$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/f9656b2f-6dd0-313c-baea-4ee93b8e28e0.roa File: f9656b2f-6dd0-313c-baea-4ee93b8e28e0.roa (raw, json) Hash identifier: rEZEvdpgykqpWwTaej8aA/hz0QUgnALDdolMqPyHu1M= Subject key identifier: 1C:A1:C5:BB:2E:50:AC:DE:04:86:DA:E8:13:60:D3:7C:E7:0D:4A:4A Certificate issuer: /CN=98fa46f5-eef1-4569-9795-c233e7e74658 Certificate serial: 010D0C9F4328584B7DECA3C6561535C7F4C93380 Authority key identifier: EC:E4:93:A8:0B:A6:92:FC:4D:01:36:6C:DB:03:4B:A3:00:90:84:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/f9656b2f-6dd0-313c-baea-4ee93b8e28e0.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 8987 IP address blocks: 192.16.78.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/98fa46f5-eef1-4569-9795-c233e7e74658.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/98fa46f5-eef1-4569-9795-c233e7e74658.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:a3:c6:56:15:35:c7:f4:c9:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98fa46f5-eef1-4569-9795-c233e7e74658 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=9817ff58-cff8-420d-861e-44b2c08bf7fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:64:76:f0:e6:82:00:a9:75:6f:7f:79:fc:2b: 20:f6:36:a5:1d:e3:4e:a9:86:1b:de:35:8c:f4:ca: 88:f4:0b:96:c1:67:27:ac:b3:e3:ec:61:0a:00:d1: 68:bd:4d:15:5c:2a:24:84:99:09:fa:4e:86:09:e7: 3e:f8:74:c3:5c:81:6c:6f:86:e7:03:7c:72:79:e3: 6d:94:9c:ba:33:94:c5:f0:5a:5d:ac:eb:19:eb:e7: dc:51:c2:e2:5d:c6:20:6c:f3:6b:70:b9:03:66:10: 91:62:96:d0:ef:2d:21:be:c4:4f:90:f7:cb:fa:44: fb:85:1c:66:2b:af:ff:41:c8:8b:71:7d:19:50:bc: 9b:f6:c4:a2:95:6b:ff:a1:e6:14:18:2a:ca:bd:7c: ae:2d:20:6a:c8:33:4f:fe:e0:ab:4c:04:e0:59:16: 23:0a:74:b1:c0:87:b7:17:e3:cc:b0:c3:a9:4d:0f: 54:d3:e5:29:b9:3a:12:04:5d:49:43:60:e3:12:ed: 9a:b7:e7:6c:d8:83:25:f0:46:a8:cb:e6:84:b5:c4: 52:a7:c0:0c:bd:83:ce:d0:6c:83:67:fb:93:ab:c9: 95:0a:86:35:71:47:6f:3e:e9:17:fa:2a:9b:27:e9: c0:73:87:b7:96:fc:75:a7:6e:99:58:a1:7a:de:5a: bb:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:A1:C5:BB:2E:50:AC:DE:04:86:DA:E8:13:60:D3:7C:E7:0D:4A:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/f9656b2f-6dd0-313c-baea-4ee93b8e28e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658/98fa46f5-eef1-4569-9795-c233e7e74658.crl X509v3 Authority Key Identifier: keyid:EC:E4:93:A8:0B:A6:92:FC:4D:01:36:6C:DB:03:4B:A3:00:90:84:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98fa46f5-eef1-4569-9795-c233e7e74658.cer sbgp-ipAddrBlock: critical IPv4: 192.16.78.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:d8:2c:26:59:a7:d0:f5:d7:d1:c5:e0:41:e8:09:61:fb:5a: 8a:83:90:35:50:fe:c7:04:54:92:25:01:8c:a8:d2:95:d9:2a: 6c:34:b3:25:3e:9c:d0:1a:31:3e:f4:1d:e9:cb:4b:e4:e5:40: 0a:7d:d0:d2:eb:53:09:12:19:3c:45:9e:d8:06:e3:ee:f0:d8: ee:97:69:81:22:bd:51:e6:94:c0:c3:d8:cb:5f:18:b6:3e:53: 88:90:cc:69:70:56:35:6a:ed:72:c9:b6:77:9e:b4:b1:a9:f0: 97:7f:a5:7a:86:61:42:c0:8e:0d:c4:2d:49:2e:46:58:f1:99: b3:2e:f2:e8:6c:fe:64:19:b6:6f:0c:3e:1e:7e:cf:d2:07:03: 76:fd:3e:b9:b7:2e:22:37:ed:7b:ba:7d:54:84:18:b3:3d:bb: d4:53:e6:c0:10:8a:57:19:0d:f1:3c:a1:94:a9:2a:0a:74:1d: cc:4a:51:48:ea:91:bb:23:bc:70:c3:97:77:f2:cd:b9:35:72: 65:b4:82:70:f8:84:09:c9:09:6a:ca:63:cf:21:e6:48:de:3e: 7a:d7:9d:48:e5:99:51:37:93:55:8c:4d:3a:db:5b:78:c2:c7: 50:47:d2:d0:fb:e7:ce:15:e0:b0:1f:f4:a3:f8:c4:1c:41:2d: 74:f8:c9:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97KPGVhU1x/TJM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOThmYTQ2ZjUtZWVmMS00NTY5LTk3OTUtYzIzM2U3ZTc0 NjU4MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk OTgxN2ZmNTgtY2ZmOC00MjBkLTg2MWUtNDRiMmMwOGJmN2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWR28OaCAKl1b395/Csg9jalHeNOqYYb3jWM 9MqI9AuWwWcnrLPj7GEKANFovU0VXCokhJkJ+k6GCec++HTDXIFsb4bnA3xyeeNt lJy6M5TF8FpdrOsZ6+fcUcLiXcYgbPNrcLkDZhCRYpbQ7y0hvsRPkPfL+kT7hRxm K6//QciLcX0ZULyb9sSilWv/oeYUGCrKvXyuLSBqyDNP/uCrTATgWRYjCnSxwIe3 F+PMsMOpTQ9U0+UpuToSBF1JQ2DjEu2at+ds2IMl8Eaoy+aEtcRSp8AMvYPO0GyD Z/uTq8mVCoY1cUdvPukX+iqbJ+nAc4e3lvx1p26ZWKF63lq7BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFByhxbsuUKzeBIba6BNg03znDUpKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85OGZh NDZmNS1lZWYxLTQ1NjktOTc5NS1jMjMzZTdlNzQ2NTgvZjk2NTZiMmYtNmRkMC0z MTNjLWJhZWEtNGVlOTNiOGUyOGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOThmYTQ2ZjUtZWVmMS00NTY5LTk3 OTUtYzIzM2U3ZTc0NjU4Lzk4ZmE0NmY1LWVlZjEtNDU2OS05Nzk1LWMyMzNlN2U3 NDY1OC5jcmwwHwYDVR0jBBgwFoAU7OSTqAumkvxNATZs2wNLowCQhHwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85OGZhNDZmNS1lZWYxLTQ1NjktOTc5NS1jMjMz ZTdlNzQ2NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwBBOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjYLCZZp9D119HF4EHoCWH7WoqDkDVQ/scEVJIlAYyo0pXZKmw0syU+ nNAaMT70HenLS+TlQAp90NLrUwkSGTxFntgG4+7w2O6XaYEivVHmlMDD2MtfGLY+ U4iQzGlwVjVq7XLJtneetLGp8Jd/pXqGYULAjg3ELUkuRljxmbMu8uhs/mQZtm8M Ph5+z9IHA3b9Prm3LiI37Xu6fVSEGLM9u9RT5sAQilcZDfE8oZSpKgp0HcxKUUjq kbsjvHDDl3fyzbk1cmW0gnD4hAnJCWrKY88h5kjePnrXnUjlmVE3k1WMTTrbW3jC x1BH0tD7584V4LAf9KP4xBxBLXT4yW4= -----END CERTIFICATE-----Generated at Mon Oct 20 22:46:35 2025 by rpki-client