$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c9bb404e-4ac4-32a4-9860-c7e60b872003.roa File: c9bb404e-4ac4-32a4-9860-c7e60b872003.roa (raw, json) Hash identifier: 06OgLANWlF46A8yBp0p52vfQ+fqFT8jwsiRXc9Tz4is= Subject key identifier: 4C:62:E8:F9:E8:11:6F:9D:F8:1A:CA:7E:41:93:2D:16:0D:BE:E5:37 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8F8E414C484030BF8C680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c9bb404e-4ac4-32a4-9860-c7e60b872003.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 98.243.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:f8:e4:14:c4:84:03:0b:f8:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=1fc0d9f8-0347-46a9-a91e-772ff69c9764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:58:16:e6:d6:25:06:f1:9d:c2:ab:89:34:01: dc:36:ce:ac:ab:00:ea:6a:a0:c3:76:e2:98:94:6a: b0:cb:00:5c:7b:61:6d:af:e9:52:c5:80:fc:0a:10: d4:75:42:12:79:84:22:19:16:b4:8b:78:59:e0:98: 6e:2e:e8:60:d6:78:fa:39:39:93:54:dc:c8:42:a1: 0e:4b:71:7a:5f:47:3d:31:f4:18:e7:56:e9:ee:8d: 49:41:69:ce:d3:db:25:c8:fc:f5:58:2f:15:7b:e5: 8d:1e:99:8f:72:cc:2b:f7:b5:65:82:4d:c2:c1:5b: 71:fc:4f:5c:f6:04:2e:1e:26:0c:6d:c0:4c:2a:20: 69:ab:27:28:b0:04:e1:46:d1:4d:cb:e9:96:7e:85: e7:1d:07:fd:46:bd:ca:ba:b8:ce:66:ab:75:12:85: 0c:88:5a:20:b1:82:8b:67:fe:e6:f7:cf:c0:3c:e1: 4d:4c:dd:c5:b9:60:a8:3a:06:1a:6a:71:8c:e8:0f: 14:03:9b:9b:dd:b8:c5:36:25:bd:c7:b8:43:f4:75: f4:45:94:49:cb:d2:2c:7e:1e:ad:60:17:ff:92:f9: c9:27:7e:c8:51:5e:3b:c4:7b:e9:03:f9:f4:83:1e: c3:78:65:7f:46:4f:0c:a1:73:d9:60:c3:04:b4:54: 76:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:62:E8:F9:E8:11:6F:9D:F8:1A:CA:7E:41:93:2D:16:0D:BE:E5:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c9bb404e-4ac4-32a4-9860-c7e60b872003.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.243.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:85:d0:ea:6e:00:02:d7:49:cb:15:36:45:cb:11:99:69:b1: e7:57:3d:e7:68:86:08:24:47:96:a9:87:32:aa:d8:4e:f2:5c: 68:a1:d5:b0:fb:27:eb:d3:a4:99:13:e7:0c:6d:da:7b:fc:c7: e2:ad:a1:f2:1f:6b:12:cc:64:bf:8d:b6:8b:eb:a1:b8:04:52: e7:9b:16:b6:92:6a:eb:95:8a:dc:c2:a5:3e:1f:67:1f:6f:41: f6:f1:14:6e:b7:1a:e9:5b:90:4f:a5:14:80:18:e5:58:23:ad: 68:7f:f6:c7:17:a3:ce:0e:a8:10:80:8f:22:6d:19:6d:6f:8f: 59:9e:38:5e:f3:be:e1:d1:e9:6f:0e:ba:62:73:e6:19:3d:8a: df:c2:a1:99:24:60:44:c3:d2:8d:07:ba:fc:0b:4d:0b:13:f6: b8:8f:dd:e5:a6:2d:ec:19:64:7c:11:ee:f6:47:b2:f7:ca:3c: e6:e8:db:bd:37:7d:15:59:6a:ba:32:43:bc:84:b3:f3:cb:88: 3a:14:4d:a1:98:73:68:60:15:f2:54:d0:b2:12:65:5c:b2:ba: 58:c0:4c:b6:b2:9a:4d:16:58:fd:5b:de:2a:8a:5c:d8:22:db: 9c:3c:b9:78:41:ef:e8:8e:e5:e5:68:d6:94:a9:e9:13:e3:0c: 0a:5b:a0:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqPjkFMSEAwv4xoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MWZjMGQ5ZjgtMDM0Ny00NmE5LWE5MWUtNzcyZmY2OWM5NzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1gW5tYlBvGdwquJNAHcNs6sqwDqaqDDduKY lGqwywBce2Ftr+lSxYD8ChDUdUISeYQiGRa0i3hZ4JhuLuhg1nj6OTmTVNzIQqEO S3F6X0c9MfQY51bp7o1JQWnO09slyPz1WC8Ve+WNHpmPcswr97Vlgk3CwVtx/E9c 9gQuHiYMbcBMKiBpqycosAThRtFNy+mWfoXnHQf9Rr3KurjOZqt1EoUMiFogsYKL Z/7m98/APOFNTN3FuWCoOgYaanGM6A8UA5ub3bjFNiW9x7hD9HX0RZRJy9Isfh6t YBf/kvnJJ37IUV47xHvpA/n0gx7DeGV/Rk8MoXPZYMMEtFR2YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExi6PnoEW+d+BrKfkGTLRYNvuU3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzliYjQwNGUtNGFjNC0z MmE0LTk4NjAtYzdlNjBiODcyMDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYvNYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL+F0OpuAALXScsVNkXLEZlpsedXPedohggkR5aphzKq2E7yXGih1bD7 J+vTpJkT5wxt2nv8x+KtofIfaxLMZL+NtovrobgEUuebFraSauuVitzCpT4fZx9v QfbxFG63GulbkE+lFIAY5VgjrWh/9scXo84OqBCAjyJtGW1vj1meOF7zvuHR6W8O umJz5hk9it/CoZkkYETD0o0HuvwLTQsT9riP3eWmLewZZHwR7vZHsvfKPObo2703 fRVZaroyQ7yEs/PLiDoUTaGYc2hgFfJU0LISZVyyuljATLaymk0WWP1b3iqKXNgi 25w8uXhB7+iO5eVo1pSp6RPjDApboPY= -----END CERTIFICATE-----Generated at Tue Oct 21 19:21:29 2025 by rpki-client