$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21e2ab30-aae8-3b97-9a5f-ff8e0ef36251.roa File: 21e2ab30-aae8-3b97-9a5f-ff8e0ef36251.roa (raw, json) Hash identifier: Gr/CubXJu9Z+u715METlbMsRhDpaB03hNvz5VrNzYw8= Subject key identifier: 13:32:1B:AC:1A:7D:9A:3F:82:89:ED:1B:22:B7:00:9C:50:A4:AA:AA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA8EC40CD0101F13C49440 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21e2ab30-aae8-3b97-9a5f-ff8e0ef36251.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 98.209.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:8e:c4:0c:d0:10:1f:13:c4:94:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=592b9dd1-547b-4f11-91be-06307ffc030e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b7:66:a0:8c:c5:1c:cb:39:b3:87:f6:93:6d: 80:96:3f:7f:6c:e9:1c:9e:07:2f:20:dd:0c:72:f9: c3:7f:4e:e0:21:46:bd:eb:32:df:0c:57:23:2b:06: 20:c4:bd:c1:90:2e:33:94:f4:60:e7:03:4a:28:c8: 67:70:bd:6f:2f:5d:89:8e:6d:db:4f:df:2a:96:63: 88:d0:c4:43:ff:d6:e3:4c:16:d3:44:8d:3b:0c:ab: c2:bd:c7:7d:04:9b:6d:36:eb:a0:0d:c5:e4:ce:8a: c4:ea:c6:7f:63:61:e4:10:82:1d:73:d5:20:78:21: f1:2b:18:e3:62:0c:36:78:0e:96:38:45:ed:87:36: cb:55:eb:de:b0:60:a5:d7:24:e7:b8:2f:25:72:37: 79:50:35:34:a0:a0:a8:2d:14:6e:d6:13:77:d1:c5: 56:70:1d:bc:75:4d:89:6e:5e:71:82:d8:df:86:f9: 8e:16:41:d9:3a:0e:c1:9e:7c:4e:0b:4c:ed:e9:25: 44:a8:c2:30:62:25:45:45:dc:ae:95:4c:db:6a:4d: e8:bd:08:ef:da:83:71:4f:ab:95:1e:80:26:eb:38: 1b:15:c7:43:9b:00:08:55:c7:f5:f1:dd:89:4f:96: 7b:a7:99:f2:18:8d:58:e8:f4:7d:ac:97:8b:68:ab: 22:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:32:1B:AC:1A:7D:9A:3F:82:89:ED:1B:22:B7:00:9C:50:A4:AA:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21e2ab30-aae8-3b97-9a5f-ff8e0ef36251.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.209.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:31:58:af:87:7d:63:1a:6d:d7:ee:0d:29:da:53:67:35:7c: 74:51:c4:d8:8a:37:0c:52:20:7c:b6:58:a3:2c:47:26:74:a6: 4b:30:70:d4:c1:f2:64:5b:f6:1a:f9:25:64:b4:13:95:1c:f2: d4:ab:8a:c2:46:e7:95:2a:54:16:7e:db:f4:f5:0b:fa:33:4a: f1:e8:1e:87:a6:94:1d:9b:f9:6d:ce:6a:65:6b:a4:ba:4c:fa: 4d:e1:58:9b:69:9d:53:b7:8f:f5:fb:42:a8:56:52:fd:c4:23: 9a:52:66:59:c4:0e:37:ad:7a:12:c6:f2:d8:85:02:3a:d0:8e: c3:8b:ac:b8:08:22:1a:d8:f7:22:91:96:3d:48:3c:ec:07:d1: 78:47:2b:33:d3:a9:a5:f9:1c:81:78:44:ea:a5:19:3a:1b:7a: ef:66:c8:d0:93:f1:de:1f:77:d9:0e:5d:a9:0e:2f:aa:9c:b9: c3:9d:e1:82:a0:66:b1:d6:6a:d9:4e:9b:97:22:a0:4f:04:88: 63:bc:10:26:34:80:1a:d4:a4:f9:14:b5:76:2d:2d:12:64:67: 8d:33:17:a3:00:3f:d8:10:89:8a:7d:70:46:34:00:c1:45:bc: da:25:46:65:ca:f0:91:b4:3e:dc:ec:40:33:df:5b:d4:b2:9e: 48:bd:47:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqo7EDNAQHxPElEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NTkyYjlkZDEtNTQ3Yi00ZjExLTkxYmUtMDYzMDdmZmMwMzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7dmoIzFHMs5s4f2k22Alj9/bOkcngcvIN0M cvnDf07gIUa96zLfDFcjKwYgxL3BkC4zlPRg5wNKKMhncL1vL12Jjm3bT98qlmOI 0MRD/9bjTBbTRI07DKvCvcd9BJttNuugDcXkzorE6sZ/Y2HkEIIdc9UgeCHxKxjj Ygw2eA6WOEXthzbLVevesGCl1yTnuC8lcjd5UDU0oKCoLRRu1hN30cVWcB28dU2J bl5xgtjfhvmOFkHZOg7BnnxOC0zt6SVEqMIwYiVFRdyulUzbak3ovQjv2oNxT6uV HoAm6zgbFcdDmwAIVcf18d2JT5Z7p5nyGI1Y6PR9rJeLaKsiQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMyG6wafZo/gontGyK3AJxQpKqqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjFlMmFiMzAtYWFlOC0z Yjk3LTlhNWYtZmY4ZTBlZjM2MjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYtHMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8xWK+HfWMabdfuDSnaU2c1fHRRxNiKNwxSIHy2WKMsRyZ0pkswcNTB 8mRb9hr5JWS0E5Uc8tSrisJG55UqVBZ+2/T1C/ozSvHoHoemlB2b+W3OamVrpLpM +k3hWJtpnVO3j/X7QqhWUv3EI5pSZlnEDjetehLG8tiFAjrQjsOLrLgIIhrY9yKR lj1IPOwH0XhHKzPTqaX5HIF4ROqlGTobeu9myNCT8d4fd9kOXakOL6qcucOd4YKg ZrHWatlOm5cioE8EiGO8ECY0gBrUpPkUtXYtLRJkZ40zF6MAP9gQiYp9cEY0AMFF vNolRmXK8JG0PtzsQDPfW9Synki9R1M= -----END CERTIFICATE-----Generated at Wed Nov 5 07:02:41 2025 by rpki-client