$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/27fc23aa-4ae8-331e-ad96-d128fb984ad3.roa File: 27fc23aa-4ae8-331e-ad96-d128fb984ad3.roa (raw, json) Hash identifier: HlB0/6uJgC4lppgyC5mLN1W8f1k1i2zr9IFXLpU8urg= Subject key identifier: 66:EB:29:25:E5:48:2B:31:46:74:F7:3A:7E:4A:98:E8:FB:34:3A:10 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AAF6CAC0FF2F7CBE8CB420 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/27fc23aa-4ae8-331e-ad96-d128fb984ad3.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 98.40.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:f6:ca:c0:ff:2f:7c:be:8c:b4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=e0857a41-42f6-4299-8705-07a24ebaea1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ab:f7:d4:e1:c6:2a:99:8c:94:7b:39:2f:93: 42:a3:bb:14:25:78:65:7f:5d:4b:46:44:91:f1:8f: 1c:63:6e:db:63:c0:19:06:a8:cf:69:72:9f:55:3c: 8a:40:b4:b1:f4:aa:c7:35:6a:05:1e:ff:39:51:e9: 28:2f:59:4b:2b:88:70:84:1e:4f:8b:7b:ca:0f:11: 6f:ba:41:f0:5b:f9:93:4b:69:c5:03:c3:44:41:be: 98:be:45:c3:ef:b9:8e:b2:b9:9a:36:24:e9:66:2b: a2:e3:aa:58:07:ed:2b:b3:1d:ed:a3:ab:df:24:83: 13:2f:63:1b:19:47:3b:5f:92:3a:61:3a:9f:00:f4: 9f:2c:dc:17:da:68:cb:53:8d:8b:53:10:06:86:f3: 69:bf:f6:c5:ab:29:99:bc:9b:ea:6d:28:7a:2c:dd: c5:cf:c0:5d:74:75:b3:87:25:03:17:0c:b6:44:b3: ac:47:8b:e8:d7:0f:82:e4:e6:3c:23:fb:a2:e2:16: 88:b5:2f:20:1c:da:17:2a:42:ed:07:a0:7c:97:17: 50:93:fc:30:a9:e8:35:49:4e:fa:f3:12:1b:bb:67: 2b:b1:4a:2c:ce:eb:49:ee:6b:a4:bd:2e:f6:67:6d: 9a:c8:d7:cd:3d:56:5e:83:65:f0:8b:85:60:e9:50: d0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:EB:29:25:E5:48:2B:31:46:74:F7:3A:7E:4A:98:E8:FB:34:3A:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/27fc23aa-4ae8-331e-ad96-d128fb984ad3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.40.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:3e:7a:e1:a3:dd:d0:cb:1b:52:20:34:eb:54:b9:7b:da:bd: 7f:be:b4:c4:23:26:88:8b:1d:eb:a2:fd:20:0e:3f:b9:e1:18: b4:55:a7:e9:30:90:ef:b9:b8:e2:80:7f:8b:31:fc:62:c0:60: 0f:95:e8:e6:a8:c0:e3:46:99:a1:8b:73:bc:57:52:17:bc:d5: 77:d9:ac:6d:12:af:95:28:7b:d7:9d:73:a2:58:f6:2d:c7:d8: bb:a8:f9:78:56:84:53:bc:9f:8a:f4:30:99:f6:f5:38:79:57: 2b:3d:ea:6f:1c:16:b4:72:49:e3:96:1d:cc:17:af:56:4c:9c: f8:85:25:46:92:4f:57:cd:52:98:8e:69:39:50:16:02:59:03: c8:9d:46:22:ee:07:07:7c:db:e0:43:70:5b:d7:01:74:6f:26: ce:50:6e:e1:e9:78:27:88:63:59:a2:4a:78:c6:bb:e1:5a:ca: 52:2a:cf:b5:7e:5e:2e:23:d8:f3:46:5a:8b:bc:81:f1:f9:ab: 7a:f9:36:7c:ab:5b:73:30:37:52:0f:76:3f:f6:9f:49:06:ad: a8:67:44:1b:51:33:45:83:63:96:b3:c4:5d:39:91:1a:43:6c: e5:c5:1d:cb:7c:5c:cf:78:90:c8:95:a5:ae:87:54:d3:42:d0: 90:0d:7b:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqvbKwP8vfL6MtCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZTA4NTdhNDEtNDJmNi00Mjk5LTg3MDUtMDdhMjRlYmFlYTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKv31OHGKpmMlHs5L5NCo7sUJXhlf11LRkSR 8Y8cY27bY8AZBqjPaXKfVTyKQLSx9KrHNWoFHv85UekoL1lLK4hwhB5Pi3vKDxFv ukHwW/mTS2nFA8NEQb6YvkXD77mOsrmaNiTpZiui46pYB+0rsx3to6vfJIMTL2Mb GUc7X5I6YTqfAPSfLNwX2mjLU42LUxAGhvNpv/bFqymZvJvqbSh6LN3Fz8BddHWz hyUDFwy2RLOsR4vo1w+C5OY8I/ui4haItS8gHNoXKkLtB6B8lxdQk/wwqeg1SU76 8xIbu2crsUoszutJ7mukvS72Z22ayNfNPVZeg2Xwi4Vg6VDQIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGbrKSXlSCsxRnT3On5KmOj7NDoQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjdmYzIzYWEtNGFlOC0z MzFlLWFkOTYtZDEyOGZiOTg0YWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYijwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADk+euGj3dDLG1IgNOtUuXvavX++tMQjJoiLHeui/SAOP7nhGLRVp+kw kO+5uOKAf4sx/GLAYA+V6OaowONGmaGLc7xXUhe81XfZrG0Sr5Uoe9edc6JY9i3H 2Luo+XhWhFO8n4r0MJn29Th5Vys96m8cFrRySeOWHcwXr1ZMnPiFJUaST1fNUpiO aTlQFgJZA8idRiLuBwd82+BDcFvXAXRvJs5QbuHpeCeIY1miSnjGu+FaylIqz7V+ Xi4j2PNGWou8gfH5q3r5NnyrW3MwN1IPdj/2n0kGrahnRBtRM0WDY5azxF05kRpD bOXFHct8XM94kMiVpa6HVNNC0JANe94= -----END CERTIFICATE-----Generated at Tue Nov 4 23:47:15 2025 by rpki-client