$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b1dd6e30-4099-4e09-b21a-2d586fc125f9/c43593d9-a65b-3cb2-a082-f5a291790122.roa File: c43593d9-a65b-3cb2-a082-f5a291790122.roa (raw, json) Hash identifier: 0BPnAnYabqaiTT8OA8Do0fNE4kKHCC0S3S8WtpHvm6I= Subject key identifier: 3E:2C:90:F8:44:A1:78:29:62:36:BA:E0:66:A7:27:02:27:D9:E0:FA Certificate issuer: /CN=b1dd6e30-4099-4e09-b21a-2d586fc125f9 Certificate serial: 010D0C9F4328584B36BC53859A046C8FDB214880 Authority key identifier: 18:3D:C5:44:87:1C:E0:02:65:B1:50:F9:D6:4F:98:D1:7F:D9:8A:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b1dd6e30-4099-4e09-b21a-2d586fc125f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b1dd6e30-4099-4e09-b21a-2d586fc125f9/c43593d9-a65b-3cb2-a082-f5a291790122.roa Signing time: Tue 16 Sep 2025 13:00:41 +0000 ROA not before: Tue 16 Sep 2025 13:00:41 +0000 ROA not after: Mon 15 Dec 2025 14:00:41 +0000 asID: 19555 IP address blocks: 98.159.0.0/20 maxlen: 24 2620:28::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b1dd6e30-4099-4e09-b21a-2d586fc125f9/b1dd6e30-4099-4e09-b21a-2d586fc125f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b1dd6e30-4099-4e09-b21a-2d586fc125f9/b1dd6e30-4099-4e09-b21a-2d586fc125f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b1dd6e30-4099-4e09-b21a-2d586fc125f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:36:bc:53:85:9a:04:6c:8f:db:21:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1dd6e30-4099-4e09-b21a-2d586fc125f9 Validity Not Before: Sep 16 13:00:41 2025 GMT Not After : Dec 15 14:00:41 2025 GMT Subject: CN=77f7a9dc-66e9-4bc9-9027-bf0dc39589c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7f:5a:16:d3:8c:f7:01:f7:d8:bf:0b:09:75: a2:1b:f2:f9:76:f5:1d:6b:29:8a:85:de:cc:7e:bb: 6d:8f:b5:4b:56:31:85:21:f3:0f:dd:ff:ea:0f:cc: d5:2c:d4:00:37:11:c0:58:74:df:30:b2:d3:ba:14: 78:53:44:eb:0c:1f:4f:b1:9a:e6:af:39:d2:2f:f8: 96:e3:89:e2:6c:e0:48:77:bf:c5:f1:f7:19:84:7b: 4c:a0:87:8d:6b:7b:95:27:10:dc:68:9a:44:be:20: bb:f3:8d:64:6d:d2:cb:4e:28:a6:9f:2b:fb:d5:68: 18:28:54:a2:e1:64:fc:89:84:ac:7b:07:4c:b7:63: 7b:41:ee:54:55:f9:da:ea:f1:70:54:f7:16:d1:34: 1f:df:b7:34:c5:56:2a:1c:9c:71:8b:76:ea:0e:9d: f8:f9:7d:30:ab:a8:42:e8:ed:6c:92:1e:05:c4:0f: 6d:82:09:70:25:25:8e:2a:31:e0:53:49:79:ee:a6: 85:dc:39:72:c0:b3:a2:ed:34:31:11:71:8c:23:fa: 15:73:00:29:d2:01:f9:c1:dd:43:f8:0d:de:df:80: 6e:87:0e:50:04:ad:14:a9:a8:6d:a5:8c:ca:4c:e7: af:e8:96:96:c9:b2:d7:ad:1d:0f:d3:72:9f:f6:54: 5c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:2C:90:F8:44:A1:78:29:62:36:BA:E0:66:A7:27:02:27:D9:E0:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b1dd6e30-4099-4e09-b21a-2d586fc125f9/c43593d9-a65b-3cb2-a082-f5a291790122.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b1dd6e30-4099-4e09-b21a-2d586fc125f9/b1dd6e30-4099-4e09-b21a-2d586fc125f9.crl X509v3 Authority Key Identifier: keyid:18:3D:C5:44:87:1C:E0:02:65:B1:50:F9:D6:4F:98:D1:7F:D9:8A:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b1dd6e30-4099-4e09-b21a-2d586fc125f9.cer sbgp-ipAddrBlock: critical IPv4: 98.159.0.0/20 IPv6: 2620:28::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:6f:ab:5c:3b:b7:ee:50:92:f9:2d:fe:ba:cf:f5:f1:ab:58: ee:a9:6e:a3:18:fb:9b:28:99:dd:25:6f:a9:c7:c4:49:ab:17: 88:b9:48:48:89:20:e4:a4:41:05:79:22:dc:61:a4:9e:64:9f: 40:28:97:0e:1c:5f:66:b4:c4:2a:30:60:6c:82:7b:87:f3:24: d1:29:8f:b5:88:08:be:b5:cc:71:2c:b1:27:62:ea:af:28:d3: 8b:76:11:59:8a:fb:e2:b7:67:c2:df:07:a5:a9:fd:b1:17:10: dd:2a:e2:2c:91:51:3e:00:9a:9c:66:70:bd:be:33:a6:b4:25: b3:fe:5a:1e:a8:88:eb:00:b5:31:e4:fe:f3:14:fd:8a:79:17: 77:56:c3:50:d3:a8:77:69:7c:b1:6b:41:49:08:64:6a:0b:a8: 47:77:7a:ba:46:50:22:f6:39:05:92:75:fb:ee:8e:58:4b:a5: ae:c5:a1:ad:15:17:99:b2:09:bf:96:4c:a9:4c:eb:67:65:2b: fb:59:0f:3d:b8:06:bb:0e:cf:7c:8f:9b:d6:71:31:be:18:4f: 03:19:b4:ff:92:53:8d:67:8a:86:23:34:01:ae:e0:7a:75:af: d4:a8:bd:52:5c:46:a0:ef:39:c7:8d:79:d3:3a:70:d0:ae:04: 32:3c:17:8b -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEs2vFOFmgRsj9shSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjFkZDZlMzAtNDA5OS00ZTA5LWIyMWEtMmQ1ODZmYzEy NWY5MB4XDTI1MDkxNjEzMDA0MVoXDTI1MTIxNTE0MDA0MVowLzEtMCsGA1UEAxMk NzdmN2E5ZGMtNjZlOS00YmM5LTkwMjctYmYwZGMzOTU4OWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm39aFtOM9wH32L8LCXWiG/L5dvUdaymKhd7M frttj7VLVjGFIfMP3f/qD8zVLNQANxHAWHTfMLLTuhR4U0TrDB9PsZrmrznSL/iW 44nibOBId7/F8fcZhHtMoIeNa3uVJxDcaJpEviC7841kbdLLTiimnyv71WgYKFSi 4WT8iYSsewdMt2N7Qe5UVfna6vFwVPcW0TQf37c0xVYqHJxxi3bqDp34+X0wq6hC 6O1skh4FxA9tgglwJSWOKjHgU0l57qaF3DlywLOi7TQxEXGMI/oVcwAp0gH5wd1D +A3e34Buhw5QBK0UqahtpYzKTOev6JaWybLXrR0P03Kf9lRcMQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFD4skPhEoXgpYja64GanJwIn2eD6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iMWRk NmUzMC00MDk5LTRlMDktYjIxYS0yZDU4NmZjMTI1ZjkvYzQzNTkzZDktYTY1Yi0z Y2IyLWEwODItZjVhMjkxNzkwMTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjFkZDZlMzAtNDA5OS00ZTA5LWIy MWEtMmQ1ODZmYzEyNWY5L2IxZGQ2ZTMwLTQwOTktNGUwOS1iMjFhLTJkNTg2ZmMx MjVmOS5jcmwwHwYDVR0jBBgwFoAUGD3FRIcc4AJlsVD51k+Y0X/ZirkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iMWRkNmUzMC00MDk5LTRlMDktYjIxYS0yZDU4 NmZjMTI1ZjkuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQEYp8AMA8E AgACMAkDBwAmIAAoAAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAfm+rXDu37lCS+S3+us/18atY7qluoxj7 myiZ3SVvqcfESasXiLlISIkg5KRBBXki3GGknmSfQCiXDhxfZrTEKjBgbIJ7h/Mk 0SmPtYgIvrXMcSyxJ2LqryjTi3YRWYr74rdnwt8Hpan9sRcQ3SriLJFRPgCanGZw vb4zprQls/5aHqiI6wC1MeT+8xT9inkXd1bDUNOod2l8sWtBSQhkaguoR3d6ukZQ IvY5BZJ1++6OWEulrsWhrRUXmbIJv5ZMqUzrZ2Ur+1kPPbgGuw7PfI+b1nExvhhP Axm0/5JTjWeKhiM0Aa7genWv1Ki9UlxGoO85x4150zpw0K4EMjwXiw== -----END CERTIFICATE-----Generated at Mon Oct 20 14:21:21 2025 by rpki-client