$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc2ca973-bc34-3d2b-af18-8957072c327b.roa File: dc2ca973-bc34-3d2b-af18-8957072c327b.roa (raw, json) Hash identifier: 6vzSITMlzlQDjr+THTMI5apWBdYFp9W9yRt+REKqjA8= Subject key identifier: 3C:D7:81:C2:91:2E:2C:75:F1:5D:F1:42:E5:9A:C8:24:9A:AD:DD:DB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AAE6491C23F886193D9080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc2ca973-bc34-3d2b-af18-8957072c327b.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 98.199.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:e6:49:1c:23:f8:86:19:3d:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=af01e3c7-adae-4a8f-b297-bca5710e5817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:af:4c:4a:0e:55:34:7b:10:e1:c5:c8:21:2b: d2:d3:a1:8d:a6:79:83:ca:db:75:f8:af:62:80:89: 59:af:4f:6c:b4:b7:24:2a:1f:16:db:33:e7:07:0c: 9b:44:ef:d3:e7:78:8f:bc:0f:58:2c:85:6a:84:34: d6:e7:e3:87:bd:3d:73:96:33:8c:69:21:c4:8f:a1: 9f:da:17:10:37:d3:2c:27:4f:bb:75:da:9f:b9:b7: ac:bf:18:08:f1:a4:97:45:66:ea:0a:27:8f:77:d6: d1:82:ff:15:4e:64:ca:51:bb:a8:99:e1:bb:15:77: 8d:94:61:c5:9c:1b:7c:45:26:b3:af:4f:e4:23:6d: 17:b6:1f:b1:7a:fa:f5:5a:aa:44:ce:37:11:a6:a9: 79:eb:99:31:d6:e3:59:73:00:0b:67:aa:29:31:70: 13:06:f7:1d:e2:f3:e9:21:a3:69:22:cb:8c:a7:bd: 32:f4:74:c7:71:10:6e:17:82:b8:37:fc:15:62:8c: 48:9c:f4:db:94:fe:17:d2:77:27:64:39:ad:5a:4b: 38:b9:61:0b:ef:37:96:5a:58:e1:37:ae:14:18:c5: 4f:71:a9:20:d8:41:b5:3e:04:ec:33:86:80:92:d8: b9:7b:51:b2:e1:f4:98:d1:55:1d:c7:dd:21:ca:ab: e2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D7:81:C2:91:2E:2C:75:F1:5D:F1:42:E5:9A:C8:24:9A:AD:DD:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc2ca973-bc34-3d2b-af18-8957072c327b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.199.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:42:26:fd:7d:b6:5d:5e:bc:79:9d:60:46:fb:b7:62:7b:8a: d8:63:fb:c5:d3:08:3a:9b:09:da:38:a4:15:5d:ed:37:49:61: fa:df:ba:30:40:8a:34:d6:bf:73:fb:92:e0:5f:87:5b:7d:64: f2:d1:54:86:72:c4:f5:ad:89:ec:48:8f:70:88:44:45:4e:21: 60:33:48:a2:b0:01:52:7e:04:b9:9b:48:f0:a2:a8:ae:d1:54: 0b:b8:e3:51:c8:8c:9a:5a:f8:ed:f2:6e:46:34:59:c4:58:95: 4c:f9:e9:e6:68:be:20:56:2a:d5:3c:85:8a:eb:29:96:48:da: 11:74:e5:f3:47:b8:44:c7:e1:ba:c8:23:06:13:44:6f:40:73: 06:dd:38:19:5d:08:2e:1d:ea:ba:d0:fd:a0:dc:dc:8e:98:ed: 8c:6c:6e:b3:b0:f2:c5:39:19:70:cf:99:8e:e6:17:0d:20:5a: 2b:38:31:fa:00:f0:3b:42:ce:7b:5e:be:6f:ca:b1:71:08:b8: b6:89:be:ea:f1:af:33:7d:ca:90:57:9d:cc:79:33:06:a4:75: 44:4c:e4:bb:fb:17:f4:6d:ac:37:d0:ec:c4:b0:e1:23:86:4c: c7:80:da:c2:f8:69:cc:cf:3b:cf:45:d6:0b:ca:8c:d3:d0:63: 02:ad:5e:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVquZJHCP4hhk9kIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YWYwMWUzYzctYWRhZS00YThmLWIyOTctYmNhNTcxMGU1ODE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsa9MSg5VNHsQ4cXIISvS06GNpnmDytt1+K9i gIlZr09stLckKh8W2zPnBwybRO/T53iPvA9YLIVqhDTW5+OHvT1zljOMaSHEj6Gf 2hcQN9MsJ0+7ddqfubesvxgI8aSXRWbqCiePd9bRgv8VTmTKUbuomeG7FXeNlGHF nBt8RSazr0/kI20Xth+xevr1WqpEzjcRpql565kx1uNZcwALZ6opMXATBvcd4vPp IaNpIsuMp70y9HTHcRBuF4K4N/wVYoxInPTblP4X0ncnZDmtWks4uWEL7zeWWljh N64UGMVPcakg2EG1PgTsM4aAkti5e1Gy4fSY0VUdx90hyqvi9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDzXgcKRLix18V3xQuWayCSard3bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGMyY2E5NzMtYmMzNC0z ZDJiLWFmMTgtODk1NzA3MmMzMjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYseaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhCJv19tl1evHmdYEb7t2J7ithj+8XTCDqbCdo4pBVd7TdJYfrfujBA ijTWv3P7kuBfh1t9ZPLRVIZyxPWtiexIj3CIREVOIWAzSKKwAVJ+BLmbSPCiqK7R VAu441HIjJpa+O3ybkY0WcRYlUz56eZoviBWKtU8hYrrKZZI2hF05fNHuETH4brI IwYTRG9AcwbdOBldCC4d6rrQ/aDc3I6Y7YxsbrOw8sU5GXDPmY7mFw0gWis4MfoA 8DtCzntevm/KsXEIuLaJvurxrzN9ypBXncx5MwakdURM5Lv7F/RtrDfQ7MSw4SOG TMeA2sL4aczPO89F1gvKjNPQYwKtXmQ= -----END CERTIFICATE-----Generated at Wed Oct 22 00:39:28 2025 by rpki-client