$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af8ac021-1b76-3482-a149-f0a4a261d7bd.roa File: af8ac021-1b76-3482-a149-f0a4a261d7bd.roa (raw, json) Hash identifier: 9dy+Z0mqzkT8Vo2+IWT3/2w2dGHvUepd4K1RDtmeW+I= Subject key identifier: 21:29:57:96:A0:7E:D5:A0:C9:B5:BB:EF:75:B2:6C:54:0E:06:2B:AB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AAD7048C133B021BF48F80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af8ac021-1b76-3482-a149-f0a4a261d7bd.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 98.194.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:d7:04:8c:13:3b:02:1b:f4:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=4b6971b5-2398-4ba2-9b7c-aafedc08d4ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:3d:59:40:f8:23:b8:e2:79:ab:4a:9f:e5:0c: e1:70:a4:87:41:81:a0:9f:4f:84:71:8a:95:a2:0c: 33:4a:db:80:ca:ac:20:23:35:db:ce:d5:41:01:87: 2a:b9:97:97:45:0d:19:cc:19:8f:47:2a:b1:b4:d1: 02:fc:d5:e5:02:cb:79:64:1c:0b:7b:93:06:41:b1: e8:80:0d:ef:5f:e7:55:a7:57:73:2a:16:e9:52:8b: 82:c6:d4:0b:19:18:9f:86:b9:7c:83:5b:26:4d:3e: 94:bd:ad:e5:0c:33:93:97:e1:92:a5:90:1a:bf:72: ea:ce:50:a6:83:b6:8f:13:51:9a:04:2a:0a:3b:52: 6d:42:a1:61:c7:8d:a4:1c:ce:5d:da:76:85:e9:f9: 62:49:ef:2c:b8:8b:ec:6e:f0:3a:a3:bd:64:a3:aa: f9:96:be:a2:90:e2:e1:29:81:bf:38:ed:21:f9:60: 7a:91:13:15:26:da:79:68:8d:8d:7a:4f:6e:b4:90: af:e3:35:97:5f:60:10:16:26:bc:e2:41:61:75:93: 03:1f:52:ab:f4:61:1b:a6:de:64:9e:04:62:9a:02: 1a:ac:16:28:66:bb:f5:1f:66:d4:ed:14:1b:52:bc: 5e:9b:60:72:1d:11:a0:31:48:31:bc:77:aa:df:84: 45:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:29:57:96:A0:7E:D5:A0:C9:B5:BB:EF:75:B2:6C:54:0E:06:2B:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af8ac021-1b76-3482-a149-f0a4a261d7bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.194.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:01:d4:88:58:4f:dc:7f:d6:56:9f:68:c4:1a:1e:e3:46:5a: a2:b1:f0:d0:8e:f0:6e:a7:a1:39:a0:2f:41:e9:97:d0:61:63: 17:5e:c6:f0:23:d5:af:5e:3a:ba:89:6f:c6:77:c3:26:a6:88: f1:2a:bc:5a:40:b0:98:1c:f3:1b:50:7c:03:75:73:cb:cb:e4: 93:4e:8d:6b:ca:6e:7f:24:a5:f5:85:f3:65:0d:79:40:7f:c5: 33:c9:a2:20:40:65:a3:95:26:e9:84:ff:cc:ed:cf:95:d5:10: 3b:e0:09:03:35:e3:cc:70:ea:84:68:c6:e5:1f:3d:f0:64:60: 56:0f:bc:b3:45:ec:a0:24:1d:9f:b6:59:9d:ed:3c:0c:8b:60: ce:8f:01:67:ee:5b:72:f1:d8:a6:87:b9:2b:3f:9b:13:d8:ea: 31:13:72:4d:eb:c6:b7:eb:b8:f4:db:e1:76:2a:a9:2b:0e:f1: 3f:e4:72:6d:f2:62:7a:9c:ee:06:a6:62:7a:71:d4:52:62:19: 86:54:2b:13:1d:2a:f5:54:26:c9:59:67:0b:20:04:00:fb:89: b1:74:1b:0d:c9:f2:59:43:7b:1d:02:93:ab:af:fd:e5:1b:6e: fa:a3:da:89:e0:dc:2f:dd:0f:17:32:fd:d9:2c:43:e5:20:91: ff:c0:f4:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqtcEjBM7Ahv0j4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NGI2OTcxYjUtMjM5OC00YmEyLTliN2MtYWFmZWRjMDhkNGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkT1ZQPgjuOJ5q0qf5QzhcKSHQYGgn0+EcYqV ogwzStuAyqwgIzXbztVBAYcquZeXRQ0ZzBmPRyqxtNEC/NXlAst5ZBwLe5MGQbHo gA3vX+dVp1dzKhbpUouCxtQLGRifhrl8g1smTT6Uva3lDDOTl+GSpZAav3LqzlCm g7aPE1GaBCoKO1JtQqFhx42kHM5d2naF6fliSe8suIvsbvA6o71ko6r5lr6ikOLh KYG/OO0h+WB6kRMVJtp5aI2Nek9utJCv4zWXX2AQFia84kFhdZMDH1Kr9GEbpt5k ngRimgIarBYoZrv1H2bU7RQbUrxem2ByHRGgMUgxvHeq34RFYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCEpV5agftWgybW773WybFQOBiurMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWY4YWMwMjEtMWI3Ni0z NDgyLWExNDktZjBhNGEyNjFkN2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYsLSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsB1IhYT9x/1lafaMQaHuNGWqKx8NCO8G6noTmgL0Hpl9BhYxdexvAj 1a9eOrqJb8Z3wyamiPEqvFpAsJgc8xtQfAN1c8vL5JNOjWvKbn8kpfWF82UNeUB/ xTPJoiBAZaOVJumE/8ztz5XVEDvgCQM148xw6oRoxuUfPfBkYFYPvLNF7KAkHZ+2 WZ3tPAyLYM6PAWfuW3Lx2KaHuSs/mxPY6jETck3rxrfruPTb4XYqqSsO8T/kcm3y Ynqc7gamYnpx1FJiGYZUKxMdKvVUJslZZwsgBAD7ibF0Gw3J8llDex0Ck6uv/eUb bvqj2ong3C/dDxcy/dksQ+Ugkf/A9N0= -----END CERTIFICATE-----Generated at Mon Oct 20 23:09:57 2025 by rpki-client