$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/ceaf2de1-b23e-39d9-87b6-5c722c950c8f.roa File: ceaf2de1-b23e-39d9-87b6-5c722c950c8f.roa (raw, json) Hash identifier: 4lu9UoDjTi8aXkYIM/wyEXQB/EX0PwXj6IciYrK4GPQ= Subject key identifier: A0:73:B5:BD:34:8E:38:5C:06:59:88:03:38:8E:E2:CF:4D:95:F4:62 Certificate issuer: /CN=1e7bc28d-37e4-4c76-84d4-8431dc9239c8 Certificate serial: 010D0C9F4328584B1AD1705137DD52794FD16BC0 Authority key identifier: 4F:68:46:08:EC:C0:FC:35:9C:5D:4D:71:77:EB:C9:D0:CA:81:1B:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/ceaf2de1-b23e-39d9-87b6-5c722c950c8f.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 7057 IP address blocks: 98.143.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:70:51:37:dd:52:79:4f:d1:6b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e7bc28d-37e4-4c76-84d4-8431dc9239c8 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=4d4ce555-10b6-480a-a268-e2b29692e661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0a:24:9f:de:a7:d4:1e:4f:2f:a9:be:b3:f8: 6b:63:1c:06:39:c5:c2:a5:10:42:81:ef:e8:70:b3: b8:e4:5f:34:44:51:e0:20:0e:16:33:59:d3:05:94: 21:62:b3:a5:88:a7:43:83:36:1d:66:56:ec:5e:49: a6:1c:36:25:4a:f0:c0:e3:93:17:f9:85:a1:db:c9: fb:8e:71:a5:b4:e6:ce:c9:f3:64:95:c1:9a:bd:46: 0d:a7:9f:97:94:dc:91:ba:37:7e:70:e1:3b:77:3e: b0:ce:44:90:88:31:45:6d:9d:35:a2:69:0f:db:ba: a9:ec:b8:89:ac:80:82:ce:3b:9b:c8:7a:25:f7:70: 72:c0:a7:7c:74:50:c1:a7:ec:e8:30:68:1b:e4:2c: ec:2d:fe:55:31:bd:d4:9d:58:99:fd:c0:34:29:2d: ab:29:3d:8b:0d:a3:4e:19:00:80:91:62:15:6f:c7: 2a:2f:cc:d9:61:45:36:93:37:53:ef:58:ab:39:0f: 3f:4e:a5:31:f8:8f:17:7c:25:de:f0:53:9d:64:29: 8a:77:f6:00:0f:c6:e3:a6:8e:3f:92:a2:28:cf:48: 05:58:fe:e4:98:02:8f:99:70:69:ee:12:68:c7:fd: 01:62:9d:36:72:ca:45:56:65:f0:e7:ce:9c:74:77: 73:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:73:B5:BD:34:8E:38:5C:06:59:88:03:38:8E:E2:CF:4D:95:F4:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/ceaf2de1-b23e-39d9-87b6-5c722c950c8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.crl X509v3 Authority Key Identifier: keyid:4F:68:46:08:EC:C0:FC:35:9C:5D:4D:71:77:EB:C9:D0:CA:81:1B:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer sbgp-ipAddrBlock: critical IPv4: 98.143.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:0e:b2:d9:4e:f0:91:c0:83:7a:0c:10:1f:ce:46:de:e6:50: 78:b2:06:01:53:9f:12:b5:9c:3f:b0:cf:21:37:dd:fd:6a:df: 62:46:00:71:d2:ce:ca:c1:7e:3c:59:2a:a9:c4:ed:0a:7e:14: de:f6:87:b4:0a:80:7a:6b:d1:9a:57:3f:e7:e0:b5:f3:6a:5c: 5e:3d:ad:88:c9:7c:ea:86:81:48:fe:0e:c5:02:9b:0a:7a:2c: bb:b6:61:97:2a:c9:ae:24:10:5f:92:73:b5:84:9f:19:38:79: 1f:3e:a1:2c:37:36:44:af:57:ca:19:df:79:a1:84:03:17:1d: d0:58:26:e7:25:90:b9:d8:0e:ec:7b:e1:b3:26:2c:2c:81:a8: e7:ea:29:3c:8e:06:4a:cd:f6:1a:a4:a0:21:51:68:a2:85:7b: f3:95:5e:c8:d6:58:77:8c:b1:b9:4f:e0:b0:96:be:e8:36:45: 7d:de:18:0d:d5:fb:76:c3:ee:53:ac:8c:8d:f2:f2:ab:99:74: 85:c1:03:44:f1:a3:0d:9b:e3:e3:5d:ec:b5:08:1b:5c:0b:b5: df:6d:99:de:5b:ba:ef:5e:3c:6a:65:f2:98:84:c6:56:5c:13: 43:bb:e5:d2:3b:a0:dd:7a:fe:8a:41:8b:ae:7a:3d:3d:a3:fc: 2d:a1:08:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0XBRN91SeU/Ra8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWU3YmMyOGQtMzdlNC00Yzc2LTg0ZDQtODQzMWRjOTIz OWM4MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk NGQ0Y2U1NTUtMTBiNi00ODBhLWEyNjgtZTJiMjk2OTJlNjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugokn96n1B5PL6m+s/hrYxwGOcXCpRBCge/o cLO45F80RFHgIA4WM1nTBZQhYrOliKdDgzYdZlbsXkmmHDYlSvDA45MX+YWh28n7 jnGltObOyfNklcGavUYNp5+XlNyRujd+cOE7dz6wzkSQiDFFbZ01omkP27qp7LiJ rICCzjubyHol93BywKd8dFDBp+zoMGgb5CzsLf5VMb3UnViZ/cA0KS2rKT2LDaNO GQCAkWIVb8cqL8zZYUU2kzdT71irOQ8/TqUx+I8XfCXe8FOdZCmKd/YAD8bjpo4/ kqIoz0gFWP7kmAKPmXBp7hJox/0BYp02cspFVmXw586cdHdzJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKBztb00jjhcBlmIAziO4s9NlfRiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTdi YzI4ZC0zN2U0LTRjNzYtODRkNC04NDMxZGM5MjM5YzgvY2VhZjJkZTEtYjIzZS0z OWQ5LTg3YjYtNWM3MjJjOTUwYzhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWU3YmMyOGQtMzdlNC00Yzc2LTg0 ZDQtODQzMWRjOTIzOWM4LzFlN2JjMjhkLTM3ZTQtNGM3Ni04NGQ0LTg0MzFkYzky MzljOC5jcmwwHwYDVR0jBBgwFoAUT2hGCOzA/DWcXU1xd+vJ0MqBG1QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTdiYzI4ZC0zN2U0LTRjNzYtODRkNC04NDMx ZGM5MjM5YzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYo9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEOstlO8JHAg3oMEB/ORt7mUHiyBgFTnxK1nD+wzyE33f1q32JGAHHS zsrBfjxZKqnE7Qp+FN72h7QKgHpr0ZpXP+fgtfNqXF49rYjJfOqGgUj+DsUCmwp6 LLu2YZcqya4kEF+Sc7WEnxk4eR8+oSw3NkSvV8oZ33mhhAMXHdBYJuclkLnYDux7 4bMmLCyBqOfqKTyOBkrN9hqkoCFRaKKFe/OVXsjWWHeMsblP4LCWvug2RX3eGA3V +3bD7lOsjI3y8quZdIXBA0Txow2b4+Nd7LUIG1wLtd9tmd5buu9ePGpl8piExlZc E0O75dI7oN16/opBi656PT2j/C2hCMs= -----END CERTIFICATE-----Generated at Tue Oct 21 00:12:32 2025 by rpki-client