$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3742c3d-0322-3a63-976e-d2af0557724d.roa File: b3742c3d-0322-3a63-976e-d2af0557724d.roa (raw, json) Hash identifier: PDCD5BeyCbAuFr1v29ZTXQ1K93ZQmxJK4RplkvyF3Fk= Subject key identifier: 31:FE:AE:87:35:04:1F:A1:9E:55:70:02:E6:61:03:A3:1A:57:B6:39 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AAED8FC39A73366FFE5380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3742c3d-0322-3a63-976e-d2af0557724d.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 98.201.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:ed:8f:c3:9a:73:36:6f:fe:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=b0de0847-ba4a-4e78-adc0-f12606e5d165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:46:05:c1:90:b0:bc:1f:d8:5c:d9:b2:10:23: eb:d6:ac:58:ff:53:da:f8:b4:f6:68:63:a6:74:80: 84:1d:54:4b:cd:de:cb:c3:ee:64:e0:90:e0:23:89: 65:70:40:45:33:f5:98:b4:38:43:97:73:4e:3c:e6: 9e:26:28:48:6b:cc:80:12:e6:96:29:57:91:54:09: 5e:51:02:61:6f:6a:88:11:14:14:85:18:3d:76:b4: b3:f9:10:0d:88:f6:33:b9:46:d1:5a:14:63:58:4f: 25:70:34:84:11:4a:23:63:0b:5d:54:3c:0c:3c:60: d5:41:e7:1e:93:f9:e5:da:2e:d6:12:e3:c3:5b:0a: a6:a6:04:ad:57:43:f1:72:78:f1:e2:a8:db:cd:a6: 61:34:cb:5d:6c:97:08:8d:da:e8:8d:e2:e8:c4:d3: a6:d3:cd:60:8c:d3:c2:83:bd:95:84:2f:50:99:8f: 05:9f:8f:b0:15:39:f7:c8:e3:6c:8f:53:19:14:08: aa:69:3c:9f:d2:90:98:06:2c:89:49:85:46:5c:ad: 5a:28:99:ad:a4:3a:89:4d:c7:e3:e8:83:c9:c3:c1: 5d:0b:8f:9f:f0:9d:31:49:66:fe:07:1f:9f:7b:b9: 22:0c:5f:0f:96:7d:f7:15:e4:d9:85:e5:05:85:97: 02:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:FE:AE:87:35:04:1F:A1:9E:55:70:02:E6:61:03:A3:1A:57:B6:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3742c3d-0322-3a63-976e-d2af0557724d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.201.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:79:f4:d8:b3:09:fd:f7:a0:34:7b:88:42:af:4b:67:02:29: da:c6:fc:b3:46:11:84:ca:d3:e3:1c:96:91:bd:58:0c:8c:65: 6a:24:90:44:a0:c2:6e:18:60:23:fb:3a:01:81:34:ff:d7:08: 64:a8:4a:b1:fd:5f:19:20:af:c4:8d:67:0e:bf:c4:54:96:ac: ba:46:d9:f7:12:48:af:18:de:9e:3d:f9:74:83:76:2d:2e:f4: 56:08:75:a0:7a:c4:f0:e9:d9:f8:99:61:4e:2d:28:c5:1d:09: cc:77:18:ba:f6:f4:ec:cc:30:1a:53:21:42:db:23:9f:d0:0d: ee:5a:eb:7d:9d:0b:85:2e:ed:2d:a0:7d:86:7f:7f:bd:4c:85: d0:ef:e3:53:c7:fd:61:39:d6:e4:c6:79:af:cb:1c:fc:80:81: 10:91:6d:3c:42:54:01:cd:6d:38:61:9b:e3:d1:32:b5:3f:f2: f6:42:b3:b4:a9:34:df:01:1d:fe:f9:06:25:34:5a:3e:04:2e: 53:70:aa:6f:25:8f:69:a6:de:0c:50:1b:d0:52:bb:67:57:07: 2c:de:38:37:32:e0:fe:42:51:4d:5f:7a:7e:31:f6:39:44:d8: 42:0d:c7:27:4d:3b:0c:25:68:19:0e:53:13:11:b1:1a:75:80: d6:56:ba:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqu2Pw5pzNm/+U4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YjBkZTA4NDctYmE0YS00ZTc4LWFkYzAtZjEyNjA2ZTVkMTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUYFwZCwvB/YXNmyECPr1qxY/1Pa+LT2aGOm dICEHVRLzd7Lw+5k4JDgI4llcEBFM/WYtDhDl3NOPOaeJihIa8yAEuaWKVeRVAle UQJhb2qIERQUhRg9drSz+RANiPYzuUbRWhRjWE8lcDSEEUojYwtdVDwMPGDVQece k/nl2i7WEuPDWwqmpgStV0Pxcnjx4qjbzaZhNMtdbJcIjdrojeLoxNOm081gjNPC g72VhC9QmY8Fn4+wFTn3yONsj1MZFAiqaTyf0pCYBiyJSYVGXK1aKJmtpDqJTcfj 6IPJw8FdC4+f8J0xSWb+Bx+fe7kiDF8Pln33FeTZheUFhZcCdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDH+roc1BB+hnlVwAuZhA6MaV7Y5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjM3NDJjM2QtMDMyMi0z YTYzLTk3NmUtZDJhZjA1NTc3MjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYsl2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJ59NizCf33oDR7iEKvS2cCKdrG/LNGEYTK0+MclpG9WAyMZWokkESg wm4YYCP7OgGBNP/XCGSoSrH9Xxkgr8SNZw6/xFSWrLpG2fcSSK8Y3p49+XSDdi0u 9FYIdaB6xPDp2fiZYU4tKMUdCcx3GLr29OzMMBpTIULbI5/QDe5a632dC4Uu7S2g fYZ/f71MhdDv41PH/WE51uTGea/LHPyAgRCRbTxCVAHNbThhm+PRMrU/8vZCs7Sp NN8BHf75BiU0Wj4ELlNwqm8lj2mm3gxQG9BSu2dXByzeODcy4P5CUU1fen4x9jlE 2EINxydNOwwlaBkOUxMRsRp1gNZWug0= -----END CERTIFICATE-----Generated at Tue Oct 21 19:24:54 2025 by rpki-client