$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/98d21f17-4a0c-36f6-a070-6808cb50ec98.roa File: 98d21f17-4a0c-36f6-a070-6808cb50ec98.roa (raw, json) Hash identifier: QAl8+M5YS89NCerpXtq6x1MkhjPfmHVvY5FEXxLGosY= Subject key identifier: 32:54:CD:B7:D8:00:47:82:4B:D9:CB:85:18:53:58:2C:43:CF:AD:A1 Certificate issuer: /CN=954e2959-b160-4ffa-86b4-aaa94863154c Certificate serial: 010D0C9F4328584B1AD1765BDC183340EB970380 Authority key identifier: 7A:0D:9D:66:5A:CD:4F:54:DB:65:04:14:29:CB:05:0D:D9:7D:51:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/98d21f17-4a0c-36f6-a070-6808cb50ec98.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 3801 IP address blocks: 149.248.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/954e2959-b160-4ffa-86b4-aaa94863154c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/954e2959-b160-4ffa-86b4-aaa94863154c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:76:5b:dc:18:33:40:eb:97:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954e2959-b160-4ffa-86b4-aaa94863154c Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=648abebc-2479-4a46-98a4-c9bb13e12430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:36:14:fe:41:cf:bf:33:07:0b:55:1a:e3:ed: b9:8c:e9:e9:e3:9d:26:91:d6:c4:f7:dc:05:da:7a: 35:9b:11:42:6d:22:05:df:76:1f:7a:e7:43:79:ea: 59:6a:c4:99:a3:b0:fd:64:28:04:5f:8f:5e:3d:56: a4:8d:3a:5a:4e:4c:fb:cd:82:e3:89:8a:f7:ab:eb: 1a:87:3c:fc:29:ac:9b:e2:32:07:cf:1c:a0:c4:9e: ca:98:38:44:cc:6b:ab:89:5e:b0:ab:51:de:a4:10: 7d:55:5b:4f:0b:fc:cc:5b:9b:7f:37:21:6a:a4:b5: e9:49:fd:a0:0d:e6:fb:ac:53:0f:82:4d:ea:75:25: 19:2b:83:1d:1c:c8:2d:fb:c0:1d:8f:7b:23:fa:29: 3d:88:f3:ae:a9:17:30:60:65:bf:8b:d0:1d:5b:7e: 69:26:4d:e4:90:5b:5c:5f:25:2a:e1:f4:ed:e8:b5: 42:83:d1:a8:e3:a6:bd:56:b0:78:aa:c0:06:a3:7a: ba:84:10:47:48:dc:78:01:d1:5c:9e:e9:be:e8:cd: 55:1a:8a:3b:b7:f8:b9:71:34:08:d9:df:c4:cb:97: 36:b3:93:01:47:14:7f:a8:f7:a5:0d:8b:34:60:58: d3:97:15:c9:0a:46:ec:10:c2:a2:9a:cc:52:1d:94: 83:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:54:CD:B7:D8:00:47:82:4B:D9:CB:85:18:53:58:2C:43:CF:AD:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/98d21f17-4a0c-36f6-a070-6808cb50ec98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c/954e2959-b160-4ffa-86b4-aaa94863154c.crl X509v3 Authority Key Identifier: keyid:7A:0D:9D:66:5A:CD:4F:54:DB:65:04:14:29:CB:05:0D:D9:7D:51:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/954e2959-b160-4ffa-86b4-aaa94863154c.cer sbgp-ipAddrBlock: critical IPv4: 149.248.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:65:50:94:38:b0:88:31:3a:b1:42:25:32:b8:13:d6:36:ef: 3d:17:1d:85:15:36:dc:61:38:b8:cf:4a:7a:f1:61:25:6a:ce: e4:16:ec:f0:88:88:36:bc:44:2d:d9:98:95:c2:f2:04:a6:bb: db:8b:fe:5a:d8:c6:d1:13:3b:2f:a0:e6:00:6d:28:95:56:51: dd:17:c1:5a:52:bd:dd:26:37:02:c2:02:8c:fa:63:26:f9:f1: b5:ef:54:75:48:75:e0:6d:b5:8f:a5:f4:29:43:1e:6f:35:40: 7d:66:6b:df:66:8b:5d:1d:19:f4:35:24:4b:b0:96:e4:50:9f: 96:b1:14:bf:7f:ae:b7:63:de:2c:db:f0:c9:d3:01:aa:5e:87: fb:82:66:e9:5b:e9:4f:f1:df:76:e0:15:1c:9b:64:88:24:9b: d7:50:cd:b4:b9:af:96:4a:ac:4c:f0:05:f8:33:18:f8:f8:00: 20:2f:6a:ff:41:df:d4:77:a1:11:bd:2c:16:09:a7:f5:f3:50: 4c:cf:f5:7e:25:e6:78:d3:8e:f4:6d:d6:0a:34:81:74:34:f1: 6f:49:9b:70:3d:0a:ad:34:dc:ec:9e:bf:5e:3a:a5:44:52:8e: 3d:05:7c:7b:b0:fd:38:1a:bb:87:cb:1a:3e:e4:d5:8f:95:84: b9:36:39:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0XZb3BgzQOuXA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTU0ZTI5NTktYjE2MC00ZmZhLTg2YjQtYWFhOTQ4NjMx NTRjMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk NjQ4YWJlYmMtMjQ3OS00YTQ2LTk4YTQtYzliYjEzZTEyNDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjYU/kHPvzMHC1Ua4+25jOnp450mkdbE99wF 2no1mxFCbSIF33YfeudDeepZasSZo7D9ZCgEX49ePVakjTpaTkz7zYLjiYr3q+sa hzz8Kayb4jIHzxygxJ7KmDhEzGuriV6wq1HepBB9VVtPC/zMW5t/NyFqpLXpSf2g Deb7rFMPgk3qdSUZK4MdHMgt+8Adj3sj+ik9iPOuqRcwYGW/i9AdW35pJk3kkFtc XyUq4fTt6LVCg9Go46a9VrB4qsAGo3q6hBBHSNx4AdFcnum+6M1VGoo7t/i5cTQI 2d/Ey5c2s5MBRxR/qPelDYs0YFjTlxXJCkbsEMKimsxSHZSDrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJUzbfYAEeCS9nLhRhTWCxDz62hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85NTRl Mjk1OS1iMTYwLTRmZmEtODZiNC1hYWE5NDg2MzE1NGMvOThkMjFmMTctNGEwYy0z NmY2LWEwNzAtNjgwOGNiNTBlYzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTU0ZTI5NTktYjE2MC00ZmZhLTg2 YjQtYWFhOTQ4NjMxNTRjLzk1NGUyOTU5LWIxNjAtNGZmYS04NmI0LWFhYTk0ODYz MTU0Yy5jcmwwHwYDVR0jBBgwFoAUeg2dZlrNT1TbZQQUKcsFDdl9UbwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85NTRlMjk1OS1iMTYwLTRmZmEtODZiNC1hYWE5 NDg2MzE1NGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFlfiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVlUJQ4sIgxOrFCJTK4E9Y27z0XHYUVNtxhOLjPSnrxYSVqzuQW7PCI iDa8RC3ZmJXC8gSmu9uL/lrYxtETOy+g5gBtKJVWUd0XwVpSvd0mNwLCAoz6Yyb5 8bXvVHVIdeBttY+l9ClDHm81QH1ma99mi10dGfQ1JEuwluRQn5axFL9/rrdj3izb 8MnTAapeh/uCZulb6U/x33bgFRybZIgkm9dQzbS5r5ZKrEzwBfgzGPj4ACAvav9B 39R3oRG9LBYJp/XzUEzP9X4l5njTjvRt1go0gXQ08W9Jm3A9Cq003Oyev146pURS jj0FfHuw/Tgau4fLGj7k1Y+VhLk2OWw= -----END CERTIFICATE-----Generated at Wed Nov 5 07:16:22 2025 by rpki-client