$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/851a109a-d5b8-370e-b919-1a4e05bad4a1.roa File: 851a109a-d5b8-370e-b919-1a4e05bad4a1.roa (raw, json) Hash identifier: 9jtHy+sQltPfVj4acGpIpM8s+CjQzjEKYfe/chBfgiI= Subject key identifier: B9:E5:D6:98:80:C3:8A:5C:55:38:E3:0E:48:4C:73:89:7F:EC:43:67 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B52A760E66C04B2D6368E90E0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/851a109a-d5b8-370e-b919-1a4e05bad4a1.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 33651 IP address blocks: 98.37.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:60:e6:6c:04:b2:d6:36:8e:90:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=4381c61c-83b9-4b7c-8ae0-dc66ce2265f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a6:22:ce:13:8c:b4:c3:b5:9b:b7:6b:51:16: da:b9:a0:4c:d6:61:55:68:64:48:6a:2c:e6:03:06: 34:08:ab:9a:90:34:8a:79:c0:64:d8:1c:91:de:78: d9:0c:4f:25:7a:2c:5b:23:a3:30:c0:ae:7a:e4:bf: ad:d7:1c:c0:31:38:bc:c2:bf:5b:c0:d8:d2:67:a9: b4:a1:aa:eb:52:ad:0c:41:25:cf:56:b3:a1:07:81: 31:cb:58:1b:b9:88:76:84:5c:9b:9d:64:d2:b6:3c: a1:91:3d:4d:b1:89:69:b3:64:51:5c:82:a8:eb:81: fe:5f:d8:a1:b3:2d:e8:f2:e9:ea:6c:f2:8b:9a:27: 86:04:bb:b5:66:a0:9c:44:e1:1d:61:e6:fb:3e:81: 2a:37:d0:16:4a:b9:72:c2:64:3d:e7:e4:fb:41:98: d0:7f:c1:4e:6b:1f:4e:b3:3e:7c:28:15:31:73:10: c7:34:2b:c1:8a:d2:43:64:51:59:6a:44:f8:6f:8f: 37:02:3d:32:bf:ab:5a:3c:d2:cb:94:38:44:70:b1: 36:dc:15:1e:41:b1:9e:36:31:f6:df:62:54:e4:dd: 16:75:72:31:a1:2e:68:9c:40:cf:a8:c8:72:cc:98: 54:af:73:23:ef:7e:dd:2a:8f:85:d4:ab:69:3d:c0: e4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E5:D6:98:80:C3:8A:5C:55:38:E3:0E:48:4C:73:89:7F:EC:43:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/851a109a-d5b8-370e-b919-1a4e05bad4a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.37.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:42:2f:6d:b7:ff:8b:d9:be:dc:e1:e9:35:bb:a5:8b:01:16: a5:04:67:e2:ed:a5:ee:36:fa:e3:b2:f8:04:bc:ad:ac:ab:e1: 66:39:d8:81:f7:d8:73:18:d3:92:9b:e2:57:99:f2:f3:28:7c: dc:6c:70:dc:90:73:64:87:57:c2:a6:94:7c:cd:7e:5b:a3:71: d8:33:b0:64:d4:6c:d7:76:c0:8d:47:4e:d4:69:56:ed:31:ba: 85:56:cb:b9:2d:a8:d7:a2:63:2d:e0:00:5b:06:04:87:25:fa: 7a:27:8c:33:e3:88:ea:dc:88:82:8e:4c:fe:96:a7:93:43:4c: 40:5a:27:59:06:0e:e7:6f:17:e8:df:ce:f1:92:fd:17:35:0b: 76:66:8a:db:00:22:d3:ff:93:62:7d:6f:34:d1:35:b7:3c:bf: 22:90:ad:06:8d:17:e6:d3:7f:98:2c:07:c6:54:3f:3e:c6:b8: 9f:c0:92:b0:ec:51:ae:1b:e7:34:13:fd:f5:89:21:61:9a:00: f3:93:b7:eb:0a:02:22:21:43:9f:76:6f:b8:28:ce:2d:f7:c4: e9:a6:06:f4:d6:f4:9e:ea:73:75:f7:d6:cb:07:24:2b:5f:e1: a4:d8:a0:8e:76:ba:52:8f:48:ca:64:75:8c:bf:39:3c:74:5c: b7:bc:9f:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp2DmbASy1jaOkOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk NDM4MWM2MWMtODNiOS00YjdjLThhZTAtZGM2NmNlMjI2NWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqYizhOMtMO1m7drURbauaBM1mFVaGRIaizm AwY0CKuakDSKecBk2ByR3njZDE8leixbI6MwwK565L+t1xzAMTi8wr9bwNjSZ6m0 oarrUq0MQSXPVrOhB4Exy1gbuYh2hFybnWTStjyhkT1NsYlps2RRXIKo64H+X9ih sy3o8unqbPKLmieGBLu1ZqCcROEdYeb7PoEqN9AWSrlywmQ95+T7QZjQf8FOax9O sz58KBUxcxDHNCvBitJDZFFZakT4b483Aj0yv6taPNLLlDhEcLE23BUeQbGeNjH2 32JU5N0WdXIxoS5onEDPqMhyzJhUr3Mj737dKo+F1KtpPcDkTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLnl1piAw4pcVTjjDkhMc4l/7ENnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODUxYTEwOWEtZDViOC0z NzBlLWI5MTktMWE0ZTA1YmFkNGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYiUEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZCL223/4vZvtzh6TW7pYsBFqUEZ+Ltpe42+uOy+AS8rayr4WY52IH3 2HMY05Kb4leZ8vMofNxscNyQc2SHV8KmlHzNflujcdgzsGTUbNd2wI1HTtRpVu0x uoVWy7ktqNeiYy3gAFsGBIcl+nonjDPjiOrciIKOTP6Wp5NDTEBaJ1kGDudvF+jf zvGS/Rc1C3ZmitsAItP/k2J9bzTRNbc8vyKQrQaNF+bTf5gsB8ZUPz7GuJ/AkrDs Ua4b5zQT/fWJIWGaAPOTt+sKAiIhQ592b7gozi33xOmmBvTW9J7qc3X31ssHJCtf 4aTYoI52ulKPSMpkdYy/OTx0XLe8n3g= -----END CERTIFICATE-----Generated at Mon Oct 20 02:18:52 2025 by rpki-client