$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fac12d2c-2521-38d4-bef4-9e86d6693e3e.roa File: fac12d2c-2521-38d4-bef4-9e86d6693e3e.roa (raw, json) Hash identifier: EN9jJ0fPVaupu59dZACjjs9eN+eHUd799c28JvYk8zc= Subject key identifier: C3:B8:23:5E:7F:6E:83:7F:E0:DA:09:24:F4:B2:B3:1C:61:F8:DE:BF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA379AA1404A71E42A3980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fac12d2c-2521-38d4-bef4-9e86d6693e3e.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 98.216.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:37:9a:a1:40:4a:71:e4:2a:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=435f0ef5-6515-4d3c-8be1-81268dcfaeb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:34:f2:28:70:f5:51:b0:86:11:25:18:f9:3b: ff:c2:12:a2:ce:cd:60:e7:84:58:64:3a:e4:07:69: a7:8b:fe:d1:4b:00:d6:ac:6a:01:71:d8:3e:68:ef: 69:ee:5f:96:72:8b:33:53:9f:4f:86:a6:a9:2a:6f: 7d:3c:40:ae:a9:23:14:b7:3b:ba:63:6b:4b:ac:f8: 57:42:eb:c3:82:10:57:99:55:37:83:bf:91:00:b1: c8:d1:f9:6e:4e:4b:3b:16:53:5d:78:b4:da:dd:62: c0:66:98:1a:32:d5:7b:fd:54:be:28:f3:e7:fd:ad: 74:0f:9f:6b:7c:6f:0d:46:58:c0:90:7a:61:c6:0b: db:22:5a:68:d8:34:37:79:40:ea:20:d6:1b:c5:52: 57:86:67:9a:05:8e:f3:c3:62:c9:ba:5c:18:e6:e7: ee:e4:3a:3b:cf:3e:b2:f3:97:7e:98:cf:00:9d:83: 00:0b:1e:e9:3f:79:0f:4b:c9:b7:a9:0e:74:bb:6b: 58:e4:56:16:d0:ef:37:3c:66:9a:e5:eb:40:1b:78: 37:d6:76:f6:de:7d:dc:ac:4c:45:7c:18:8c:0d:be: a6:f9:fb:62:44:90:0c:a9:36:46:12:14:5d:cf:ac: d7:e9:21:9d:6d:e9:3e:50:01:3d:9e:f3:bf:9e:3a: 0e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B8:23:5E:7F:6E:83:7F:E0:DA:09:24:F4:B2:B3:1C:61:F8:DE:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fac12d2c-2521-38d4-bef4-9e86d6693e3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.216.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:5f:e3:e5:70:73:d9:9f:82:6c:66:09:10:14:9b:21:71:3a: 3e:5f:45:02:c2:9f:1d:68:ad:6c:76:07:f1:60:53:8b:bc:1b: 10:76:79:1b:a4:99:0c:5a:2a:5b:84:ea:5d:2d:0b:fc:b0:65: 19:18:d3:d5:a1:0c:73:39:9f:4f:74:77:2c:3c:76:bf:b1:1c: ac:97:9d:d1:e2:08:3f:5e:1a:3c:62:78:ea:aa:3f:62:ea:67: a0:b7:5f:97:79:f2:61:9c:fa:12:bc:9d:03:97:3d:3b:63:aa: 8a:2a:e7:0a:80:9a:69:2a:88:f1:62:cc:4e:2a:6c:c0:17:e1: b2:c6:16:b7:61:3d:cd:60:2e:04:92:3f:5b:51:89:11:2e:eb: 40:42:69:dc:5d:22:d8:de:41:13:1a:07:87:75:83:88:d0:de: ed:76:89:91:ba:16:1c:74:3f:06:18:78:f3:82:4a:da:58:27: 8d:ba:70:ba:64:19:07:52:b9:6e:7c:1a:d2:b6:06:88:2f:87: e6:12:6f:d4:f3:0d:16:91:d1:d6:76:09:54:bd:34:58:c7:1b: 0a:fe:d2:1f:96:24:34:c6:a2:8e:f3:fd:af:92:92:b2:82:60: cc:db:49:dc:60:e9:06:93:e5:9c:d2:18:dc:cd:fc:5c:b6:60: 75:70:2b:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqjeaoUBKceQqOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NDM1ZjBlZjUtNjUxNS00ZDNjLThiZTEtODEyNjhkY2ZhZWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDTyKHD1UbCGESUY+Tv/whKizs1g54RYZDrk B2mni/7RSwDWrGoBcdg+aO9p7l+WcoszU59PhqapKm99PECuqSMUtzu6Y2tLrPhX QuvDghBXmVU3g7+RALHI0fluTks7FlNdeLTa3WLAZpgaMtV7/VS+KPPn/a10D59r fG8NRljAkHphxgvbIlpo2DQ3eUDqINYbxVJXhmeaBY7zw2LJulwY5ufu5Do7zz6y 85d+mM8AnYMACx7pP3kPS8m3qQ50u2tY5FYW0O83PGaa5etAG3g31nb23n3crExF fBiMDb6m+ftiRJAMqTZGEhRdz6zX6SGdbek+UAE9nvO/njoOUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMO4I15/boN/4NoJJPSysxxh+N6/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmFjMTJkMmMtMjUyMS0z OGQ0LWJlZjQtOWU4NmQ2NjkzZTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYtjuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNf4+Vwc9mfgmxmCRAUmyFxOj5fRQLCnx1orWx2B/FgU4u8GxB2eRuk mQxaKluE6l0tC/ywZRkY09WhDHM5n090dyw8dr+xHKyXndHiCD9eGjxieOqqP2Lq Z6C3X5d58mGc+hK8nQOXPTtjqooq5wqAmmkqiPFizE4qbMAX4bLGFrdhPc1gLgSS P1tRiREu60BCadxdItjeQRMaB4d1g4jQ3u12iZG6Fhx0PwYYePOCStpYJ426cLpk GQdSuW58GtK2Bogvh+YSb9TzDRaR0dZ2CVS9NFjHGwr+0h+WJDTGoo7z/a+SkrKC YMzbSdxg6QaT5ZzSGNzN/Fy2YHVwK2M= -----END CERTIFICATE-----Generated at Wed Nov 5 08:47:26 2025 by rpki-client