$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b947961d-9af5-3303-bdb9-55606f5a4125.roa File: b947961d-9af5-3303-bdb9-55606f5a4125.roa (raw, json) Hash identifier: ttI1DSJqe1PSS2K9ThfFqFGT0jSQpYQhirjMFrCdphQ= Subject key identifier: FC:84:1C:EF:7B:89:56:AD:6C:C0:AC:9D:04:D7:89:D3:38:43:C2:CC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AADDBD2ED903B324EE9080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b947961d-9af5-3303-bdb9-55606f5a4125.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 98.196.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:dd:bd:2e:d9:03:b3:24:ee:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=f4d4ee3c-ecc1-44d8-b8a3-146f7fb5cb88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:95:f4:4f:15:2e:df:8f:e8:7e:ad:ff:68:26: b6:a4:f0:69:c7:a9:bf:0d:1d:21:ba:55:15:c3:54: 02:b1:32:e2:8c:cd:a1:cf:ce:7a:62:94:1f:3e:21: 09:b1:60:60:88:80:4a:8b:78:29:dc:99:6f:bc:9e: 4d:bd:0f:7b:a0:39:5a:bf:1f:57:71:2a:e0:b9:2e: 77:61:d2:54:9b:e1:4d:9a:e0:60:80:a5:89:73:88: 55:9a:f3:ed:6f:4c:d9:5f:18:a2:66:f5:51:c4:14: 4c:3f:7a:35:8d:52:63:0f:33:33:4e:30:e0:4f:21: e2:86:9c:a7:b3:15:ec:54:65:2c:75:0d:7a:9e:c1: 9f:c7:e6:c5:5e:07:02:4e:c9:8f:db:9c:ac:33:36: e2:c8:a3:f0:00:3b:3c:f3:ea:8d:4d:e6:74:7b:c5: 2a:72:a8:3b:5b:9b:37:57:16:57:f1:7b:8b:13:8d: cb:f8:6a:2d:b2:7e:2c:75:be:0c:1b:34:9b:3a:04: 6a:54:24:71:20:f5:ed:f9:fe:7d:5b:9b:a2:20:84: 7e:dd:0a:40:da:e3:e0:22:41:f6:36:33:d8:0a:76: 87:66:c2:55:88:13:ff:55:8e:b9:a2:cc:ff:68:15: a4:d2:a6:0f:ed:0a:6d:58:60:5a:b2:f5:ef:07:98: f9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:84:1C:EF:7B:89:56:AD:6C:C0:AC:9D:04:D7:89:D3:38:43:C2:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b947961d-9af5-3303-bdb9-55606f5a4125.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.196.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:ce:23:7f:0c:d9:04:16:d0:1e:7b:e7:da:66:f8:0e:64:e1: 6c:2e:25:c0:33:1a:1c:d5:b2:52:9c:32:5a:90:ac:0c:49:41: c6:7e:9d:ad:9b:36:9d:5e:e1:5a:ac:57:4d:b8:b2:75:cf:85: 07:ec:be:6e:d0:5f:23:6e:a8:58:3a:ad:3e:5a:cd:d4:37:b5: 64:a2:e2:c1:72:ac:02:6d:e3:40:df:5e:08:6a:12:f7:4d:cb: 61:96:f4:34:be:b6:dc:c7:ea:f2:00:f4:d5:0c:44:d5:22:1c: a1:48:46:d4:af:b1:0e:0b:9d:55:91:28:c5:04:9c:3a:29:d0: f7:a0:22:7f:51:8f:2d:f7:de:40:a1:89:be:ba:ca:b8:92:35: 68:da:44:9a:62:0c:54:75:7b:3b:b9:34:53:ba:6b:23:ae:42: be:93:c3:91:e9:8a:62:95:4e:5e:be:33:60:2a:50:32:f4:46: 2c:16:24:5d:df:26:05:9e:7d:f0:c1:65:0b:a5:a8:9d:1a:73: 59:b5:1e:5b:a0:11:05:e5:7c:e2:99:f9:b0:eb:ff:db:e9:4d: fb:c4:3d:de:c2:c2:48:eb:63:e9:eb:95:e8:83:26:41:bb:32: 9d:8c:40:5e:c1:a1:c5:6f:59:9e:d1:2f:94:d1:73:db:52:a5: c7:e2:5b:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqt29LtkDsyTukIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZjRkNGVlM2MtZWNjMS00NGQ4LWI4YTMtMTQ2ZjdmYjVjYjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpX0TxUu34/ofq3/aCa2pPBpx6m/DR0hulUV w1QCsTLijM2hz856YpQfPiEJsWBgiIBKi3gp3JlvvJ5NvQ97oDlavx9XcSrguS53 YdJUm+FNmuBggKWJc4hVmvPtb0zZXxiiZvVRxBRMP3o1jVJjDzMzTjDgTyHihpyn sxXsVGUsdQ16nsGfx+bFXgcCTsmP25ysMzbiyKPwADs88+qNTeZ0e8Uqcqg7W5s3 VxZX8XuLE43L+Gotsn4sdb4MGzSbOgRqVCRxIPXt+f59W5uiIIR+3QpA2uPgIkH2 NjPYCnaHZsJViBP/VY65osz/aBWk0qYP7QptWGBasvXvB5j5JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPyEHO97iVatbMCsnQTXidM4Q8LMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjk0Nzk2MWQtOWFmNS0z MzAzLWJkYjktNTU2MDZmNWE0MTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYsQkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArOI38M2QQW0B5759pm+A5k4WwuJcAzGhzVslKcMlqQrAxJQcZ+na2b Np1e4VqsV024snXPhQfsvm7QXyNuqFg6rT5azdQ3tWSi4sFyrAJt40DfXghqEvdN y2GW9DS+ttzH6vIA9NUMRNUiHKFIRtSvsQ4LnVWRKMUEnDop0PegIn9Rjy333kCh ib66yriSNWjaRJpiDFR1ezu5NFO6ayOuQr6Tw5HpimKVTl6+M2AqUDL0RiwWJF3f JgWeffDBZQulqJ0ac1m1HlugEQXlfOKZ+bDr/9vpTfvEPd7CwkjrY+nrleiDJkG7 Mp2MQF7BocVvWZ7RL5TRc9tSpcfiW6o= -----END CERTIFICATE-----Generated at Wed Nov 5 00:06:13 2025 by rpki-client