$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/987a1689-a49b-332f-b9a9-7b544529d569.roa File: 987a1689-a49b-332f-b9a9-7b544529d569.roa (raw, json) Hash identifier: Vhyy4YYskr+e/LoWmTUXFijTUuG4yqafoDc5CUhc8J0= Subject key identifier: FF:34:A9:8E:B0:6D:4A:79:F1:DD:BE:B7:1D:31:9A:F6:25:8F:44:80 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A94B467EB46B30371B5EAD Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/987a1689-a49b-332f-b9a9-7b544529d569.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 98.34.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:4b:46:7e:b4:6b:30:37:1b:5e:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=a8ed9d27-c48a-45b1-8d61-1f9851b888dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b4:9c:68:66:a4:55:f8:22:eb:29:b9:76:35: 14:ce:c5:c0:50:91:33:fe:78:b1:c7:39:4f:8f:38: a3:69:2b:19:d7:ef:b0:ce:ef:2d:85:70:8d:f5:0b: f4:30:a3:ac:a0:ae:8c:72:7c:2a:c5:d5:ab:66:2b: 09:42:95:68:4d:35:57:04:bf:93:b8:23:ba:bf:5b: fe:0a:73:31:d6:35:3a:c5:ad:36:29:8b:da:26:46: ba:d2:ac:5a:f3:7a:0b:5c:76:87:5c:fd:f3:98:8c: 7c:91:bd:bc:95:37:0e:1c:c6:bb:56:e0:30:1f:81: b8:ba:09:c4:a8:2c:84:8a:47:b1:9c:f8:c7:b4:04: 50:ee:cb:c0:fe:17:00:8d:21:a3:67:11:ef:9a:a7: 08:73:5c:37:29:7d:68:bd:65:2d:61:eb:cb:23:2c: 62:ca:2c:8d:71:83:93:91:97:81:0d:e3:01:fa:0c: 06:53:6f:7a:e2:68:4e:32:05:13:92:ea:96:3f:03: 87:2f:33:72:cc:e3:1a:11:7e:f0:c9:7a:18:17:be: 31:7b:d2:9e:f0:75:6e:c7:0c:cd:df:ec:b1:a7:09: e9:4d:23:10:c3:45:dd:74:9b:9b:b1:ed:fe:64:c5: 24:ad:ee:20:16:29:a0:ec:eb:61:53:cc:6f:e3:69: 04:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:34:A9:8E:B0:6D:4A:79:F1:DD:BE:B7:1D:31:9A:F6:25:8F:44:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/987a1689-a49b-332f-b9a9-7b544529d569.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.34.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:6d:d6:88:c7:45:d0:bd:6d:f3:5c:90:cf:15:29:08:71:a2: ed:ea:0b:9d:a1:5f:f2:ad:fd:0f:00:10:1f:1e:26:da:82:f6: 3a:6d:35:9b:61:95:9d:ef:a6:61:0e:fb:81:87:cb:c4:8b:aa: d1:7d:af:7e:a9:de:28:5e:b3:b5:85:51:be:8c:85:3f:16:85: d0:b4:74:50:c3:f6:d6:3f:2d:10:4e:d8:4f:f1:6d:01:b3:da: db:00:21:7e:da:e2:1a:89:f3:6f:20:f4:e7:a3:73:d2:8d:eb: 44:61:6c:0e:37:62:6a:90:32:04:9f:5e:7d:0b:9e:14:25:99: 47:90:04:02:2a:8a:0b:9c:9c:70:d0:d8:15:1b:26:20:58:0c: 3b:10:bd:1c:bc:37:ce:d6:81:ee:e7:d9:d0:62:20:64:24:bd: 70:08:36:cf:83:df:03:d3:21:0d:66:cb:b4:e0:dd:83:14:94: d6:22:14:cd:5e:ec:78:e8:aa:10:10:77:25:aa:ef:4c:0f:c3: 18:01:07:d8:2d:0d:45:43:06:e0:a9:aa:2e:d3:df:ba:a8:c2: 53:6a:ec:80:1d:a3:0e:9c:d2:86:d8:8c:8c:cc:8b:ba:a5:f0: cd:73:e2:15:6c:41:bf:0b:e8:ba:41:57:02:c3:f9:d0:14:bc: 67:c0:d9:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqUtGfrRrMDcbXq0wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YThlZDlkMjctYzQ4YS00NWIxLThkNjEtMWY5ODUxYjg4OGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbScaGakVfgi6ym5djUUzsXAUJEz/nixxzlP jzijaSsZ1++wzu8thXCN9Qv0MKOsoK6McnwqxdWrZisJQpVoTTVXBL+TuCO6v1v+ CnMx1jU6xa02KYvaJka60qxa83oLXHaHXP3zmIx8kb28lTcOHMa7VuAwH4G4ugnE qCyEikexnPjHtARQ7svA/hcAjSGjZxHvmqcIc1w3KX1ovWUtYevLIyxiyiyNcYOT kZeBDeMB+gwGU2964mhOMgUTkuqWPwOHLzNyzOMaEX7wyXoYF74xe9Ke8HVuxwzN 3+yxpwnpTSMQw0XddJubse3+ZMUkre4gFimg7OthU8xv42kEvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP80qY6wbUp58d2+tx0xmvYlj0SAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTg3YTE2ODktYTQ5Yi0z MzJmLWI5YTktN2I1NDQ1MjlkNTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYiLwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJt1ojHRdC9bfNckM8VKQhxou3qC52hX/Kt/Q8AEB8eJtqC9jptNZth lZ3vpmEO+4GHy8SLqtF9r36p3ihes7WFUb6MhT8WhdC0dFDD9tY/LRBO2E/xbQGz 2tsAIX7a4hqJ828g9Oejc9KN60RhbA43YmqQMgSfXn0LnhQlmUeQBAIqigucnHDQ 2BUbJiBYDDsQvRy8N87Wge7n2dBiIGQkvXAINs+D3wPTIQ1my7Tg3YMUlNYiFM1e 7HjoqhAQdyWq70wPwxgBB9gtDUVDBuCpqi7T37qowlNq7IAdow6c0obYjIzMi7ql 8M1z4hVsQb8L6LpBVwLD+dAUvGfA2SI= -----END CERTIFICATE-----Generated at Wed Oct 22 00:23:59 2025 by rpki-client