$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be035c66-9ecb-39bf-884c-1f3e325d4bf0.roa File: be035c66-9ecb-39bf-884c-1f3e325d4bf0.roa (raw, json) Hash identifier: oocaIwqdlXmYRFd1yvJ63QXt3W+pDH+6Km4mukknx9c= Subject key identifier: D9:37:FB:AA:54:CA:42:17:D6:FD:2F:F1:D9:BA:1A:3F:C4:EF:E3:6C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8F15A39C29A479C79BB00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be035c66-9ecb-39bf-884c-1f3e325d4bf0.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 98.209.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:f1:5a:39:c2:9a:47:9c:79:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=fed91642-b17b-4c92-8ef1-d25d1c91de49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d8:79:32:68:e1:2b:a2:46:6f:8a:e4:d9:a7: 16:94:22:9a:fe:0c:bf:62:a5:47:e9:ea:26:c3:c7: 01:43:81:9c:5c:43:fe:73:2d:89:07:7c:d4:43:0b: 5c:6c:50:0c:ec:54:4d:0a:75:07:60:a5:09:85:0a: c3:34:6e:5b:bf:6e:88:fc:cb:0c:33:70:3f:25:c3: 94:4e:bd:4a:b7:1d:5f:45:47:06:d1:8c:9c:bc:20: d0:46:46:35:18:42:6c:b9:c6:b4:ce:c5:ac:83:47: ca:e8:bf:fa:5e:10:2f:8f:00:60:1f:fc:5e:aa:31: cf:1f:53:c9:52:56:bc:a1:1d:b7:df:e7:81:93:21: 9b:06:fa:a2:bd:2d:c4:6c:7d:b4:c3:74:d8:57:dd: 4c:7e:82:ec:a1:97:26:cc:94:77:a6:00:3f:34:be: 6d:07:33:77:26:7d:32:2b:9e:03:bb:25:b0:36:72: 46:33:fd:82:b8:63:74:ac:79:c6:4a:1a:30:e7:29: 4d:e7:1d:ad:9f:4c:eb:69:14:31:be:0a:8d:5c:af: c4:67:22:da:3a:8b:ef:be:14:bb:31:7d:4b:2c:5f: 64:35:d7:38:19:20:84:32:ee:cf:61:d8:b7:c2:bb: 2c:2c:4f:a7:3a:fe:71:b8:d5:ad:24:f2:f8:b8:1b: 84:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:37:FB:AA:54:CA:42:17:D6:FD:2F:F1:D9:BA:1A:3F:C4:EF:E3:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be035c66-9ecb-39bf-884c-1f3e325d4bf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.209.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:77:2d:3e:65:d3:a8:a5:a2:b9:b5:9f:05:94:f6:7d:05:53: 1b:3a:b6:f8:ba:b9:ec:97:ea:9e:ca:e5:c3:6c:46:c9:81:5b: a4:27:96:05:2b:3e:85:2a:a4:de:fa:95:72:f6:22:b2:73:77: 67:9c:2d:c3:c5:68:1c:7f:3c:5f:d7:f9:d1:b4:43:a8:20:93: 4d:1d:30:f2:95:9d:62:2d:04:31:91:1e:af:22:d6:7c:21:2c: 9e:08:f0:33:f6:28:ff:99:4a:77:ad:54:f3:34:12:70:06:b0: fe:96:9b:a2:9e:7d:34:bf:c0:e0:89:2d:67:d5:f5:41:53:74: 0e:72:72:cc:bc:fb:67:86:d7:9e:cc:ec:44:c0:57:76:a3:26: 70:a8:37:ad:73:0b:bb:af:8f:b2:92:91:fc:20:aa:be:46:4f: af:49:eb:df:25:43:4b:8a:8d:60:8c:4f:6f:18:ef:9c:b1:f9: 6a:52:5c:ee:13:28:83:d0:84:81:cd:4c:a8:84:7b:bf:aa:11: 7d:d6:67:b7:83:40:6c:01:33:49:8e:58:9b:9e:7e:30:92:fb: e5:f6:54:d1:39:0e:56:ed:ac:4d:a0:b4:0e:82:1b:71:23:ae: 14:e4:12:70:aa:bf:a0:ea:e4:dd:7f:07:f8:60:cf:9d:56:f0: 24:2d:54:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqPFaOcKaR5x5uwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZmVkOTE2NDItYjE3Yi00YzkyLThlZjEtZDI1ZDFjOTFkZTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNh5MmjhK6JGb4rk2acWlCKa/gy/YqVH6eom w8cBQ4GcXEP+cy2JB3zUQwtcbFAM7FRNCnUHYKUJhQrDNG5bv26I/MsMM3A/JcOU Tr1Ktx1fRUcG0YycvCDQRkY1GEJsuca0zsWsg0fK6L/6XhAvjwBgH/xeqjHPH1PJ Ula8oR233+eBkyGbBvqivS3EbH20w3TYV91MfoLsoZcmzJR3pgA/NL5tBzN3Jn0y K54DuyWwNnJGM/2CuGN0rHnGShow5ylN5x2tn0zraRQxvgqNXK/EZyLaOovvvhS7 MX1LLF9kNdc4GSCEMu7PYdi3wrssLE+nOv5xuNWtJPL4uBuE2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNk3+6pUykIX1v0v8dm6Gj/E7+NsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmUwMzVjNjYtOWVjYi0z OWJmLTg4NGMtMWYzZTMyNWQ0YmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYtGBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEV3LT5l06ilorm1nwWU9n0FUxs6tvi6ueyX6p7K5cNsRsmBW6QnlgUr PoUqpN76lXL2IrJzd2ecLcPFaBx/PF/X+dG0Q6ggk00dMPKVnWItBDGRHq8i1nwh LJ4I8DP2KP+ZSnetVPM0EnAGsP6Wm6KefTS/wOCJLWfV9UFTdA5ycsy8+2eG157M 7ETAV3ajJnCoN61zC7uvj7KSkfwgqr5GT69J698lQ0uKjWCMT28Y75yx+WpSXO4T KIPQhIHNTKiEe7+qEX3WZ7eDQGwBM0mOWJuefjCS++X2VNE5DlbtrE2gtA6CG3Ej rhTkEnCqv6Dq5N1/B/hgz51W8CQtVEY= -----END CERTIFICATE-----Generated at Wed Oct 22 00:29:02 2025 by rpki-client