$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a38fe206-55b6-3109-bf57-0688ea7fcffc.roa File: a38fe206-55b6-3109-bf57-0688ea7fcffc.roa (raw, json) Hash identifier: 7IFHZVWqM88YNlMZ5lgtBoZwESj0+EgMfJHHJ9T0pv4= Subject key identifier: 1F:21:27:3A:79:7D:15:24:D7:DA:45:29:BC:36:56:2F:A3:EC:73:22 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA948BF663E7C996AA0BFC Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a38fe206-55b6-3109-bf57-0688ea7fcffc.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 98.243.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:94:8b:f6:63:e7:c9:96:aa:0b:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=610a19fa-ecb7-446e-bca0-12c795469b14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e1:63:0c:90:39:53:c5:b2:cd:6c:03:68:3f: c2:09:d2:28:25:54:06:dd:b6:02:c4:d8:89:81:63: 94:91:42:0f:3d:01:70:a9:2d:1d:d8:01:25:ed:0d: d5:e7:d0:ab:e4:f3:2d:b6:c3:67:95:83:a0:f7:68: db:24:5d:51:11:9c:aa:00:a3:93:c9:40:a2:e9:88: 51:8a:dd:08:bc:f9:96:58:b8:9f:70:82:82:cf:94: fc:81:3c:73:ec:21:3a:5e:08:b5:b4:d8:f9:a0:f6: 24:44:48:66:e7:79:fb:30:3d:16:69:87:0a:0e:e6: 5f:1e:b5:47:ee:d8:a3:74:35:a8:f2:53:34:df:1a: f3:12:6f:fa:45:6b:3b:f1:ba:51:ce:1f:48:fc:27: 91:08:16:bf:8d:1e:af:a8:a0:91:0f:11:d8:15:c6: 95:a2:81:8e:63:3b:f7:e5:36:12:e6:41:96:2e:6a: b4:a3:3e:03:0e:2f:dd:a0:95:4c:38:6e:8f:3d:f1: 68:fe:c7:6c:1f:e5:67:b2:ce:92:c5:25:c0:c9:74: 94:f4:53:05:c4:90:99:a0:b8:c1:f6:eb:a3:41:cf: 75:a8:db:4a:0c:b3:10:3e:af:24:21:6a:1a:31:fc: 42:2e:db:ac:f9:00:c2:6e:19:12:6e:7c:76:90:73: 26:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:21:27:3A:79:7D:15:24:D7:DA:45:29:BC:36:56:2F:A3:EC:73:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a38fe206-55b6-3109-bf57-0688ea7fcffc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.243.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:6d:85:ba:c7:05:d7:2e:5a:d1:19:89:d5:87:72:06:e2:92: 29:42:c6:88:51:34:bb:f9:2a:a9:72:bb:c4:e7:1e:09:1d:2b: 3a:a4:f9:9e:f2:dd:4c:7d:5e:83:33:8a:b7:7f:08:9d:d9:a0: ad:a8:16:f4:2d:ad:71:45:7a:50:ac:1b:fa:42:e1:7d:8a:e7: da:02:f4:dd:22:04:ba:ac:12:02:58:34:8b:73:57:95:d4:b5: 12:7f:1c:a5:e8:92:16:41:05:95:05:b3:92:c8:cd:33:58:b4: b2:2f:d6:60:05:a1:92:e0:24:2e:45:00:13:2d:20:8f:8e:14: 22:0f:d5:b6:d7:dd:fc:be:a6:76:8c:0e:06:34:e7:ab:48:d3: 98:12:72:19:e6:58:81:81:02:fe:8d:6f:ca:8a:75:a7:64:ea: 04:7a:9b:ee:46:ad:0b:6a:39:0c:6d:e6:79:0b:bd:b8:01:f6: e5:d3:ce:09:8d:58:39:a4:bf:a5:1a:44:0e:e2:71:85:04:45: 62:f5:37:f0:47:24:4d:55:74:17:9a:f7:d4:50:94:07:a4:e6: 2b:2b:b4:ad:e1:d0:1a:c2:39:ee:0d:fe:5c:9f:de:9e:53:d4: df:25:9d:cb:ca:33:49:b0:92:5f:10:cd:e9:05:a3:59:8b:b6: 51:d3:9f:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqpSL9mPnyZaqC/wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NjEwYTE5ZmEtZWNiNy00NDZlLWJjYTAtMTJjNzk1NDY5YjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguFjDJA5U8WyzWwDaD/CCdIoJVQG3bYCxNiJ gWOUkUIPPQFwqS0d2AEl7Q3V59Cr5PMttsNnlYOg92jbJF1REZyqAKOTyUCi6YhR it0IvPmWWLifcIKCz5T8gTxz7CE6Xgi1tNj5oPYkREhm53n7MD0WaYcKDuZfHrVH 7tijdDWo8lM03xrzEm/6RWs78bpRzh9I/CeRCBa/jR6vqKCRDxHYFcaVooGOYzv3 5TYS5kGWLmq0oz4DDi/doJVMOG6PPfFo/sdsH+Vnss6SxSXAyXSU9FMFxJCZoLjB 9uujQc91qNtKDLMQPq8kIWoaMfxCLtus+QDCbhkSbnx2kHMmMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8hJzp5fRUk19pFKbw2Vi+j7HMiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTM4ZmUyMDYtNTViNi0z MTA5LWJmNTctMDY4OGVhN2ZjZmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYvNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJtthbrHBdcuWtEZidWHcgbikilCxohRNLv5Kqlyu8TnHgkdKzqk+Z7y 3Ux9XoMzird/CJ3ZoK2oFvQtrXFFelCsG/pC4X2K59oC9N0iBLqsEgJYNItzV5XU tRJ/HKXokhZBBZUFs5LIzTNYtLIv1mAFoZLgJC5FABMtII+OFCIP1bbX3fy+pnaM DgY056tI05gSchnmWIGBAv6Nb8qKdadk6gR6m+5GrQtqOQxt5nkLvbgB9uXTzgmN WDmkv6UaRA7icYUERWL1N/BHJE1VdBea99RQlAek5isrtK3h0BrCOe4N/lyf3p5T 1N8lncvKM0mwkl8QzekFo1mLtlHTn9E= -----END CERTIFICATE-----Generated at Tue Oct 21 19:34:45 2025 by rpki-client