$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff5a1548-cd40-341a-80e3-f609e608164e.roa File: ff5a1548-cd40-341a-80e3-f609e608164e.roa (raw, json) Hash identifier: Hj9o/m2E/AEp/yViGe7U27+QYblx9tcSL67ZijUtml8= Subject key identifier: 3A:EF:36:5E:7C:27:5E:FB:01:B8:7F:68:C5:5E:05:02:02:B8:82:22 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA91A32A162E00E2118900 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff5a1548-cd40-341a-80e3-f609e608164e.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 98.224.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:91:a3:2a:16:2e:00:e2:11:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=1ecd235b-05dc-4aa0-83da-07c569223abe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:56:4c:eb:e7:94:4d:72:72:a1:1c:6d:e7:63: cd:14:c2:79:98:53:9b:fb:55:91:de:a8:13:80:40: ce:17:95:48:ca:da:a8:1e:ce:d0:52:00:df:b3:09: e3:73:c6:33:b6:2b:16:7e:8b:99:e7:0c:a1:d1:22: 3a:2d:9c:68:c0:c6:5b:4b:99:74:25:3b:0d:79:3e: bc:b8:68:f7:be:70:e2:ae:b4:79:0f:23:e9:7b:aa: b4:c7:5c:b0:27:82:1b:74:02:e1:c7:4b:3e:89:0d: df:7d:aa:55:37:0c:8a:3b:d8:65:bc:f0:81:c3:ec: 10:70:ee:7d:be:1c:fb:81:45:db:e8:71:e9:6b:7e: 6e:a2:4d:2e:64:85:6d:58:3e:5c:b7:ce:cc:d8:46: 4a:6e:60:89:53:60:19:c3:06:9e:b9:4c:dc:5d:20: 6f:05:c1:f6:08:ee:a0:b1:0a:d4:72:01:13:f0:04: 20:41:39:47:f9:57:35:93:37:84:cd:97:1e:82:cd: 22:cb:19:6b:52:12:01:ef:a9:86:db:cf:16:fc:d7: 4e:b5:c9:08:42:8b:26:88:74:95:b4:ff:e1:90:4f: 87:8c:c8:90:d9:82:2b:03:15:90:08:25:bf:87:cd: f0:6b:ff:7d:41:3d:4d:dc:23:d0:95:ed:ef:32:dd: 8d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:EF:36:5E:7C:27:5E:FB:01:B8:7F:68:C5:5E:05:02:02:B8:82:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff5a1548-cd40-341a-80e3-f609e608164e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.224.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:84:89:9c:f6:e7:d3:c8:09:90:ba:6e:10:5e:df:73:3b:ab: 91:44:fe:3a:00:30:34:d7:51:63:c4:49:5a:03:8c:47:c4:6b: f9:32:bc:13:52:f8:da:bb:33:db:64:ef:24:09:09:7c:54:ff: ac:e0:b5:90:f9:4c:99:87:7f:f5:61:f5:ce:5f:92:49:86:d3: 5e:f9:9a:b1:85:56:21:18:41:da:db:55:7d:9c:ea:72:20:ca: fe:d5:5f:7d:40:ba:1b:60:8b:4d:6b:f5:36:48:39:21:ad:7d: a2:08:f8:87:73:cb:9b:26:26:64:e4:6b:fb:f9:c2:13:a6:c7: b8:23:b7:f9:dd:dd:fc:67:1b:a1:7a:33:b1:51:31:09:87:98: e6:4d:a8:d1:33:fb:23:b6:d3:a2:5d:9a:55:2f:8f:f8:b4:f3: 30:22:2e:7b:56:69:5d:06:34:d8:b9:17:82:0c:d1:4f:7d:35: 3f:8b:f2:9a:ff:46:c6:62:44:ac:68:43:3a:15:82:dc:3e:e4: cd:de:aa:a7:ec:b1:92:de:21:bd:af:53:c2:3a:ad:66:f8:36: c4:e9:33:ec:41:72:a3:13:af:ee:93:23:b6:98:3b:d6:d6:e5: f7:ee:ef:c7:63:1f:0d:06:86:11:f3:96:11:d2:8b:ba:1c:85: 0e:ef:a5:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqpGjKhYuAOIRiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MWVjZDIzNWItMDVkYy00YWEwLTgzZGEtMDdjNTY5MjIzYWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFZM6+eUTXJyoRxt52PNFMJ5mFOb+1WR3qgT gEDOF5VIytqoHs7QUgDfswnjc8YztisWfouZ5wyh0SI6LZxowMZbS5l0JTsNeT68 uGj3vnDirrR5DyPpe6q0x1ywJ4IbdALhx0s+iQ3ffapVNwyKO9hlvPCBw+wQcO59 vhz7gUXb6HHpa35uok0uZIVtWD5ct87M2EZKbmCJU2AZwwaeuUzcXSBvBcH2CO6g sQrUcgET8AQgQTlH+Vc1kzeEzZcegs0iyxlrUhIB76mG288W/NdOtckIQosmiHSV tP/hkE+HjMiQ2YIrAxWQCCW/h83wa/99QT1N3CPQle3vMt2NfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDrvNl58J177Abh/aMVeBQICuIIiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmY1YTE1NDgtY2Q0MC0z NDFhLTgwZTMtZjYwOWU2MDgxNjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYuDMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2EiZz259PICZC6bhBe33M7q5FE/joAMDTXUWPESVoDjEfEa/kyvBNS +Nq7M9tk7yQJCXxU/6zgtZD5TJmHf/Vh9c5fkkmG0175mrGFViEYQdrbVX2c6nIg yv7VX31Auhtgi01r9TZIOSGtfaII+Idzy5smJmTka/v5whOmx7gjt/nd3fxnG6F6 M7FRMQmHmOZNqNEz+yO206JdmlUvj/i08zAiLntWaV0GNNi5F4IM0U99NT+L8pr/ RsZiRKxoQzoVgtw+5M3eqqfssZLeIb2vU8I6rWb4NsTpM+xBcqMTr+6TI7aYO9bW 5ffu78djHw0GhhHzlhHSi7ochQ7vpVg= -----END CERTIFICATE-----Generated at Tue Oct 21 22:23:27 2025 by rpki-client