$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8582d102-48b1-3318-874a-5756373e9415.roa File: 8582d102-48b1-3318-874a-5756373e9415.roa (raw, json) Hash identifier: wue3P1LdqX4fy0+wof/jij8ytpPBsRXiGpUVS7S8zNU= Subject key identifier: 41:4C:97:41:C9:10:9C:4F:A1:D5:A7:80:6B:B2:CC:8C:98:15:C2:49 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC374860435365E0E2BAB00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8582d102-48b1-3318-874a-5756373e9415.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33660 IP address blocks: 98.202.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:74:86:04:35:36:5e:0e:2b:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=0c74a20b-6c19-4905-b5d3-9113e0eeb081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0b:1a:d1:d5:1f:d2:0d:5c:15:95:41:91:ea: f8:2d:7a:9d:8b:42:b3:89:68:93:bf:90:0f:bc:c0: ef:f0:0b:e9:2e:7d:78:4d:85:8d:d1:c7:2b:bc:91: 44:58:6b:d6:99:d9:4c:21:7c:04:81:aa:50:b6:8a: ef:48:c4:a0:3b:7f:0e:3a:2e:82:7d:e3:35:eb:87: 26:62:4c:25:c9:07:c4:d4:58:4a:ea:3e:b8:b7:bf: 69:8e:38:ff:d5:ce:96:35:73:f4:08:74:78:3b:61: 75:25:cf:4e:d6:08:29:e1:d2:d2:bf:02:e8:d8:76: 75:fe:a7:d3:07:9d:b4:06:ae:56:ac:06:f1:e7:ec: ee:44:7d:2f:a8:67:b1:4c:31:87:b8:73:78:ee:86: db:83:fc:84:87:eb:54:a6:bf:62:d7:cb:f9:3e:01: 8a:ed:94:fd:b8:f1:3c:1e:21:7c:82:04:e4:01:62: b8:a2:27:6f:42:77:12:64:57:50:c5:86:34:9d:21: cf:0e:12:f9:eb:12:b4:9a:e2:f5:2d:a0:49:3e:bc: c3:31:37:94:ea:df:c9:16:62:75:df:6f:97:ea:ab: a9:fb:92:7b:e3:0c:24:46:03:12:c6:aa:17:ae:45: 28:34:d4:20:2d:c1:81:b4:07:e9:6d:e4:83:40:be: b0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:4C:97:41:C9:10:9C:4F:A1:D5:A7:80:6B:B2:CC:8C:98:15:C2:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8582d102-48b1-3318-874a-5756373e9415.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.202.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:f1:b7:80:e5:74:48:45:47:eb:5f:74:98:93:d5:05:90:b2: ca:0d:2d:53:1b:8c:3e:d8:32:7d:e8:b3:85:26:6d:ac:12:5f: ae:8a:4f:10:eb:81:2d:cb:62:69:db:f1:84:b0:3a:0e:15:ca: 63:6a:56:c8:70:e6:62:5c:8a:40:5e:f9:27:c7:42:4a:fd:df: 16:d5:8c:39:b5:19:5a:cf:72:69:cf:29:af:05:9b:09:13:49: 75:ef:0f:ff:ef:dc:e4:2d:15:29:20:e3:c8:e6:aa:c4:43:88: c0:01:af:f2:65:ae:6a:30:d9:28:94:5f:63:6f:9e:cb:45:b3: ce:fa:52:0b:a7:96:64:a3:4b:04:68:61:fe:aa:b3:f8:61:bc: 54:94:dd:7e:8e:c9:c8:89:9e:5d:c4:d7:6d:d3:4c:07:8f:4d: c9:93:92:6d:ea:a2:10:90:77:2f:c3:dc:9f:b9:34:46:e3:b8: 55:5a:cd:69:7f:75:10:d4:ae:4c:a1:bd:16:d1:9e:c4:60:e8: 72:71:18:71:72:2f:71:91:f7:80:e5:b0:99:01:75:5f:2d:81: be:5d:63:a8:56:08:c4:95:68:51:dc:47:bb:1d:59:07:05:19: 77:b0:94:06:65:e5:24:a8:44:82:9f:d7:4d:26:8e:6e:44:c5: dd:45:a0:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw3SGBDU2Xg4rqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MGM3NGEyMGItNmMxOS00OTA1LWI1ZDMtOTExM2UwZWViMDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQsa0dUf0g1cFZVBker4LXqdi0KziWiTv5AP vMDv8AvpLn14TYWN0ccrvJFEWGvWmdlMIXwEgapQtorvSMSgO38OOi6CfeM164cm YkwlyQfE1FhK6j64t79pjjj/1c6WNXP0CHR4O2F1Jc9O1ggp4dLSvwLo2HZ1/qfT B520Bq5WrAbx5+zuRH0vqGexTDGHuHN47obbg/yEh+tUpr9i18v5PgGK7ZT9uPE8 HiF8ggTkAWK4oidvQncSZFdQxYY0nSHPDhL56xK0muL1LaBJPrzDMTeU6t/JFmJ1 32+X6qup+5J74wwkRgMSxqoXrkUoNNQgLcGBtAfpbeSDQL6wkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFMl0HJEJxPodWngGuyzIyYFcJJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODU4MmQxMDItNDhiMS0z MzE4LTg3NGEtNTc1NjM3M2U5NDE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYsr+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3xt4DldEhFR+tfdJiT1QWQssoNLVMbjD7YMn3os4UmbawSX66KTxDr gS3LYmnb8YSwOg4VymNqVshw5mJcikBe+SfHQkr93xbVjDm1GVrPcmnPKa8FmwkT SXXvD//v3OQtFSkg48jmqsRDiMABr/Jlrmow2SiUX2NvnstFs876UgunlmSjSwRo Yf6qs/hhvFSU3X6OyciJnl3E123TTAePTcmTkm3qohCQdy/D3J+5NEbjuFVazWl/ dRDUrkyhvRbRnsRg6HJxGHFyL3GR94DlsJkBdV8tgb5dY6hWCMSVaFHcR7sdWQcF GXewlAZl5SSoRIKf100mjm5Exd1FoGo= -----END CERTIFICATE-----Generated at Wed Nov 5 10:07:53 2025 by rpki-client