$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0acf83de-909c-38dc-ada7-8e14507770d7.roa File: 0acf83de-909c-38dc-ada7-8e14507770d7.roa (raw, json) Hash identifier: YLOOWD4Caja8ycBQ0H5zxE7AaShELa+3/8rnQfuZc+g= Subject key identifier: 9D:C0:A9:EB:95:46:29:62:46:14:1B:BB:BE:A5:07:F4:61:26:6B:0A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC4EDF6218C354AA3459A80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0acf83de-909c-38dc-ada7-8e14507770d7.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 98.52.190.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:ed:f6:21:8c:35:4a:a3:45:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=153fb4df-4ab8-46f2-ae86-13fb14af23e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0f:55:44:1c:0c:c3:b4:32:9a:7b:df:69:c3: c9:0f:1b:49:f5:d9:ee:70:b3:1e:18:50:a7:9a:3f: 35:31:63:20:d2:a8:2b:70:e1:38:43:4d:b8:95:c2: d6:71:cf:0a:a4:a5:b9:54:27:b7:fd:79:a1:a3:40: 95:5a:52:ab:57:ba:2c:da:37:b7:15:3d:ba:19:9c: fb:75:ec:58:5a:87:ce:3c:ac:0f:17:69:36:de:69: 3a:f2:66:e1:fe:de:a1:d0:74:80:f1:35:70:15:8e: 59:42:bf:be:3a:87:76:6c:ed:45:fe:f5:0b:14:66: fd:cb:02:e1:d0:dc:27:6e:03:ef:40:77:19:12:c0: a9:4d:d1:37:64:37:f3:31:0d:83:b9:99:4e:e8:ce: ef:f6:24:e8:d6:1d:5d:ee:cf:62:12:ce:95:49:9e: 0d:3e:2c:17:34:b2:7b:c2:46:6f:94:fc:d2:8c:04: 8c:77:02:aa:9f:b4:d9:c7:99:a6:97:b7:3d:87:16: 73:42:c6:19:d1:18:fe:09:3c:16:89:be:b7:9c:ae: 23:8f:9d:23:db:0c:a0:cc:92:6a:18:f8:fd:b2:86: b0:49:2c:d5:2f:59:b3:de:02:7f:01:12:74:a4:97: 72:c1:e8:3e:bb:69:11:b5:cc:c3:90:b0:c1:a1:bb: 81:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:C0:A9:EB:95:46:29:62:46:14:1B:BB:BE:A5:07:F4:61:26:6B:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0acf83de-909c-38dc-ada7-8e14507770d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.52.190.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:f8:f6:36:05:b4:d2:5f:88:70:f1:25:5f:c0:a6:55:7b:75: ef:7d:23:3a:ba:5e:69:0e:a8:bb:c6:24:d2:5e:dd:db:25:2e: 98:d2:e1:51:d2:0f:fb:7d:77:ed:fb:4d:5a:de:7f:09:3a:15: 3c:7d:de:6b:1b:f9:ca:a6:a8:a6:08:65:77:f9:a8:58:ed:a1: 43:1a:f0:67:cb:43:c1:8c:e2:c4:c2:51:33:65:af:64:8b:9a: 68:b0:12:31:00:6c:d0:f0:ac:aa:90:b6:03:7e:65:5b:e1:06: 4d:73:e0:03:5d:99:d8:c3:21:9f:cb:f7:52:f8:b0:67:e2:f0: b6:06:28:45:4e:75:69:79:d6:5c:68:c5:07:86:2e:ca:8b:10: 83:d0:f8:74:be:ca:06:0f:bc:2d:b3:f8:e2:8b:25:de:b9:1d: dd:70:87:b5:d7:c9:2a:84:f6:39:50:64:ba:b6:87:4c:33:11: 44:50:53:5f:77:c8:a4:51:e5:d5:bc:5d:4f:a2:f1:aa:b8:35: a0:18:77:b9:00:ba:ab:4b:60:35:1f:09:35:91:13:58:e0:d4: bd:e0:74:c5:f0:5b:f0:e5:25:f4:21:2f:6f:b7:ed:4b:36:98: ea:23:6f:43:b6:d7:be:86:0c:d5:4e:0b:9c:77:4e:23:d6:0f: 0b:76:0b:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxO32IYw1SqNFmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MTUzZmI0ZGYtNGFiOC00NmYyLWFlODYtMTNmYjE0YWYyM2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyg9VRBwMw7QymnvfacPJDxtJ9dnucLMeGFCn mj81MWMg0qgrcOE4Q024lcLWcc8KpKW5VCe3/Xmho0CVWlKrV7os2je3FT26GZz7 dexYWofOPKwPF2k23mk68mbh/t6h0HSA8TVwFY5ZQr++Ood2bO1F/vULFGb9ywLh 0NwnbgPvQHcZEsCpTdE3ZDfzMQ2DuZlO6M7v9iTo1h1d7s9iEs6VSZ4NPiwXNLJ7 wkZvlPzSjASMdwKqn7TZx5mml7c9hxZzQsYZ0Rj+CTwWib63nK4jj50j2wygzJJq GPj9soawSSzVL1mz3gJ/ARJ0pJdyweg+u2kRtczDkLDBobuB2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3AqeuVRiliRhQbu76lB/RhJmsKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGFjZjgzZGUtOTA5Yy0z OGRjLWFkYTctOGUxNDUwNzc3MGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYjS+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJP49jYFtNJfiHDxJV/AplV7de99Izq6XmkOqLvGJNJe3dslLpjS4VHS D/t9d+37TVrefwk6FTx93msb+cqmqKYIZXf5qFjtoUMa8GfLQ8GM4sTCUTNlr2SL mmiwEjEAbNDwrKqQtgN+ZVvhBk1z4ANdmdjDIZ/L91L4sGfi8LYGKEVOdWl51lxo xQeGLsqLEIPQ+HS+ygYPvC2z+OKLJd65Hd1wh7XXySqE9jlQZLq2h0wzEURQU193 yKRR5dW8XU+i8aq4NaAYd7kAuqtLYDUfCTWRE1jg1L3gdMXwW/DlJfQhL2+37Us2 mOojb0O2176GDNVOC5x3TiPWDwt2C4A= -----END CERTIFICATE-----Generated at Tue Nov 4 23:51:13 2025 by rpki-client