$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6e7dca0a-926d-3bee-a2aa-e45e789f9805.roa File: 6e7dca0a-926d-3bee-a2aa-e45e789f9805.roa (raw, json) Hash identifier: nVJ5kUuyv/DsfkcKjDmhMmEUvgnJ4+yrE4H8yjwEDww= Subject key identifier: 9F:B0:67:FF:BC:BD:A5:FF:98:4E:BE:BF:16:25:D6:40:74:37:CD:8A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA8E2E74EB013A8E8A2400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6e7dca0a-926d-3bee-a2aa-e45e789f9805.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 98.209.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:8e:2e:74:eb:01:3a:8e:8a:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=630ba44c-a6f5-4748-ab72-480b680c2e97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5d:94:be:45:52:d9:8e:ef:7c:ba:e6:d1:0f: 68:07:22:53:ad:ec:61:b0:27:3a:63:7c:17:89:6a: 0e:ae:27:62:7d:a2:89:c8:bb:1f:f6:1e:59:a9:3d: a9:1b:8f:e7:42:f2:63:e2:5b:cd:a0:5f:70:c0:c9: 71:8b:0c:cd:ef:1a:a4:7c:f4:c4:7e:5c:61:b3:90: 57:e2:68:1f:7c:d7:95:fa:8c:3c:73:74:54:ba:b1: 94:b4:ce:bb:a0:58:1c:a1:b4:60:02:67:3c:6b:d7: f3:b2:fc:1d:70:8d:9f:25:fd:ee:73:14:f2:21:2c: 55:61:eb:b7:b3:d7:9b:24:8e:bd:e0:87:fd:a5:a0: 3d:5f:d0:0b:de:b6:3f:c1:ea:e5:ca:4d:89:1c:63: 93:7c:5a:54:31:03:04:36:0e:17:d6:7a:e4:e5:6d: 5d:a3:f8:bd:a1:ad:71:fc:c0:a1:86:b2:a9:cc:cb: d1:fe:eb:e2:de:3b:72:b3:04:85:a8:28:4a:f7:2b: bc:66:72:b3:d6:f2:20:20:53:a6:8a:38:57:d6:96: 95:c3:93:a4:9f:af:fa:ae:fc:e9:79:56:ca:f7:27: d8:b2:f7:a2:17:1b:67:e0:d6:a9:62:07:3a:c3:c8: 3d:e5:bb:5e:07:c2:21:73:36:cf:2a:f9:48:9e:09: 92:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:B0:67:FF:BC:BD:A5:FF:98:4E:BE:BF:16:25:D6:40:74:37:CD:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6e7dca0a-926d-3bee-a2aa-e45e789f9805.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.209.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:fc:20:93:31:95:c7:e2:18:1a:b6:28:32:2d:03:c9:d0:f7: 05:2f:41:05:f0:0e:3c:45:00:03:8f:de:5e:e8:42:d1:00:7a: db:92:68:2b:2c:36:0d:18:13:6e:aa:16:b7:91:a8:92:b1:e2: e7:38:eb:25:4e:94:6a:a6:94:01:31:28:03:df:15:3c:69:81: a1:68:6c:d9:bb:c5:80:58:d3:f3:37:ce:37:75:38:e9:8c:ca: 6c:7c:6d:c8:e4:0b:82:d9:f2:34:78:97:f0:77:b4:c5:03:59: a5:49:63:42:7f:d4:61:20:1b:42:73:4d:5f:82:b4:04:ed:27: 09:e6:58:2e:a1:9c:91:89:92:e1:a5:66:b8:a0:1e:0f:9c:e0: 6b:c0:31:86:0f:61:ff:81:e5:ed:20:f7:9c:c4:86:56:2b:7c: a7:e6:7c:16:31:7c:36:16:5c:79:84:7c:37:a1:af:9a:07:43: a6:62:d6:30:7e:9c:3f:c7:e9:d1:7c:0d:45:e4:65:f0:b4:45: b4:ee:32:50:1e:e7:ff:55:ea:50:66:d2:c8:d0:79:49:dc:82: b7:54:fe:20:ea:45:1b:2b:ff:8a:7b:6f:86:f5:8e:fe:e3:92: af:10:24:a6:03:91:70:64:47:2a:da:4e:06:87:3e:2c:0f:71: 02:68:34:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqo4udOsBOo6KJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NjMwYmE0NGMtYTZmNS00NzQ4LWFiNzItNDgwYjY4MGMyZTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoV2UvkVS2Y7vfLrm0Q9oByJTrexhsCc6Y3wX iWoOridifaKJyLsf9h5ZqT2pG4/nQvJj4lvNoF9wwMlxiwzN7xqkfPTEflxhs5BX 4mgffNeV+ow8c3RUurGUtM67oFgcobRgAmc8a9fzsvwdcI2fJf3ucxTyISxVYeu3 s9ebJI694If9paA9X9AL3rY/werlyk2JHGOTfFpUMQMENg4X1nrk5W1do/i9oa1x /MChhrKpzMvR/uvi3jtyswSFqChK9yu8ZnKz1vIgIFOmijhX1paVw5Okn6/6rvzp eVbK9yfYsveiFxtn4NapYgc6w8g95bteB8IhczbPKvlIngmSswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ+wZ/+8vaX/mE6+vxYl1kB0N82KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNmU3ZGNhMGEtOTI2ZC0z YmVlLWEyYWEtZTQ1ZTc4OWY5ODA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYtGsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK38IJMxlcfiGBq2KDItA8nQ9wUvQQXwDjxFAAOP3l7oQtEAetuSaCss Ng0YE26qFreRqJKx4uc46yVOlGqmlAExKAPfFTxpgaFobNm7xYBY0/M3zjd1OOmM ymx8bcjkC4LZ8jR4l/B3tMUDWaVJY0J/1GEgG0JzTV+CtATtJwnmWC6hnJGJkuGl ZrigHg+c4GvAMYYPYf+B5e0g95zEhlYrfKfmfBYxfDYWXHmEfDehr5oHQ6Zi1jB+ nD/H6dF8DUXkZfC0RbTuMlAe5/9V6lBm0sjQeUncgrdU/iDqRRsr/4p7b4b1jv7j kq8QJKYDkXBkRyraTgaHPiwPcQJoNIU= -----END CERTIFICATE-----Generated at Tue Nov 4 23:40:23 2025 by rpki-client