$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c082288d-17fa-3f19-8310-30662a8a9edc.roa File: c082288d-17fa-3f19-8310-30662a8a9edc.roa (raw, json) Hash identifier: pxStXL+quYslWPifIErifCWbbO8/Lhk0jLMmtak7n+A= Subject key identifier: 58:46:2D:58:C2:C8:FB:EA:FC:C7:EE:D6:C4:03:2E:13:06:4C:4A:2A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584BC10B423E4A6D019CB1BC9774 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c082288d-17fa-3f19-8310-30662a8a9edc.roa Signing time: Wed 05 Nov 2025 02:00:31 +0000 ROA not before: Wed 05 Nov 2025 02:00:31 +0000 ROA not after: Tue 03 Feb 2026 02:00:31 +0000 asID: 7725 IP address blocks: 98.54.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0b:42:3e:4a:6d:01:9c:b1:bc:97:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 5 02:00:31 2025 GMT Not After : Feb 3 02:00:31 2026 GMT Subject: CN=a91b0bd8-3fe5-4eb5-99da-21f323b1907c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0d:93:82:82:d6:56:9d:de:3d:3f:29:fe:b2: bc:04:c8:7d:a8:7f:66:90:bc:3f:5b:8f:a3:8b:13: 1c:06:60:8d:e9:4c:18:36:6d:66:bc:87:72:5b:ac: eb:bc:6e:39:5c:50:4c:33:c8:8a:f5:05:bb:35:bb: 65:1d:33:1f:b1:6f:de:db:2c:ad:d4:d1:2a:c3:f8: eb:ad:f5:00:77:c8:72:31:de:93:5c:fd:ad:23:2c: 96:ae:c9:8f:c5:a1:1a:14:cc:e9:43:5b:30:88:bf: 48:f7:70:a0:a3:c1:82:ea:e2:27:f5:e8:34:15:a8: 19:30:80:09:8d:f5:b2:d5:f2:1f:8d:b0:d8:5d:66: ee:7f:5c:93:2e:a2:d4:62:85:59:10:32:3a:19:3a: 50:b9:90:41:bd:e2:90:4a:a7:88:5e:ac:fc:5a:d7: 7a:6c:f1:00:f1:4e:5e:41:65:e2:e8:6c:f6:a7:29: f3:f5:c9:ab:fe:ce:57:65:44:1a:ca:01:5e:b4:66: c9:36:e6:3f:b7:61:b2:9b:be:6a:d2:38:0a:c0:0e: 2b:2b:8a:9a:59:d5:69:93:8a:ea:bc:59:ce:ed:87: 0a:18:4a:7d:f5:7c:d4:91:d0:ba:6b:75:e4:8e:a2: 65:75:4e:c3:5b:e3:fa:af:27:d0:81:1d:33:a6:60: 68:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:46:2D:58:C2:C8:FB:EA:FC:C7:EE:D6:C4:03:2E:13:06:4C:4A:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c082288d-17fa-3f19-8310-30662a8a9edc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.54.18.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:bd:61:41:a0:36:8f:c8:e9:80:6f:ee:3a:1c:7e:41:d1:3c: 99:f4:84:b8:38:cb:22:ad:c0:30:73:a7:15:9a:f1:14:8e:14: 76:cb:9f:57:cf:09:5f:b3:8f:b0:39:38:66:72:cc:cc:69:7b: 62:aa:17:7f:f5:f1:33:79:3a:d2:c0:e4:3f:01:d9:9d:d2:f6: 2f:09:c1:71:b3:34:79:ad:51:b1:93:9a:1c:03:87:03:cc:03: 49:b4:b4:81:37:4c:64:cf:1c:fe:3a:ba:6d:a0:31:08:83:ee: 69:0a:c2:de:68:55:a0:02:db:7f:70:28:7d:3e:bd:e9:64:43: 25:67:95:5c:5c:b4:f2:11:52:99:cb:30:a3:e6:7c:de:7a:34: d8:77:6d:b9:a9:eb:ce:1f:08:59:74:79:63:30:be:91:e6:93: c7:86:8f:53:26:7c:9e:d5:89:3d:0b:e2:c1:5a:fd:22:85:c6: e5:31:dd:36:ba:b7:c5:77:34:7b:65:24:9b:77:43:1c:68:aa: 7c:e5:4d:00:0e:76:b5:9d:7e:41:b3:fe:d5:5e:03:c6:e0:81: 32:04:35:08:43:8b:36:94:ff:83:b1:fc:5f:11:c6:21:75:1d: 8b:2a:04:78:76:35:8b:d7:ec:a6:d9:52:8a:73:33:cd:52:dd: cd:76:92:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvBC0I+Sm0BnLG8l3QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk YTkxYjBiZDgtM2ZlNS00ZWI1LTk5ZGEtMjFmMzIzYjE5MDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArw2TgoLWVp3ePT8p/rK8BMh9qH9mkLw/W4+j ixMcBmCN6UwYNm1mvIdyW6zrvG45XFBMM8iK9QW7NbtlHTMfsW/e2yyt1NEqw/jr rfUAd8hyMd6TXP2tIyyWrsmPxaEaFMzpQ1swiL9I93Cgo8GC6uIn9eg0FagZMIAJ jfWy1fIfjbDYXWbuf1yTLqLUYoVZEDI6GTpQuZBBveKQSqeIXqz8Wtd6bPEA8U5e QWXi6Gz2pynz9cmr/s5XZUQaygFetGbJNuY/t2Gym75q0jgKwA4rK4qaWdVpk4rq vFnO7YcKGEp99XzUkdC6a3XkjqJldU7DW+P6ryfQgR0zpmBoywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFhGLVjCyPvq/Mfu1sQDLhMGTEoqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzA4MjI4OGQtMTdmYS0z ZjE5LTgzMTAtMzA2NjJhOGE5ZWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYjYSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGW9YUGgNo/I6YBv7jocfkHRPJn0hLg4yyKtwDBzpxWa8RSOFHbLn1fP CV+zj7A5OGZyzMxpe2KqF3/18TN5OtLA5D8B2Z3S9i8JwXGzNHmtUbGTmhwDhwPM A0m0tIE3TGTPHP46um2gMQiD7mkKwt5oVaAC239wKH0+velkQyVnlVxctPIRUpnL MKPmfN56NNh3bbmp684fCFl0eWMwvpHmk8eGj1MmfJ7ViT0L4sFa/SKFxuUx3Ta6 t8V3NHtlJJt3QxxoqnzlTQAOdrWdfkGz/tVeA8bggTIENQhDizaU/4Ox/F8RxiF1 HYsqBHh2NYvX7KbZUopzM81S3c12km8= -----END CERTIFICATE-----Generated at Wed Nov 5 09:20:22 2025 by rpki-client