$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f447a89d-ed27-3b52-9f7d-2616d9c1e29d.roa File: f447a89d-ed27-3b52-9f7d-2616d9c1e29d.roa (raw, json) Hash identifier: DN1xC/4FGsTnAPVzw3Lf7kThg655Yzom7d84U5s5fFs= Subject key identifier: 43:E5:7C:B4:27:6F:0D:4C:E7:EA:B0:2E:E3:10:9F:52:6E:B2:A3:C7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AAEBBBE8A1F09C9DC96B40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f447a89d-ed27-3b52-9f7d-2616d9c1e29d.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 98.200.42.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:eb:bb:e8:a1:f0:9c:9d:c9:6b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=c4fd60ea-ef7b-4bf3-951a-e4c37c59dbe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:5b:20:5e:d3:49:37:fe:1e:84:64:71:22:21: 59:aa:ee:75:1d:2b:1e:f5:fb:fc:86:4c:e6:f1:16: 91:fe:7b:d2:87:ac:fb:64:50:88:25:db:48:97:9b: 5c:d3:a0:5c:a2:71:aa:39:83:53:70:e9:f4:b3:2c: 74:4b:53:1e:8f:c6:50:57:18:2a:af:e9:64:1f:5a: 3e:57:29:7d:38:d1:5b:f6:78:4c:0f:98:89:97:12: 6c:7f:01:a9:4f:2b:a3:03:82:24:89:28:5f:29:a3: 62:80:e4:9f:9a:eb:de:98:24:6f:c8:19:99:7f:48: 08:4f:fc:33:19:49:d9:0d:de:10:e0:7c:bf:d0:4f: e0:d0:6e:62:b0:88:50:f9:fc:4d:bb:c2:a9:47:fb: 39:40:4c:90:b5:a4:43:fb:46:95:d6:a9:dd:12:39: f6:ec:1b:f4:60:d4:80:2b:b8:e7:c8:a2:d5:80:a4: 8f:ce:7c:49:31:d2:9d:c4:69:54:dc:b1:4d:1c:ee: d1:8f:2e:fd:d2:84:9d:7e:53:a7:c3:51:80:20:d2: a4:3a:70:a7:06:24:31:87:83:4c:90:91:41:d7:fc: 3b:5c:a2:5e:60:e3:86:eb:5d:58:02:5c:f5:ad:cc: 9d:4f:c0:db:b7:14:55:41:79:54:83:0c:d5:87:5d: f2:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E5:7C:B4:27:6F:0D:4C:E7:EA:B0:2E:E3:10:9F:52:6E:B2:A3:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f447a89d-ed27-3b52-9f7d-2616d9c1e29d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.200.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:34:83:9a:60:7d:d8:86:6e:08:96:60:49:50:68:f4:70:56: 21:e0:38:69:7d:b3:9c:3d:ed:b3:2e:a4:ac:9f:51:26:c2:fb: 3c:36:5d:ef:c6:35:8f:17:c7:bd:a1:34:5e:17:c2:6a:d7:e2: d4:8b:40:76:1a:6a:e9:9f:60:5c:97:e3:99:49:14:8d:f2:7c: c2:71:42:b9:a2:b3:80:88:38:09:7d:70:a8:ca:ba:8c:9f:0c: 0a:be:d8:7c:b2:21:ca:af:f0:bc:62:e7:b2:9f:47:6d:03:18: 21:c6:d2:52:17:e3:b3:8a:5c:71:54:a7:7d:e5:57:54:55:f1: 97:b4:7b:fb:f5:30:c5:40:a3:92:1f:df:78:cc:92:45:d0:ca: 9d:3e:f0:d8:9f:9a:60:8b:5d:94:28:94:4f:b6:e4:16:84:2f: b3:fe:f5:32:fe:c7:d2:8b:ff:e1:76:31:dc:5f:80:ba:77:96: 0c:6b:fa:a0:d6:14:73:a5:cd:a2:bc:9a:79:e7:d6:a4:e2:7a: f0:c8:17:47:fe:27:c8:9c:61:cb:9e:95:09:e8:30:37:19:28: 50:36:bb:96:de:50:2e:65:18:07:cb:67:63:8d:c4:1a:14:ca: cd:c1:7c:28:56:be:50:25:73:89:df:a6:06:7b:c1:49:6b:0f: 1b:a7:6d:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVquu76KHwnJ3Ja0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YzRmZDYwZWEtZWY3Yi00YmYzLTk1MWEtZTRjMzdjNTlkYmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1sgXtNJN/4ehGRxIiFZqu51HSse9fv8hkzm 8RaR/nvSh6z7ZFCIJdtIl5tc06BconGqOYNTcOn0syx0S1Mej8ZQVxgqr+lkH1o+ Vyl9ONFb9nhMD5iJlxJsfwGpTyujA4IkiShfKaNigOSfmuvemCRvyBmZf0gIT/wz GUnZDd4Q4Hy/0E/g0G5isIhQ+fxNu8KpR/s5QEyQtaRD+0aV1qndEjn27Bv0YNSA K7jnyKLVgKSPznxJMdKdxGlU3LFNHO7Rjy790oSdflOnw1GAINKkOnCnBiQxh4NM kJFB1/w7XKJeYOOG611YAlz1rcydT8DbtxRVQXlUgwzVh13yhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPlfLQnbw1M5+qwLuMQn1JusqPHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjQ0N2E4OWQtZWQyNy0z YjUyLTlmN2QtMjYxNmQ5YzFlMjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYsgqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF00g5pgfdiGbgiWYElQaPRwViHgOGl9s5w97bMupKyfUSbC+zw2Xe/G NY8Xx72hNF4XwmrX4tSLQHYaaumfYFyX45lJFI3yfMJxQrmis4CIOAl9cKjKuoyf DAq+2HyyIcqv8Lxi57KfR20DGCHG0lIX47OKXHFUp33lV1RV8Ze0e/v1MMVAo5If 33jMkkXQyp0+8NifmmCLXZQolE+25BaEL7P+9TL+x9KL/+F2MdxfgLp3lgxr+qDW FHOlzaK8mnnn1qTievDIF0f+J8icYcuelQnoMDcZKFA2u5beUC5lGAfLZ2ONxBoU ys3BfChWvlAlc4nfpgZ7wUlrDxunbWU= -----END CERTIFICATE-----Generated at Wed Nov 5 08:49:49 2025 by rpki-client