$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/e9e39f37-1286-3597-960c-6c5f44ec4d30.roa File: e9e39f37-1286-3597-960c-6c5f44ec4d30.roa (raw, json) Hash identifier: w8GjjB2Ox5aPMBOYl4JrW1icjW9xx/YntH7BcH61V5g= Subject key identifier: 43:A7:6D:4A:42:23:ED:94:2D:87:F0:C5:70:B3:A4:86:44:B4:09:D3 Certificate issuer: /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c Certificate serial: 010D0C9F4328584BB88D120979933C6B981800C0 Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/e9e39f37-1286-3597-960c-6c5f44ec4d30.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 32133 IP address blocks: 98.124.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:12:09:79:93:3c:6b:98:18:00:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=a660b469-b55c-4e9c-b466-81d6a8b76e3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:95:4f:48:d0:63:07:43:73:b7:b7:f3:7c:ca: 5b:60:cc:b5:2c:88:d8:a2:32:b7:5c:b7:34:a7:db: 83:2b:8c:93:d0:f4:3d:9d:14:8f:2c:91:88:c5:dc: 92:b7:ac:8f:ec:49:b1:79:bf:40:c0:38:56:4a:87: 39:ab:4c:fc:78:01:9b:d5:11:6b:2e:36:59:d7:de: 2e:44:bc:4a:0e:6b:92:36:43:5b:ed:24:a2:04:d9: 07:76:51:c6:b1:fd:02:30:f7:86:1e:1e:53:9d:51: 3c:97:ba:8f:e2:8f:a6:c5:f8:18:c0:f4:60:b3:24: f2:81:d6:3b:b9:ed:e3:b0:bb:57:58:87:2e:46:bd: 0f:f0:9d:02:1e:16:72:f0:2a:49:f5:38:35:26:7b: 3b:e2:2b:d4:1f:d2:14:e5:06:3b:92:21:89:50:8e: 3a:ab:6f:82:83:00:63:28:d7:46:86:ee:ac:75:f3: a6:65:34:d6:52:8a:dc:ce:4b:49:b4:4a:a9:91:6b: ec:0d:92:e2:b4:29:4b:88:14:46:78:16:14:a0:a7: 09:74:fe:e8:b1:e1:a0:11:3d:43:b7:23:12:90:ac: 6a:30:e4:52:c2:9c:a0:d3:8c:11:9c:40:4d:25:80: 9e:9f:db:47:95:80:cb:c0:85:51:7c:ab:27:de:61: 16:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:A7:6D:4A:42:23:ED:94:2D:87:F0:C5:70:B3:A4:86:44:B4:09:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/e9e39f37-1286-3597-960c-6c5f44ec4d30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl X509v3 Authority Key Identifier: keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer sbgp-ipAddrBlock: critical IPv4: 98.124.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:ce:ef:cf:ac:cf:93:e0:d2:28:5f:d8:f4:ba:f3:24:ab:6d: e5:39:f6:5e:b2:6d:59:84:cd:0f:c4:e2:9e:e6:ff:06:68:58: cb:00:47:25:99:f9:9d:bd:79:07:d3:73:0a:49:b0:c0:d2:89: 7d:cf:da:e6:46:94:ef:f8:c6:a3:93:f5:36:d8:3a:e3:38:2c: a4:8b:22:0b:ce:6b:52:a6:17:a3:69:6f:8a:11:19:12:08:11: ba:72:c3:53:49:04:ed:a0:8a:3a:cf:56:06:cf:64:e0:58:00: 00:d0:17:1e:98:fd:48:f8:56:e4:43:12:3b:be:89:98:a4:f2: ed:d3:0d:75:4b:4e:c3:b7:1e:0f:1f:e0:3f:43:ed:eb:fc:b5: ab:32:11:b7:8a:10:b0:ff:bc:5d:c0:91:6c:14:8e:23:29:53: f6:e9:5b:25:37:76:32:a6:79:78:5b:9a:a8:7d:9b:c9:15:a5: b6:10:ba:ab:e7:1c:e1:69:3f:44:3b:cd:c2:a7:32:76:f8:d4: d0:d1:2f:89:97:ee:26:27:c7:4f:53:32:e0:a5:01:0d:49:18: 71:98:65:53:32:fe:a6:16:bd:54:6d:ab:87:52:a4:66:c8:99: cb:9f:b7:16:a1:5d:e8:71:48:18:21:96:55:10:db:c8:58:bb: 6d:31:59:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jRIJeZM8a5gYAMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA2Y2JjOTEtY2ZlOS00ZDE1LThhMTMtZTNkODI4YzA0 NjljMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk YTY2MGI0NjktYjU1Yy00ZTljLWI0NjYtODFkNmE4Yjc2ZTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJVPSNBjB0Nzt7fzfMpbYMy1LIjYojK3XLc0 p9uDK4yT0PQ9nRSPLJGIxdySt6yP7Emxeb9AwDhWSoc5q0z8eAGb1RFrLjZZ194u RLxKDmuSNkNb7SSiBNkHdlHGsf0CMPeGHh5TnVE8l7qP4o+mxfgYwPRgsyTygdY7 ue3jsLtXWIcuRr0P8J0CHhZy8CpJ9Tg1Jns74ivUH9IU5QY7kiGJUI46q2+CgwBj KNdGhu6sdfOmZTTWUorczktJtEqpkWvsDZLitClLiBRGeBYUoKcJdP7oseGgET1D tyMSkKxqMORSwpyg04wRnEBNJYCen9tHlYDLwIVRfKsn3mEW4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEOnbUpCI+2ULYfwxXCzpIZEtAnTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZj YmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4MjhjMDQ2OWMvZTllMzlmMzctMTI4Ni0z NTk3LTk2MGMtNmM1ZjQ0ZWM0ZDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTA2Y2JjOTEtY2ZlOS00ZDE1LThh MTMtZTNkODI4YzA0NjljLzkwNmNiYzkxLWNmZTktNGQxNS04YTEzLWUzZDgyOGMw NDY5Yy5jcmwwHwYDVR0jBBgwFoAUtM26EqXmV2vBKngoUh64xcKEYhUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZjYmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4 MjhjMDQ2OWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYnzoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHO78+sz5Pg0ihf2PS68ySrbeU59l6ybVmEzQ/E4p7m/wZoWMsARyWZ +Z29eQfTcwpJsMDSiX3P2uZGlO/4xqOT9TbYOuM4LKSLIgvOa1KmF6Npb4oRGRII Ebpyw1NJBO2gijrPVgbPZOBYAADQFx6Y/Uj4VuRDEju+iZik8u3TDXVLTsO3Hg8f 4D9D7ev8tasyEbeKELD/vF3AkWwUjiMpU/bpWyU3djKmeXhbmqh9m8kVpbYQuqvn HOFpP0Q7zcKnMnb41NDRL4mX7iYnx09TMuClAQ1JGHGYZVMy/qYWvVRtq4dSpGbI mcuftxahXehxSBghllUQ28hYu20xWfs= -----END CERTIFICATE-----Generated at Wed Nov 5 01:21:03 2025 by rpki-client