$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df9c7017-c0d2-3b85-9000-e4368e45da4e.roa File: df9c7017-c0d2-3b85-9000-e4368e45da4e.roa (raw, json) Hash identifier: MSyi28gVYCVSBf2QHAmdKXP+23DiyC8U946FSJMSu2w= Subject key identifier: 14:36:B1:ED:B3:71:72:C1:FB:EE:13:84:93:4F:64:30:36:B5:FF:64 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8920E06FF23853E586C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df9c7017-c0d2-3b85-9000-e4368e45da4e.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 98.217.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:92:0e:06:ff:23:85:3e:58:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=cef505ed-7e99-4246-8059-08ec03394a24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:40:38:bf:cf:85:cd:22:c8:7a:0b:cd:15:8b: d3:5a:4b:bb:57:73:14:47:7c:07:63:ec:37:b6:8e: 74:b7:ad:60:1a:55:d8:48:01:e2:81:a7:d1:76:b4: 7e:04:93:49:a5:c0:80:e0:e3:70:6c:7d:97:bc:e3: 4f:86:57:fc:cf:aa:6e:44:b8:82:e0:d9:c4:a9:bb: ba:bf:31:8f:64:a4:98:bf:8b:43:53:c0:39:8b:ba: f2:31:16:05:ed:f5:af:43:c3:a0:b0:79:e0:f1:0f: 07:f5:05:43:20:56:b8:dc:58:6b:d8:de:ea:d4:a1: bc:27:32:2a:e9:e5:d7:55:62:83:b6:07:4e:a7:83: 57:d4:14:5d:31:7a:ad:85:b4:bd:99:ed:9c:3a:eb: 1e:47:51:d2:8f:e9:f9:09:6d:09:28:67:ea:6c:a5: 37:9e:dc:11:aa:3e:61:7f:8b:8e:5d:51:02:bb:67: 0c:ed:ec:bf:15:08:f3:d3:be:3a:ab:e0:c6:11:76: 6d:fc:ab:4e:76:8e:d4:6d:e5:ae:61:4b:c2:cb:24: 00:60:1f:ba:21:76:f3:b0:5d:5c:cb:84:2c:6a:ac: 2c:1b:96:9d:c8:03:8c:51:c5:91:bf:34:57:d4:6a: 48:0c:d1:84:d5:4a:26:89:6a:4d:76:58:cc:7f:13: b8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:36:B1:ED:B3:71:72:C1:FB:EE:13:84:93:4F:64:30:36:B5:FF:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df9c7017-c0d2-3b85-9000-e4368e45da4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.217.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:50:9b:5a:8a:32:db:88:57:95:ec:17:fa:fa:5a:b5:9f:0d: ac:f8:c3:ea:2b:c0:2d:41:7c:d8:75:7a:37:7b:2e:d2:94:c6: 3c:b5:de:cb:af:d7:50:a8:88:b3:75:fb:cf:78:80:fd:a9:09: cb:a9:38:8c:f4:e8:87:80:ed:5e:7b:65:11:da:d6:ce:d2:06: 9b:95:e4:44:0e:f6:42:95:3e:e0:41:f2:d7:c0:14:a0:52:6f: dd:9e:74:76:1c:84:7a:c7:88:9d:19:f1:c4:d4:a0:40:b6:f6: c1:3a:73:01:7a:c9:35:92:d6:c5:44:4d:3d:bc:70:f6:c6:2d: 07:43:98:33:71:5d:54:19:30:19:9a:08:a7:cb:04:53:db:ac: f4:15:c3:25:45:f1:0c:14:af:37:59:fe:dc:09:5e:5e:61:ea: 7f:0c:b6:62:49:49:db:80:80:ce:b9:ce:78:be:48:66:7f:f1: b7:c4:31:69:7a:38:3c:d7:84:a3:58:8c:ab:7a:28:a6:70:02: 90:89:5b:1b:ed:17:5f:09:5a:4c:f4:54:4d:80:a5:e0:69:db: 21:3b:1f:23:41:92:86:30:ba:90:c2:4a:46:e1:60:85:e0:14: 98:94:c4:45:68:01:f5:44:30:c5:a6:fb:f9:e2:d8:e3:b5:98: 82:6a:be:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqJIOBv8jhT5YbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk Y2VmNTA1ZWQtN2U5OS00MjQ2LTgwNTktMDhlYzAzMzk0YTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUA4v8+FzSLIegvNFYvTWku7V3MUR3wHY+w3 to50t61gGlXYSAHigafRdrR+BJNJpcCA4ONwbH2XvONPhlf8z6puRLiC4NnEqbu6 vzGPZKSYv4tDU8A5i7ryMRYF7fWvQ8OgsHng8Q8H9QVDIFa43Fhr2N7q1KG8JzIq 6eXXVWKDtgdOp4NX1BRdMXqthbS9me2cOuseR1HSj+n5CW0JKGfqbKU3ntwRqj5h f4uOXVECu2cM7ey/FQjz0746q+DGEXZt/KtOdo7UbeWuYUvCyyQAYB+6IXbzsF1c y4QsaqwsG5adyAOMUcWRvzRX1GpIDNGE1UomiWpNdljMfxO4jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQ2se2zcXLB++4ThJNPZDA2tf9kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGY5YzcwMTctYzBkMi0z Yjg1LTkwMDAtZTQzNjhlNDVkYTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYtkwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdQm1qKMtuIV5XsF/r6WrWfDaz4w+orwC1BfNh1ejd7LtKUxjy13suv 11CoiLN1+894gP2pCcupOIz06IeA7V57ZRHa1s7SBpuV5EQO9kKVPuBB8tfAFKBS b92edHYchHrHiJ0Z8cTUoEC29sE6cwF6yTWS1sVETT28cPbGLQdDmDNxXVQZMBma CKfLBFPbrPQVwyVF8QwUrzdZ/twJXl5h6n8MtmJJSduAgM65zni+SGZ/8bfEMWl6 ODzXhKNYjKt6KKZwApCJWxvtF18JWkz0VE2ApeBp2yE7HyNBkoYwupDCSkbhYIXg FJiUxEVoAfVEMMWm+/ni2OO1mIJqvnI= -----END CERTIFICATE-----Generated at Tue Oct 21 19:35:27 2025 by rpki-client