$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2fe54079-1821-38b4-8111-e59b4e5560af.roa File: 2fe54079-1821-38b4-8111-e59b4e5560af.roa (raw, json) Hash identifier: 3lFHWpInBio93AeSDNEiyxT5MHUp/fRAPhFlcIzSijo= Subject key identifier: F1:49:5A:79:98:06:4C:C3:79:BE:48:DB:D2:54:19:6F:0B:6E:63:12 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B92DD3CEBF7676CAF27691110 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2fe54079-1821-38b4-8111-e59b4e5560af.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 22258 IP address blocks: 98.54.206.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:3c:eb:f7:67:6c:af:27:69:11:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=cc5026d4-2f14-4299-81bf-aada0c43d5d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:25:ac:db:ed:d5:69:09:cd:35:57:ee:a5:14: 12:68:44:60:59:13:ef:1d:5a:78:5c:29:6a:c5:e7: d7:d3:bd:6f:49:69:32:a6:3b:de:ff:ad:10:f8:ef: ba:39:06:75:a1:2d:74:d1:05:41:1e:7d:04:df:be: d3:9e:c2:ab:e1:14:21:7b:57:bc:19:d7:1d:8e:32: 3d:57:01:19:d1:c0:7f:00:62:57:4a:91:c2:e2:e9: 3d:fc:6f:0d:08:b4:ee:e0:d0:17:f4:97:da:3a:8d: 63:e6:26:25:5d:72:a9:e0:92:cf:59:00:ac:cf:22: 34:6b:89:d1:a3:95:c4:db:00:e4:a0:8f:de:23:1b: 39:28:eb:50:18:44:88:d4:c6:5b:07:63:56:56:9f: f6:99:24:20:90:38:da:93:73:35:cb:30:6b:bd:2d: ea:61:d5:66:ec:1b:75:52:84:41:80:cb:af:7f:7c: b8:e3:e6:fb:f3:4a:47:c4:de:a2:38:2d:5d:eb:c8: a7:67:28:c0:17:37:77:ff:0a:e6:d1:a3:d7:9e:29: 35:b9:4e:bc:71:a1:b8:3d:46:12:5f:32:8d:d9:0c: 94:ef:c2:3e:7c:49:eb:e4:60:61:b2:2b:a5:4f:86: 8f:c8:97:be:6a:68:a7:9d:9f:31:15:05:bd:35:ec: d7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:49:5A:79:98:06:4C:C3:79:BE:48:DB:D2:54:19:6F:0B:6E:63:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2fe54079-1821-38b4-8111-e59b4e5560af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.54.206.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:cd:f6:24:72:00:09:67:03:1a:59:68:ae:15:9f:1b:20:8f: c0:fe:d9:16:2b:f3:e5:26:78:4c:d0:4e:5d:54:2e:c0:15:b7: ee:9c:de:16:c6:1c:ae:6a:e0:1f:47:5e:b2:02:28:6c:c5:c4: ab:03:4a:5e:1c:03:75:cc:42:23:43:4f:de:44:20:8a:54:82: b0:b6:6f:81:dc:32:5f:0f:ac:77:70:05:1e:23:1f:9e:9e:f3: 0d:32:78:47:4f:e8:cb:2b:30:5c:ff:de:a6:ca:dd:a4:9c:95: cd:76:f3:51:93:9e:88:2c:68:d0:1e:94:a8:6b:85:94:81:7e: 0b:f5:d9:ea:5b:fd:ad:bd:13:98:7b:4b:11:74:b2:e8:c9:55: 92:ac:b1:45:5c:96:41:68:c0:f9:ee:48:d8:f6:95:50:b2:3e: 3c:64:a9:f9:47:38:e5:90:df:a4:a9:d3:1b:cd:af:68:c9:48: 01:8a:52:11:6c:63:11:50:18:e9:26:8c:35:03:85:dd:0e:16: a3:33:62:f0:ed:66:24:90:b8:64:ae:17:7b:52:1e:65:d3:e4: 49:38:cb:65:86:08:2b:fa:f3:6b:89:b2:ca:9b:63:8e:c9:ea: de:f2:fe:5b:2b:83:4c:cb:c1:cb:3a:d1:6a:29:9e:73:d5:ad: c4:ae:6d:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3Tzr92dsrydpERAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk Y2M1MDI2ZDQtMmYxNC00Mjk5LTgxYmYtYWFkYTBjNDNkNWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCWs2+3VaQnNNVfupRQSaERgWRPvHVp4XClq xefX071vSWkypjve/60Q+O+6OQZ1oS100QVBHn0E377TnsKr4RQhe1e8GdcdjjI9 VwEZ0cB/AGJXSpHC4uk9/G8NCLTu4NAX9JfaOo1j5iYlXXKp4JLPWQCszyI0a4nR o5XE2wDkoI/eIxs5KOtQGESI1MZbB2NWVp/2mSQgkDjak3M1yzBrvS3qYdVm7Bt1 UoRBgMuvf3y44+b780pHxN6iOC1d68inZyjAFzd3/wrm0aPXnik1uU68caG4PUYS XzKN2QyU78I+fEnr5GBhsiulT4aPyJe+aminnZ8xFQW9NezXwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFJWnmYBkzDeb5I29JUGW8LbmMSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmZlNTQwNzktMTgyMS0z OGI0LTgxMTEtZTU5YjRlNTU2MGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYjbOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3N9iRyAAlnAxpZaK4Vnxsgj8D+2RYr8+UmeEzQTl1ULsAVt+6c3hbG HK5q4B9HXrICKGzFxKsDSl4cA3XMQiNDT95EIIpUgrC2b4HcMl8PrHdwBR4jH56e 8w0yeEdP6MsrMFz/3qbK3aSclc1281GTnogsaNAelKhrhZSBfgv12epb/a29E5h7 SxF0sujJVZKssUVclkFowPnuSNj2lVCyPjxkqflHOOWQ36Sp0xvNr2jJSAGKUhFs YxFQGOkmjDUDhd0OFqMzYvDtZiSQuGSuF3tSHmXT5Ek4y2WGCCv682uJssqbY47J 6t7y/lsrg0zLwcs60WopnnPVrcSubXM= -----END CERTIFICATE-----Generated at Mon Oct 20 10:03:31 2025 by rpki-client