$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a81e625f-87f2-3ac5-a4ab-68a8cd7d8a40.roa File: a81e625f-87f2-3ac5-a4ab-68a8cd7d8a40.roa (raw, json) Hash identifier: lOuB5CDkT2F6IujvrvaztnP0T+MIEDFsfID0MJUsqiU= Subject key identifier: 89:C7:92:A6:D7:AF:2F:E9:BE:48:9E:E0:0D:BD:D0:B4:88:18:1D:9D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A93983EDC4822CB7130880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a81e625f-87f2-3ac5-a4ab-68a8cd7d8a40.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 98.195.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:39:83:ed:c4:82:2c:b7:13:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=79473ca3-cf9d-4f40-8e21-9a68558431dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:30:54:ef:d2:7f:4a:36:93:af:ab:17:8a:0f: 31:70:fc:89:cc:a9:a7:8a:b6:6c:89:0e:ab:14:87: ec:d6:63:c0:01:47:79:7b:ae:72:17:3a:40:fc:9e: c2:5f:2a:84:93:65:c6:15:ee:5f:f5:1d:09:09:29: af:30:76:85:53:41:55:96:54:83:ab:22:71:d7:1b: d7:c8:5a:33:6f:a8:f5:0e:45:38:ac:a4:c2:1b:3e: b2:1d:44:99:e3:34:fc:c5:90:e2:b7:62:9c:5b:f2: 9e:ed:d8:ce:ea:a1:62:b6:69:78:ce:f9:98:74:d9: f7:8b:86:94:66:ac:89:df:9a:8c:32:83:57:b0:44: 1e:bf:45:07:46:57:1b:f2:13:e7:12:02:3b:26:aa: 10:69:68:3c:f2:83:4c:f5:7c:2a:88:ef:81:22:e9: 84:44:bc:26:2c:00:3d:a7:62:11:36:fa:1a:e4:7e: 1d:ee:ef:94:7b:5b:cb:98:ab:bf:64:e6:c7:d8:de: c9:da:61:dc:61:ad:f5:bb:6e:47:4a:03:43:67:68: b2:6a:3a:53:c4:d7:ef:9d:29:ac:99:95:e6:a6:9a: c7:d2:8a:11:90:91:41:64:37:7a:4d:df:ae:97:43: df:58:6e:01:3c:ce:d4:97:b0:4b:3b:e5:d6:30:ee: 04:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C7:92:A6:D7:AF:2F:E9:BE:48:9E:E0:0D:BD:D0:B4:88:18:1D:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a81e625f-87f2-3ac5-a4ab-68a8cd7d8a40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.195.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:f5:ec:be:b0:56:c2:06:4d:2f:ab:91:76:a3:b8:b1:cd:38: d6:5a:a0:95:42:ce:b9:c2:a5:a0:bb:6d:bc:7d:8e:3b:1e:48: 05:ab:d5:69:ec:8e:cf:db:17:bd:e2:e7:31:79:5d:cd:dd:ce: 5c:a2:64:87:45:3a:20:46:0c:cb:92:af:7c:45:6c:82:48:91: 04:f5:71:89:99:5a:f7:a0:fc:c1:3a:20:1f:9f:4b:ad:35:56: f1:b1:37:b3:4e:62:80:1a:8d:b9:30:7f:1c:46:96:ab:10:07: a4:92:70:d7:5f:b6:4d:df:c3:56:53:bd:5d:64:6b:d1:34:53: 67:1c:af:51:a8:c0:49:af:39:e9:c9:49:c9:61:01:db:43:d5: 32:eb:8f:de:2b:bc:56:91:1e:2c:07:2e:18:4a:ed:45:c5:6d: 59:3d:41:29:59:27:78:2e:61:11:98:a5:9d:38:6c:c5:1e:96: 93:69:9a:5f:a6:9c:6c:58:8f:d8:06:45:2d:6e:6e:04:5c:60: 88:e1:b9:61:28:0b:e1:fd:83:e9:3f:7a:11:12:12:78:e5:79: 1a:c7:4a:f6:43:a9:eb:19:c7:5b:e4:02:45:d2:d1:e5:ec:fa: 9b:15:db:d5:82:6b:71:d5:47:28:b9:62:ce:b4:fc:d4:9b:6c: c9:a3:65:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqTmD7cSCLLcTCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk Nzk0NzNjYTMtY2Y5ZC00ZjQwLThlMjEtOWE2ODU1ODQzMWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzBU79J/SjaTr6sXig8xcPyJzKmnirZsiQ6r FIfs1mPAAUd5e65yFzpA/J7CXyqEk2XGFe5f9R0JCSmvMHaFU0FVllSDqyJx1xvX yFozb6j1DkU4rKTCGz6yHUSZ4zT8xZDit2KcW/Ke7djO6qFitml4zvmYdNn3i4aU ZqyJ35qMMoNXsEQev0UHRlcb8hPnEgI7JqoQaWg88oNM9XwqiO+BIumERLwmLAA9 p2IRNvoa5H4d7u+Ue1vLmKu/ZObH2N7J2mHcYa31u25HSgNDZ2iyajpTxNfvnSms mZXmpprH0ooRkJFBZDd6Td+ul0PfWG4BPM7Ul7BLO+XWMO4ErQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFInHkqbXry/pvkie4A290LSIGB2dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTgxZTYyNWYtODdmMi0z YWM1LWE0YWItNjhhOGNkN2Q4YTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYsN+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHT17L6wVsIGTS+rkXajuLHNONZaoJVCzrnCpaC7bbx9jjseSAWr1Wns js/bF73i5zF5Xc3dzlyiZIdFOiBGDMuSr3xFbIJIkQT1cYmZWveg/ME6IB+fS601 VvGxN7NOYoAajbkwfxxGlqsQB6SScNdftk3fw1ZTvV1ka9E0U2ccr1GowEmvOenJ SclhAdtD1TLrj94rvFaRHiwHLhhK7UXFbVk9QSlZJ3guYRGYpZ04bMUelpNpml+m nGxYj9gGRS1ubgRcYIjhuWEoC+H9g+k/ehESEnjleRrHSvZDqesZx1vkAkXS0eXs +psV29WCa3HVRyi5Ys60/NSbbMmjZeY= -----END CERTIFICATE-----Generated at Tue Oct 21 21:56:01 2025 by rpki-client