$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a38fe9ba-db85-3605-b808-e346e56c53e6.roa File: a38fe9ba-db85-3605-b808-e346e56c53e6.roa (raw, json) Hash identifier: 1AF4fNb3tKvd/jsU6Znso0PwcRCHKGwEA7BM3rvweTY= Subject key identifier: 8A:27:4D:BB:8E:47:8A:35:1F:A5:56:B0:D6:F3:FD:B4:63:2F:9B:17 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AAEE78D5C5D4DBC5A525E0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a38fe9ba-db85-3605-b808-e346e56c53e6.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 98.201.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:ee:78:d5:c5:d4:db:c5:a5:25:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=4b77cb34-66ec-4239-93c5-f6311339147b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:79:dd:6f:85:bc:65:e8:60:90:6d:35:a9:aa: 01:1f:6d:04:c9:90:af:62:a9:be:cb:8d:50:0e:44: ab:cc:8f:16:e0:41:2e:97:93:7c:e2:5d:4d:2c:ef: a4:5d:ba:87:83:94:6e:86:ef:6d:f4:84:40:68:38: 41:67:0e:00:1b:41:3e:11:f9:f9:51:e2:c9:2c:11: 88:ad:3f:57:ca:00:2e:49:0f:6d:ad:ad:89:9e:3b: 02:d4:7f:e4:ad:e1:d5:6d:cd:1f:8a:fc:7e:2a:c8: 2a:98:59:bc:99:88:39:8e:c4:a2:1f:b0:7e:98:25: 4d:e2:f1:55:78:98:55:2f:9b:e0:db:57:0a:fa:8f: 7c:30:0f:01:7a:93:84:3f:e0:2b:25:09:3d:38:fb: d0:9a:66:b4:36:d8:3e:1a:ee:21:53:97:51:8c:3f: 81:c6:db:ed:38:9a:1f:dd:8d:c4:e1:cd:8e:96:61: 51:f9:3b:9e:f4:08:b9:4a:4f:39:78:40:ab:fe:d8: ee:3f:6b:7c:62:fc:58:dd:d0:a2:ff:07:b1:8e:a9: 2a:46:5d:3b:f0:fc:8a:99:47:a5:a1:cf:c7:ac:6c: 6a:1d:63:4c:3a:5e:8e:79:ea:e1:43:1e:a3:54:e2: 67:52:87:5f:dd:6c:67:70:90:c6:7c:e2:c9:02:9b: b9:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:27:4D:BB:8E:47:8A:35:1F:A5:56:B0:D6:F3:FD:B4:63:2F:9B:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a38fe9ba-db85-3605-b808-e346e56c53e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.201.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:f3:98:f5:bb:1c:9e:c3:c1:f0:35:c3:64:a8:ec:0a:21:b1: 3c:a2:8c:73:6b:c4:5a:6c:b3:88:ff:66:58:dc:38:b8:98:b6: 78:bc:43:fc:67:88:23:69:d7:8a:26:25:a1:e8:fc:86:89:f2: 0e:86:57:56:6f:82:8a:a8:aa:ee:0c:13:91:25:ab:9d:cf:a7: 42:a3:e0:ae:8f:87:9c:86:98:84:1c:91:56:c0:12:9d:d8:b4: ae:b2:26:fc:dc:d5:24:d2:be:8a:46:6e:bb:de:73:bf:ea:83: 51:3f:4b:cc:21:a9:e2:71:4f:18:e1:b8:a3:1b:12:fa:08:1a: d7:f1:00:56:7c:c9:5d:fc:e6:f2:7b:4f:57:6d:fb:03:2d:4b: 45:72:50:9b:e1:05:46:e1:19:a2:4c:54:ed:45:ae:7e:5a:7f: d8:d0:6f:d2:99:54:26:a1:7c:43:d0:82:67:dc:08:3a:c5:53: bb:29:ba:12:17:e2:a6:a2:4a:b9:f0:64:b7:52:aa:34:7e:0d: cd:d0:55:24:b9:ac:35:1a:75:e2:10:ab:15:dc:87:03:1a:cb: 48:8b:57:ce:1f:ee:3d:a2:ab:a7:e5:86:3f:bb:93:af:15:90: 0b:c6:1f:f5:4b:44:a1:80:19:bf:c8:55:de:92:bc:49:62:c3: 72:30:32:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqu541cXU28WlJeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NGI3N2NiMzQtNjZlYy00MjM5LTkzYzUtZjYzMTEzMzkxNDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonndb4W8ZehgkG01qaoBH20EyZCvYqm+y41Q DkSrzI8W4EEul5N84l1NLO+kXbqHg5Ruhu9t9IRAaDhBZw4AG0E+Efn5UeLJLBGI rT9XygAuSQ9tra2JnjsC1H/kreHVbc0fivx+KsgqmFm8mYg5jsSiH7B+mCVN4vFV eJhVL5vg21cK+o98MA8BepOEP+ArJQk9OPvQmma0Ntg+Gu4hU5dRjD+BxtvtOJof 3Y3E4c2OlmFR+Tue9Ai5Sk85eECr/tjuP2t8YvxY3dCi/wexjqkqRl078PyKmUel oc/HrGxqHWNMOl6OeerhQx6jVOJnUodf3WxncJDGfOLJApu5/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIonTbuOR4o1H6VWsNbz/bRjL5sXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTM4ZmU5YmEtZGI4NS0z NjA1LWI4MDgtZTM0NmU1NmM1M2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYsmsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbzmPW7HJ7DwfA1w2So7AohsTyijHNrxFpss4j/ZljcOLiYtni8Q/xn iCNp14omJaHo/IaJ8g6GV1Zvgoqoqu4ME5Elq53Pp0Kj4K6Ph5yGmIQckVbAEp3Y tK6yJvzc1STSvopGbrvec7/qg1E/S8whqeJxTxjhuKMbEvoIGtfxAFZ8yV385vJ7 T1dt+wMtS0VyUJvhBUbhGaJMVO1Frn5af9jQb9KZVCahfEPQgmfcCDrFU7spuhIX 4qaiSrnwZLdSqjR+Dc3QVSS5rDUadeIQqxXchwMay0iLV84f7j2iq6flhj+7k68V kAvGH/VLRKGAGb/IVd6SvEliw3IwMvE= -----END CERTIFICATE-----Generated at Tue Oct 21 21:52:37 2025 by rpki-client