$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/223fbcfb-4395-34e2-884e-c466ca7c2777.roa File: 223fbcfb-4395-34e2-884e-c466ca7c2777.roa (raw, json) Hash identifier: e25Gjt/1ws3iPelgHebyvUSf5P7rvwPZM+PipLV7ByY= Subject key identifier: EA:6D:D4:CD:12:10:75:E1:31:69:FB:34:A6:37:75:F4:A5:A4:85:9B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8F7174C0236E8C68E1C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/223fbcfb-4395-34e2-884e-c466ca7c2777.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 98.243.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:f7:17:4c:02:36:e8:c6:8e:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=fdcb18d2-7685-4ab5-b4b2-1a7907b55ea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6d:bf:31:9c:b2:99:60:8f:9b:01:c8:a1:6c: 82:bd:89:4c:17:80:c1:dd:2e:cd:13:f0:f2:00:6f: 13:db:95:4c:a1:12:99:69:23:13:0a:00:8c:d5:c7: a4:3a:d8:3d:1d:c9:4b:4c:85:49:41:86:34:8f:f1: 29:12:78:e0:7a:57:e2:23:7b:7d:16:21:c6:ad:c4: 2a:33:2f:74:d9:b3:7e:54:44:f4:28:58:a0:5f:86: e0:c2:36:00:2f:b3:9f:c9:26:50:36:0d:a1:08:a7: c5:19:68:b3:58:06:78:b9:97:e6:0f:8e:22:3f:a0: 22:24:25:eb:95:71:c6:64:5b:48:c6:bf:a7:a1:6d: 40:5d:7c:2a:c8:66:ad:59:81:3a:d8:15:ca:66:b5: 2e:0b:c2:c3:21:cc:4b:18:8c:c0:88:21:bb:86:40: a6:a9:20:77:2d:4e:2f:40:7b:0c:b4:29:18:3a:25: 8a:09:90:f0:ec:e8:06:58:28:f7:4b:b4:f6:3b:9c: 29:72:e6:e0:4e:ab:67:c1:de:c7:70:bc:3b:54:d8: 47:19:98:2e:d8:31:d1:51:cf:8e:9a:e8:bc:25:d7: ec:b6:f3:1f:ca:66:13:4d:61:9b:19:38:16:73:bf: fb:78:f4:fd:8c:1c:75:61:5b:15:fd:8a:c6:70:c8: 52:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:6D:D4:CD:12:10:75:E1:31:69:FB:34:A6:37:75:F4:A5:A4:85:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/223fbcfb-4395-34e2-884e-c466ca7c2777.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.243.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:cb:08:03:dd:74:3d:8e:99:54:f7:c3:28:45:df:63:07:f9: c3:ea:5b:e8:4d:9d:25:79:fd:b8:a1:08:3b:89:ab:45:98:35: 9a:1b:b9:44:f4:dd:20:39:81:42:a9:19:b8:e9:83:91:85:09: f0:c7:2b:ed:9e:5c:b4:e9:5e:ed:69:b7:18:18:7f:83:28:06: 61:b9:68:74:40:de:de:64:10:4e:1e:7b:68:52:8f:ab:f8:95: e4:50:dd:f8:aa:3e:98:29:6f:06:f8:2e:b3:b5:5c:2a:aa:87: 17:f4:41:8c:e9:a5:a9:42:d9:d7:f7:8b:12:96:18:82:9b:4d: 7e:36:6a:13:83:d3:83:2d:6e:22:15:e7:e6:4e:64:d7:0b:49: 9a:02:24:56:b0:a5:8e:c5:33:9d:4d:89:38:98:b4:f5:fa:47: ce:87:63:ba:ab:73:ad:8c:8b:ef:89:12:68:27:a6:b4:b1:76: 4d:a6:74:72:6e:2f:90:8b:d1:fc:2e:be:bf:7d:59:00:1d:42: 47:f4:75:ae:ce:ac:c2:7c:5e:2a:f6:50:23:4c:69:8d:00:69: 88:a4:a6:76:ca:25:9e:6d:ad:54:9e:b1:36:11:be:55:d8:27: 38:47:41:a3:1c:a7:c9:d0:17:a5:8c:8f:c7:3f:bc:4d:b9:fe: 94:b8:92:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqPcXTAI26MaOHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZmRjYjE4ZDItNzY4NS00YWI1LWI0YjItMWE3OTA3YjU1ZWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyW2/MZyymWCPmwHIoWyCvYlMF4DB3S7NE/Dy AG8T25VMoRKZaSMTCgCM1cekOtg9HclLTIVJQYY0j/EpEnjgelfiI3t9FiHGrcQq My902bN+VET0KFigX4bgwjYAL7OfySZQNg2hCKfFGWizWAZ4uZfmD44iP6AiJCXr lXHGZFtIxr+noW1AXXwqyGatWYE62BXKZrUuC8LDIcxLGIzAiCG7hkCmqSB3LU4v QHsMtCkYOiWKCZDw7OgGWCj3S7T2O5wpcubgTqtnwd7HcLw7VNhHGZgu2DHRUc+O mui8JdfstvMfymYTTWGbGTgWc7/7ePT9jBx1YVsV/YrGcMhSiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOpt1M0SEHXhMWn7NKY3dfSlpIWbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjIzZmJjZmItNDM5NS0z NGUyLTg4NGUtYzQ2NmNhN2MyNzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYvPvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDLCAPddD2OmVT3wyhF32MH+cPqW+hNnSV5/bihCDuJq0WYNZobuUT0 3SA5gUKpGbjpg5GFCfDHK+2eXLTpXu1ptxgYf4MoBmG5aHRA3t5kEE4ee2hSj6v4 leRQ3fiqPpgpbwb4LrO1XCqqhxf0QYzppalC2df3ixKWGIKbTX42ahOD04MtbiIV 5+ZOZNcLSZoCJFawpY7FM51NiTiYtPX6R86HY7qrc62Mi++JEmgnprSxdk2mdHJu L5CL0fwuvr99WQAdQkf0da7OrMJ8Xir2UCNMaY0AaYikpnbKJZ5trVSesTYRvlXY JzhHQaMcp8nQF6WMj8c/vE25/pS4kgo= -----END CERTIFICATE-----Generated at Wed Nov 5 07:29:38 2025 by rpki-client