$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0dc0d387-396d-30ef-a527-6b801be76ad9.roa File: 0dc0d387-396d-30ef-a527-6b801be76ad9.roa (raw, json) Hash identifier: xgMSYQYD6+U/s6+IeEkg+B2zUeOeb9nWEv4vq5UMoRs= Subject key identifier: 3B:D4:0F:70:BF:B6:3D:61:BC:5F:80:47:C1:54:A1:16:85:5B:82:D2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB8D18D83408134570921C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0dc0d387-396d-30ef-a527-6b801be76ad9.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22909 IP address blocks: 98.40.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:d1:8d:83:40:81:34:57:09:21:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=108a3d10-46db-4beb-9c4f-f3ae65c195c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ed:84:a8:76:30:1d:db:29:bc:c4:69:96:0f: 94:60:f9:85:02:b5:51:07:54:f8:e0:25:85:c3:30: 70:ed:1c:68:25:ce:4d:fd:63:40:80:81:3e:5b:64: 22:2c:3b:74:50:7f:8f:ca:74:f8:48:44:a4:37:9f: 35:fb:d3:d0:da:2a:58:f8:56:18:6a:bf:fa:48:86: 52:fb:6f:66:0e:2b:e3:7e:71:7e:35:f1:f5:54:ee: 7b:4a:cc:57:c9:f9:5f:16:1a:e7:e9:d4:d1:1f:a4: 8f:3d:9a:3e:58:91:d1:00:aa:f4:f4:bd:dd:45:92: 95:92:3d:50:ac:34:21:39:de:1b:0a:aa:9a:cc:6d: 97:ee:0a:1a:65:54:c3:3e:02:13:d9:68:18:c7:89: 2e:c5:ea:f5:d3:ab:75:0e:dc:b7:0d:69:6f:8a:1a: ac:8a:32:86:fb:3c:ed:10:2e:d1:74:ec:de:47:64: 29:ec:07:1d:0c:9a:69:1d:09:e3:34:3d:49:f8:25: 5e:88:d1:27:7d:b6:0c:fc:7c:9a:85:ea:f7:83:40: 9c:0e:19:80:75:8c:17:2c:ee:3d:5f:33:b6:9d:60: f3:5d:e3:d5:fc:0b:9d:8f:67:66:6a:08:1a:6f:0a: 79:b3:73:58:dd:25:e9:2b:c6:39:d8:fe:b4:89:0e: a0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:D4:0F:70:BF:B6:3D:61:BC:5F:80:47:C1:54:A1:16:85:5B:82:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0dc0d387-396d-30ef-a527-6b801be76ad9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.40.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:57:56:fb:c5:79:6b:32:ba:5a:ce:e1:e4:a4:b0:85:50:8d: 14:3a:f6:de:19:0f:f7:16:a5:90:9f:6f:3d:69:9d:ee:6b:75: 16:6a:b5:53:d7:a5:6e:0e:f3:6a:d1:8f:fd:b3:dc:e8:5d:b1: 42:23:82:f3:22:c5:f1:b7:45:71:d3:26:3d:1c:9a:f2:2a:76: 21:2a:f1:11:24:20:97:f6:bc:e9:95:a4:74:d1:47:08:ee:1d: db:fe:b9:bf:98:e2:a5:7f:ae:3d:82:a2:be:09:61:76:4f:24: 92:63:a1:35:26:41:f9:39:55:f4:13:40:6e:74:26:9c:fd:31: 46:93:a3:ba:92:e2:6a:14:0b:9d:91:af:bb:c8:ac:c5:29:b6: 19:29:8b:83:da:e5:4c:79:a1:5a:66:7f:24:42:31:7e:d8:bc: da:1e:b3:cf:f1:7a:b3:13:41:d4:ee:1e:fc:c3:43:32:fc:9e: 2f:96:3d:5d:09:30:fc:0e:d8:a9:29:2f:3a:a2:b7:ec:9a:c1: 53:fa:3e:8f:e4:60:33:a0:5a:2f:d4:84:f8:b5:c1:11:4b:0a: 06:91:01:95:60:37:e7:b5:70:35:3a:8a:06:fe:09:1e:79:68: 8a:42:65:60:90:9a:56:d1:8e:57:01:84:f6:aa:4c:20:e3:30: a8:9b:63:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uNGNg0CBNFcJIcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MTA4YTNkMTAtNDZkYi00YmViLTljNGYtZjNhZTY1YzE5NWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqe2EqHYwHdspvMRplg+UYPmFArVRB1T44CWF wzBw7RxoJc5N/WNAgIE+W2QiLDt0UH+PynT4SESkN581+9PQ2ipY+FYYar/6SIZS +29mDivjfnF+NfH1VO57SsxXyflfFhrn6dTRH6SPPZo+WJHRAKr09L3dRZKVkj1Q rDQhOd4bCqqazG2X7goaZVTDPgIT2WgYx4kuxer106t1Dty3DWlvihqsijKG+zzt EC7RdOzeR2Qp7AcdDJppHQnjND1J+CVeiNEnfbYM/Hyaher3g0CcDhmAdYwXLO49 XzO2nWDzXePV/Audj2dmaggabwp5s3NY3SXpK8Y52P60iQ6gwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDvUD3C/tj1hvF+AR8FUoRaFW4LSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGRjMGQzODctMzk2ZC0z MGVmLWE1MjctNmI4MDFiZTc2YWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYigeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALtXVvvFeWsyulrO4eSksIVQjRQ69t4ZD/cWpZCfbz1pne5rdRZqtVPX pW4O82rRj/2z3OhdsUIjgvMixfG3RXHTJj0cmvIqdiEq8REkIJf2vOmVpHTRRwju Hdv+ub+Y4qV/rj2Cor4JYXZPJJJjoTUmQfk5VfQTQG50Jpz9MUaTo7qS4moUC52R r7vIrMUpthkpi4Pa5Ux5oVpmfyRCMX7YvNoes8/xerMTQdTuHvzDQzL8ni+WPV0J MPwO2KkpLzqit+yawVP6Po/kYDOgWi/UhPi1wRFLCgaRAZVgN+e1cDU6igb+CR55 aIpCZWCQmlbRjlcBhPaqTCDjMKibY+g= -----END CERTIFICATE-----Generated at Mon Oct 20 12:11:13 2025 by rpki-client