$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38ca4051-ae6f-379b-a604-ad5873440c88.roa File: 38ca4051-ae6f-379b-a604-ad5873440c88.roa (raw, json) Hash identifier: EZIbgS5WvZakJP+BlZdh/+Mj2T5DVsHieQW7h1BMus0= Subject key identifier: 1D:92:E8:51:86:12:46:CF:62:42:B3:88:43:33:FD:DE:9A:70:29:81 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC2BBB147493ABFF2E50640 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38ca4051-ae6f-379b-a604-ad5873440c88.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 98.213.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:bb:b1:47:49:3a:bf:f2:e5:06:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=c0344538-32e9-4384-8644-8330482cf2e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c3:d3:8a:86:59:44:7b:60:04:27:6a:b4:c9: 7c:ea:4b:e6:0c:81:d7:fd:07:99:d1:49:20:b6:6d: 0a:6c:2a:47:ab:53:ae:27:d2:53:48:61:75:8a:fd: e6:bf:e6:4e:54:9c:15:42:40:14:c6:55:07:a8:c8: 0f:ee:f9:38:84:08:38:da:84:29:9e:3f:63:25:af: 62:09:43:58:f8:6a:86:9b:e5:f2:e5:b3:e8:e8:90: cf:2c:93:ed:e9:aa:a9:4d:3f:0a:67:50:8d:17:45: 1a:bb:95:10:65:41:7c:5f:d1:15:93:10:39:0b:83: a5:9b:b5:67:c8:c7:6a:8a:cd:7f:0b:59:e4:7b:ad: e9:a5:85:8e:5c:57:8a:53:e0:72:f4:93:0e:3a:ba: 99:51:22:4e:9b:cc:fe:10:fb:9b:de:48:b8:59:6e: 67:b6:18:26:ff:f0:53:44:98:d7:98:d0:7f:62:d1: d1:34:c7:c0:d8:96:95:02:f2:e1:30:7b:8c:65:b4: 95:c3:29:4a:75:8b:36:01:ce:67:bc:64:55:47:3d: f3:69:b5:d8:b4:dd:d6:09:6a:7c:97:48:44:b9:fd: 28:e4:70:7c:6c:a3:52:ad:1f:f4:05:44:47:9a:40: bf:3a:83:81:7b:bd:85:42:3b:d7:39:7e:25:90:7f: e1:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:92:E8:51:86:12:46:CF:62:42:B3:88:43:33:FD:DE:9A:70:29:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38ca4051-ae6f-379b-a604-ad5873440c88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.213.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:1f:05:49:b6:d9:5c:8d:a0:37:c4:83:c6:65:09:eb:1f:b5: e9:ba:ae:c2:ba:73:68:35:29:e5:0a:1e:ef:06:d8:6c:f4:88: 45:c6:36:d4:aa:c9:1f:11:1e:63:cc:26:10:f9:b6:b5:0c:03: 23:0d:f2:85:86:b6:f2:e1:b4:04:28:e6:da:a5:65:60:52:70: 9a:3e:42:16:72:2d:e7:16:91:44:b4:4c:de:fd:20:d0:33:26: b0:8f:9f:49:22:98:af:ab:b0:92:6c:32:7c:dc:ff:90:30:35: 92:c9:a8:d6:90:1c:66:f5:05:f6:95:e0:79:07:92:06:fe:0d: 9b:12:e5:f7:36:90:b6:fa:ff:96:2b:8f:59:42:cb:e0:b3:8c: 23:92:02:7c:5d:4c:69:6d:9d:25:54:8e:55:ad:6c:68:80:5a: c8:17:b5:8c:d9:15:48:48:ad:e3:c6:bf:27:2f:40:e8:5e:02: f4:bd:4e:4d:4e:92:21:43:41:60:58:00:83:6d:7c:7d:a4:30: 84:6c:de:06:71:41:16:88:f6:c2:77:73:b7:78:4d:cf:c0:e1: 28:6a:bc:b0:79:34:d2:7c:af:0e:7a:f9:b4:2b:69:a4:f1:51: 90:ab:d4:12:b9:ce:64:27:c6:07:0d:60:9e:05:38:16:9b:da: 27:c4:b1:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswruxR0k6v/LlBkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YzAzNDQ1MzgtMzJlOS00Mzg0LTg2NDQtODMzMDQ4MmNmMmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsPTioZZRHtgBCdqtMl86kvmDIHX/QeZ0Ukg tm0KbCpHq1OuJ9JTSGF1iv3mv+ZOVJwVQkAUxlUHqMgP7vk4hAg42oQpnj9jJa9i CUNY+GqGm+Xy5bPo6JDPLJPt6aqpTT8KZ1CNF0Uau5UQZUF8X9EVkxA5C4Olm7Vn yMdqis1/C1nke63ppYWOXFeKU+By9JMOOrqZUSJOm8z+EPub3ki4WW5nthgm//BT RJjXmNB/YtHRNMfA2JaVAvLhMHuMZbSVwylKdYs2Ac5nvGRVRz3zabXYtN3WCWp8 l0hEuf0o5HB8bKNSrR/0BURHmkC/OoOBe72FQjvXOX4lkH/h0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB2S6FGGEkbPYkKziEMz/d6acCmBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzhjYTQwNTEtYWU2Zi0z NzliLWE2MDQtYWQ1ODczNDQwYzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYtUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgfBUm22VyNoDfEg8ZlCesftem6rsK6c2g1KeUKHu8G2Gz0iEXGNtSq yR8RHmPMJhD5trUMAyMN8oWGtvLhtAQo5tqlZWBScJo+QhZyLecWkUS0TN79INAz JrCPn0kimK+rsJJsMnzc/5AwNZLJqNaQHGb1BfaV4HkHkgb+DZsS5fc2kLb6/5Yr j1lCy+CzjCOSAnxdTGltnSVUjlWtbGiAWsgXtYzZFUhIrePGvycvQOheAvS9Tk1O kiFDQWBYAINtfH2kMIRs3gZxQRaI9sJ3c7d4Tc/A4ShqvLB5NNJ8rw56+bQraaTx UZCr1BK5zmQnxgcNYJ4FOBab2ifEsS0= -----END CERTIFICATE-----Generated at Tue Nov 4 23:59:30 2025 by rpki-client