$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ff2cbdb-2720-448b-951d-699a8e60cb7d/98fca7ba-2033-3ce6-8a92-4bb1c5e0cf9c.roa File: 98fca7ba-2033-3ce6-8a92-4bb1c5e0cf9c.roa (raw, json) Hash identifier: CX25nPrCgmUP7WaTC//Lmr6kI3Sbccn7i00mZPg/FWw= Subject key identifier: 92:43:E1:6B:5B:4F:DC:DF:28:C8:40:03:89:3D:76:A8:7C:D6:B0:7D Certificate issuer: /CN=5ff2cbdb-2720-448b-951d-699a8e60cb7d Certificate serial: 010D0C9F4328584B715CBB34713C739207705A80 Authority key identifier: A2:46:63:F9:01:FB:63:EC:13:17:31:16:54:0C:A8:01:5C:7D:10:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ff2cbdb-2720-448b-951d-699a8e60cb7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ff2cbdb-2720-448b-951d-699a8e60cb7d/98fca7ba-2033-3ce6-8a92-4bb1c5e0cf9c.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 30679 IP address blocks: 134.71.0.0/16 maxlen: 24 2620:df:8000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ff2cbdb-2720-448b-951d-699a8e60cb7d/5ff2cbdb-2720-448b-951d-699a8e60cb7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ff2cbdb-2720-448b-951d-699a8e60cb7d/5ff2cbdb-2720-448b-951d-699a8e60cb7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ff2cbdb-2720-448b-951d-699a8e60cb7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:bb:34:71:3c:73:92:07:70:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ff2cbdb-2720-448b-951d-699a8e60cb7d Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=2ed399e8-ca69-4919-8da4-011b53f82ccc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:02:14:a5:3c:0b:e4:97:85:8a:72:0a:d1:69: 0a:9c:7d:c5:18:70:8a:5f:b2:60:77:dd:56:68:4b: a9:58:ed:4a:3c:cd:75:46:f3:fa:3d:20:57:02:28: 3d:ce:94:03:24:cb:41:a4:c1:2f:46:3d:a5:fb:a8: 17:fe:2d:62:5d:68:9d:73:d4:46:cc:3c:12:10:c7: b8:25:90:ab:af:b7:76:31:4c:1d:7b:80:75:35:d8: c4:b9:11:c9:41:58:4d:e7:59:d4:4c:35:cb:31:4f: 56:0f:ea:4c:1e:e2:42:fc:49:18:29:94:77:b8:b1: e3:84:4c:b0:d4:ac:55:01:ea:87:3e:c5:e5:7a:00: 77:6c:18:48:74:3c:45:62:95:8c:27:10:4b:71:41: 5e:b0:d5:2f:57:96:65:4c:70:57:5c:e6:30:dc:60: 75:2b:40:6c:91:a3:a5:a2:a4:a6:6e:86:88:21:f1: 45:de:c0:47:0c:8f:ac:d7:ed:d9:1d:73:f3:e4:b4: 8e:30:36:b7:97:cf:5e:9f:fd:7a:0e:41:8b:dc:b7: fb:15:ba:81:17:f2:b0:30:bf:92:a7:02:12:9a:5f: 9e:39:ae:c2:79:e3:3c:dc:2b:e3:de:ec:9b:de:c5: ab:25:c7:8d:8c:04:ec:e9:2d:78:04:9d:47:d7:84: b7:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:43:E1:6B:5B:4F:DC:DF:28:C8:40:03:89:3D:76:A8:7C:D6:B0:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ff2cbdb-2720-448b-951d-699a8e60cb7d/98fca7ba-2033-3ce6-8a92-4bb1c5e0cf9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ff2cbdb-2720-448b-951d-699a8e60cb7d/5ff2cbdb-2720-448b-951d-699a8e60cb7d.crl X509v3 Authority Key Identifier: keyid:A2:46:63:F9:01:FB:63:EC:13:17:31:16:54:0C:A8:01:5C:7D:10:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5ff2cbdb-2720-448b-951d-699a8e60cb7d.cer sbgp-ipAddrBlock: critical IPv4: 134.71.0.0/16 IPv6: 2620:df:8000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:6b:67:9e:b1:46:b9:bb:0f:07:cb:18:51:cb:2e:ae:f7:d9: ed:ee:2d:38:77:c8:9c:c1:03:e5:d9:67:bf:5b:35:87:8b:f2: f8:5e:94:84:27:6a:46:64:66:e1:f8:1d:4a:3c:a1:67:d2:1e: 93:84:19:8c:9a:7b:4a:4d:a3:ba:b1:7b:bc:7e:b9:61:e8:42: 24:f8:1f:1b:52:bf:2d:47:6b:b6:eb:a6:44:c2:dc:7d:0a:07: df:5c:76:57:41:7d:77:67:4a:e9:be:e2:8f:47:41:b1:1e:41: 9d:2a:00:93:5a:3d:be:ae:b9:1e:99:83:6c:6b:90:bc:2c:6f: df:f0:6b:a2:fc:69:e3:be:2c:2b:46:58:e0:38:e9:88:0e:13: 30:fa:f5:b3:26:fa:ca:8e:c5:a5:73:26:1b:6e:12:7d:69:8c: a0:68:88:56:b0:d4:47:ed:ab:67:75:19:81:73:2e:5d:ee:32: 79:06:0b:c1:7a:86:f1:b8:c1:9c:88:ae:67:fe:80:3d:44:8e: fb:f7:67:03:4b:b3:80:7c:f0:83:b1:dd:6c:a0:5c:db:0d:d3: 00:79:03:5b:e1:b0:e2:60:0d:50:70:cb:ff:ff:66:4b:c3:8f: 9e:3c:4f:7d:0b:b6:a5:ee:a3:50:42:db:33:86:c8:76:93:2d: f3:cc:0b:b4 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEtxXLs0cTxzkgdwWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWZmMmNiZGItMjcyMC00NDhiLTk1MWQtNjk5YThlNjBj YjdkMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MmVkMzk5ZTgtY2E2OS00OTE5LThkYTQtMDExYjUzZjgyY2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQIUpTwL5JeFinIK0WkKnH3FGHCKX7Jgd91W aEupWO1KPM11RvP6PSBXAig9zpQDJMtBpMEvRj2l+6gX/i1iXWidc9RGzDwSEMe4 JZCrr7d2MUwde4B1NdjEuRHJQVhN51nUTDXLMU9WD+pMHuJC/EkYKZR3uLHjhEyw 1KxVAeqHPsXlegB3bBhIdDxFYpWMJxBLcUFesNUvV5ZlTHBXXOYw3GB1K0BskaOl oqSmboaIIfFF3sBHDI+s1+3ZHXPz5LSOMDa3l89en/16DkGL3Lf7FbqBF/KwML+S pwISml+eOa7CeeM83Cvj3uyb3sWrJceNjATs6S14BJ1H14S3mQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFJJD4WtbT9zfKMhAA4k9dqh81rB9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81ZmYy Y2JkYi0yNzIwLTQ0OGItOTUxZC02OTlhOGU2MGNiN2QvOThmY2E3YmEtMjAzMy0z Y2U2LThhOTItNGJiMWM1ZTBjZjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWZmMmNiZGItMjcyMC00NDhiLTk1 MWQtNjk5YThlNjBjYjdkLzVmZjJjYmRiLTI3MjAtNDQ4Yi05NTFkLTY5OWE4ZTYw Y2I3ZC5jcmwwHwYDVR0jBBgwFoAUokZj+QH7Y+wTFzEWVAyoAVx9EGIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81ZmYyY2JkYi0yNzIwLTQ0OGItOTUxZC02OTlh OGU2MGNiN2QuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjALBAIAATAFAwMAhkcwDwQC AAIwCQMHBCYgAN+AADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAda2eesUa5uw8HyxhRyy6u99nt7i04d8ic wQPl2We/WzWHi/L4XpSEJ2pGZGbh+B1KPKFn0h6ThBmMmntKTaO6sXu8frlh6EIk +B8bUr8tR2u266ZEwtx9CgffXHZXQX13Z0rpvuKPR0GxHkGdKgCTWj2+rrkemYNs a5C8LG/f8Gui/GnjviwrRljgOOmIDhMw+vWzJvrKjsWlcyYbbhJ9aYygaIhWsNRH 7atndRmBcy5d7jJ5BgvBeobxuMGciK5n/oA9RI7792cDS7OAfPCDsd1soFzbDdMA eQNb4bDiYA1QcMv//2ZLw4+ePE99C7al7qNQQtszhsh2ky3zzAu0 -----END CERTIFICATE-----Generated at Mon Oct 20 20:44:55 2025 by rpki-client