$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d15ee8b1-bb96-390f-824e-61166adfaf67.roa File: d15ee8b1-bb96-390f-824e-61166adfaf67.roa (raw, json) Hash identifier: /FBuuPDHnYfZT5djwSn4DZTRsJw9SdrOi8CD8BKnz/4= Subject key identifier: 3B:A5:64:46:42:77:F6:28:A8:00:C4:BF:34:D1:B3:89:32:5C:F7:B9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AAE785ABF1F35169C4B440 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d15ee8b1-bb96-390f-824e-61166adfaf67.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 98.199.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:e7:85:ab:f1:f3:51:69:c4:b4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=b44f5bd8-22c4-49cb-98d1-e580bb01efc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bb:75:68:1d:c2:44:cf:3d:ba:3f:49:0a:68: be:c2:c1:6f:b1:05:59:0b:f9:a7:6a:49:da:13:99: ff:6c:53:5e:68:6c:f6:da:18:9a:66:d7:42:d2:bf: 93:84:1e:af:c7:bc:6f:86:74:33:bb:b0:f4:97:a0: 7c:c3:24:43:b2:98:49:ab:a4:4c:af:4b:c4:28:30: 7e:05:a9:7d:96:d7:fe:b8:54:ea:8a:c1:47:95:75: d8:08:e3:d9:18:bc:05:ac:87:4a:34:87:43:1a:85: 7f:93:89:26:0b:cb:ce:0b:80:e6:cb:fa:7a:e5:1e: a0:76:6f:40:72:0a:78:27:c6:4c:41:a4:19:29:d4: 11:89:de:25:f8:f8:c1:5f:39:2c:89:8a:f7:7c:c2: 6f:53:a2:31:8a:6e:fd:3a:0d:52:c6:02:ea:04:af: 8f:c7:43:92:21:ae:49:58:d9:48:38:d7:44:29:46: 85:29:ff:20:ed:60:67:d4:75:c3:28:34:ed:14:7a: 21:1b:40:93:18:95:68:2d:1e:7c:81:21:85:95:c5: a2:d8:c2:90:fd:99:ab:9d:b5:a3:62:41:0a:43:1a: 89:a5:3c:f8:ed:4d:9f:85:87:d1:85:fa:53:62:ab: 90:5a:9f:01:dd:ef:f7:ca:76:a7:b0:dd:f1:e3:08: e9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:A5:64:46:42:77:F6:28:A8:00:C4:BF:34:D1:B3:89:32:5C:F7:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d15ee8b1-bb96-390f-824e-61166adfaf67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.199.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:85:35:ff:35:5a:68:6e:4f:b0:53:17:0a:91:dd:68:b7:23: e8:58:ce:0f:5f:e3:0c:a8:0d:05:53:30:b2:50:2c:f5:d6:e6: 8a:d3:f4:14:68:53:f7:82:47:ec:48:b8:00:55:fe:48:7a:af: 0c:fa:19:b8:67:d1:a6:83:ae:6e:52:dd:ff:ba:ef:95:5d:ed: 34:b3:49:99:3f:4b:d2:b8:20:60:ea:7e:55:00:fb:39:2f:66: fc:8e:d5:8a:25:a7:f0:66:ad:0b:a6:ba:1f:57:11:d7:83:b7: f0:27:6a:b3:41:e8:9c:9e:33:3c:66:65:b6:58:ff:a9:20:5d: d9:c3:c4:72:5e:06:e3:e4:19:e8:5b:38:47:43:51:57:18:95: 2b:4a:7c:b5:61:23:7b:68:22:fc:35:4e:c3:cb:bb:32:d6:44: fb:03:fe:4c:eb:eb:c1:58:b6:1a:d9:60:98:ab:66:cb:e8:2b: d5:4c:64:d7:25:ad:c6:fc:a6:0f:5c:f7:1f:c4:a4:c2:a8:d2: 41:d2:a0:c1:92:c6:20:d8:0f:49:36:7b:78:25:a0:a7:6d:ac: 51:68:1b:bc:a8:36:53:e6:ab:4a:e5:dd:d6:83:5d:02:3c:0d: ca:dc:f8:6a:d7:90:85:aa:ae:39:05:ad:2f:b5:5d:9c:a2:db: 29:14:93:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqueFq/HzUWnEtEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YjQ0ZjViZDgtMjJjNC00OWNiLTk4ZDEtZTU4MGJiMDFlZmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7t1aB3CRM89uj9JCmi+wsFvsQVZC/mnakna E5n/bFNeaGz22hiaZtdC0r+ThB6vx7xvhnQzu7D0l6B8wyRDsphJq6RMr0vEKDB+ Bal9ltf+uFTqisFHlXXYCOPZGLwFrIdKNIdDGoV/k4kmC8vOC4Dmy/p65R6gdm9A cgp4J8ZMQaQZKdQRid4l+PjBXzksiYr3fMJvU6Ixim79Og1SxgLqBK+Px0OSIa5J WNlIONdEKUaFKf8g7WBn1HXDKDTtFHohG0CTGJVoLR58gSGFlcWi2MKQ/ZmrnbWj YkEKQxqJpTz47U2fhYfRhfpTYquQWp8B3e/3ynansN3x4wjpowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDulZEZCd/YoqADEvzTRs4kyXPe5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDE1ZWU4YjEtYmI5Ni0z OTBmLTgyNGUtNjExNjZhZGZhZjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYsfcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOFNf81WmhuT7BTFwqR3Wi3I+hYzg9f4wyoDQVTMLJQLPXW5orT9BRo U/eCR+xIuABV/kh6rwz6Gbhn0aaDrm5S3f+675Vd7TSzSZk/S9K4IGDqflUA+zkv ZvyO1Yolp/BmrQumuh9XEdeDt/AnarNB6JyeMzxmZbZY/6kgXdnDxHJeBuPkGehb OEdDUVcYlStKfLVhI3toIvw1TsPLuzLWRPsD/kzr68FYthrZYJirZsvoK9VMZNcl rcb8pg9c9x/EpMKo0kHSoMGSxiDYD0k2e3gloKdtrFFoG7yoNlPmq0rl3daDXQI8 Dcrc+GrXkIWqrjkFrS+1XZyi2ykUk6I= -----END CERTIFICATE-----Generated at Tue Oct 21 19:39:22 2025 by rpki-client