$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1420ac6-6780-3f82-98b9-3d8d48238909.roa File: a1420ac6-6780-3f82-98b9-3d8d48238909.roa (raw, json) Hash identifier: bZb+O0WOwbJO6EzeoGgSBES1i22RNT2SdkLOtFtCkhQ= Subject key identifier: 41:92:1D:5E:67:9D:98:89:36:E1:87:2A:30:88:9E:59:98:A5:E4:4E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB73CCB3C59895C0E2DC000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1420ac6-6780-3f82-98b9-3d8d48238909.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22909 IP address blocks: 98.211.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:3c:cb:3c:59:89:5c:0e:2d:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=96f3d02a-134c-4650-bbce-fa69ac880ea9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f4:9a:54:15:07:1d:a5:f1:68:06:b2:35:bc: dd:df:7d:c7:21:d4:26:a1:ee:7b:fa:d3:2c:f4:00: 07:97:e7:3e:b8:54:a8:a8:16:f3:8d:2c:de:c3:93: af:30:1c:75:19:94:d5:2f:9a:d7:b9:c3:b5:2c:c2: b3:18:30:b1:f9:20:ce:76:2c:2e:ec:0e:38:22:6f: c5:37:70:1f:43:ee:8a:79:6f:0e:bf:ce:fb:32:01: a6:69:17:a5:9e:3e:71:2b:d5:55:5f:4b:5d:65:2b: 7f:d2:8b:59:39:19:33:e0:e9:84:24:9d:ea:a1:ab: 0f:b8:3b:77:01:0a:49:51:c8:2b:ca:91:a0:a3:66: db:cd:4e:86:64:48:53:91:f4:5a:c7:da:b6:cf:fb: 21:13:c4:3b:b1:ef:55:04:10:bb:27:4c:d0:6d:12: 4a:b0:e5:c8:13:ae:ae:4a:3b:7a:ac:2e:cd:6b:c8: 81:80:d4:d3:89:3e:10:2b:17:24:aa:9c:4b:54:88: 6a:e6:45:21:35:9a:e5:3f:b9:d6:33:a4:82:3b:fc: 60:1a:88:f6:43:0a:4e:50:ca:ed:e5:f6:be:ba:29: 27:7c:00:1e:98:d6:91:f8:8e:1f:05:26:b4:dc:be: f4:61:8a:a5:3a:28:86:54:db:d4:68:05:fc:e8:55: 5d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:92:1D:5E:67:9D:98:89:36:E1:87:2A:30:88:9E:59:98:A5:E4:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1420ac6-6780-3f82-98b9-3d8d48238909.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.211.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:da:8e:ff:6f:9c:05:c1:a2:6d:f4:eb:ec:3b:ad:1d:47:93: dc:ce:16:12:4a:ca:5b:0d:02:e7:8f:46:62:a4:30:37:a3:99: 0e:9a:5b:4e:1f:5a:87:51:06:35:e8:2c:3c:27:d3:8e:f5:3a: 1b:91:18:ee:1f:e4:48:0a:cb:9b:0c:e7:95:e1:80:d0:9e:e2: 2d:84:46:83:6c:31:16:72:98:b6:c0:f4:37:69:13:b1:6d:7a: 9a:6a:ac:18:b8:8e:56:95:3d:d7:d4:8a:9e:56:b9:8f:8f:e5: 18:e9:8d:99:08:a5:b0:57:ff:c5:4f:a4:72:70:1d:c9:f8:cc: 33:ba:57:22:cd:b1:6d:0e:6f:84:1a:3c:d1:b4:18:8b:93:ea: 74:5f:5e:f6:25:5f:e7:12:e5:b4:2b:d1:1f:d0:47:d8:13:1c: 88:db:5a:ef:bf:ed:49:df:29:43:5c:37:cd:4c:99:81:30:72: 20:20:30:0c:bb:5a:cb:e0:16:af:ef:03:28:ec:02:11:b5:c6: 7e:38:be:58:71:d0:c2:ba:58:12:a2:b3:58:36:1e:a8:5e:91: a6:8d:50:f3:d1:5b:6f:8c:e2:cb:76:ae:57:ca:6c:e1:bc:77: e2:2c:ee:67:ca:f7:27:7f:c0:08:6f:30:56:0a:59:ea:db:33: f0:35:ef:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9tzzLPFmJXA4twAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk OTZmM2QwMmEtMTM0Yy00NjUwLWJiY2UtZmE2OWFjODgwZWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/SaVBUHHaXxaAayNbzd333HIdQmoe57+tMs 9AAHl+c+uFSoqBbzjSzew5OvMBx1GZTVL5rXucO1LMKzGDCx+SDOdiwu7A44Im/F N3AfQ+6KeW8Ov877MgGmaRelnj5xK9VVX0tdZSt/0otZORkz4OmEJJ3qoasPuDt3 AQpJUcgrypGgo2bbzU6GZEhTkfRax9q2z/shE8Q7se9VBBC7J0zQbRJKsOXIE66u Sjt6rC7Na8iBgNTTiT4QKxckqpxLVIhq5kUhNZrlP7nWM6SCO/xgGoj2QwpOUMrt 5fa+uiknfAAemNaR+I4fBSa03L70YYqlOiiGVNvUaAX86FVdZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEGSHV5nnZiJNuGHKjCInlmYpeROMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTE0MjBhYzYtNjc4MC0z ZjgyLTk4YjktM2Q4ZDQ4MjM4OTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYtMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKfajv9vnAXBom306+w7rR1Hk9zOFhJKylsNAuePRmKkMDejmQ6aW04f WodRBjXoLDwn0471OhuRGO4f5EgKy5sM55XhgNCe4i2ERoNsMRZymLbA9DdpE7Ft eppqrBi4jlaVPdfUip5WuY+P5RjpjZkIpbBX/8VPpHJwHcn4zDO6VyLNsW0Ob4Qa PNG0GIuT6nRfXvYlX+cS5bQr0R/QR9gTHIjbWu+/7UnfKUNcN81MmYEwciAgMAy7 WsvgFq/vAyjsAhG1xn44vlhx0MK6WBKis1g2HqhekaaNUPPRW2+M4st2rlfKbOG8 d+Is7mfK9yd/wAhvMFYKWerbM/A17yQ= -----END CERTIFICATE-----Generated at Mon Oct 20 07:14:04 2025 by rpki-client