$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a90a1e40-628a-3a6c-be47-fe42231fb609.roa File: a90a1e40-628a-3a6c-be47-fe42231fb609.roa (raw, json) Hash identifier: vBCVjKr9yhyX+LsvcVM1Fdvxszt+W/GxpyISTf86Ccg= Subject key identifier: 96:D0:5E:53:51:DC:F7:05:81:F2:B9:FB:5C:1A:F5:96:08:1E:01:72 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB8D2572E5FEDA1B66B4B80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a90a1e40-628a-3a6c-be47-fe42231fb609.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22909 IP address blocks: 98.40.66.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:d2:57:2e:5f:ed:a1:b6:6b:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=eaff3bca-7c2e-431c-a60f-71bd0de10656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:66:50:fc:75:5a:9e:de:fd:4b:0c:b5:5d:71: 45:46:a9:c2:12:a2:4f:db:5a:fa:4b:74:98:44:39: dd:67:ee:20:54:20:ed:b4:ad:11:eb:3b:48:00:98: 6c:09:69:ae:c1:a9:94:3b:ed:76:44:62:68:30:ee: 69:c7:ed:66:43:3c:e0:12:f5:53:dc:31:4a:fe:da: e3:1f:ca:64:f2:4d:bb:9a:fb:95:e4:61:35:2e:9e: 6b:8e:c9:79:28:9b:1e:b4:e0:35:a1:4e:24:64:24: 36:8f:8f:b7:20:6b:c7:7f:fb:a3:5e:db:5b:df:2d: 14:c6:62:dd:e5:04:2f:87:ba:24:66:0f:f9:5b:d9: a6:5f:67:19:e3:4b:1f:69:bf:72:92:9d:b9:99:71: 2f:76:52:2c:79:cb:d4:ec:7c:09:16:b2:6c:e5:de: 95:5a:62:ef:1c:a8:65:ac:37:64:2e:89:e1:cf:db: 8c:0c:69:03:71:75:5a:c3:ff:8c:bc:3f:26:94:55: 38:b4:9e:c1:6e:28:da:f2:fe:89:9c:47:96:e6:fa: d8:e7:f2:4d:27:80:d8:76:cb:50:10:cb:b9:a0:68: 1b:24:f3:63:40:b9:52:38:bc:4c:c8:64:bd:7f:30: 5a:c6:a3:cd:47:29:f7:ce:e8:f8:39:0c:bc:75:05: ee:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:D0:5E:53:51:DC:F7:05:81:F2:B9:FB:5C:1A:F5:96:08:1E:01:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a90a1e40-628a-3a6c-be47-fe42231fb609.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.40.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:27:fa:55:26:6c:0d:00:45:52:43:ea:93:66:03:2b:29:52: 8e:37:71:ad:39:9f:fa:c4:50:ee:5d:a1:ba:09:03:db:bf:b5: 4d:39:26:32:c9:20:28:fa:82:d7:9b:04:90:21:f0:53:d8:c6: d8:4d:75:15:f3:86:bc:07:c6:b1:cc:a3:9d:f3:1e:75:42:56: db:72:8e:23:42:fc:79:15:2d:b1:e5:fd:fe:ed:60:4e:39:9f: fa:a9:7c:6e:ff:07:76:cb:f0:ef:6d:3a:30:25:aa:dc:02:36: e9:7a:42:5b:2a:fe:a0:b9:fb:b1:a7:9b:bd:fb:7c:83:49:a2: bf:9a:ef:e9:16:82:4f:fe:5c:91:05:cb:e6:35:86:ad:99:ec: f5:c2:12:d4:85:76:29:71:2c:20:38:fd:f4:14:26:c1:5a:f6: f1:0a:29:67:f1:e3:28:16:cb:36:67:59:81:9d:6d:6c:b4:de: 2a:a6:d2:bc:48:5e:51:bb:d9:91:73:5d:eb:94:4b:42:68:9e: a2:7d:56:48:24:d3:98:e9:0e:6f:31:58:0e:68:44:11:7f:57: aa:c7:35:8e:f1:05:74:ce:68:9d:62:2c:9e:ed:f9:8e:a5:4f: 30:51:c0:28:9d:30:c9:0d:cd:14:dc:96:69:e8:03:e9:61:b8: 34:d3:88:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uNJXLl/tobZrS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ZWFmZjNiY2EtN2MyZS00MzFjLWE2MGYtNzFiZDBkZTEwNjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWZQ/HVant79Swy1XXFFRqnCEqJP21r6S3SY RDndZ+4gVCDttK0R6ztIAJhsCWmuwamUO+12RGJoMO5px+1mQzzgEvVT3DFK/trj H8pk8k27mvuV5GE1Lp5rjsl5KJsetOA1oU4kZCQ2j4+3IGvHf/ujXttb3y0UxmLd 5QQvh7okZg/5W9mmX2cZ40sfab9ykp25mXEvdlIsecvU7HwJFrJs5d6VWmLvHKhl rDdkLonhz9uMDGkDcXVaw/+MvD8mlFU4tJ7Bbija8v6JnEeW5vrY5/JNJ4DYdstQ EMu5oGgbJPNjQLlSOLxMyGS9fzBaxqPNRyn3zuj4OQy8dQXuiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJbQXlNR3PcFgfK5+1wa9ZYIHgFyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTkwYTFlNDAtNjI4YS0z YTZjLWJlNDctZmU0MjIzMWZiNjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYihCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKIn+lUmbA0ARVJD6pNmAyspUo43ca05n/rEUO5doboJA9u/tU05JjLJ ICj6gtebBJAh8FPYxthNdRXzhrwHxrHMo53zHnVCVttyjiNC/HkVLbHl/f7tYE45 n/qpfG7/B3bL8O9tOjAlqtwCNul6Qlsq/qC5+7Gnm737fINJor+a7+kWgk/+XJEF y+Y1hq2Z7PXCEtSFdilxLCA4/fQUJsFa9vEKKWfx4ygWyzZnWYGdbWy03iqm0rxI XlG72ZFzXeuUS0JonqJ9Vkgk05jpDm8xWA5oRBF/V6rHNY7xBXTOaJ1iLJ7t+Y6l TzBRwCidMMkNzRTclmnoA+lhuDTTiLk= -----END CERTIFICATE-----Generated at Mon Oct 20 06:46:39 2025 by rpki-client