$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7f4f2d4-7ec9-3337-91b4-9cd14a3782f8.roa File: f7f4f2d4-7ec9-3337-91b4-9cd14a3782f8.roa (raw, json) Hash identifier: r61efCEG4EBcYXwGXZvwAaoEgD4JNPhgJwUlvcxPBis= Subject key identifier: 31:A5:D8:D2:48:A4:0A:C1:B3:4D:43:B2:B9:C8:E2:44:0B:64:62:F6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA8D8664D844EF114D7B80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7f4f2d4-7ec9-3337-91b4-9cd14a3782f8.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 98.209.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:8d:86:64:d8:44:ef:11:4d:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=81bf924e-cbde-456d-b96f-e3a8b0dffadd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:16:60:c8:ba:b0:da:f6:09:8e:7c:41:33:75: 1d:30:6e:9d:0b:59:92:f9:fa:10:c8:f2:c2:cf:75: 2d:d8:63:c0:a8:c7:b2:95:43:c0:d1:ea:ba:53:6e: 5f:9d:0a:63:67:cd:72:87:42:b9:c8:3b:c2:45:58: ff:d0:52:84:20:7e:ef:78:eb:ac:63:ff:f5:92:f3: 22:80:a5:d0:01:df:9d:5f:51:bb:ee:e2:bc:06:45: d5:4a:a2:c9:4c:62:00:6f:f8:1f:2d:88:b0:f6:84: 6a:fa:d0:18:c0:56:b6:64:7c:fe:9b:a1:f8:d3:ba: 58:e0:b4:6d:4f:93:8e:5b:d4:92:2e:6c:fd:34:60: 16:60:db:a7:d7:e9:4b:c6:5e:69:ed:02:bd:e6:72: c4:7c:5e:21:50:d0:51:de:ee:72:6a:ad:f1:31:07: 22:30:c7:6b:84:47:69:c3:89:e4:73:5a:ed:b4:f8: 39:9b:60:64:a6:12:c1:a8:41:4c:c2:45:68:24:e4: 94:ed:5c:51:60:24:5f:b8:f7:70:61:17:cc:16:a4: 54:1b:52:a6:ad:09:75:78:ef:24:c6:e7:53:00:01: c8:5a:45:e4:51:bb:57:32:de:08:d0:e3:b4:be:aa: 98:de:47:81:c3:5e:08:60:b2:e8:25:93:92:d6:be: 64:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A5:D8:D2:48:A4:0A:C1:B3:4D:43:B2:B9:C8:E2:44:0B:64:62:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7f4f2d4-7ec9-3337-91b4-9cd14a3782f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.209.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:3c:a7:31:b1:6d:1f:c6:03:ce:7b:db:6c:a6:20:33:a3:8b: 37:7b:0f:b8:9a:5e:15:a1:13:d7:c5:9e:87:d4:8b:d7:62:26: eb:80:62:0b:af:fc:27:71:06:63:0b:9c:17:e6:61:60:2d:92: 2d:33:67:df:87:4e:09:78:64:08:6f:78:f2:25:65:b6:43:5d: 5a:21:9d:55:d3:df:bd:9f:16:d1:d6:b0:6c:c2:36:99:60:7f: 3c:5a:58:01:94:79:3d:e5:23:3a:a8:8a:56:cf:ac:5c:0f:28: 1e:b9:ed:1f:8b:ed:34:f5:2e:e2:ad:5b:25:c2:0c:19:54:5c: 35:c5:5f:cd:dc:94:5f:e6:45:78:d1:cf:39:aa:5a:b4:79:9e: 01:fc:ef:3b:6c:bc:1b:e1:44:b3:38:d3:83:a4:6d:1f:ed:8c: 13:10:bc:14:c8:5c:8d:ec:74:4e:ab:c1:4f:92:f9:c9:d7:98: d3:31:4a:68:be:62:03:01:77:13:c5:3d:51:29:fb:99:0e:df: db:d0:78:6c:e0:a0:f8:8b:6e:ee:be:eb:cf:22:56:36:b3:56: 0f:df:d4:0e:24:2f:84:cc:c8:0d:f1:88:10:9d:08:17:4c:0b: bd:58:f5:75:4c:c5:2b:45:8c:96:fc:d0:00:c3:c6:38:92:da: 44:27:c9:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqo2GZNhE7xFNe4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ODFiZjkyNGUtY2JkZS00NTZkLWI5NmYtZTNhOGIwZGZmYWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRZgyLqw2vYJjnxBM3UdMG6dC1mS+foQyPLC z3Ut2GPAqMeylUPA0eq6U25fnQpjZ81yh0K5yDvCRVj/0FKEIH7veOusY//1kvMi gKXQAd+dX1G77uK8BkXVSqLJTGIAb/gfLYiw9oRq+tAYwFa2ZHz+m6H407pY4LRt T5OOW9SSLmz9NGAWYNun1+lLxl5p7QK95nLEfF4hUNBR3u5yaq3xMQciMMdrhEdp w4nkc1rttPg5m2BkphLBqEFMwkVoJOSU7VxRYCRfuPdwYRfMFqRUG1KmrQl1eO8k xudTAAHIWkXkUbtXMt4I0OO0vqqY3keBw14IYLLoJZOS1r5kZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDGl2NJIpArBs01DsrnI4kQLZGL2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjdmNGYyZDQtN2VjOS0z MzM3LTkxYjQtOWNkMTRhMzc4MmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYtGGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJw8pzGxbR/GA85722ymIDOjizd7D7iaXhWhE9fFnofUi9diJuuAYguv /CdxBmMLnBfmYWAtki0zZ9+HTgl4ZAhvePIlZbZDXVohnVXT372fFtHWsGzCNplg fzxaWAGUeT3lIzqoilbPrFwPKB657R+L7TT1LuKtWyXCDBlUXDXFX83clF/mRXjR zzmqWrR5ngH87ztsvBvhRLM404OkbR/tjBMQvBTIXI3sdE6rwU+S+cnXmNMxSmi+ YgMBdxPFPVEp+5kO39vQeGzgoPiLbu6+688iVjazVg/f1A4kL4TMyA3xiBCdCBdM C71Y9XVMxStFjJb80ADDxjiS2kQnySg= -----END CERTIFICATE-----Generated at Tue Oct 21 19:30:52 2025 by rpki-client