$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d61aac2-3540-38ea-a445-c39aa6ea9cb9.roa File: 1d61aac2-3540-38ea-a445-c39aa6ea9cb9.roa (raw, json) Hash identifier: U0X+TuzBo6Ny1SZg/76MdYq+Du4KZxDq4TVLXGdezAM= Subject key identifier: C5:77:FE:3C:3E:19:E3:D2:5C:CB:54:A3:B1:18:B2:95:0C:72:FF:11 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AAEF1131A76723F2600A80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d61aac2-3540-38ea-a445-c39aa6ea9cb9.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 98.201.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:ef:11:31:a7:67:23:f2:60:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=ecb7b3ff-887f-46e1-8e70-39d4ca1d65c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:27:bf:2f:b6:2b:1b:ab:80:e1:57:e3:89:b6: b5:80:37:26:00:b6:12:f3:ff:60:81:ac:c2:b4:d0: 7e:b4:b9:59:cd:05:a5:a6:14:6f:49:a6:a7:f6:6b: 17:5a:94:46:43:40:39:83:7a:0b:0c:35:20:80:40: fc:f2:e3:37:5e:b8:6a:f0:f1:a1:bf:c7:7f:f0:92: 83:45:c6:cf:41:ac:d2:07:ba:5b:87:b2:da:d3:fe: 1c:a1:0f:f1:66:4f:60:65:8f:8f:f1:b0:ce:1f:90: 6e:d2:c6:b3:88:72:9e:c9:37:dc:af:4d:d6:52:d0: 7f:9f:73:42:19:b6:34:3b:5e:bf:72:a8:df:10:22: 4c:7e:cc:75:47:b6:33:40:d0:76:59:1e:d3:66:00: 2f:72:b3:c9:a4:bb:2f:37:7a:ca:85:5d:d8:59:03: 2c:a8:11:96:50:78:31:b9:cd:38:16:be:ae:7a:6b: e6:7e:98:37:7e:ab:0b:b0:4c:83:e8:05:2c:27:73: 2e:50:20:c6:59:16:d5:3e:0b:bb:03:2d:a2:64:d2: 74:23:fa:85:ac:4e:42:ab:fe:16:43:a6:b8:10:21: dc:2b:cc:a2:e2:39:c7:bd:d7:06:dd:b9:94:37:14: f5:62:ba:1a:b8:f9:93:a3:19:26:c0:aa:95:53:85: 4a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:77:FE:3C:3E:19:E3:D2:5C:CB:54:A3:B1:18:B2:95:0C:72:FF:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d61aac2-3540-38ea-a445-c39aa6ea9cb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.201.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:aa:32:de:f1:93:c6:e5:c8:1f:2f:7d:1d:7a:a6:76:db:e0: a5:3a:1f:3e:01:c2:f3:2c:d5:25:bc:04:8b:f1:e4:5d:ca:d8: d9:97:b8:0f:33:c6:d6:cf:73:df:1d:c1:5d:8f:78:41:d2:86: 3f:04:9f:70:77:ce:c8:4a:2e:a5:d7:ea:7c:62:33:1d:a9:1f: cf:ef:08:21:71:f6:72:ad:67:e3:29:67:d9:a3:38:8f:7d:ee: b0:3e:0e:8c:cf:63:a0:f0:47:6a:d4:d8:91:2b:f1:80:57:ff: 89:34:be:00:17:eb:2e:f8:a5:0c:1d:85:68:22:d3:5d:bf:43: 42:3b:5f:13:10:40:a8:d4:87:91:ab:c7:61:1f:d1:66:13:ee: 57:0d:30:c9:9b:07:c5:5b:19:45:fe:b8:c8:05:93:e3:43:cb: f3:bd:22:83:55:c9:35:29:f7:36:63:ff:b6:52:46:72:a0:84: 41:c5:8c:35:70:8b:7e:c8:05:d1:ea:42:34:ad:80:a9:7e:5f: 12:73:a8:67:89:5e:61:1f:43:21:f9:f0:ba:1f:cc:4d:46:3e: bf:2c:ed:f3:40:b2:02:88:bf:53:f5:49:35:34:75:80:ba:b9: cb:b7:5a:1f:08:67:e8:a9:78:f9:cd:b1:c3:14:a9:c8:8e:fa: 28:91:67:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqu8RMadnI/JgCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZWNiN2IzZmYtODg3Zi00NmUxLThlNzAtMzlkNGNhMWQ2NWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySe/L7YrG6uA4Vfjiba1gDcmALYS8/9ggazC tNB+tLlZzQWlphRvSaan9msXWpRGQ0A5g3oLDDUggED88uM3Xrhq8PGhv8d/8JKD RcbPQazSB7pbh7La0/4coQ/xZk9gZY+P8bDOH5Bu0saziHKeyTfcr03WUtB/n3NC GbY0O16/cqjfECJMfsx1R7YzQNB2WR7TZgAvcrPJpLsvN3rKhV3YWQMsqBGWUHgx uc04Fr6uemvmfpg3fqsLsEyD6AUsJ3MuUCDGWRbVPgu7Ay2iZNJ0I/qFrE5Cq/4W Q6a4ECHcK8yi4jnHvdcG3bmUNxT1YroauPmToxkmwKqVU4VKNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMV3/jw+GePSXMtUo7EYspUMcv8RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWQ2MWFhYzItMzU0MC0z OGVhLWE0NDUtYzM5YWE2ZWE5Y2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYsnMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALqqMt7xk8blyB8vfR16pnbb4KU6Hz4BwvMs1SW8BIvx5F3K2NmXuA8z xtbPc98dwV2PeEHShj8En3B3zshKLqXX6nxiMx2pH8/vCCFx9nKtZ+MpZ9mjOI99 7rA+DozPY6DwR2rU2JEr8YBX/4k0vgAX6y74pQwdhWgi012/Q0I7XxMQQKjUh5Gr x2Ef0WYT7lcNMMmbB8VbGUX+uMgFk+NDy/O9IoNVyTUp9zZj/7ZSRnKghEHFjDVw i37IBdHqQjStgKl+XxJzqGeJXmEfQyH58LofzE1GPr8s7fNAsgKIv1P1STU0dYC6 ucu3Wh8IZ+ipePnNscMUqciO+iiRZ6I= -----END CERTIFICATE-----Generated at Wed Nov 5 03:14:54 2025 by rpki-client