$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99a5d19b-3d13-3b8a-82f5-2562dd3b8d81.roa File: 99a5d19b-3d13-3b8a-82f5-2562dd3b8d81.roa (raw, json) Hash identifier: dj7mJge97vZGOCWx8r3jnpI2vnGNrOSxcrocYRZaMrk= Subject key identifier: 24:15:2F:38:16:46:2C:76:F8:05:52:20:09:48:91:2D:40:13:27:26 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B4E771BA2426FB0BECF44BF80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99a5d19b-3d13-3b8a-82f5-2562dd3b8d81.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 33661 IP address blocks: 198.0.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:1b:a2:42:6f:b0:be:cf:44:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=856628fd-84d6-42e4-8219-83476623878a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:8a:ce:16:4e:b5:9d:46:58:0e:ef:f9:6b:7a: 94:ce:39:ef:2c:bc:cc:f5:cd:50:27:c0:8b:97:f9: 07:93:05:f3:23:1c:28:2b:0f:ec:5d:6c:3c:44:61: 6b:f3:f2:8f:00:57:30:ea:06:8a:a4:64:f7:12:33: 9d:f9:be:32:be:22:73:60:fd:56:0e:4a:b3:35:79: 1c:17:ea:08:11:e4:72:06:a5:03:0d:0a:3b:86:7d: f7:85:59:18:3c:45:5b:0f:ad:15:55:66:7e:44:d0: a3:a5:cf:88:c5:da:fe:66:7a:03:a3:0b:92:5c:dc: 96:09:18:19:3f:ea:7d:8c:6f:07:9a:28:26:0b:0a: a7:4e:cb:37:12:aa:3e:4c:72:f5:7f:2e:10:78:13: d9:9c:32:64:d6:21:03:48:fe:d3:04:f0:4b:62:d7: d1:04:e4:c4:bb:0c:b7:aa:51:08:1e:a4:59:1c:d2: 55:f9:db:65:e9:75:e8:c6:a6:21:6a:d3:36:30:b4: f5:a0:f4:3a:c2:5c:12:30:a8:a9:0a:a6:26:a8:11: 1e:33:ab:47:cc:1d:0c:55:fa:5f:15:85:78:6d:c3: 18:d4:04:8e:5e:dd:17:37:76:bf:54:6f:59:b6:4a: fe:b7:34:79:ff:1f:7a:63:84:6d:38:cb:ad:42:37: 75:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:15:2F:38:16:46:2C:76:F8:05:52:20:09:48:91:2D:40:13:27:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99a5d19b-3d13-3b8a-82f5-2562dd3b8d81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 198.0.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:0c:2c:c4:d3:f3:f3:e1:1e:f1:27:fd:f2:41:87:6d:96:87: 59:39:85:f0:09:f2:81:1d:08:23:9e:76:cb:be:90:17:77:2b: db:6e:ce:1b:c7:9e:2d:6e:9f:23:e8:a7:99:c6:50:db:df:21: cc:f3:9c:6f:d3:e7:00:48:33:2d:b9:2e:7f:15:b1:11:20:f5: c5:af:80:93:6e:81:aa:e2:a2:b9:52:f1:51:bc:c7:db:f5:1f: da:d5:48:5f:a5:38:cc:b0:70:4e:f9:bf:5f:5b:43:e9:cc:86: 71:48:06:e0:41:c2:5d:7d:6b:d3:94:83:68:97:22:81:31:51: 4b:6a:09:bf:58:62:7e:2f:dd:f0:ba:90:94:3e:77:dc:35:c7: dd:54:24:6c:2a:d4:70:b9:b2:e4:b9:8d:88:cd:d6:56:79:e6: 66:3d:8f:f4:3f:b3:b5:25:7d:ef:22:f0:13:57:71:e8:d1:5f: 20:16:84:36:e8:8a:71:6b:e7:e0:7c:de:e9:2c:9c:f8:d5:47: 8d:47:b2:85:6c:5e:da:71:6b:32:11:05:04:a0:2b:27:53:c0: a6:77:84:dc:15:d2:6b:48:89:d7:3e:13:53:a0:2a:a8:08:11: f9:b4:49:aa:eb:5a:64:e0:24:80:8d:5c:90:a3:be:c7:1b:64: 41:7e:0a:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdxuiQm+wvs9Ev4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk ODU2NjI4ZmQtODRkNi00MmU0LTgyMTktODM0NzY2MjM4NzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4rOFk61nUZYDu/5a3qUzjnvLLzM9c1QJ8CL l/kHkwXzIxwoKw/sXWw8RGFr8/KPAFcw6gaKpGT3EjOd+b4yviJzYP1WDkqzNXkc F+oIEeRyBqUDDQo7hn33hVkYPEVbD60VVWZ+RNCjpc+Ixdr+ZnoDowuSXNyWCRgZ P+p9jG8HmigmCwqnTss3Eqo+THL1fy4QeBPZnDJk1iEDSP7TBPBLYtfRBOTEuwy3 qlEIHqRZHNJV+dtl6XXoxqYhatM2MLT1oPQ6wlwSMKipCqYmqBEeM6tHzB0MVfpf FYV4bcMY1ASOXt0XN3a/VG9Ztkr+tzR5/x96Y4RtOMutQjd1VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQVLzgWRix2+AVSIAlIkS1AEycmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTlhNWQxOWItM2QxMy0z YjhhLTgyZjUtMjU2MmRkM2I4ZDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExgAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALIMLMTT8/PhHvEn/fJBh22Wh1k5hfAJ8oEdCCOedsu+kBd3K9tuzhvH ni1unyPop5nGUNvfIczznG/T5wBIMy25Ln8VsREg9cWvgJNugariorlS8VG8x9v1 H9rVSF+lOMywcE75v19bQ+nMhnFIBuBBwl19a9OUg2iXIoExUUtqCb9YYn4v3fC6 kJQ+d9w1x91UJGwq1HC5suS5jYjN1lZ55mY9j/Q/s7Ulfe8i8BNXcejRXyAWhDbo inFr5+B83uksnPjVR41HsoVsXtpxazIRBQSgKydTwKZ3hNwV0mtIidc+E1OgKqgI Efm0SarrWmTgJICNXJCjvscbZEF+CvI= -----END CERTIFICATE-----Generated at Mon Oct 20 06:32:21 2025 by rpki-client