$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d52477c7-0794-341d-9941-964a023be6a1.roa File: d52477c7-0794-341d-9941-964a023be6a1.roa (raw, json) Hash identifier: egOb55rfoO3wHn1KsjF+DYGwaWnLsh6wZBgJ4Q1YlW4= Subject key identifier: 61:8B:44:67:3C:5A:6F:FB:F5:9A:68:1C:94:68:19:40:DC:FF:5F:AB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A94D87DDE398F0A0B6E100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d52477c7-0794-341d-9941-964a023be6a1.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 98.39.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:4d:87:dd:e3:98:f0:a0:b6:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=49f30c3e-fb00-42be-ba2b-21a9fcc69f26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b0:1a:0c:9d:e4:dc:22:4d:cd:f6:db:e1:eb: 2f:aa:9a:14:e2:40:a1:28:22:a2:40:dc:8a:72:cb: e5:41:52:9a:a8:47:cd:d9:28:80:18:82:0f:5f:9c: 7d:7d:61:1c:65:b7:2f:de:a0:9a:f2:bb:b7:36:50: 48:62:58:2d:a0:e8:3a:95:fb:2f:03:40:11:f9:12: b3:f9:32:d2:5c:97:b8:5d:d1:e6:10:c4:d2:a8:42: 49:dd:ab:2f:5c:db:0e:78:00:57:c9:a9:00:51:45: 45:c2:f9:ee:07:16:cd:c1:af:d6:33:8b:75:01:cd: 42:19:4d:28:4d:df:6f:99:19:6d:b5:fa:c1:0b:14: 7d:bd:f7:58:7d:27:7d:9b:65:5b:38:f2:80:d6:12: aa:49:44:f1:e0:aa:94:65:32:71:99:b2:4f:55:6e: 41:bf:e8:d7:69:39:50:6c:32:98:98:94:b2:47:2c: c8:91:7d:fe:e9:59:77:21:12:cd:35:57:9d:b3:e4: 6a:65:a1:d7:c5:29:67:22:8f:3c:9b:82:a3:9b:3c: 0d:23:14:6d:80:29:2e:17:93:bc:07:ae:02:ab:a5: e3:eb:0f:a3:c3:96:4d:7d:ee:b2:42:cd:21:2e:30: 32:64:31:c5:17:ee:16:93:de:30:e9:d5:f4:be:b3: 64:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:8B:44:67:3C:5A:6F:FB:F5:9A:68:1C:94:68:19:40:DC:FF:5F:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d52477c7-0794-341d-9941-964a023be6a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.39.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:b5:e8:e1:a9:6d:8b:2e:dd:73:c9:f7:69:8b:9f:ec:0e:a1: 51:28:c6:6a:09:ee:54:13:55:67:a4:bf:e0:a8:11:f3:5d:df: 86:10:b3:00:5a:ad:b2:65:77:ca:d3:8b:ad:5a:00:36:73:38: 8a:94:b4:80:9f:ea:8c:36:db:85:1f:32:84:0d:ae:ce:2e:9b: 59:13:35:cb:73:cc:a4:29:6b:72:2d:e1:ac:d4:78:6e:84:cc: 27:6f:75:e3:01:d2:9d:bd:62:69:8f:88:48:45:24:46:0a:28: 26:26:14:05:42:bb:24:5c:5a:4b:d8:d6:e5:35:4e:4f:5e:62: 32:f6:05:77:46:12:6c:3c:3c:aa:71:f5:e1:09:95:7c:ed:d6: d3:91:05:dd:a5:80:d0:a3:9b:fe:f8:2f:d1:6a:c0:55:b5:0f: 2a:0b:a2:df:9e:be:9d:9b:bc:34:83:af:c4:91:53:68:2c:1e: 30:12:71:fa:b1:85:ce:dc:18:de:64:15:9a:7d:ff:13:12:02: 3b:99:72:74:9a:20:e2:be:a6:aa:38:65:e9:8c:7f:fd:d7:8f: 4d:90:63:03:c2:27:14:ae:cb:ae:ab:8f:81:39:9b:1c:51:7c: 32:49:1a:64:01:2f:e8:bf:bc:98:45:8f:59:65:3f:f2:89:c0: c2:ac:63:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqU2H3eOY8KC24QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NDlmMzBjM2UtZmIwMC00MmJlLWJhMmItMjFhOWZjYzY5ZjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7AaDJ3k3CJNzfbb4esvqpoU4kChKCKiQNyK csvlQVKaqEfN2SiAGIIPX5x9fWEcZbcv3qCa8ru3NlBIYlgtoOg6lfsvA0AR+RKz +TLSXJe4XdHmEMTSqEJJ3asvXNsOeABXyakAUUVFwvnuBxbNwa/WM4t1Ac1CGU0o Td9vmRlttfrBCxR9vfdYfSd9m2VbOPKA1hKqSUTx4KqUZTJxmbJPVW5Bv+jXaTlQ bDKYmJSyRyzIkX3+6Vl3IRLNNVeds+RqZaHXxSlnIo88m4KjmzwNIxRtgCkuF5O8 B64Cq6Xj6w+jw5ZNfe6yQs0hLjAyZDHFF+4Wk94w6dX0vrNkfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGGLRGc8Wm/79ZpoHJRoGUDc/1+rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDUyNDc3YzctMDc5NC0z NDFkLTk5NDEtOTY0YTAyM2JlNmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYic6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKm16OGpbYsu3XPJ92mLn+wOoVEoxmoJ7lQTVWekv+CoEfNd34YQswBa rbJld8rTi61aADZzOIqUtICf6ow224UfMoQNrs4um1kTNctzzKQpa3It4azUeG6E zCdvdeMB0p29YmmPiEhFJEYKKCYmFAVCuyRcWkvY1uU1Tk9eYjL2BXdGEmw8PKpx 9eEJlXzt1tORBd2lgNCjm/74L9FqwFW1DyoLot+evp2bvDSDr8SRU2gsHjAScfqx hc7cGN5kFZp9/xMSAjuZcnSaIOK+pqo4ZemMf/3Xj02QYwPCJxSuy66rj4E5mxxR fDJJGmQBL+i/vJhFj1llP/KJwMKsYwk= -----END CERTIFICATE-----Generated at Wed Oct 22 00:24:39 2025 by rpki-client