$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/cfd4cf14-79ac-3cda-8b4c-952fd2f1406b.roa File: cfd4cf14-79ac-3cda-8b4c-952fd2f1406b.roa (raw, json) Hash identifier: QZf+BiTGkwKkv0yizuga1IDIQJcFZENvYWj4Dq9Dc+E= Subject key identifier: 22:17:40:51:16:60:BB:E7:34:2E:08:F5:C1:56:73:AF:D5:D9:16:03 Certificate issuer: /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c Certificate serial: 010D0C9F4328584BB88D0B7D5628EB2C26370680 Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/cfd4cf14-79ac-3cda-8b4c-952fd2f1406b.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 32133 IP address blocks: 98.124.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:0b:7d:56:28:eb:2c:26:37:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=b563891d-19bb-4197-999a-748e73b070c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e5:5b:ab:55:59:d6:09:2f:66:f6:a2:06:7d: 07:d7:34:0b:5c:a0:e3:5d:c1:f6:f4:d9:a2:52:71: b4:84:0d:01:0d:b0:46:c8:a9:b9:b4:4a:bc:62:58: 07:5e:0e:f8:3a:b3:9a:79:de:54:c9:bb:36:dd:b6: 5f:43:54:9c:24:da:f9:37:18:0f:53:22:92:b4:3a: 1f:37:0c:31:ae:f5:74:40:3c:7e:4a:63:13:1e:6e: ed:36:82:00:9d:59:e2:1e:b5:26:88:8a:bf:73:d3: 5f:91:fc:47:f7:00:5f:4d:73:cd:a9:9a:56:36:dd: 37:bf:30:b4:2b:7b:ab:c7:7e:a2:bd:35:ad:5d:63: fc:19:28:62:6e:85:8b:c0:0a:2f:c6:7e:5e:2b:f3: 25:b9:06:92:af:08:48:ab:30:9c:3c:c2:a0:20:c6: a8:21:ab:38:39:95:33:34:86:0d:26:d0:fb:91:ce: 30:ed:c2:7a:d3:5e:fe:3f:1f:90:1e:7f:53:7f:d2: 67:6b:24:7f:8e:92:1c:8d:9b:86:24:96:2c:a4:d3: 09:62:64:de:11:af:c2:f6:5d:67:f0:d3:68:05:56: 55:ed:b0:58:d0:ba:cf:3c:7b:f9:8d:03:a5:c5:82: d5:25:64:b7:f7:c1:9d:59:7e:89:21:bb:2b:91:d9: ac:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:17:40:51:16:60:BB:E7:34:2E:08:F5:C1:56:73:AF:D5:D9:16:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/cfd4cf14-79ac-3cda-8b4c-952fd2f1406b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl X509v3 Authority Key Identifier: keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer sbgp-ipAddrBlock: critical IPv4: 98.124.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:57:c4:a1:2f:f5:1a:68:de:4f:39:b9:8e:9c:cd:a7:28:a6: f7:90:16:66:c4:f8:99:9f:74:95:34:56:c4:c9:83:fa:29:78: 71:0b:ee:e5:73:14:3b:d8:54:4e:c1:64:af:5f:22:1c:a2:dc: 8d:36:37:08:f4:94:c9:88:c8:45:9c:c7:d8:27:37:ea:f7:10: 65:3d:44:17:77:ed:63:b7:23:b7:f1:8a:88:1a:cc:25:20:12: 79:17:c7:04:09:08:f0:66:0b:40:3f:3d:5a:aa:b8:66:3b:b0: 9b:b0:e7:97:51:15:96:50:26:bc:5c:e7:d7:ee:d3:af:86:2b: 1f:9f:9e:32:14:94:88:c8:c4:8d:f8:96:7c:a7:ec:84:c9:78: e7:0f:d6:40:78:21:92:95:53:cd:02:88:a0:f1:b5:26:4e:91: e5:3a:a2:f9:6b:88:65:9a:bf:f7:1f:f2:db:3c:a0:0c:f4:77: f4:e0:ed:c0:eb:ca:f3:94:55:5b:e2:60:f5:19:5a:7c:30:9d: c4:96:c6:f6:27:78:b7:d3:c4:3c:d2:b2:32:2a:d0:f8:0e:2c: 59:71:cc:e6:60:da:1c:5f:92:ec:20:27:4b:05:d3:5c:50:c8: 72:65:ce:f0:ea:4b:65:3d:15:c4:4d:8b:93:af:ec:00:91:9f: b1:83:de:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jQt9VijrLCY3BoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA2Y2JjOTEtY2ZlOS00ZDE1LThhMTMtZTNkODI4YzA0 NjljMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk YjU2Mzg5MWQtMTliYi00MTk3LTk5OWEtNzQ4ZTczYjA3MGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOVbq1VZ1gkvZvaiBn0H1zQLXKDjXcH29Nmi UnG0hA0BDbBGyKm5tEq8YlgHXg74OrOaed5Uybs23bZfQ1ScJNr5NxgPUyKStDof NwwxrvV0QDx+SmMTHm7tNoIAnVniHrUmiIq/c9NfkfxH9wBfTXPNqZpWNt03vzC0 K3urx36ivTWtXWP8GShiboWLwAovxn5eK/MluQaSrwhIqzCcPMKgIMaoIas4OZUz NIYNJtD7kc4w7cJ6017+Px+QHn9Tf9JnayR/jpIcjZuGJJYspNMJYmTeEa/C9l1n 8NNoBVZV7bBY0LrPPHv5jQOlxYLVJWS398GdWX6JIbsrkdmsEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIXQFEWYLvnNC4I9cFWc6/V2RYDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZj YmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4MjhjMDQ2OWMvY2ZkNGNmMTQtNzlhYy0z Y2RhLThiNGMtOTUyZmQyZjE0MDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTA2Y2JjOTEtY2ZlOS00ZDE1LThh MTMtZTNkODI4YzA0NjljLzkwNmNiYzkxLWNmZTktNGQxNS04YTEzLWUzZDgyOGMw NDY5Yy5jcmwwHwYDVR0jBBgwFoAUtM26EqXmV2vBKngoUh64xcKEYhUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZjYmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4 MjhjMDQ2OWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYnzsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVXxKEv9Rpo3k85uY6czacopveQFmbE+JmfdJU0VsTJg/opeHEL7uVz FDvYVE7BZK9fIhyi3I02Nwj0lMmIyEWcx9gnN+r3EGU9RBd37WO3I7fxiogazCUg EnkXxwQJCPBmC0A/PVqquGY7sJuw55dRFZZQJrxc59fu06+GKx+fnjIUlIjIxI34 lnyn7ITJeOcP1kB4IZKVU80CiKDxtSZOkeU6ovlriGWav/cf8ts8oAz0d/Tg7cDr yvOUVVviYPUZWnwwncSWxvYneLfTxDzSsjIq0PgOLFlxzOZg2hxfkuwgJ0sF01xQ yHJlzvDqS2U9FcRNi5Ov7ACRn7GD3lc= -----END CERTIFICATE-----Generated at Wed Nov 5 08:35:59 2025 by rpki-client