$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86c6e679-2b34-330e-a1ec-10d58446b1c3.roa File: 86c6e679-2b34-330e-a1ec-10d58446b1c3.roa (raw, json) Hash identifier: vttkgs7hlQKIXD1l5eHQ1dVDnjhsXgs89wQBSFMz7UE= Subject key identifier: 19:AF:13:7F:1C:53:96:5B:2B:B5:84:CC:09:82:61:3A:4D:5B:E1:DE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A93C87E2BC6894C43ACB80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86c6e679-2b34-330e-a1ec-10d58446b1c3.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 98.196.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:3c:87:e2:bc:68:94:c4:3a:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=66a0bb6a-92d3-4f39-9115-4b1b2eb27540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:71:49:92:c2:67:10:1d:23:8e:e6:7b:45:00: e8:67:59:de:af:a9:99:a8:b8:f4:48:84:90:e6:2b: d5:80:26:3e:93:97:38:e9:48:de:bd:26:6c:ec:75: 12:4a:dd:bf:61:87:ba:ee:76:61:50:49:0d:d3:97: 10:ab:e4:93:11:99:ff:7e:a4:1d:60:60:30:da:1e: 61:f7:6e:f6:58:cf:27:8b:3d:52:42:e6:25:6d:a0: 0c:39:9b:0d:79:1a:73:9c:26:c3:b0:78:c5:46:c5: 6e:03:b6:63:0e:35:26:1c:22:3d:b9:e8:a8:e6:90: a4:04:b2:8f:5f:e5:6d:17:f9:18:b6:fc:29:27:f2: 83:b5:26:4d:40:c1:da:aa:54:4c:ba:8d:87:16:e1: 7f:c3:c9:8a:62:08:38:05:f3:f9:41:bd:3e:3e:9e: d9:77:1b:70:29:de:55:0c:56:9c:66:00:62:54:6b: 1d:12:2a:d8:db:0a:a1:74:2a:da:2e:43:66:53:4a: ca:c0:e6:5a:49:cb:c2:8b:ef:5a:35:fa:0c:1a:16: 7c:a8:4a:4d:a5:90:2c:59:97:ab:de:f7:dc:50:7b: 2f:a2:78:d5:f3:04:9b:b5:65:8f:3f:18:88:c8:ea: 4f:59:42:c7:70:8d:d6:6a:8e:cc:71:56:e6:fb:b9: ee:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:AF:13:7F:1C:53:96:5B:2B:B5:84:CC:09:82:61:3A:4D:5B:E1:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86c6e679-2b34-330e-a1ec-10d58446b1c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.196.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:ef:90:75:9b:c1:82:80:d4:d3:11:c0:d1:4f:12:95:b2:97: 3a:9c:7b:24:c0:00:79:6b:3f:44:19:d2:94:34:4f:d7:5c:e9: e6:4d:e9:4d:3d:cc:be:12:a0:40:03:16:bb:e3:1a:bd:38:7a: f2:ae:14:00:c8:ff:68:e0:2b:1f:fd:92:45:29:a4:df:f0:a9: 85:cc:5f:8c:9e:92:77:26:31:40:aa:5d:3b:a5:b0:76:bc:47: 6b:c4:5e:81:24:ba:86:73:01:c8:00:47:e4:0f:3c:78:d7:2a: 07:93:3c:1b:5b:47:02:32:42:b3:69:50:9f:85:22:ab:c7:39: 9b:68:9f:a1:2b:f9:f8:b1:94:2f:21:2d:aa:69:2b:be:07:f3: 81:de:28:ba:60:f9:ef:e5:1b:89:e6:d5:a5:d1:ee:ea:38:f2: 2e:81:87:61:65:26:50:ba:2c:f9:4d:9d:43:b0:05:a6:c0:17: b8:17:c0:b4:82:4e:b5:4d:40:4e:f7:79:35:b0:ea:6a:06:bd: 54:a3:71:4d:a0:95:6b:b4:1d:9c:46:74:ea:49:84:85:85:9c: 39:5c:66:7c:58:b0:90:70:65:a6:66:59:27:d1:b8:be:63:c9: 8e:25:e1:13:cd:e4:a9:8d:96:55:a0:e2:27:dc:47:1e:4d:77: 00:41:94:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqTyH4rxolMQ6y4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NjZhMGJiNmEtOTJkMy00ZjM5LTkxMTUtNGIxYjJlYjI3NTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3FJksJnEB0jjuZ7RQDoZ1ner6mZqLj0SISQ 5ivVgCY+k5c46UjevSZs7HUSSt2/YYe67nZhUEkN05cQq+STEZn/fqQdYGAw2h5h 9272WM8niz1SQuYlbaAMOZsNeRpznCbDsHjFRsVuA7ZjDjUmHCI9ueio5pCkBLKP X+VtF/kYtvwpJ/KDtSZNQMHaqlRMuo2HFuF/w8mKYgg4BfP5Qb0+Pp7ZdxtwKd5V DFacZgBiVGsdEirY2wqhdCraLkNmU0rKwOZaScvCi+9aNfoMGhZ8qEpNpZAsWZer 3vfcUHsvonjV8wSbtWWPPxiIyOpPWULHcI3Wao7McVbm+7nuxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBmvE38cU5ZbK7WEzAmCYTpNW+HeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODZjNmU2NzktMmIzNC0z MzBlLWExZWMtMTBkNTg0NDZiMWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYsTAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7vkHWbwYKA1NMRwNFPEpWylzqceyTAAHlrP0QZ0pQ0T9dc6eZN6U09 zL4SoEADFrvjGr04evKuFADI/2jgKx/9kkUppN/wqYXMX4yekncmMUCqXTulsHa8 R2vEXoEkuoZzAcgAR+QPPHjXKgeTPBtbRwIyQrNpUJ+FIqvHOZton6Er+fixlC8h LappK74H84HeKLpg+e/lG4nm1aXR7uo48i6Bh2FlJlC6LPlNnUOwBabAF7gXwLSC TrVNQE73eTWw6moGvVSjcU2glWu0HZxGdOpJhIWFnDlcZnxYsJBwZaZmWSfRuL5j yY4l4RPN5KmNllWg4ifcRx5NdwBBlIQ= -----END CERTIFICATE-----Generated at Tue Nov 4 23:42:36 2025 by rpki-client