$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/289678b3-f21f-3e98-9287-47183cecd522.roa File: 289678b3-f21f-3e98-9287-47183cecd522.roa (raw, json) Hash identifier: Cw+QDuyb9lLmY9++de9psrxQRO84Qd3eRAaK/1yJUQE= Subject key identifier: AA:D9:C8:27:1C:43:61:0E:5D:B6:01:59:D2:32:E4:60:08:CD:AC:B4 Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F4328584B821DB6D6A096AF73DC3AAF00 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/289678b3-f21f-3e98-9287-47183cecd522.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 20001 IP address blocks: 98.148.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:b6:d6:a0:96:af:73:dc:3a:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=d5bcf328-97e2-4a9e-8fd2-a91f660ea80e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:89:7e:7b:58:e6:1b:04:7b:2e:52:89:17:3d: cd:6d:ef:ae:b4:08:95:99:ac:eb:e8:7c:57:72:b1: e3:ed:37:78:1d:75:ad:ce:1e:ed:5c:04:9a:e1:fd: d8:eb:f7:5b:4a:fe:08:7a:2d:00:9d:3c:14:5b:00: 50:93:f5:57:1f:8d:62:ce:2b:52:13:7b:fe:f3:d8: 9d:b7:5b:c6:a2:b8:fd:49:28:0f:ac:04:df:8f:94: 04:e5:7f:6f:7d:a5:36:71:3c:e5:fc:61:d7:36:d7: 2e:0e:14:99:d5:8e:ae:f4:97:38:d0:9c:03:49:35: 60:79:5a:00:c1:dd:22:a3:cf:28:69:38:23:57:c4: 26:c6:3f:5a:1d:d0:19:00:4a:99:9c:ff:85:a0:2a: e9:32:a1:af:67:77:16:26:51:d7:fc:df:da:92:b3: e9:fb:c6:00:5d:ad:bd:cf:ca:cc:41:8f:a7:28:e3: e0:d0:87:81:30:14:83:6e:16:da:be:16:87:3a:67: af:bc:66:7a:1c:48:58:a8:85:16:c9:aa:52:97:ac: b0:00:a9:fe:18:5c:cb:72:14:41:35:8c:82:7d:4b: c7:0e:b8:f0:43:a6:9e:40:e0:a8:cc:18:90:6f:cd: 2d:9d:e1:77:39:90:c3:f7:35:40:ee:65:63:db:90: eb:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D9:C8:27:1C:43:61:0E:5D:B6:01:59:D2:32:E4:60:08:CD:AC:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/289678b3-f21f-3e98-9287-47183cecd522.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 98.148.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:e0:12:d0:0e:82:dd:9a:98:21:e1:7f:53:f4:7c:6b:31:9a: a5:5a:1b:b3:7b:aa:25:48:19:17:9b:40:c2:3a:44:9b:48:40: 17:0c:a1:66:00:c1:d1:2e:04:e8:8e:af:ed:65:53:55:db:fb: 06:22:cf:01:8d:2c:bb:16:c6:88:e2:13:cd:0e:96:d9:1e:73: 1b:cb:c3:da:30:59:8f:0c:34:4f:16:ee:2c:e1:ca:e8:e4:63: 9c:d9:a3:9a:c9:19:df:bb:e7:eb:6a:ed:6c:3a:b4:78:17:14: 50:fe:73:1f:17:89:b0:94:6a:71:b5:e0:e8:2d:de:b6:82:58: 0c:f8:33:6c:7b:da:c0:19:49:16:45:a6:62:55:57:51:98:a1: 29:16:19:27:ce:67:67:c2:ab:ff:97:71:19:bb:b2:4b:c4:d5: b2:d5:b2:7d:46:69:30:74:0c:c5:ca:6c:62:f6:38:9e:f8:5c: 9f:98:84:64:fb:ad:1a:2a:ce:7c:70:50:fe:33:00:94:14:c3: 20:85:2c:08:39:c6:7c:d9:01:c6:21:9f:dd:43:6e:4f:0d:e6: 1b:44:dd:de:d9:9f:dc:2d:22:a2:db:a1:5e:ed:71:31:ed:21: 2b:5c:83:d6:5d:9d:ba:df:d9:73:f3:71:11:7b:75:59:1c:29: 43:11:1e:da -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEuCHbbWoJavc9w6rwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk ZDViY2YzMjgtOTdlMi00YTllLThmZDItYTkxZjY2MGVhODBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4l+e1jmGwR7LlKJFz3Nbe+utAiVmazr6HxX crHj7Td4HXWtzh7tXASa4f3Y6/dbSv4Iei0AnTwUWwBQk/VXH41izitSE3v+89id t1vGorj9SSgPrATfj5QE5X9vfaU2cTzl/GHXNtcuDhSZ1Y6u9Jc40JwDSTVgeVoA wd0io88oaTgjV8Qmxj9aHdAZAEqZnP+FoCrpMqGvZ3cWJlHX/N/akrPp+8YAXa29 z8rMQY+nKOPg0IeBMBSDbhbavhaHOmevvGZ6HEhYqIUWyapSl6ywAKn+GFzLchRB NYyCfUvHDrjwQ6aeQOCozBiQb80tneF3OZDD9zVA7mVj25DrlwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFKrZyCccQ2EOXbYBWdIy5GAIzay0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvMjg5Njc4YjMtZjIxZi0z ZTk4LTkyODctNDcxODNjZWNkNTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBYpQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEACeAS0A6C3ZqYIeF/U/R8azGapVobs3uqJUgZF5tAwjpEm0hAFwyhZgDB 0S4E6I6v7WVTVdv7BiLPAY0suxbGiOITzQ6W2R5zG8vD2jBZjww0TxbuLOHK6ORj nNmjmskZ37vn62rtbDq0eBcUUP5zHxeJsJRqcbXg6C3etoJYDPgzbHvawBlJFkWm YlVXUZihKRYZJ85nZ8Kr/5dxGbuyS8TVstWyfUZpMHQMxcpsYvY4nvhcn5iEZPut GirOfHBQ/jMAlBTDIIUsCDnGfNkBxiGf3UNuTw3mG0Td3tmf3C0iotuhXu1xMe0h K1yD1l2dut/Zc/NxEXt1WRwpQxEe2g== -----END CERTIFICATE-----Generated at Mon Oct 20 04:10:26 2025 by rpki-client