$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aad8ff10-0b3a-392f-95e4-298987648bda.roa File: aad8ff10-0b3a-392f-95e4-298987648bda.roa (raw, json) Hash identifier: /gqpvbQs5SGy0dBRnalY41gJohs8anlrgf/K2/+f8cw= Subject key identifier: 37:31:87:40:D7:1F:32:51:9C:A2:0F:3E:BF:E2:E8:57:37:47:10:4E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B92DD3D2E20CBEDAA18C6F600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aad8ff10-0b3a-392f-95e4-298987648bda.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 22258 IP address blocks: 98.54.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:3d:2e:20:cb:ed:aa:18:c6:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=4929fb3f-54ca-48e3-a3f7-b8bdecd912e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f1:a7:53:c6:dc:4c:c2:2b:3f:0c:2a:e4:04: c3:c4:33:02:62:4a:93:bc:fe:a2:5a:7f:3a:fc:c9: 6c:df:4e:88:44:72:b1:37:91:b7:7c:bb:7d:fa:b2: 3d:4a:9a:11:3c:df:3e:7b:49:49:0b:f2:f4:a0:8f: e9:98:93:c7:b5:a0:85:5e:51:d5:30:d7:12:a0:27: a5:64:7c:5f:60:d3:d2:59:ba:9d:28:cc:46:d1:2e: fe:ba:1c:2f:10:03:8b:40:e5:7e:9d:5f:14:00:f9: 54:9e:ee:29:5f:dc:c2:6a:2e:d9:23:7c:65:e2:ce: 61:53:49:76:3c:5d:f9:6d:01:da:32:b1:dd:12:fa: 01:4f:83:66:e0:9f:da:63:01:5d:11:41:7b:43:30: 71:6f:21:b5:72:f5:38:38:c5:29:74:f6:5e:3b:52: f9:20:c4:0e:ab:11:e9:cf:a5:f5:b0:c4:7b:79:93: dd:6b:ae:4a:fe:51:ac:1f:3c:1e:4c:21:6e:3d:3b: 13:07:65:b5:88:e0:5f:8a:4b:09:12:a8:24:8b:06: 71:cd:ac:dc:fd:dc:ab:ff:56:1f:a6:18:49:f9:89: 32:4e:65:dd:67:7f:06:fc:db:80:f5:c3:34:70:fb: 80:b1:05:b4:be:a1:ba:55:1d:79:7e:68:29:e3:b7: 88:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:31:87:40:D7:1F:32:51:9C:A2:0F:3E:BF:E2:E8:57:37:47:10:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aad8ff10-0b3a-392f-95e4-298987648bda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.54.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:91:c0:0e:fa:fa:2a:0e:e1:bd:34:f9:eb:58:6a:ca:1e:d1: 2a:87:d8:cf:d7:3c:c9:bb:dd:d2:4c:1b:33:6d:0e:33:9b:7f: 94:15:66:82:58:f5:94:d5:2c:c4:0b:92:ad:6c:f8:5b:18:a9: dd:57:08:c4:e2:cc:a0:2e:a4:6a:47:17:64:df:17:7d:55:e2: 2c:a1:c4:f4:72:ff:33:a2:7b:aa:f6:fc:d9:12:a6:c9:14:7c: 00:82:2e:b4:c2:06:37:6a:e5:17:c9:1b:9a:a6:de:60:db:12: 33:1d:8c:2e:60:69:84:5e:70:17:40:e0:41:f5:d7:88:c7:76: 5d:00:4a:2e:f5:69:e3:89:fe:02:96:76:c7:5d:9d:b2:2c:86: 74:06:e3:48:37:ea:c7:7e:a7:57:22:59:81:0d:0a:28:24:78: 0f:e2:d1:f7:08:a6:b6:84:f0:32:e5:dd:19:f2:d7:34:6e:17: 77:1d:1c:1b:60:31:de:67:e7:8a:3a:8b:fb:9f:67:66:49:e4: 3e:62:48:af:d7:de:07:3f:3c:81:5a:7c:77:cc:a3:06:9b:ab: 83:a0:25:d0:4d:d8:ba:8c:55:0c:76:0d:80:6d:6e:eb:05:ff: 44:46:6d:eb:d1:e0:48:01:7b:29:77:fe:cc:99:49:b3:c9:43: 90:6f:17:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3T0uIMvtqhjG9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk NDkyOWZiM2YtNTRjYS00OGUzLWEzZjctYjhiZGVjZDkxMmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivGnU8bcTMIrPwwq5ATDxDMCYkqTvP6iWn86 /Mls306IRHKxN5G3fLt9+rI9SpoRPN8+e0lJC/L0oI/pmJPHtaCFXlHVMNcSoCel ZHxfYNPSWbqdKMxG0S7+uhwvEAOLQOV+nV8UAPlUnu4pX9zCai7ZI3xl4s5hU0l2 PF35bQHaMrHdEvoBT4Nm4J/aYwFdEUF7QzBxbyG1cvU4OMUpdPZeO1L5IMQOqxHp z6X1sMR7eZPda65K/lGsHzweTCFuPTsTB2W1iOBfiksJEqgkiwZxzazc/dyr/1Yf phhJ+YkyTmXdZ38G/NuA9cM0cPuAsQW0vqG6VR15fmgp47eIlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDcxh0DXHzJRnKIPPr/i6Fc3RxBOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWFkOGZmMTAtMGIzYS0z OTJmLTk1ZTQtMjk4OTg3NjQ4YmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYjbeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmRwA76+ioO4b00+etYasoe0SqH2M/XPMm73dJMGzNtDjObf5QVZoJY 9ZTVLMQLkq1s+FsYqd1XCMTizKAupGpHF2TfF31V4iyhxPRy/zOie6r2/NkSpskU fACCLrTCBjdq5RfJG5qm3mDbEjMdjC5gaYRecBdA4EH114jHdl0ASi71aeOJ/gKW dsddnbIshnQG40g36sd+p1ciWYENCigkeA/i0fcIpraE8DLl3Rny1zRuF3cdHBtg Md5n54o6i/ufZ2ZJ5D5iSK/X3gc/PIFafHfMowabq4OgJdBN2LqMVQx2DYBtbusF /0RGbevR4EgBeyl3/syZSbPJQ5BvF+o= -----END CERTIFICATE-----Generated at Mon Oct 20 09:40:16 2025 by rpki-client