$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ddf86c1f-7b45-3336-a86a-3da52d80eb57.roa File: ddf86c1f-7b45-3336-a86a-3da52d80eb57.roa (raw, json) Hash identifier: roxWaoWwvtkUAUjdpbR7vUluKtExAAwZX+4QFMUl3mw= Subject key identifier: 65:35:BF:2B:EC:0E:8D:5D:FB:B3:E8:94:4B:67:E3:21:88:B5:87:97 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AAF0B294B7A814A0ED7610 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ddf86c1f-7b45-3336-a86a-3da52d80eb57.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 98.34.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:f0:b2:94:b7:a8:14:a0:ed:76:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=885538ef-e006-4702-a039-0643fa4e1c03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:32:5c:e1:29:ea:db:c9:28:7c:e3:36:26:ba: 05:b2:1d:03:17:13:ee:cb:9b:63:90:c3:4d:f6:78: 56:47:e1:02:ce:eb:f7:40:52:64:b2:d7:b3:ec:85: 54:95:14:dd:26:45:bb:11:de:97:33:69:65:82:f1: a6:3e:8e:70:a4:b8:e5:f7:f9:e4:10:58:62:80:f6: 1a:ee:f8:47:47:88:38:03:fb:4c:dd:12:b0:f3:93: 97:e3:d1:39:a1:43:cf:f0:0a:08:d9:cb:5f:1c:eb: 82:f6:b3:0d:fe:94:ef:e6:9f:83:54:3c:26:9f:50: b8:98:34:cb:6b:64:bc:1f:4c:ce:99:a4:1d:1f:78: 19:57:4f:82:0c:e4:f5:c1:09:90:80:c2:71:f8:09: 73:49:00:fe:ec:b8:aa:72:3c:47:5e:c4:cf:34:0e: 95:f4:57:78:67:27:85:03:ae:1e:95:21:29:bf:e1: 71:90:2d:d2:c6:92:aa:06:c6:20:b3:81:28:d1:6b: db:e9:a8:8a:43:bd:18:44:50:02:9b:8c:06:b3:8a: d3:22:80:a2:34:fa:1e:45:fd:32:f2:a5:5d:24:d8: b4:48:14:81:c0:b3:b1:c1:f1:3a:44:42:41:af:19: 64:2f:ba:1e:02:f8:ae:e2:3e:f6:93:1b:f2:d9:2d: 53:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:35:BF:2B:EC:0E:8D:5D:FB:B3:E8:94:4B:67:E3:21:88:B5:87:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ddf86c1f-7b45-3336-a86a-3da52d80eb57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.34.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:0a:54:0b:fe:75:e8:08:d7:12:7c:a3:c9:ef:12:bf:6e:59: 2d:2c:e5:45:2b:7f:a1:81:2b:d1:aa:c0:8f:2c:39:cd:57:2c: f3:26:ad:32:f6:4f:68:99:08:74:15:51:1d:88:6d:54:36:1d: 4d:43:cb:56:08:a1:6e:87:86:1c:75:68:0f:3e:03:32:d7:19: 8c:a6:c6:0c:51:8f:14:dc:d1:90:50:6a:66:10:5f:40:eb:43: 1d:bf:39:8c:67:59:17:8b:1e:55:64:be:cd:a8:b6:8d:86:78: 32:dc:f1:85:ec:52:b7:ae:1e:2e:d9:94:df:69:dd:a8:f4:b9: d3:18:ac:33:30:7e:c9:53:b4:d1:13:7c:c0:3c:d0:8c:65:f5: 3b:e8:20:b1:88:e5:1c:6f:15:0f:a8:c0:01:92:a2:12:30:76: ac:84:2c:d0:20:fb:1a:09:9b:98:59:fd:1f:c4:28:59:e1:07: ef:2b:b2:e1:12:5a:16:75:3c:24:ce:8f:b3:8a:f9:64:71:e7: 59:f0:fb:77:82:c1:7f:6e:41:6d:0d:a4:aa:0e:0a:9d:c7:80: 44:40:7e:c4:62:34:65:4f:44:50:f5:d3:fe:c7:c7:73:e6:46: 14:8e:06:b7:67:d6:83:71:72:f1:76:08:04:be:83:2e:39:79: 2e:c3:4a:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqvCylLeoFKDtdhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ODg1NTM4ZWYtZTAwNi00NzAyLWEwMzktMDY0M2ZhNGUxYzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjJc4Snq28kofOM2JroFsh0DFxPuy5tjkMNN 9nhWR+ECzuv3QFJkstez7IVUlRTdJkW7Ed6XM2llgvGmPo5wpLjl9/nkEFhigPYa 7vhHR4g4A/tM3RKw85OX49E5oUPP8AoI2ctfHOuC9rMN/pTv5p+DVDwmn1C4mDTL a2S8H0zOmaQdH3gZV0+CDOT1wQmQgMJx+AlzSQD+7LiqcjxHXsTPNA6V9Fd4ZyeF A64elSEpv+FxkC3SxpKqBsYgs4Eo0Wvb6aiKQ70YRFACm4wGs4rTIoCiNPoeRf0y 8qVdJNi0SBSBwLOxwfE6REJBrxlkL7oeAviu4j72kxvy2S1TuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGU1vyvsDo1d+7PolEtn4yGItYeXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGRmODZjMWYtN2I0NS0z MzM2LWE4NmEtM2RhNTJkODBlYjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYiKMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALYKVAv+degI1xJ8o8nvEr9uWS0s5UUrf6GBK9GqwI8sOc1XLPMmrTL2 T2iZCHQVUR2IbVQ2HU1Dy1YIoW6Hhhx1aA8+AzLXGYymxgxRjxTc0ZBQamYQX0Dr Qx2/OYxnWReLHlVkvs2oto2GeDLc8YXsUreuHi7ZlN9p3aj0udMYrDMwfslTtNET fMA80Ixl9TvoILGI5RxvFQ+owAGSohIwdqyELNAg+xoJm5hZ/R/EKFnhB+8rsuES WhZ1PCTOj7OK+WRx51nw+3eCwX9uQW0NpKoOCp3HgERAfsRiNGVPRFD10/7Hx3Pm RhSOBrdn1oNxcvF2CAS+gy45eS7DSus= -----END CERTIFICATE-----Generated at Tue Oct 21 21:39:53 2025 by rpki-client