$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d67895a-d74e-3243-9937-b47c4645d299.roa File: 2d67895a-d74e-3243-9937-b47c4645d299.roa (raw, json) Hash identifier: TGGSJBJKk/Hg0Puv0r3FcCPGoVHljLdjnXAMo/7ns9s= Subject key identifier: 50:9B:0A:1A:AE:27:56:6A:9C:D9:B7:E9:78:08:76:B3:9F:49:C9:15 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B52A74AAC0270EBCBBF3D5400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d67895a-d74e-3243-9937-b47c4645d299.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 33651 IP address blocks: 98.51.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:4a:ac:02:70:eb:cb:bf:3d:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=932948b2-98f1-4252-bb5a-848bf20a2048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b5:a0:c9:cf:84:eb:40:6c:0f:f8:88:35:11: b7:88:8c:f9:47:c6:ec:87:46:6e:41:d5:94:53:b3: 6f:87:8c:c8:32:7d:c3:e0:6b:45:eb:60:f4:13:60: 6d:f9:d4:bc:8e:54:83:43:a0:d1:a8:17:92:c2:cf: 3d:32:2d:12:5d:55:68:84:67:1a:6d:73:21:06:c5: 19:be:c1:49:54:18:59:a4:00:37:e0:8e:f5:cd:76: 4c:8f:fa:97:8c:29:ce:ad:85:e1:e4:f0:4f:2d:d3: 4c:38:be:5b:db:55:48:36:20:38:b6:41:d3:7d:3e: 0b:f0:21:0c:4c:6d:9d:a5:e3:fe:bc:6b:89:2e:f4: ce:ee:67:58:ae:c1:4b:32:26:eb:a6:94:45:c3:86: 22:ef:b9:97:cb:a6:72:81:3c:58:0e:1d:bb:4e:2b: c7:79:75:32:f1:fc:f8:2c:54:86:6a:5b:56:9f:d4: a8:de:e9:e3:39:88:4e:10:52:09:cb:15:28:13:c3: 0e:6b:df:fd:e0:17:7b:c8:f5:15:85:a2:3d:4b:3c: 20:7b:04:70:17:06:bd:6f:e6:64:1d:3d:e2:65:0e: bd:ad:ae:44:99:d0:1f:cd:ea:ac:7f:07:ed:df:d7: 12:55:ab:1f:11:fa:40:af:79:c6:cc:fe:8b:c3:90: 23:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:9B:0A:1A:AE:27:56:6A:9C:D9:B7:E9:78:08:76:B3:9F:49:C9:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d67895a-d74e-3243-9937-b47c4645d299.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.51.126.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:23:45:1a:0b:32:d7:24:34:36:70:2d:53:be:7e:f6:be:23: 0b:de:22:4d:3b:3b:df:bd:6c:f6:69:4e:77:e4:b6:10:d0:cf: a3:f0:f4:d2:07:2f:dd:01:86:ae:45:5d:6e:90:2d:4b:0b:29: 1b:1c:c3:1f:71:df:29:90:bc:16:24:9d:a8:f2:5f:2b:40:81: 60:60:09:7d:cb:eb:b6:2c:a8:07:fc:8a:63:25:8f:d3:06:92: f5:c0:a2:76:57:b4:55:c1:67:33:d4:0f:6a:cd:0a:52:75:6e: 42:99:62:ab:93:d2:93:31:fe:57:03:0e:f7:80:3b:b2:35:2e: ed:ec:38:54:bc:e9:10:84:00:42:46:fc:38:8f:e5:c0:2d:8c: fe:fd:73:2d:4e:06:03:00:7b:35:41:f5:6d:6d:5d:fb:ae:25: a0:49:96:df:b4:fe:a1:e8:ec:56:24:e1:6b:19:8c:5b:b6:7a: 44:03:59:ba:3d:e7:95:73:aa:d0:93:cb:5c:40:08:76:01:4d: fe:37:e8:be:5b:aa:98:92:51:a9:28:b6:67:71:eb:1b:05:e9: 5c:90:02:c9:2e:51:02:22:36:ba:44:c6:e4:29:e8:01:94:32: 5f:9c:47:26:4a:28:f4:d5:b3:eb:fe:94:3d:c1:7f:95:e5:f3: e9:eb:1d:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp0qsAnDry789VAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk OTMyOTQ4YjItOThmMS00MjUyLWJiNWEtODQ4YmYyMGEyMDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrWgyc+E60BsD/iINRG3iIz5R8bsh0ZuQdWU U7Nvh4zIMn3D4GtF62D0E2Bt+dS8jlSDQ6DRqBeSws89Mi0SXVVohGcabXMhBsUZ vsFJVBhZpAA34I71zXZMj/qXjCnOrYXh5PBPLdNMOL5b21VINiA4tkHTfT4L8CEM TG2dpeP+vGuJLvTO7mdYrsFLMibrppRFw4Yi77mXy6ZygTxYDh27TivHeXUy8fz4 LFSGaltWn9So3unjOYhOEFIJyxUoE8MOa9/94Bd7yPUVhaI9SzwgewRwFwa9b+Zk HT3iZQ69ra5EmdAfzeqsfwft39cSVasfEfpAr3nGzP6Lw5AjRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFCbChquJ1ZqnNm36XgIdrOfSckVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmQ2Nzg5NWEtZDc0ZS0z MjQzLTk5MzctYjQ3YzQ2NDVkMjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYjN+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUjRRoLMtckNDZwLVO+fva+IwveIk07O9+9bPZpTnfkthDQz6Pw9NIH L90Bhq5FXW6QLUsLKRscwx9x3ymQvBYknajyXytAgWBgCX3L67YsqAf8imMlj9MG kvXAonZXtFXBZzPUD2rNClJ1bkKZYquT0pMx/lcDDveAO7I1Lu3sOFS86RCEAEJG /DiP5cAtjP79cy1OBgMAezVB9W1tXfuuJaBJlt+0/qHo7FYk4WsZjFu2ekQDWbo9 55VzqtCTy1xACHYBTf436L5bqpiSUakotmdx6xsF6VyQAskuUQIiNrpExuQp6AGU Ml+cRyZKKPTVs+v+lD3Bf5Xl8+nrHfg= -----END CERTIFICATE-----Generated at Mon Oct 20 10:18:50 2025 by rpki-client