$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/1ea3b29d-14f8-3c9f-834b-18e552116a3d.roa File: 1ea3b29d-14f8-3c9f-834b-18e552116a3d.roa (raw, json) Hash identifier: Tps2kpnf9VNpzzAy59TBQj48NVTvHK7UcbfpOAQ/Uvo= Subject key identifier: E4:63:4C:9D:5B:EA:5D:1A:0B:09:92:F6:EC:98:77:F5:32:D5:99:65 Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584B72C1EBC9757D2A809045D5C0 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/1ea3b29d-14f8-3c9f-834b-18e552116a3d.roa Signing time: Wed 08 Oct 2025 01:00:29 +0000 ROA not before: Wed 08 Oct 2025 01:00:29 +0000 ROA not after: Tue 06 Jan 2026 02:00:29 +0000 asID: 21859 IP address blocks: 98.98.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:72:c1:eb:c9:75:7d:2a:80:90:45:d5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Oct 8 01:00:29 2025 GMT Not After : Jan 6 02:00:29 2026 GMT Subject: CN=7b4ba6f1-7e98-4359-9778-086ae1706a4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b0:76:63:cb:36:91:d0:d1:45:79:9b:31:ee: 00:e2:13:29:e3:6d:22:9e:8d:05:55:ec:40:de:d8: 83:63:eb:16:e7:86:51:cc:91:5d:9b:dc:bf:63:12: 39:79:07:a0:6b:f7:9b:3e:2c:36:e0:e0:d5:8a:02: 60:40:53:12:15:3f:44:ac:16:94:a5:06:86:a6:17: 9f:8c:2f:72:43:c7:39:ab:97:ad:04:0a:1d:96:33: e4:9e:42:b9:81:1a:62:c5:a2:b5:8b:a1:c6:2b:07: b5:11:e9:bb:0c:d7:23:65:cd:b6:6b:32:2d:9f:ce: 27:f9:69:39:58:d0:6a:85:e0:40:9a:bb:71:db:e1: 93:e9:3c:c3:c5:04:5a:b9:51:df:21:8c:3c:db:82: d1:91:36:6e:69:b9:3d:14:44:f0:1a:20:46:9b:08: 4e:0f:81:15:fc:c5:b8:b0:8a:00:0e:6b:ca:18:cc: 98:80:44:1e:f4:94:a9:f0:5d:e0:60:07:93:f9:5e: fc:23:99:7b:21:6e:fd:50:14:e1:16:03:a5:3b:83: 76:99:6d:d3:c1:c7:ab:98:74:56:87:45:3f:86:ef: 23:56:ce:f8:51:e0:d9:87:7e:1b:48:03:da:73:b1: 65:8d:5c:1d:e9:c5:fc:e0:0e:e0:49:ec:4c:3e:23: 7d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:63:4C:9D:5B:EA:5D:1A:0B:09:92:F6:EC:98:77:F5:32:D5:99:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/1ea3b29d-14f8-3c9f-834b-18e552116a3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 98.98.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:8c:b8:8c:30:3b:8e:57:93:48:01:75:4b:2a:cc:1f:ed:5e: 29:cd:0c:b4:aa:6c:af:ed:a3:c4:b3:d9:f9:e4:58:6e:57:3e: 1e:85:55:75:38:c5:3e:06:44:33:ab:55:ec:86:d9:35:83:14: e9:5a:8d:90:5f:18:b6:bc:7b:ad:4f:84:68:ef:80:af:60:f8: 47:98:d2:72:92:ba:dd:1a:4b:0f:db:6f:09:6a:f4:a4:ca:e7: 7e:cf:b9:a9:1d:dd:2a:e7:e1:e1:cc:7f:b1:93:95:c7:fa:d6: ce:2a:13:e2:76:fc:b8:c3:01:0e:f2:c9:c8:38:f6:af:33:b7: af:42:9e:5a:94:e0:13:81:b5:ba:f8:c8:32:bd:46:6c:34:0f: 00:f8:c3:63:4d:c7:71:ce:2a:f1:54:17:4a:67:80:25:f3:65: 47:ce:e2:84:d2:4f:04:db:d8:46:a2:ac:3a:98:84:8a:89:09: e0:d0:14:af:f6:e4:db:f2:3a:54:15:91:b8:43:a6:f3:d1:c8: 81:5a:66:12:e1:65:4a:5b:83:ec:da:de:5d:1c:93:e8:2d:40: 49:82:ad:8c:52:0b:ca:cb:1d:72:00:71:29:50:8d:80:c5:47: 39:49:3b:97:24:d2:16:15:73:42:be:c3:5b:99:ed:62:b9:78: fd:bd:cd:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtywevJdX0qgJBF1cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI1MTAwODAxMDAyOVoXDTI2MDEwNjAyMDAyOVowLzEtMCsGA1UEAxMk N2I0YmE2ZjEtN2U5OC00MzU5LTk3NzgtMDg2YWUxNzA2YTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLB2Y8s2kdDRRXmbMe4A4hMp420ino0FVexA 3tiDY+sW54ZRzJFdm9y/YxI5eQega/ebPiw24ODVigJgQFMSFT9ErBaUpQaGphef jC9yQ8c5q5etBAodljPknkK5gRpixaK1i6HGKwe1Eem7DNcjZc22azItn84n+Wk5 WNBqheBAmrtx2+GT6TzDxQRauVHfIYw824LRkTZuabk9FETwGiBGmwhOD4EV/MW4 sIoADmvKGMyYgEQe9JSp8F3gYAeT+V78I5l7IW79UBThFgOlO4N2mW3TwcermHRW h0U/hu8jVs74UeDZh34bSAPac7FljVwd6cX84A7gSexMPiN9eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFORjTJ1b6l0aCwmS9uyYd/Uy1ZllMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvMWVhM2IyOWQtMTRmOC0z YzlmLTgzNGItMThlNTUyMTE2YTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYmImMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCMuIwwO45Xk0gBdUsqzB/tXinNDLSqbK/to8Sz2fnkWG5XPh6FVXU4 xT4GRDOrVeyG2TWDFOlajZBfGLa8e61PhGjvgK9g+EeY0nKSut0aSw/bbwlq9KTK 537Puakd3Srn4eHMf7GTlcf61s4qE+J2/LjDAQ7yycg49q8zt69CnlqU4BOBtbr4 yDK9Rmw0DwD4w2NNx3HOKvFUF0pngCXzZUfO4oTSTwTb2EairDqYhIqJCeDQFK/2 5NvyOlQVkbhDpvPRyIFaZhLhZUpbg+za3l0ck+gtQEmCrYxSC8rLHXIAcSlQjYDF RzlJO5ck0hYVc0K+w1uZ7WK5eP29zbs= -----END CERTIFICATE-----Generated at Mon Oct 20 02:00:54 2025 by rpki-client