$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/9fdc5322-0518-3d40-8265-7e632ec11ced.roa File: 9fdc5322-0518-3d40-8265-7e632ec11ced.roa (raw, json) Hash identifier: kKLpbaAcjbgLUcheLlUd2Dv531S8AvMYkLvUBxWVA5Q= Subject key identifier: 82:C6:97:38:7B:25:57:24:29:48:05:69:95:34:D1:6D:D6:5D:B6:35 Certificate issuer: /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c Certificate serial: 010D0C9F4328584BABFD39BE33BFF7B75AA34340 Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/9fdc5322-0518-3d40-8265-7e632ec11ced.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 32491 IP address blocks: 98.124.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:39:be:33:bf:f7:b7:5a:a3:43:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=09d5235b-68c8-4577-964b-4f8896b8eb27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:bd:7a:2e:cf:27:56:c2:d3:5d:5a:c2:20:8e: ba:33:e2:7c:5a:84:06:7b:10:5a:47:8e:e6:9e:3f: 26:51:e4:1d:e8:58:ee:a1:9c:f4:da:90:c6:d3:82: 83:4e:be:3b:4e:22:69:a5:ab:80:26:13:c9:7b:41: fb:da:f5:b8:dc:c4:08:12:d4:76:9c:6c:95:ba:db: 51:83:f8:87:e0:4a:4c:30:59:f8:df:a6:7a:35:73: 27:e5:3e:0f:0b:e2:36:df:ab:16:5d:5f:fa:13:07: f2:e8:ed:ab:a7:3f:ba:86:bf:b7:c8:e4:54:2b:aa: 48:40:1e:97:81:c4:36:3d:e5:1c:a3:0e:15:29:0f: bb:7e:13:fa:d8:a9:65:c1:4e:af:0c:e8:ef:75:07: 40:fa:f7:6e:92:57:96:9f:6c:c1:98:1d:0b:7d:72: 4a:b6:0a:46:1f:7d:d3:ca:d5:b8:7b:0f:92:c4:7b: 69:38:7d:51:af:fe:b2:97:6b:8c:4d:a5:e2:e5:af: 29:e1:bf:8f:3f:e2:0f:1c:dd:88:ae:92:86:9e:c9: d5:8c:dc:4a:09:2f:9a:35:71:2a:b0:af:63:35:a5: a0:45:52:1a:03:73:b3:d2:9a:25:0a:b8:30:ff:39: b6:ec:67:47:c7:21:10:98:9c:22:10:fe:02:17:0c: 79:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:C6:97:38:7B:25:57:24:29:48:05:69:95:34:D1:6D:D6:5D:B6:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/9fdc5322-0518-3d40-8265-7e632ec11ced.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl X509v3 Authority Key Identifier: keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer sbgp-ipAddrBlock: critical IPv4: 98.124.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:22:4a:dd:5f:ff:56:02:26:72:3c:2e:c6:36:6c:84:02:61: c2:60:e8:3f:64:cb:e2:e7:dc:73:30:02:cc:94:37:5a:ac:a9: 54:b9:4c:88:b5:db:c1:5d:59:e2:ff:a3:86:5d:53:12:12:62: 0b:59:87:da:94:2d:80:6f:1b:df:b3:d2:b4:55:37:1f:3f:7a: f3:6c:ea:a7:cb:96:84:e5:34:1f:67:e2:68:47:9b:77:c8:83: 3c:dd:61:0b:f0:d5:29:88:35:36:83:ae:e2:a6:7a:ba:c0:82: 65:db:86:76:cf:23:36:0a:47:cb:b1:de:ca:ae:6d:ed:f0:53: 29:f7:09:58:83:eb:d4:e1:e4:e8:f6:6c:e3:59:0a:ba:55:de: 52:28:2e:c8:ea:02:e1:7e:ea:9b:c9:cd:76:c7:c9:b7:76:1b: fc:07:b8:ca:65:b1:05:a1:b8:4b:b2:c3:57:05:e3:0f:95:46: 4b:4d:17:df:0e:f4:b3:dc:23:98:18:fa:e3:ec:05:7e:de:3c: b3:7c:a4:64:2e:1e:f9:78:51:49:3c:d9:3a:1f:38:48:36:ec: 0c:65:c4:db:25:e4:ea:1c:93:0c:23:53:7e:4c:db:2f:8a:04: 6e:da:1e:0e:c2:a0:a4:c8:34:99:b0:e2:35:59:13:07:b4:70: ea:f4:31:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/Tm+M7/3t1qjQ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA2Y2JjOTEtY2ZlOS00ZDE1LThhMTMtZTNkODI4YzA0 NjljMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk MDlkNTIzNWItNjhjOC00NTc3LTk2NGItNGY4ODk2YjhlYjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx716Ls8nVsLTXVrCII66M+J8WoQGexBaR47m nj8mUeQd6FjuoZz02pDG04KDTr47TiJppauAJhPJe0H72vW43MQIEtR2nGyVuttR g/iH4EpMMFn436Z6NXMn5T4PC+I236sWXV/6Ewfy6O2rpz+6hr+3yORUK6pIQB6X gcQ2PeUcow4VKQ+7fhP62KllwU6vDOjvdQdA+vdukleWn2zBmB0LfXJKtgpGH33T ytW4ew+SxHtpOH1Rr/6yl2uMTaXi5a8p4b+PP+IPHN2IrpKGnsnVjNxKCS+aNXEq sK9jNaWgRVIaA3Oz0polCrgw/zm27GdHxyEQmJwiEP4CFwx5UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFILGlzh7JVckKUgFaZU00W3WXbY1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZj YmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4MjhjMDQ2OWMvOWZkYzUzMjItMDUxOC0z ZDQwLTgyNjUtN2U2MzJlYzExY2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTA2Y2JjOTEtY2ZlOS00ZDE1LThh MTMtZTNkODI4YzA0NjljLzkwNmNiYzkxLWNmZTktNGQxNS04YTEzLWUzZDgyOGMw NDY5Yy5jcmwwHwYDVR0jBBgwFoAUtM26EqXmV2vBKngoUh64xcKEYhUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZjYmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4 MjhjMDQ2OWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYnzgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEiSt1f/1YCJnI8LsY2bIQCYcJg6D9ky+Ln3HMwAsyUN1qsqVS5TIi1 28FdWeL/o4ZdUxISYgtZh9qULYBvG9+z0rRVNx8/evNs6qfLloTlNB9n4mhHm3fI gzzdYQvw1SmINTaDruKmerrAgmXbhnbPIzYKR8ux3sqube3wUyn3CViD69Th5Oj2 bONZCrpV3lIoLsjqAuF+6pvJzXbHybd2G/wHuMplsQWhuEuyw1cF4w+VRktNF98O 9LPcI5gY+uPsBX7ePLN8pGQuHvl4UUk82TofOEg27AxlxNsl5OockwwjU35M2y+K BG7aHg7CoKTINJmw4jVZEwe0cOr0MSA= -----END CERTIFICATE-----Generated at Wed Nov 5 09:21:40 2025 by rpki-client