$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/4d40021e-9835-38af-aab9-71befcd9b987.roa File: 4d40021e-9835-38af-aab9-71befcd9b987.roa (raw, json) Hash identifier: V/jR9BJbnrV9LYzcn2ZWTUahbUnDdSlNZvXrwgIw0ZY= Subject key identifier: 31:90:B2:AD:AB:6F:EE:9F:E1:BF:80:F9:16:B8:30:83:55:B5:8F:56 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584B44B1BD34983CCFD65FCC0380 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/4d40021e-9835-38af-aab9-71befcd9b987.roa Signing time: Sun 21 Sep 2025 13:00:42 +0000 ROA not before: Sun 21 Sep 2025 13:00:42 +0000 ROA not after: Sat 20 Dec 2025 14:00:42 +0000 asID: 11233 IP address blocks: 69.1.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:44:b1:bd:34:98:3c:cf:d6:5f:cc:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Sep 21 13:00:42 2025 GMT Not After : Dec 20 14:00:42 2025 GMT Subject: CN=6ca5f662-50c5-4732-af5f-45c14a8e38cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8f:e4:7d:e1:8a:00:4f:93:15:45:12:f3:89: ef:e5:cb:25:95:91:02:b7:a9:ef:38:bc:8e:bf:8b: 62:67:c6:26:d5:db:24:9e:88:98:b8:c7:79:53:e6: 52:08:49:8d:80:e0:0b:c9:52:ed:40:d8:49:00:68: ad:0c:b9:ed:b2:53:cc:4b:d5:e9:8c:49:30:95:a7: 68:6f:39:43:7b:2f:c0:0b:d7:72:a0:d4:e7:86:90: 03:c3:11:64:c0:0d:91:af:b0:68:02:43:d1:b8:34: 2b:69:9a:45:2b:d6:bd:de:1d:90:6f:f4:e6:c0:29: 7d:04:22:ea:1e:2b:38:4a:6e:2f:30:b4:56:5f:87: e4:66:2a:2f:83:9f:fc:be:eb:e3:e3:9f:4c:64:83: 5a:24:5e:26:1a:56:a4:4c:bc:b8:6e:4e:c2:39:d1: 6f:15:22:7c:62:a5:eb:a6:15:c4:b1:8f:5e:43:d4: c1:45:98:7e:ab:14:22:d9:a2:36:72:97:da:b9:41: c5:6c:37:fd:8b:a2:18:09:4e:7a:ae:5c:ce:3c:5d: 1b:40:09:86:17:72:ed:a6:bd:68:47:b3:a7:34:63: 92:59:ad:d1:a8:ea:63:f5:de:f7:eb:4b:d3:d9:42: 6a:0f:19:7b:9c:ec:15:fd:8b:b5:9b:23:c6:6b:5d: ac:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:90:B2:AD:AB:6F:EE:9F:E1:BF:80:F9:16:B8:30:83:55:B5:8F:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/4d40021e-9835-38af-aab9-71befcd9b987.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 69.1.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:bd:e8:53:a3:62:d3:96:43:34:62:13:bd:06:de:d5:ce:5a: 5c:72:a5:ba:6b:69:c9:c1:7c:5d:50:c4:e4:7e:43:a1:6f:6a: dc:22:bc:20:51:a4:7f:d8:de:dc:6b:2b:26:03:07:0c:38:ad: e7:34:44:00:b8:73:2b:50:8b:65:94:f6:28:93:b3:2d:cb:fd: f0:20:46:d7:67:36:cb:53:db:17:47:e9:78:32:3c:70:49:0f: 58:96:b3:25:ff:30:f3:81:09:b2:ee:3b:af:d7:5b:5a:dd:99: 39:ae:79:73:20:1f:aa:62:0a:89:1b:5f:e8:c9:ff:5c:1a:8a: be:8e:d7:f0:2c:0e:dd:b4:f2:7b:85:e4:1d:ac:d5:d6:42:f9: 05:4c:14:8e:8e:e6:cc:62:56:55:45:c0:59:90:a6:0c:ce:bf: aa:a2:ba:2b:b0:b1:45:9c:23:0e:fb:90:0d:71:01:98:06:14: a8:7a:85:6c:7e:e5:9d:4c:83:21:78:fe:94:89:20:6a:80:99: 21:51:c3:af:99:d0:b0:2a:e9:2e:31:07:de:e1:71:68:68:3d: 83:8c:84:a5:c7:eb:94:f8:e7:5f:57:77:6c:88:52:11:7e:b0: 67:9d:73:db:d6:33:82:72:cf:e3:94:a3:0e:1f:98:d8:b3:4b: dd:a3:f0:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtEsb00mDzP1l/MA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MDkyMTEzMDA0MloXDTI1MTIyMDE0MDA0MlowLzEtMCsGA1UEAxMk NmNhNWY2NjItNTBjNS00NzMyLWFmNWYtNDVjMTRhOGUzOGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwo/kfeGKAE+TFUUS84nv5csllZECt6nvOLyO v4tiZ8Ym1dsknoiYuMd5U+ZSCEmNgOALyVLtQNhJAGitDLntslPMS9XpjEkwlado bzlDey/AC9dyoNTnhpADwxFkwA2Rr7BoAkPRuDQraZpFK9a93h2Qb/TmwCl9BCLq His4Sm4vMLRWX4fkZiovg5/8vuvj459MZINaJF4mGlakTLy4bk7COdFvFSJ8YqXr phXEsY9eQ9TBRZh+qxQi2aI2cpfauUHFbDf9i6IYCU56rlzOPF0bQAmGF3Ltpr1o R7OnNGOSWa3RqOpj9d7360vT2UJqDxl7nOwV/Yu1myPGa12snQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDGQsq2rb+6f4b+A+Ra4MINVtY9WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvNGQ0MDAyMWUtOTgzNS0z OGFmLWFhYjktNzFiZWZjZDliOTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARQFiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEy96FOjYtOWQzRiE70G3tXOWlxypbpracnBfF1QxOR+Q6FvatwivCBR pH/Y3txrKyYDBww4rec0RAC4cytQi2WU9iiTsy3L/fAgRtdnNstT2xdH6XgyPHBJ D1iWsyX/MPOBCbLuO6/XW1rdmTmueXMgH6piCokbX+jJ/1wair6O1/AsDt208nuF 5B2s1dZC+QVMFI6O5sxiVlVFwFmQpgzOv6qiuiuwsUWcIw77kA1xAZgGFKh6hWx+ 5Z1MgyF4/pSJIGqAmSFRw6+Z0LAq6S4xB97hcWhoPYOMhKXH65T4519Xd2yIUhF+ sGedc9vWM4Jyz+OUow4fmNizS92j8OM= -----END CERTIFICATE-----Generated at Wed Nov 5 12:37:08 2025 by rpki-client