzE4LWFiNTEtZTY0ZGU0ZDExMTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjFC0YXxmv0hNqAzPoezKRrryi7OWYhoPwHo tptfOvQCo3Sbab62j3LCc2+OHFluG4/QM1S9mIzPFzNlCb5bZVGLvPayHDbXIDx4 x52DDn2OAGEap2sMs+07B0oApJBZwF+KINvuNARVFnsjQutdwe28BthuZrq83SgW vHEc5dbYdd9VMAqPsIhR3kP6gsTxVLBV0eZjqXrZV3oqybN0htSrJDJCTsEwcb2R gsM6vJglNbATYDvJ0WFCxwfF+fWfKzcDy1dBISMMrx5hgBc4dObL5JQClKb+Xj4V TjMmsU9pJbRIiIt2XU2RbawVIz02RpKzRyubomQPT0EYLGQaCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCoC5XqVEVcXWlhSQtedA7+9J30MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGRlYWI4M2MtMGFhYi0z ZGE1LWE3YmQtODAzZWUzMzYzNjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYiwWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIS9QNCuOhyZlG7XR4CkedNJkh31xcRQmArG1Pusa1YRTFHADy7JZ40V NH0dfB4v8xGY1zXclqfa9AMnl19bZ4p6uKRN5z/PBmJ8GxUiDe5MmRQzXfgMMpvX 88Yp04D8+ChVFgdWiMzTSFn+dhnzmx2IyiwffCMlEehBwYflZfJOTrbTqrdrU17M ct7wBLiAdv2HEQGNts8au1yIZkl2BFdAJVOI2+kTxwYHTuEMqk36RVAKbqkQ6i88 9UzP3qa0jeXBo8ffGyopplQ8N4knCfuW24XHZ8kq1zbwVTjC48SAeurPDDCkGVm2 RcKPuI23/JR0NsXxZpMpBZmc3gjPkS0= -----END CERTIFICATE-----Generated at Tue Oct 21 19:17:29 2025 by rpki-client