$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/870dc6ef-4eac-3798-98b5-c658ce41fc6b.roa File: 870dc6ef-4eac-3798-98b5-c658ce41fc6b.roa (raw, json) Hash identifier: dKDMzZiN2X16xeeen+TmclYNUerPwbU44epAbDVv5mg= Subject key identifier: A5:B5:D8:A4:11:8C:22:E8:4B:29:C5:65:7C:01:7B:C3:56:6B:3E:02 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B92DD3BB1091813F0FDBFD380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/870dc6ef-4eac-3798-98b5-c658ce41fc6b.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 22258 IP address blocks: 98.50.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:3b:b1:09:18:13:f0:fd:bf:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=67bfc31b-f7ca-463b-8eb6-97bb76f3fe24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:16:a3:c5:1f:0e:25:ad:6d:30:7f:9d:e8:41: 02:0b:f8:c8:4c:8c:22:9b:38:12:90:c7:1a:40:42: 62:23:3f:06:c8:0e:59:6e:80:8b:bf:6e:ca:6f:68: 8f:0f:14:55:9d:e3:16:90:64:a3:88:c4:79:a6:aa: d9:d0:44:36:78:a6:d3:eb:ef:65:4a:7a:06:5f:af: 97:c3:58:15:00:14:57:0c:6f:2a:e4:71:e0:df:c2: ce:89:15:20:02:75:59:e5:90:a5:d6:42:ac:0c:5a: ee:2b:da:a1:a0:0b:47:4e:3d:e5:76:8b:10:2d:c3: a3:c9:d8:51:fe:0e:a2:24:63:a1:29:18:9c:1c:ae: 33:95:01:26:78:92:10:21:69:ad:76:d4:90:93:0b: f9:84:bd:70:be:49:2f:80:97:00:9a:45:ae:1d:25: 5e:e5:d3:03:f8:77:b1:86:03:97:ba:5c:a7:f8:c4: 6f:b2:f6:d0:db:24:72:52:7b:bf:d9:0a:ae:78:e6: 6f:80:c5:92:04:50:52:d4:60:10:77:ea:44:1b:d1: 06:2a:7f:a5:2e:c5:1a:4b:31:8c:77:9e:9b:bd:61: 18:90:95:fc:ba:0a:42:b7:01:49:88:0c:0c:05:f8: 56:40:dd:bd:bb:b5:1c:9f:d9:85:11:de:cf:40:e4: 28:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:B5:D8:A4:11:8C:22:E8:4B:29:C5:65:7C:01:7B:C3:56:6B:3E:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/870dc6ef-4eac-3798-98b5-c658ce41fc6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.50.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:f1:38:21:10:b0:50:1b:3b:11:1d:32:9d:dd:19:7a:64:6b: 23:49:a0:5d:50:99:a5:36:fb:3c:c6:98:76:45:0e:9d:50:cb: da:49:95:d7:be:bc:82:7a:0a:62:73:78:4d:db:62:dd:cb:a3: 93:63:b5:5c:d1:ff:08:59:f8:ca:54:f8:7c:60:4a:41:77:fa: 0c:ef:9f:1f:a0:96:2e:ca:cf:bb:8b:fc:fe:26:cd:75:b6:46: fd:9d:e8:d4:f6:db:19:50:44:56:1b:92:28:c2:57:c3:e6:ad: 72:53:e9:b6:d9:10:77:62:32:09:7b:cd:ea:c2:a3:90:70:17: fc:2f:c5:80:87:a3:76:01:c7:56:0b:38:71:ec:91:9e:e8:0c: 6d:aa:cd:d6:0a:ff:43:aa:6d:be:03:08:d2:71:ca:c1:80:e3: cf:4c:83:42:1e:3f:63:35:a0:2e:cb:ca:1b:7b:26:3f:37:52: 42:02:7b:fa:ca:99:e3:15:f2:8c:e8:43:7a:36:19:fc:37:ff: 71:f4:27:51:8a:d6:a6:51:58:75:71:f9:6e:9c:71:9a:7d:9d: 22:f9:5d:e1:14:3a:d5:a0:ff:9e:32:1a:4b:ce:83:b3:1a:a8: b3:23:ed:90:23:64:d6:41:0f:4c:12:cc:9f:46:1b:7d:94:b3: d2:2c:38:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3TuxCRgT8P2/04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk NjdiZmMzMWItZjdjYS00NjNiLThlYjYtOTdiYjc2ZjNmZTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBajxR8OJa1tMH+d6EECC/jITIwimzgSkMca QEJiIz8GyA5ZboCLv27Kb2iPDxRVneMWkGSjiMR5pqrZ0EQ2eKbT6+9lSnoGX6+X w1gVABRXDG8q5HHg38LOiRUgAnVZ5ZCl1kKsDFruK9qhoAtHTj3ldosQLcOjydhR /g6iJGOhKRicHK4zlQEmeJIQIWmtdtSQkwv5hL1wvkkvgJcAmkWuHSVe5dMD+Hex hgOXulyn+MRvsvbQ2yRyUnu/2QqueOZvgMWSBFBS1GAQd+pEG9EGKn+lLsUaSzGM d56bvWEYkJX8ugpCtwFJiAwMBfhWQN29u7Ucn9mFEd7PQOQoswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKW12KQRjCLoSynFZXwBe8NWaz4CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODcwZGM2ZWYtNGVhYy0z Nzk4LTk4YjUtYzY1OGNlNDFmYzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYjKuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTxOCEQsFAbOxEdMp3dGXpkayNJoF1QmaU2+zzGmHZFDp1Qy9pJlde+ vIJ6CmJzeE3bYt3Lo5NjtVzR/whZ+MpU+HxgSkF3+gzvnx+gli7Kz7uL/P4mzXW2 Rv2d6NT22xlQRFYbkijCV8PmrXJT6bbZEHdiMgl7zerCo5BwF/wvxYCHo3YBx1YL OHHskZ7oDG2qzdYK/0Oqbb4DCNJxysGA489Mg0IeP2M1oC7Lyht7Jj83UkICe/rK meMV8ozoQ3o2Gfw3/3H0J1GK1qZRWHVx+W6ccZp9nSL5XeEUOtWg/54yGkvOg7Ma qLMj7ZAjZNZBD0wSzJ9GG32Us9IsOIc= -----END CERTIFICATE-----Generated at Mon Oct 20 03:54:14 2025 by rpki-client