$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa64f5c0-291b-394c-8726-41691c3a6de2.roa File: fa64f5c0-291b-394c-8726-41691c3a6de2.roa (raw, json) Hash identifier: 4EETXAQ3UPOrxKEK3bTErBt9gYTheKu2tk8MbJ2YpGY= Subject key identifier: 91:84:9B:9B:C6:34:7E:53:C8:F4:0F:90:BC:A2:C8:33:86:B4:FC:65 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB73BF03CB26FDDA7299E80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa64f5c0-291b-394c-8726-41691c3a6de2.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22909 IP address blocks: 98.193.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:3b:f0:3c:b2:6f:dd:a7:29:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=fc058333-def6-4f79-ae42-f4d5ba3ae1fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:96:3e:f6:8c:fa:de:fd:0e:f5:80:51:2b:19: 22:ed:ad:f4:af:d1:8a:fd:87:37:64:4c:79:1f:7a: f5:70:97:1f:5a:87:9e:a0:cb:6b:60:3b:32:f6:79: 04:5f:29:85:fd:6d:34:c2:12:0a:d5:23:46:9b:56: e4:0c:94:68:42:7b:11:a1:44:67:1d:21:0f:fc:df: 66:ba:ff:4d:c1:9d:f8:ca:7d:31:b1:56:c3:7f:dc: 92:34:0d:11:36:d8:63:d0:c7:28:03:72:cf:31:8b: 15:a1:32:d3:ee:c4:b3:65:0c:4c:82:92:ab:d7:6a: 1e:cc:26:57:df:79:4d:9e:ce:68:56:24:9e:88:d9: d6:69:87:ec:bc:ec:97:bc:74:71:65:d1:db:c3:56: df:75:63:f5:69:38:27:83:db:93:67:f4:f2:be:70: 57:70:e8:a5:53:eb:6a:a9:31:1b:51:69:c0:07:11: c1:46:9b:64:a5:0d:aa:50:d8:41:7d:36:5a:5e:b1: 33:ff:ba:1e:7a:6c:2e:be:0e:d1:12:5c:2b:7f:96: 17:59:64:54:27:4f:b5:3c:b2:85:92:d7:68:7f:2e: ee:4e:60:1e:7b:3c:62:25:04:c4:67:da:01:fe:6d: 30:96:34:b9:86:63:a4:1a:7b:a0:54:b8:d4:ff:3d: ad:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:84:9B:9B:C6:34:7E:53:C8:F4:0F:90:BC:A2:C8:33:86:B4:FC:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fa64f5c0-291b-394c-8726-41691c3a6de2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.193.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:6c:89:9b:c2:a3:55:ad:27:5e:ca:20:b0:7d:e8:67:80:9d: f0:e7:81:05:d9:4f:a3:6c:99:f7:1e:3c:df:1b:de:6e:54:a7: 34:8e:16:32:d6:7d:3b:ab:45:ce:c2:42:df:dc:78:c4:69:f5: 58:42:63:36:e1:f7:35:49:13:ac:21:85:10:16:c3:a8:63:0f: fb:2d:84:c2:ae:43:14:c7:05:b0:35:a1:c1:a3:84:fc:dd:1c: 9d:55:30:20:20:d4:15:cb:62:9a:8d:d9:df:86:f0:6a:9e:73: e8:2b:ee:fb:68:f0:dc:6e:4d:0d:0c:e4:57:53:23:ff:fd:a8: c9:11:62:f1:9f:c9:d7:1e:f1:59:1e:57:04:7d:92:ef:4c:cd: ac:41:fd:e8:8d:e3:a5:8d:f6:6d:7e:8a:59:db:e5:8a:bc:6d: c9:c1:eb:67:91:d2:c8:f4:1a:e8:2d:10:5c:56:0e:bb:f6:72: 05:9d:22:ae:07:61:1d:0b:a8:29:ba:58:f8:0c:61:dd:ec:87: d4:c9:5f:e2:84:ea:77:3b:36:5a:81:89:5b:64:a6:4a:ff:95: b4:db:70:96:39:57:1e:b8:ee:9e:10:91:73:1b:cb:ea:9a:98: 2a:06:a0:70:86:a6:41:e9:6c:dc:de:56:54:0d:14:c8:4f:9a: 19:73:68:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9tzvwPLJv3acpnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ZmMwNTgzMzMtZGVmNi00Zjc5LWFlNDItZjRkNWJhM2FlMWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/JY+9oz63v0O9YBRKxki7a30r9GK/Yc3ZEx5 H3r1cJcfWoeeoMtrYDsy9nkEXymF/W00whIK1SNGm1bkDJRoQnsRoURnHSEP/N9m uv9NwZ34yn0xsVbDf9ySNA0RNthj0McoA3LPMYsVoTLT7sSzZQxMgpKr12oezCZX 33lNns5oViSeiNnWaYfsvOyXvHRxZdHbw1bfdWP1aTgng9uTZ/TyvnBXcOilU+tq qTEbUWnABxHBRptkpQ2qUNhBfTZaXrEz/7oeemwuvg7RElwrf5YXWWRUJ0+1PLKF ktdofy7uTmAeezxiJQTEZ9oB/m0wljS5hmOkGnugVLjU/z2tYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGEm5vGNH5TyPQPkLyiyDOGtPxlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmE2NGY1YzAtMjkxYi0z OTRjLTg3MjYtNDE2OTFjM2E2ZGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYsHEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdsiZvCo1WtJ17KILB96GeAnfDngQXZT6NsmfcePN8b3m5UpzSOFjLW fTurRc7CQt/ceMRp9VhCYzbh9zVJE6whhRAWw6hjD/sthMKuQxTHBbA1ocGjhPzd HJ1VMCAg1BXLYpqN2d+G8Gqec+gr7vto8NxuTQ0M5FdTI//9qMkRYvGfydce8Vke VwR9ku9MzaxB/eiN46WN9m1+ilnb5Yq8bcnB62eR0sj0GugtEFxWDrv2cgWdIq4H YR0LqCm6WPgMYd3sh9TJX+KE6nc7NlqBiVtkpkr/lbTbcJY5Vx647p4QkXMby+qa mCoGoHCGpkHpbNzeVlQNFMhPmhlzaPI= -----END CERTIFICATE-----Generated at Mon Oct 20 03:46:02 2025 by rpki-client