$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf34d13a-f78c-3a9a-96e4-6d229c0d4bc9.roa File: bf34d13a-f78c-3a9a-96e4-6d229c0d4bc9.roa (raw, json) Hash identifier: yKV6M8C59Mujdx+WdWa9K07/DRt/tCp8mmYzNpzBMQw= Subject key identifier: 38:AE:D9:E3:06:D6:0B:08:99:69:61:DC:1F:8E:55:69:C8:41:97:D8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AAE7663A390802ED609880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf34d13a-f78c-3a9a-96e4-6d229c0d4bc9.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 98.199.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:e7:66:3a:39:08:02:ed:60:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=d87440a2-b335-4f8b-925b-5ca5eef5a915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:dc:7f:c9:17:27:4a:bc:14:3c:ed:c6:aa:36: b7:ed:ff:f4:c7:39:0b:3b:c8:0a:ef:b5:29:79:45: 36:51:7c:2f:55:80:3c:8d:1a:be:bf:f4:65:9e:bd: fe:dc:94:92:c8:87:70:e3:02:f2:41:7f:60:e5:0a: bf:9d:8e:63:48:62:fb:26:f1:51:86:3e:26:dc:7b: 47:de:77:af:f2:30:e0:80:d0:72:f7:fe:c1:20:e8: 76:87:d1:29:89:f0:31:60:96:92:fa:da:35:cb:3f: 87:04:65:6b:ee:08:c5:8e:78:9f:89:3b:81:41:c4: 31:2d:40:3d:64:74:56:55:69:b6:10:cc:4c:ce:18: cf:f6:d8:a9:40:3f:14:05:7b:a4:50:e3:08:82:0e: 0b:ae:4f:ca:2f:1d:b7:db:b6:43:16:a8:71:94:ef: 09:e7:90:7c:0d:ec:07:2b:97:3c:99:39:3f:91:6f: 7b:ee:83:7d:25:73:e3:59:25:ff:f3:83:84:9d:7e: dd:f6:e3:7b:2c:d0:16:af:66:9c:91:3a:f9:d0:c3: 3a:ec:4a:8c:6b:af:07:1e:69:46:12:cb:9f:e4:a4: 3b:3a:31:58:74:e3:81:3a:04:80:6c:8f:79:b0:42: b1:fc:c6:e7:74:21:8d:01:92:8b:cf:51:f8:55:03: 45:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:AE:D9:E3:06:D6:0B:08:99:69:61:DC:1F:8E:55:69:C8:41:97:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf34d13a-f78c-3a9a-96e4-6d229c0d4bc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.199.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:92:4b:ab:a7:fb:6b:26:cc:e0:8f:0f:d8:7c:82:91:f3:26: ac:5d:9c:1f:f5:83:56:e8:b1:75:bb:06:e0:7d:f3:bb:de:0c: 88:f4:62:94:1d:67:7f:2c:85:1c:2c:60:f3:18:9c:c8:b0:21: 35:08:90:01:16:2e:f1:46:e7:ff:d8:43:22:46:e0:21:de:b7: 03:36:f1:43:c1:51:8b:4b:39:a1:79:25:3f:1c:94:d1:77:30: ec:14:13:a1:8a:92:37:53:2f:57:86:b4:63:a8:f4:5d:b3:7b: 17:54:70:c0:a6:bc:f2:48:b9:31:ed:94:2c:e2:b9:d8:e3:33: e6:5c:c7:06:e9:ee:4f:12:4d:fc:ad:a2:3e:f9:21:3b:a3:ec: e3:34:dc:05:d4:0f:d3:58:d1:44:48:c9:f3:b1:e2:40:04:b1: e0:37:8e:df:d6:9b:33:6b:9f:b3:52:91:ee:8b:3c:c7:ba:f4: 73:e6:2e:e6:11:39:d9:a5:13:5d:98:ae:a0:0c:bd:e8:17:d2: 63:be:bd:98:75:2f:98:9c:fd:54:b6:6d:78:d5:72:65:18:eb: 63:71:e4:a5:b9:22:da:24:44:57:25:1b:ad:25:d8:80:4e:da: d7:b2:73:65:eb:cb:ba:fb:1f:6e:97:14:a5:eb:b0:60:c4:95: 10:37:6a:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqudmOjkIAu1gmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZDg3NDQwYTItYjMzNS00ZjhiLTkyNWItNWNhNWVlZjVhOTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9x/yRcnSrwUPO3Gqja37f/0xzkLO8gK77Up eUU2UXwvVYA8jRq+v/Rlnr3+3JSSyIdw4wLyQX9g5Qq/nY5jSGL7JvFRhj4m3HtH 3nev8jDggNBy9/7BIOh2h9EpifAxYJaS+to1yz+HBGVr7gjFjnifiTuBQcQxLUA9 ZHRWVWm2EMxMzhjP9tipQD8UBXukUOMIgg4Lrk/KLx2327ZDFqhxlO8J55B8DewH K5c8mTk/kW977oN9JXPjWSX/84OEnX7d9uN7LNAWr2ackTr50MM67EqMa68HHmlG Esuf5KQ7OjFYdOOBOgSAbI95sEKx/MbndCGNAZKLz1H4VQNFqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDiu2eMG1gsImWlh3B+OVWnIQZfYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmYzNGQxM2EtZjc4Yy0z YTlhLTk2ZTQtNmQyMjljMGQ0YmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYsfUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ2SS6un+2smzOCPD9h8gpHzJqxdnB/1g1bosXW7BuB987veDIj0YpQd Z38shRwsYPMYnMiwITUIkAEWLvFG5//YQyJG4CHetwM28UPBUYtLOaF5JT8clNF3 MOwUE6GKkjdTL1eGtGOo9F2zexdUcMCmvPJIuTHtlCziudjjM+Zcxwbp7k8STfyt oj75ITuj7OM03AXUD9NY0URIyfOx4kAEseA3jt/WmzNrn7NSke6LPMe69HPmLuYR OdmlE12YrqAMvegX0mO+vZh1L5ic/VS2bXjVcmUY62Nx5KW5ItokRFclG60l2IBO 2teyc2Xry7r7H26XFKXrsGDElRA3ajg= -----END CERTIFICATE-----Generated at Wed Oct 22 00:20:31 2025 by rpki-client