$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cee76142-0e1f-38aa-9032-568c60a4f66e.roa File: cee76142-0e1f-38aa-9032-568c60a4f66e.roa (raw, json) Hash identifier: Yh7FBCAlP+Nw00UTSwSWO4tm0oDl5AwmYho8rSCuvfg= Subject key identifier: DD:30:0C:78:D6:8E:93:35:2F:96:A9:96:23:94:13:35:F0:A2:F1:CC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A945086A1428F4AF5AD980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cee76142-0e1f-38aa-9032-568c60a4f66e.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 98.199.62.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:45:08:6a:14:28:f4:af:5a:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=cdb9883d-f918-4cca-b2c8-d4ea708aa01c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a1:72:34:48:05:f2:be:9f:0c:79:ef:ad:a0: 17:fc:61:e1:09:d9:eb:25:19:e9:e0:e3:cb:8e:78: d7:b9:81:31:8d:16:e7:4c:b8:fe:f4:fc:6a:92:d9: 7b:56:37:3a:87:59:27:f1:56:56:65:1e:ad:81:c8: 1e:3e:6d:1e:8f:3e:d2:e9:f6:9b:98:11:bb:2c:22: 49:e8:17:6a:a8:f5:05:0b:51:0c:ba:37:de:dc:4c: 1a:19:be:c3:1b:1e:6a:37:29:0c:69:a3:ea:fe:bc: c2:34:c4:98:bd:66:69:5e:29:40:2e:18:3f:94:70: 75:72:cb:5f:22:bd:c2:86:e0:cf:16:6c:2a:63:4f: 50:db:37:89:d6:af:8c:19:19:2d:b2:61:de:39:a5: 39:4d:cf:e0:29:d1:99:1e:a0:5a:4d:74:21:ef:2c: a0:09:c3:a3:5c:5e:21:3e:aa:95:27:75:0b:58:ad: e5:9d:75:2a:b4:e6:d5:25:08:63:99:79:28:dd:a0: fa:ac:10:49:33:7f:be:f4:f7:03:bc:c5:b7:19:90: 8e:34:30:dd:0a:7d:fb:66:cb:63:59:7e:5c:41:97: f4:5b:07:22:e1:5b:72:20:bb:66:b2:09:0f:ac:7e: 27:c8:d8:89:ba:a0:44:9c:c2:e8:67:97:12:ef:f9: 54:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:30:0C:78:D6:8E:93:35:2F:96:A9:96:23:94:13:35:F0:A2:F1:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cee76142-0e1f-38aa-9032-568c60a4f66e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.199.62.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:8e:f1:2c:72:ba:65:42:a4:6e:58:09:7b:e0:45:c4:2b:13: 47:50:ba:8d:5c:5b:27:02:46:72:b6:c0:69:ca:6f:78:91:66: 93:e0:40:4d:8c:09:c7:33:d1:df:e4:ec:ac:78:8b:cf:c7:37: da:6b:2d:28:98:61:22:22:6e:1b:e7:15:6a:49:20:9f:9d:41: e7:b4:df:bb:cc:17:c1:df:fb:54:23:a6:d3:61:60:83:bc:42: 51:67:fe:3a:f8:20:1e:a3:c4:1d:89:b7:42:11:96:66:75:b3: 99:7d:80:d5:10:3b:43:40:6c:14:4d:a0:1d:10:eb:38:1c:3c: ae:04:8d:ce:74:30:1d:0b:56:41:af:84:ff:7d:a6:1e:9a:62: 0c:b6:c2:85:f7:1e:a5:be:d2:76:92:65:e6:80:60:98:06:67: bd:6e:f9:81:52:8b:0b:4e:f5:6b:f0:65:87:a2:a1:76:51:0e: 28:a8:67:8a:b9:b1:97:41:a6:42:20:96:e6:c2:4c:a3:67:a3: dc:0d:21:26:45:89:0e:6c:99:93:f3:53:89:fe:c2:0b:76:45: 35:35:5f:ef:61:69:b6:19:d1:40:64:1b:c4:75:26:8f:b6:bb: b3:bd:94:9c:45:16:50:c7:a8:ef:99:4b:ef:86:f5:d0:09:dc: ef:52:73:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqUUIahQo9K9a2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk Y2RiOTg4M2QtZjkxOC00Y2NhLWIyYzgtZDRlYTcwOGFhMDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqFyNEgF8r6fDHnvraAX/GHhCdnrJRnp4OPL jnjXuYExjRbnTLj+9Pxqktl7Vjc6h1kn8VZWZR6tgcgePm0ejz7S6fabmBG7LCJJ 6BdqqPUFC1EMujfe3EwaGb7DGx5qNykMaaPq/rzCNMSYvWZpXilALhg/lHB1cstf Ir3ChuDPFmwqY09Q2zeJ1q+MGRktsmHeOaU5Tc/gKdGZHqBaTXQh7yygCcOjXF4h PqqVJ3ULWK3lnXUqtObVJQhjmXko3aD6rBBJM3++9PcDvMW3GZCONDDdCn37Zstj WX5cQZf0Wwci4VtyILtmsgkPrH4nyNiJuqBEnMLoZ5cS7/lUDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0wDHjWjpM1L5apliOUEzXwovHMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2VlNzYxNDItMGUxZi0z OGFhLTkwMzItNTY4YzYwYTRmNjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYsc+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiO8SxyumVCpG5YCXvgRcQrE0dQuo1cWycCRnK2wGnKb3iRZpPgQE2M Cccz0d/k7Kx4i8/HN9prLSiYYSIibhvnFWpJIJ+dQee037vMF8Hf+1QjptNhYIO8 QlFn/jr4IB6jxB2Jt0IRlmZ1s5l9gNUQO0NAbBRNoB0Q6zgcPK4Ejc50MB0LVkGv hP99ph6aYgy2woX3HqW+0naSZeaAYJgGZ71u+YFSiwtO9WvwZYeioXZRDiioZ4q5 sZdBpkIglubCTKNno9wNISZFiQ5smZPzU4n+wgt2RTU1X+9habYZ0UBkG8R1Jo+2 u7O9lJxFFlDHqO+ZS++G9dAJ3O9Sc+k= -----END CERTIFICATE-----Generated at Tue Oct 21 22:19:23 2025 by rpki-client