$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ffbb82b-a874-34dd-8699-a1c7f91d534e.roa File: 9ffbb82b-a874-34dd-8699-a1c7f91d534e.roa (raw, json) Hash identifier: SIpoIeLv2H3HCJrRH4+V874IZdLa1DaGIoyyWuPK+4c= Subject key identifier: 61:DA:31:0C:B8:26:54:1A:6E:23:1E:41:49:4A:CA:2C:D0:C3:6A:EE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A93A0350EE8D11A3919F00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ffbb82b-a874-34dd-8699-a1c7f91d534e.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 98.195.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:3a:03:50:ee:8d:11:a3:91:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=fca5648b-2422-4f5c-a2a6-a185d5e273e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d0:ad:dc:14:1a:6d:fd:29:64:24:30:5d:c6: 1e:43:38:89:90:a9:4b:13:41:79:ad:5b:69:8b:40: b7:02:fb:c8:0e:70:ad:30:4f:3a:39:8b:05:66:1c: 8c:e1:03:a6:80:f5:b8:b9:23:61:5f:bb:b4:de:dd: ff:cf:54:f6:4a:7a:95:df:02:80:a6:5c:ae:ba:e4: f9:53:9b:c8:82:b5:b3:77:b6:2d:74:19:5b:70:a9: 1d:86:a4:a2:fe:a6:38:8c:5f:bf:dd:6b:fd:75:31: 90:e2:ee:78:39:a7:9a:54:88:cd:62:21:e9:38:33: ec:ad:0b:61:2b:61:56:fe:b3:13:46:63:bd:7e:f7: a4:45:4d:9b:75:49:88:2e:41:15:e0:a4:b2:97:4b: 83:c4:8d:29:c7:73:4f:81:90:c6:8e:bf:57:d0:5e: 16:7b:4c:1e:b8:74:48:0d:09:15:d3:8d:0e:22:04: b4:92:eb:00:d9:23:49:d0:b8:0d:96:8b:2b:2e:30: d1:61:7a:68:da:c1:44:d2:02:71:2f:fd:e0:4c:6d: fb:45:d1:07:8d:4d:c2:fc:8d:ca:e3:16:dd:29:16: c2:8a:45:28:cb:c9:bb:d9:78:2b:c9:d0:2b:1e:38: 8a:ca:ca:58:c3:5a:21:b9:d4:6a:24:f4:d6:97:65: e3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:DA:31:0C:B8:26:54:1A:6E:23:1E:41:49:4A:CA:2C:D0:C3:6A:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ffbb82b-a874-34dd-8699-a1c7f91d534e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.195.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:5e:0f:ee:f2:d1:99:54:2f:5f:65:e0:9b:59:a9:f6:9f:e6: 66:84:78:32:c4:de:56:85:52:d3:81:b2:4c:9a:e8:b5:b3:4c: e4:aa:1e:71:0a:43:a0:3a:cd:65:99:85:2d:f0:6e:e0:21:f8: 03:43:c5:cb:08:6e:16:c0:d8:66:11:8f:10:86:b8:1e:70:06: f3:a0:c3:d8:44:03:77:e1:b8:8e:16:bc:46:81:1c:07:30:40: 64:2e:c4:38:8e:18:58:ba:35:50:1d:41:33:21:fa:fb:68:43: 22:c4:a3:f7:72:aa:d2:1b:a2:3e:67:35:62:98:1e:df:ec:d4: 48:82:e4:98:18:9f:c2:4f:4c:b3:4f:52:e9:84:71:2f:91:59: 4a:75:ae:76:f1:af:50:d9:82:50:ca:9c:3f:e2:60:be:26:f4: 25:29:16:d9:5b:ca:bf:81:59:c1:b7:20:d3:6c:14:12:3c:98: 7f:57:45:9d:22:ca:42:ea:bc:80:17:dc:aa:07:a3:7b:cf:5e: fa:c3:90:0a:93:26:f0:5c:94:fc:2c:d3:ef:63:9f:15:a3:54: 7b:e0:bb:35:b4:00:4b:75:3c:54:54:ca:d0:a5:79:af:29:e9: 5e:6e:8c:a8:95:92:e0:85:8c:eb:2a:d3:67:e1:ae:3a:4a:15: 2a:4b:37:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqToDUO6NEaORnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZmNhNTY0OGItMjQyMi00ZjVjLWEyYTYtYTE4NWQ1ZTI3M2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttCt3BQabf0pZCQwXcYeQziJkKlLE0F5rVtp i0C3AvvIDnCtME86OYsFZhyM4QOmgPW4uSNhX7u03t3/z1T2SnqV3wKAplyuuuT5 U5vIgrWzd7YtdBlbcKkdhqSi/qY4jF+/3Wv9dTGQ4u54OaeaVIjNYiHpODPsrQth K2FW/rMTRmO9fvekRU2bdUmILkEV4KSyl0uDxI0px3NPgZDGjr9X0F4We0weuHRI DQkV040OIgS0kusA2SNJ0LgNlosrLjDRYXpo2sFE0gJxL/3gTG37RdEHjU3C/I3K 4xbdKRbCikUoy8m72XgrydArHjiKyspYw1ohudRqJPTWl2Xj1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGHaMQy4JlQabiMeQUlKyizQw2ruMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWZmYmI4MmItYTg3NC0z NGRkLTg2OTktYTFjN2Y5MWQ1MzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYsOkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMleD+7y0ZlUL19l4JtZqfaf5maEeDLE3laFUtOBskya6LWzTOSqHnEK Q6A6zWWZhS3wbuAh+ANDxcsIbhbA2GYRjxCGuB5wBvOgw9hEA3fhuI4WvEaBHAcw QGQuxDiOGFi6NVAdQTMh+vtoQyLEo/dyqtIboj5nNWKYHt/s1EiC5JgYn8JPTLNP UumEcS+RWUp1rnbxr1DZglDKnD/iYL4m9CUpFtlbyr+BWcG3INNsFBI8mH9XRZ0i ykLqvIAX3KoHo3vPXvrDkAqTJvBclPws0+9jnxWjVHvguzW0AEt1PFRUytClea8p 6V5ujKiVkuCFjOsq02fhrjpKFSpLN1M= -----END CERTIFICATE-----Generated at Tue Oct 21 21:50:36 2025 by rpki-client