$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e89d3b3-893b-323a-9a04-fd5e4cb99d21.roa File: 0e89d3b3-893b-323a-9a04-fd5e4cb99d21.roa (raw, json) Hash identifier: c6YftRBXPPtN30etCSSepX7qg9Gz/eai8PijyZAhwwk= Subject key identifier: C6:EA:86:B7:62:72:A5:34:25:06:C8:96:4E:95:5B:24:25:1B:44:FD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B92DD35D84AC74B0B6E89E280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e89d3b3-893b-323a-9a04-fd5e4cb99d21.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 22258 IP address blocks: 98.239.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:35:d8:4a:c7:4b:0b:6e:89:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=084acfc6-0159-4ad9-b790-35f8b28d0956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ee:a4:90:8b:19:b3:d8:4d:6d:d2:5d:c6:34: 95:67:f7:c1:6e:b3:76:cf:ff:c1:84:f3:67:e7:bb: 87:ab:28:ee:2e:c3:e4:d9:22:4b:6e:02:b2:b6:fa: 0f:4f:97:fc:da:1b:63:4e:58:0b:af:64:e3:2e:2d: 00:14:f8:6b:77:40:a7:82:b6:74:74:c6:ee:67:d7: d8:88:ef:4d:ea:f0:22:a4:23:f4:ee:89:02:9f:df: 66:56:12:b0:d7:45:3a:ed:2c:4a:c8:a3:f1:5e:d9: 4a:8a:85:8d:91:e1:8d:7e:5b:8d:b4:30:3d:10:fa: 34:6a:6e:de:35:b6:32:77:c7:76:3c:e3:92:ac:0e: fa:28:36:53:ff:f8:23:ec:df:bd:02:3e:17:c5:eb: 2b:c5:d2:f1:24:13:2f:49:26:2f:f2:fc:ca:11:a9: 1c:5b:92:f9:c9:ab:d7:97:0d:6b:8f:83:b8:a0:07: 01:46:44:7f:c7:f1:c3:e3:55:44:3a:f7:b5:2d:3b: 72:e8:df:fd:6a:bd:78:d8:7a:d1:9f:a6:4a:f2:0c: 97:4a:43:cc:00:f6:c1:85:58:ea:ae:4f:80:f6:aa: ee:bf:59:2f:1c:80:b9:0e:5b:29:35:7b:56:6c:a8: 32:ec:ac:bc:ba:40:ee:4d:a6:53:93:7e:69:5d:83: 28:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:EA:86:B7:62:72:A5:34:25:06:C8:96:4E:95:5B:24:25:1B:44:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e89d3b3-893b-323a-9a04-fd5e4cb99d21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.239.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:44:38:89:1a:58:3a:15:2e:2e:8e:fb:06:2d:fc:e7:b5:91: 36:69:a7:f8:15:a8:f2:9f:f4:b0:35:12:49:09:da:57:5e:89: b5:31:9c:ef:ba:62:f8:57:c6:15:aa:af:5f:b8:66:2d:25:c1: 49:4c:07:ef:37:ee:d7:4e:e6:1c:a9:11:a4:43:f3:53:c1:fe: bf:dc:ad:3f:0f:19:76:b5:a1:a2:0e:7c:ac:ae:99:05:6b:4e: 04:69:3e:6b:8f:38:44:0f:7c:6d:d4:c4:25:58:6c:4f:77:0e: 59:6b:73:17:dc:40:6e:f9:95:b2:fb:18:39:61:13:b8:fe:cd: ab:6b:d6:dd:3e:f0:06:0d:09:67:4e:d0:2a:1a:1a:95:4c:2d: 5e:cd:de:8c:44:56:82:2b:6a:97:6a:a4:9b:65:68:be:46:e3: 5c:3d:e1:5d:7f:d7:dc:b2:70:3d:72:bf:c7:75:33:bc:a3:ba: 15:c2:c3:91:bc:93:54:2f:28:9c:93:31:78:18:dd:61:56:59: 2c:b0:03:fc:c4:cc:94:bb:ff:8d:fc:63:dc:2a:16:2a:1a:f3: aa:8b:1b:07:a4:e8:62:2f:b2:b2:aa:c5:50:70:f0:c6:58:55: ee:79:6e:91:3f:12:d6:a9:ca:4f:c2:22:35:d3:57:d3:86:89: 1a:b8:93:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3TXYSsdLC26J4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk MDg0YWNmYzYtMDE1OS00YWQ5LWI3OTAtMzVmOGIyOGQwOTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhO6kkIsZs9hNbdJdxjSVZ/fBbrN2z//BhPNn 57uHqyjuLsPk2SJLbgKytvoPT5f82htjTlgLr2TjLi0AFPhrd0CngrZ0dMbuZ9fY iO9N6vAipCP07okCn99mVhKw10U67SxKyKPxXtlKioWNkeGNfluNtDA9EPo0am7e NbYyd8d2POOSrA76KDZT//gj7N+9Aj4XxesrxdLxJBMvSSYv8vzKEakcW5L5yavX lw1rj4O4oAcBRkR/x/HD41VEOve1LTty6N/9ar142HrRn6ZK8gyXSkPMAPbBhVjq rk+A9qruv1kvHIC5DlspNXtWbKgy7Ky8ukDuTaZTk35pXYMoDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMbqhrdicqU0JQbIlk6VWyQlG0T9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGU4OWQzYjMtODkzYi0z MjNhLTlhMDQtZmQ1ZTRjYjk5ZDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYu8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMpEOIkaWDoVLi6O+wYt/Oe1kTZpp/gVqPKf9LA1EkkJ2ldeibUxnO+6 YvhXxhWqr1+4Zi0lwUlMB+837tdO5hypEaRD81PB/r/crT8PGXa1oaIOfKyumQVr TgRpPmuPOEQPfG3UxCVYbE93DllrcxfcQG75lbL7GDlhE7j+zatr1t0+8AYNCWdO 0CoaGpVMLV7N3oxEVoIrapdqpJtlaL5G41w94V1/19yycD1yv8d1M7yjuhXCw5G8 k1QvKJyTMXgY3WFWWSywA/zEzJS7/438Y9wqFioa86qLGwek6GIvsrKqxVBw8MZY Ve55bpE/Etapyk/CIjXTV9OGiRq4k7Q= -----END CERTIFICATE-----Generated at Mon Oct 20 06:46:47 2025 by rpki-client