$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9145b16a-804f-3976-91ad-4ec57b36296f.roa File: 9145b16a-804f-3976-91ad-4ec57b36296f.roa (raw, json) Hash identifier: DHhKOwKl0A4ETEyEBv3V/fXkgiMoiaHbWwS6Rf+GYlk= Subject key identifier: 2A:87:3D:C8:D0:0A:77:D5:D8:CD:C8:0F:AD:F6:1A:4A:57:5D:49:7B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584BC10BB28A7D281869E3F69980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9145b16a-804f-3976-91ad-4ec57b36296f.roa Signing time: Wed 05 Nov 2025 02:00:31 +0000 ROA not before: Wed 05 Nov 2025 02:00:31 +0000 ROA not after: Tue 03 Feb 2026 02:00:31 +0000 asID: 7725 IP address blocks: 98.251.106.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0b:b2:8a:7d:28:18:69:e3:f6:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 5 02:00:31 2025 GMT Not After : Feb 3 02:00:31 2026 GMT Subject: CN=c1d96cbc-27a8-4c0b-abf6-56d0dfc48395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f8:c9:df:76:de:db:65:41:6b:4e:5a:87:b1: ef:c4:c2:df:3c:7f:a3:58:1c:9f:7d:97:41:f5:5d: ae:d9:42:af:d6:fc:7a:ac:03:14:3a:16:46:8d:08: 40:c0:e1:18:24:a5:c2:4d:23:ca:d8:58:91:55:ca: 7f:2c:af:9a:b1:9c:a1:3c:5e:d3:69:64:95:ff:70: 49:bb:17:02:72:7a:bb:af:8f:74:de:60:b0:a8:44: 07:eb:bf:b5:f4:3c:ce:64:1d:c6:44:6b:c2:df:01: 0c:a8:f6:e4:2d:30:a2:6b:3a:b1:ce:ae:e1:e9:c3: 19:3c:b3:13:00:67:f5:f9:5b:0a:c4:14:81:71:2d: ce:36:ef:93:ab:d3:97:ea:90:e8:76:f3:0c:34:22: f5:f8:23:ee:56:25:29:99:04:85:cb:87:1d:7d:76: 5b:01:24:dd:05:85:50:12:15:9e:86:dd:5e:a4:82: dd:27:38:b1:63:ce:cc:1e:01:8c:52:1f:67:ad:73: d3:8f:e1:58:e7:66:e8:cc:76:27:f9:47:34:40:ac: 57:19:7d:f1:34:e7:b5:a0:7d:93:de:2c:6f:6f:35: dc:35:ed:e3:e2:8c:15:54:8f:57:40:d7:17:67:b4: 47:b6:38:26:40:c2:8d:61:79:aa:1a:c5:b8:6e:f2: d5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:87:3D:C8:D0:0A:77:D5:D8:CD:C8:0F:AD:F6:1A:4A:57:5D:49:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9145b16a-804f-3976-91ad-4ec57b36296f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.251.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:c9:60:a2:68:fc:76:8a:8e:4f:00:63:04:7e:a5:75:f3:eb: 08:1e:3a:01:41:9a:f8:6c:f8:82:e3:c7:0c:7f:bf:d6:34:13: 85:b3:97:3b:af:c7:ef:68:ea:0a:69:4c:29:f4:e6:a5:b2:38: cb:8d:c4:4b:5f:44:49:39:44:7a:4c:06:61:73:e3:39:7d:a5: a6:c6:8e:02:a8:88:90:40:ea:8d:98:27:9f:f6:1e:75:23:54: 2c:71:91:31:97:4c:93:36:96:08:ab:2c:be:f5:d8:db:b6:ee: f9:2e:0e:ed:d6:f8:e4:a6:03:93:82:46:e1:1b:7d:f9:42:4f: 34:05:6c:bd:4c:63:d4:a8:c0:62:30:0d:3d:f2:8d:77:91:69: 44:0b:8e:be:de:1d:bf:4c:6e:71:6c:c1:b9:34:b9:c6:04:86: b8:69:f4:04:38:03:c1:7a:1b:19:09:11:c6:d3:8e:a9:5b:09: d1:c3:9c:ca:a3:2b:7f:68:68:ca:79:48:14:58:a1:d1:48:a6: 36:05:1b:22:68:d4:74:be:91:a2:1d:68:7f:da:6f:3e:3b:f5: 52:23:e3:df:d4:f5:21:c4:fd:66:94:70:74:32:2d:bf:7d:e6: 71:70:e2:30:02:f1:fa:94:df:43:bf:71:cc:bc:a9:ea:5c:9a: 3a:43:21:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvBC7KKfSgYaeP2mYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk YzFkOTZjYmMtMjdhOC00YzBiLWFiZjYtNTZkMGRmYzQ4Mzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPjJ33be22VBa05ah7HvxMLfPH+jWByffZdB 9V2u2UKv1vx6rAMUOhZGjQhAwOEYJKXCTSPK2FiRVcp/LK+asZyhPF7TaWSV/3BJ uxcCcnq7r4903mCwqEQH67+19DzOZB3GRGvC3wEMqPbkLTCiazqxzq7h6cMZPLMT AGf1+VsKxBSBcS3ONu+Tq9OX6pDodvMMNCL1+CPuViUpmQSFy4cdfXZbASTdBYVQ EhWeht1epILdJzixY87MHgGMUh9nrXPTj+FY52bozHYn+Uc0QKxXGX3xNOe1oH2T 3ixvbzXcNe3j4owVVI9XQNcXZ7RHtjgmQMKNYXmqGsW4bvLVLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqHPcjQCnfV2M3ID632GkpXXUl7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTE0NWIxNmEtODA0Zi0z OTc2LTkxYWQtNGVjNTdiMzYyOTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYvtqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALHJYKJo/HaKjk8AYwR+pXXz6wgeOgFBmvhs+ILjxwx/v9Y0E4Wzlzuv x+9o6gppTCn05qWyOMuNxEtfREk5RHpMBmFz4zl9pabGjgKoiJBA6o2YJ5/2HnUj VCxxkTGXTJM2lgirLL712Nu27vkuDu3W+OSmA5OCRuEbfflCTzQFbL1MY9SowGIw DT3yjXeRaUQLjr7eHb9MbnFswbk0ucYEhrhp9AQ4A8F6GxkJEcbTjqlbCdHDnMqj K39oaMp5SBRYodFIpjYFGyJo1HS+kaIdaH/abz479VIj49/U9SHE/WaUcHQyLb99 5nFw4jAC8fqU30O/ccy8qepcmjpDISk= -----END CERTIFICATE-----Generated at Wed Nov 5 11:25:39 2025 by rpki-client