$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf49c879-f0ae-32d5-a557-c2d20a9700fb.roa File: cf49c879-f0ae-32d5-a557-c2d20a9700fb.roa (raw, json) Hash identifier: FokG7bl904ILio6sF28bACn77BTsdym1o07xvmyGZjg= Subject key identifier: FD:D0:AF:6A:C7:9B:DC:87:C1:D9:D4:6F:EF:31:A5:CE:AB:4D:46:2C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B52A7619DB28B70DD786FB680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf49c879-f0ae-32d5-a557-c2d20a9700fb.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 33491 IP address blocks: 98.63.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:61:9d:b2:8b:70:dd:78:6f:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=e8d04c0c-5de1-4c1e-ae64-5359fb6dd932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:5c:5f:71:ec:5d:a2:8b:cb:0a:f1:20:49:08: c6:5d:9e:b4:f5:11:eb:8a:ec:5d:f6:43:df:1b:8f: 42:13:d9:b6:ce:14:a3:4b:08:96:c1:02:de:b1:06: 61:b0:eb:b3:7d:75:ca:ec:af:b7:80:fe:87:ec:52: fb:8c:9a:d6:19:eb:f1:13:58:02:a4:2b:c0:11:f3: f5:7d:27:40:48:db:75:a3:9f:89:e1:7a:a3:cc:c1: 72:44:d2:60:21:28:a3:ad:ea:60:0e:2b:08:07:2b: c1:49:ae:9c:96:02:9b:11:c6:ee:76:8d:5c:29:e9: 32:1e:ca:31:88:d9:7b:a1:21:9b:7f:4e:e1:de:cf: eb:fe:45:e2:9a:7f:36:b0:56:d3:56:e5:f9:57:69: d7:65:0d:7e:bc:47:df:b3:60:ec:61:e6:0e:33:8b: e3:9a:0b:ed:89:46:d0:72:c7:95:62:68:e6:25:87: 14:0c:e0:48:82:c8:b4:71:80:09:ca:89:d6:7c:eb: 93:be:99:c0:26:94:4e:78:b4:46:30:16:19:1f:cc: 64:f7:71:dd:70:b2:4a:6d:be:d6:28:c5:7a:86:fc: 89:16:30:1a:2e:ce:3a:53:a3:0c:48:28:71:56:ed: 20:f3:46:9a:5a:bb:29:5b:7c:b6:f7:01:e6:5e:bc: 4a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D0:AF:6A:C7:9B:DC:87:C1:D9:D4:6F:EF:31:A5:CE:AB:4D:46:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf49c879-f0ae-32d5-a557-c2d20a9700fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.63.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:f6:f1:9c:27:61:5b:55:c2:74:e4:32:55:23:bc:dc:b1:d4: 7e:90:da:9b:9d:0b:9e:e1:99:5d:b7:8a:fb:8c:ac:c3:bb:f4: 59:86:46:65:c6:69:16:ae:b1:b3:81:55:74:c1:89:7d:f2:fe: 92:69:8d:d1:cd:0d:61:0c:fa:cf:62:25:3a:45:d8:fd:37:7c: ea:37:2b:2a:9d:47:95:d4:43:b2:3e:3d:68:b4:65:a8:6e:cd: fb:9f:00:6c:70:0a:3e:d7:7b:40:27:83:4a:af:d6:be:13:0a: 6c:41:21:2b:3b:11:de:71:53:e9:26:bf:67:6f:8f:d7:b5:82: 72:ca:54:b8:b3:f2:8c:69:63:37:a5:89:a3:ab:d8:58:27:a1: 08:e6:03:df:d5:96:ff:d1:1b:ab:b2:7e:28:d7:15:d4:25:cf: 18:5a:d0:eb:d5:7a:25:36:7b:84:b8:0b:bf:45:30:78:51:b5: 69:73:f6:c1:f6:85:05:f1:e0:c2:8c:5b:5a:eb:ae:90:19:4c: 40:67:68:3d:8c:ec:31:84:b6:65:db:40:a3:6d:ee:42:6d:7f: ae:d3:ea:9f:ec:c9:64:b7:4f:b8:ab:d6:e2:05:30:3d:5a:3f: 7e:07:b1:74:17:27:0b:5f:3c:e2:ce:09:ef:36:fe:7d:42:09: 97:f1:c3:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp2Gdsotw3XhvtoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk ZThkMDRjMGMtNWRlMS00YzFlLWFlNjQtNTM1OWZiNmRkOTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVxfcexdoovLCvEgSQjGXZ609RHriuxd9kPf G49CE9m2zhSjSwiWwQLesQZhsOuzfXXK7K+3gP6H7FL7jJrWGevxE1gCpCvAEfP1 fSdASNt1o5+J4XqjzMFyRNJgISijrepgDisIByvBSa6clgKbEcbudo1cKekyHsox iNl7oSGbf07h3s/r/kXimn82sFbTVuX5V2nXZQ1+vEffs2DsYeYOM4vjmgvtiUbQ cseVYmjmJYcUDOBIgsi0cYAJyonWfOuTvpnAJpROeLRGMBYZH8xk93HdcLJKbb7W KMV6hvyJFjAaLs46U6MMSChxVu0g80aaWrspW3y29wHmXrxK/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP3Qr2rHm9yHwdnUb+8xpc6rTUYsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2Y0OWM4NzktZjBhZS0z MmQ1LWE1NTctYzJkMjBhOTcwMGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYj/CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALD28ZwnYVtVwnTkMlUjvNyx1H6Q2pudC57hmV23ivuMrMO79FmGRmXG aRausbOBVXTBiX3y/pJpjdHNDWEM+s9iJTpF2P03fOo3KyqdR5XUQ7I+PWi0Zahu zfufAGxwCj7Xe0Ang0qv1r4TCmxBISs7Ed5xU+kmv2dvj9e1gnLKVLiz8oxpYzel iaOr2FgnoQjmA9/Vlv/RG6uyfijXFdQlzxha0OvVeiU2e4S4C79FMHhRtWlz9sH2 hQXx4MKMW1rrrpAZTEBnaD2M7DGEtmXbQKNt7kJtf67T6p/syWS3T7ir1uIFMD1a P34HsXQXJwtfPOLOCe82/n1CCZfxw9U= -----END CERTIFICATE-----Generated at Wed Nov 5 00:43:05 2025 by rpki-client