$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f456a693-f74d-3894-8c75-2409850473b9.roa File: f456a693-f74d-3894-8c75-2409850473b9.roa (raw, json) Hash identifier: 6/iadtlT+a1SDU381AeEvaoU/1QMCrX74rYEzztXB6M= Subject key identifier: B0:05:4F:9E:B5:09:7E:A2:67:E5:F7:25:C8:98:8E:52:D7:B1:6E:22 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AAD9044318D94B03286AA0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f456a693-f74d-3894-8c75-2409850473b9.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 98.195.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:d9:04:43:18:d9:4b:03:28:6a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=a3dfeb98-b0fc-4779-82a3-0c248f30a011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:17:f6:2c:d0:48:6a:02:64:a0:6b:39:86:f5: 42:81:29:80:cd:4c:75:6c:40:01:71:64:c3:65:37: 7b:89:cc:9d:b8:8d:45:30:c0:8e:0c:c6:aa:99:a4: f3:ee:0b:30:6c:db:be:84:8a:e2:e8:3e:7e:23:c9: b9:b2:55:06:24:dc:0e:f6:07:53:50:fc:2e:28:0b: 46:c2:86:80:fd:a2:6e:71:84:fa:e1:e4:0f:35:15: 4e:31:a1:1b:ea:35:6b:8d:7b:1d:3c:05:76:d3:61: ac:62:8e:70:d8:f0:19:b1:69:89:b9:70:5d:66:76: 34:c1:ad:79:e4:2e:16:58:ea:56:41:b4:43:44:77: 67:9e:f6:b2:07:c3:7f:49:68:04:a5:5d:67:64:82: 25:1b:ef:70:9f:b7:36:89:57:b6:99:ac:bb:9e:f6: 0b:c6:29:d4:41:6c:a3:2a:5f:b6:52:0a:03:e9:1f: df:9c:df:82:78:ec:72:ed:75:81:af:75:6d:6f:97: 69:36:e6:b7:47:81:e0:50:7c:c3:af:3f:7b:83:4d: 78:f1:51:07:ba:3b:11:e4:11:54:78:57:52:46:93: a9:bc:07:ba:48:a2:1a:62:74:b5:c7:9c:71:fb:fb: b7:0c:9d:b1:81:ea:60:76:7e:0e:8a:d8:f3:e8:da: 26:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:05:4F:9E:B5:09:7E:A2:67:E5:F7:25:C8:98:8E:52:D7:B1:6E:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f456a693-f74d-3894-8c75-2409850473b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.195.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:40:38:61:cf:79:1a:be:57:18:02:9a:13:ed:1c:6b:4c:57: f7:c2:42:bc:dc:85:18:d9:99:5d:00:62:c4:ea:ae:fc:0f:a2: 5d:50:6b:f3:b0:fc:6e:d6:2f:7e:76:29:56:83:cb:3a:58:c4: 0a:d9:0c:fe:9a:1e:a1:b2:d4:03:2f:7f:4d:bb:18:e1:75:b4: 06:85:73:0d:6a:c8:cf:06:23:91:6a:88:50:24:7a:00:2f:ce: 10:af:75:1d:fc:de:b1:48:4c:77:1a:4c:e6:9a:3d:e2:14:92: 8f:a9:f3:4c:e4:52:c2:c5:88:34:89:cd:35:89:cd:87:8e:ec: c3:3d:17:2a:f8:bc:b8:d0:55:65:f1:41:0c:f1:22:59:f5:32: 05:8b:ea:6d:b7:7d:59:21:2b:70:44:71:0d:3f:c7:b6:6b:57: 69:2f:47:36:b3:27:3e:09:c7:44:31:08:72:fe:e5:68:77:43: f8:57:ae:30:51:d1:8c:e6:e6:b2:e3:8c:63:98:76:05:b4:53: 2a:46:8a:00:65:d6:4d:89:8e:d5:cf:0f:e9:1c:6a:3c:04:1d: c2:c2:62:f0:51:76:2b:f5:dc:a7:83:8b:7e:24:a4:d5:79:57: ab:5e:9c:4a:d8:b3:7c:e2:03:38:ce:3d:94:aa:5e:81:72:89: 34:73:40:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqtkEQxjZSwMoaqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YTNkZmViOTgtYjBmYy00Nzc5LTgyYTMtMGMyNDhmMzBhMDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhf2LNBIagJkoGs5hvVCgSmAzUx1bEABcWTD ZTd7icyduI1FMMCODMaqmaTz7gswbNu+hIri6D5+I8m5slUGJNwO9gdTUPwuKAtG woaA/aJucYT64eQPNRVOMaEb6jVrjXsdPAV202GsYo5w2PAZsWmJuXBdZnY0wa15 5C4WWOpWQbRDRHdnnvayB8N/SWgEpV1nZIIlG+9wn7c2iVe2may7nvYLxinUQWyj Kl+2UgoD6R/fnN+CeOxy7XWBr3Vtb5dpNua3R4HgUHzDrz97g0148VEHujsR5BFU eFdSRpOpvAe6SKIaYnS1x5xx+/u3DJ2xgepgdn4Oitjz6NomuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLAFT561CX6iZ+X3JciYjlLXsW4iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjQ1NmE2OTMtZjc0ZC0z ODk0LThjNzUtMjQwOTg1MDQ3M2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYsOYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKVAOGHPeRq+VxgCmhPtHGtMV/fCQrzchRjZmV0AYsTqrvwPol1Qa/Ow /G7WL352KVaDyzpYxArZDP6aHqGy1AMvf027GOF1tAaFcw1qyM8GI5FqiFAkegAv zhCvdR383rFITHcaTOaaPeIUko+p80zkUsLFiDSJzTWJzYeO7MM9Fyr4vLjQVWXx QQzxIln1MgWL6m23fVkhK3BEcQ0/x7ZrV2kvRzazJz4Jx0QxCHL+5Wh3Q/hXrjBR 0Yzm5rLjjGOYdgW0UypGigBl1k2JjtXPD+kcajwEHcLCYvBRdiv13KeDi34kpNV5 V6tenErYs3ziAzjOPZSqXoFyiTRzQMY= -----END CERTIFICATE-----Generated at Tue Oct 21 19:45:44 2025 by rpki-client