$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6c592a0f-de71-3d70-988f-e4ee08546773.roa File: 6c592a0f-de71-3d70-988f-e4ee08546773.roa (raw, json) Hash identifier: XEw6hxjdz/YRgW11gR4gGw+Go/UQ8oRAH6iIe1SfEi8= Subject key identifier: B1:A1:BD:53:42:14:AF:A2:8E:BF:90:4A:86:98:54:0B:3B:D6:E6:67 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB95E7BF63A850E46130030 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6c592a0f-de71-3d70-988f-e4ee08546773.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33667 IP address blocks: 98.252.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:5e:7b:f6:3a:85:0e:46:13:00:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=cf988ef7-974a-49a6-b93c-adede31c6b71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:70:84:11:2e:e0:47:eb:cd:1f:13:16:56:a0: 56:e2:b3:a9:97:5b:04:65:26:07:c7:c8:d8:e3:b4: 5b:69:1b:21:c4:a4:62:19:1e:43:9c:1f:3a:07:f6: 5f:c4:36:39:19:eb:7c:26:18:40:d0:da:18:14:e2: 82:61:c8:ea:1b:70:df:a7:44:c7:ae:90:14:8c:94: df:94:b6:9c:b9:e2:1c:bc:76:9c:a2:1d:da:bd:b1: 76:c3:d7:82:85:08:8b:80:3e:22:ca:8a:08:46:1f: 18:19:7a:93:88:5f:d0:fe:03:bc:77:aa:23:52:c5: d2:cb:2c:13:09:11:12:8f:3e:4a:10:9d:39:f8:56: 32:2c:5b:0f:2b:99:1e:77:4d:9c:b7:5a:12:b6:6b: 61:46:d3:de:4f:f4:db:f3:90:5c:cb:ba:98:ad:8c: c8:da:41:0c:b4:94:6a:f9:5b:47:10:f2:da:3e:4d: 42:eb:91:63:98:cc:5c:9f:c6:8f:f3:14:db:c3:c3: 63:4e:96:95:8d:79:c4:07:0c:26:b5:b7:5f:8f:90: bf:8c:9d:33:0a:4f:a6:6c:df:7c:cd:32:46:19:68: c4:82:ba:7b:11:08:ec:16:8d:6d:fb:4c:c4:ed:20: 86:82:0a:87:26:8f:3e:5c:68:db:b5:45:0b:2f:c6: 0c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A1:BD:53:42:14:AF:A2:8E:BF:90:4A:86:98:54:0B:3B:D6:E6:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6c592a0f-de71-3d70-988f-e4ee08546773.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.252.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:e7:39:b4:90:ec:99:d1:61:7d:99:6e:fb:55:9a:95:bc:6a: e1:f0:1f:bc:8b:d3:0c:ae:be:e4:cf:a6:b2:37:44:ce:4f:d0: a3:fa:38:e2:1f:7f:f4:38:eb:ac:f9:30:33:1d:f4:a0:a1:2a: b4:c3:ed:1b:07:c2:6c:11:09:c2:3e:9f:ee:88:f0:17:0c:fb: 22:e5:97:c0:8a:2d:a9:a7:d3:f1:45:13:70:a2:0f:46:18:62: 14:05:4c:2f:03:e6:29:ff:59:1c:76:ec:b6:3f:4c:bc:79:c3: fe:78:68:ea:53:1b:fb:ae:85:51:f6:d3:94:6d:cb:21:f6:59: 4b:da:69:37:34:61:de:53:35:1d:47:e1:c9:c1:52:13:6b:ed: 40:24:d1:a0:7c:63:bb:e9:b6:d1:95:4f:11:31:55:ec:7a:26: 41:38:3c:c2:8a:7e:50:c9:58:ee:77:c0:0d:ac:d1:9d:52:04: 9f:71:8c:30:40:2e:f9:93:6e:00:15:ba:5a:4a:c9:ca:ef:0c: 97:93:a7:a4:c2:7b:50:69:bb:4a:b7:3e:58:a7:39:ea:a0:2f: 70:a5:5c:97:ca:f8:50:b2:6f:db:93:86:c4:18:7b:71:be:cd: 27:d6:fa:9b:e2:d7:b2:57:a4:e0:46:35:17:1c:0f:08:f8:ed: a3:ce:e6:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uV579jqFDkYTADAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk Y2Y5ODhlZjctOTc0YS00OWE2LWI5M2MtYWRlZGUzMWM2YjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnCEES7gR+vNHxMWVqBW4rOpl1sEZSYHx8jY 47RbaRshxKRiGR5DnB86B/ZfxDY5Get8JhhA0NoYFOKCYcjqG3Dfp0THrpAUjJTf lLacueIcvHacoh3avbF2w9eChQiLgD4iyooIRh8YGXqTiF/Q/gO8d6ojUsXSyywT CRESjz5KEJ05+FYyLFsPK5ked02ct1oStmthRtPeT/Tb85Bcy7qYrYzI2kEMtJRq +VtHEPLaPk1C65FjmMxcn8aP8xTbw8NjTpaVjXnEBwwmtbdfj5C/jJ0zCk+mbN98 zTJGGWjEgrp7EQjsFo1t+0zE7SCGggqHJo8+XGjbtUULL8YMMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLGhvVNCFK+ijr+QSoaYVAs71uZnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNmM1OTJhMGYtZGU3MS0z ZDcwLTk4OGYtZTRlZTA4NTQ2NzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGYvxAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3nObSQ7JnRYX2ZbvtVmpW8auHwH7yL0wyuvuTPprI3RM5P0KP6OOIf f/Q466z5MDMd9KChKrTD7RsHwmwRCcI+n+6I8BcM+yLll8CKLamn0/FFE3CiD0YY YhQFTC8D5in/WRx27LY/TLx5w/54aOpTG/uuhVH205RtyyH2WUvaaTc0Yd5TNR1H 4cnBUhNr7UAk0aB8Y7vpttGVTxExVex6JkE4PMKKflDJWO53wA2s0Z1SBJ9xjDBA LvmTbgAVulpKycrvDJeTp6TCe1Bpu0q3PlinOeqgL3ClXJfK+FCyb9uThsQYe3G+ zSfW+pvi17JXpOBGNRccDwj47aPO5kE= -----END CERTIFICATE-----Generated at Mon Oct 20 05:26:45 2025 by rpki-client