$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ebbf65a2-8896-3ddb-9d3f-c9b50f2604e1.roa File: ebbf65a2-8896-3ddb-9d3f-c9b50f2604e1.roa (raw, json) Hash identifier: WqhbZvr1odh3Ofvfme3NRKXxa+by/kE7Yg+QRL85z+Y= Subject key identifier: E8:48:94:10:15:8D:8A:D0:33:D7:E3:72:E7:1C:33:F0:3B:81:0D:84 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB73D371F6B8C2CFCB483C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ebbf65a2-8896-3ddb-9d3f-c9b50f2604e1.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22909 IP address blocks: 98.240.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:3d:37:1f:6b:8c:2c:fc:b4:83:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=59a8b873-9c63-44a6-ac2e-33db80e3a6ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:41:ee:9d:95:f7:fe:b7:21:81:29:93:a4:1d: 02:2f:49:67:6e:4b:9f:bd:98:68:6e:30:4f:30:2e: 9d:c9:72:8d:6c:d4:d1:77:5b:27:31:c9:07:61:23: 91:7f:06:d6:2f:d8:fd:56:b8:88:46:34:32:8b:2e: 94:76:b8:be:6a:a6:3b:0b:40:2f:16:eb:e6:03:ad: f2:46:d4:77:1e:8c:a2:1c:47:75:21:af:b0:b9:56: 56:50:b9:a9:c4:e8:fb:80:57:c6:06:0b:1e:e5:f7: 7e:08:70:10:94:20:18:9a:f6:48:21:27:b8:83:3e: 2b:f2:2c:17:51:be:f7:8f:79:25:0d:1d:6d:9d:02: 8f:14:3f:b6:20:ce:eb:6f:14:e4:a1:7e:89:fb:46: a2:da:ff:ea:40:86:a9:58:bd:9d:c7:63:5f:57:45: ea:ea:9c:50:a2:f9:1b:e9:7a:0a:cf:09:5f:56:32: 5a:8e:5b:5f:94:bf:12:c9:81:32:f3:08:ad:88:6e: d2:84:0c:47:9e:15:ae:d8:1c:77:ba:14:69:66:8d: c0:d2:82:80:b2:7b:63:a3:f5:ad:ec:11:43:a6:e7: 43:ea:75:57:bb:d9:69:66:eb:14:cf:3e:d7:1d:7a: a3:2f:63:94:b9:b7:50:00:cf:66:5d:bf:c3:0b:ee: 99:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:48:94:10:15:8D:8A:D0:33:D7:E3:72:E7:1C:33:F0:3B:81:0D:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ebbf65a2-8896-3ddb-9d3f-c9b50f2604e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.240.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:ab:72:1c:4d:56:14:c2:c6:f4:d0:30:2a:c5:df:31:99:47: a8:3e:8e:11:14:00:9d:c1:1b:43:6d:9e:ab:b3:d8:4d:d7:b3: c8:ea:e0:15:a8:97:cb:41:ae:c4:0b:dc:dd:a7:e5:0f:73:0d: 7d:a8:bf:df:ca:86:82:aa:81:74:51:54:3a:c9:6f:62:ba:e7: f6:14:73:26:30:cc:c0:db:8f:5a:35:7c:d6:29:db:17:bd:47: 85:9e:ad:e0:96:3b:f9:eb:4f:67:4b:4b:d7:89:55:1a:e9:70: e2:f2:4f:82:4b:d1:83:84:73:c9:cc:77:74:b0:51:2b:b3:6f: a7:28:51:25:23:db:b3:66:51:b7:05:94:37:25:67:f4:b4:6a: 93:cb:4c:23:74:4f:e4:a2:3d:0d:14:1a:10:9a:a4:24:c8:c8: f7:41:cf:0a:50:3b:fc:48:e6:09:3f:78:ae:99:be:90:2b:80: 93:a6:57:e1:44:24:e5:b5:8f:3d:54:5f:80:8c:10:b0:93:94: ec:ba:e4:6a:aa:4c:32:64:8c:e6:ca:6d:72:0e:37:b4:39:5d: cb:18:26:50:73:16:a4:cc:aa:88:25:74:76:fc:75:92:ac:f7: 46:92:26:bd:06:63:8d:79:cc:78:e5:ba:9e:41:77:9c:f4:5c: 56:7f:c9:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9tz03H2uMLPy0g8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NTlhOGI4NzMtOWM2My00NGE2LWFjMmUtMzNkYjgwZTNhNmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUHunZX3/rchgSmTpB0CL0lnbkufvZhobjBP MC6dyXKNbNTRd1snMckHYSORfwbWL9j9VriIRjQyiy6Udri+aqY7C0AvFuvmA63y RtR3HoyiHEd1Ia+wuVZWULmpxOj7gFfGBgse5fd+CHAQlCAYmvZIISe4gz4r8iwX Ub73j3klDR1tnQKPFD+2IM7rbxTkoX6J+0ai2v/qQIapWL2dx2NfV0Xq6pxQovkb 6XoKzwlfVjJajltflL8SyYEy8witiG7ShAxHnhWu2Bx3uhRpZo3A0oKAsntjo/Wt 7BFDpudD6nVXu9lpZusUzz7XHXqjL2OUubdQAM9mXb/DC+6ZZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOhIlBAVjYrQM9fjcuccM/A7gQ2EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZWJiZjY1YTItODg5Ni0z ZGRiLTlkM2YtYzliNTBmMjYwNGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYvACMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+rchxNVhTCxvTQMCrF3zGZR6g+jhEUAJ3BG0Ntnquz2E3Xs8jq4BWo l8tBrsQL3N2n5Q9zDX2ov9/KhoKqgXRRVDrJb2K65/YUcyYwzMDbj1o1fNYp2xe9 R4WereCWO/nrT2dLS9eJVRrpcOLyT4JL0YOEc8nMd3SwUSuzb6coUSUj27NmUbcF lDclZ/S0apPLTCN0T+SiPQ0UGhCapCTIyPdBzwpQO/xI5gk/eK6ZvpArgJOmV+FE JOW1jz1UX4CMELCTlOy65GqqTDJkjObKbXION7Q5XcsYJlBzFqTMqogldHb8dZKs 90aSJr0GY415zHjlup5Bd5z0XFZ/yRI= -----END CERTIFICATE-----Generated at Mon Oct 20 06:33:48 2025 by rpki-client