$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0df1e154-7862-3902-bcfb-471e8a22a97c.roa File: 0df1e154-7862-3902-bcfb-471e8a22a97c.roa (raw, json) Hash identifier: FiwiC8CJmxDEFzVn41HuklL2jm9RWbTjTI9qOnWGAn4= Subject key identifier: 4C:AF:92:21:29:4F:12:0E:62:4F:5E:C0:E4:AA:D3:3D:2E:D6:D9:8F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A94F060F5681079CA6A800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0df1e154-7862-3902-bcfb-471e8a22a97c.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 98.44.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:4f:06:0f:56:81:07:9c:a6:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=d1cf8e23-4d55-4a63-98d5-9aa029e303bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:be:3b:f4:61:56:84:05:9e:18:af:02:bc:0c: 00:81:92:1f:a6:1b:07:bf:54:6e:d1:8a:c9:01:9f: 37:16:f5:18:7a:1e:87:c2:fc:5a:30:f2:03:d6:dd: 85:33:b8:df:ed:ab:82:2d:ba:21:8c:e8:48:ea:c5: 7b:80:44:da:f1:64:7e:05:e1:09:fe:5c:3f:d7:f0: 9f:3a:79:1e:67:c7:19:4d:04:0f:11:06:a4:24:d0: 41:56:8e:77:07:73:ac:9e:19:3e:80:ab:39:54:ba: ed:f1:4b:b4:fb:fb:f5:89:22:f7:3c:4b:55:19:0e: 77:cd:eb:6e:6c:14:71:ec:58:94:60:ba:e1:a2:81: 7b:d5:1f:f2:26:00:68:0b:a5:4e:83:1a:d2:37:a4: 8d:45:2f:6b:09:90:fe:4c:36:81:b4:02:e3:8f:9f: 4e:bc:e7:de:44:96:23:73:d1:ae:7c:0f:a8:fb:73: a3:03:fe:6a:3b:a0:0f:11:20:a1:c6:e3:1e:4c:1b: da:08:9b:27:47:ae:ce:fe:1f:b5:de:02:52:93:27: fd:7b:cf:b3:44:ad:71:b9:2a:e7:dc:ed:83:f4:b1: ac:47:72:55:ab:2c:ea:0d:4f:28:ee:88:b6:b2:61: 58:0f:fe:ce:c5:00:77:89:6e:3e:08:93:09:09:10: 8b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:AF:92:21:29:4F:12:0E:62:4F:5E:C0:E4:AA:D3:3D:2E:D6:D9:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0df1e154-7862-3902-bcfb-471e8a22a97c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.44.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:d2:20:aa:f3:42:7d:e4:39:6f:d2:f9:f4:55:7c:0b:f6:21: 6a:58:83:b5:f8:03:17:2b:8d:08:cd:ca:43:59:2e:3f:07:92: 51:c2:28:0c:4a:dc:92:66:da:5d:14:b2:f3:00:93:37:f6:82: ab:6f:10:30:26:ee:96:54:f7:00:b7:f3:f2:13:5a:3b:b4:89: 06:62:b6:7d:28:7f:fc:fe:8b:6c:89:07:f9:50:bd:f2:df:dc: 0d:48:e7:ca:e8:a9:11:15:98:05:07:97:0c:1e:60:a4:d9:bb: 26:3b:0c:fb:2b:21:60:a2:76:72:c4:a7:e4:47:6e:60:56:2c: 35:c4:6c:84:ea:ca:b7:e9:41:1e:57:00:3b:a2:da:6f:95:e6: aa:29:9e:0b:5b:a7:b4:fd:40:f7:b5:ae:48:52:9a:cd:dd:65: ae:40:ec:05:25:99:da:44:9e:49:10:cf:11:8d:bb:1a:f8:29: 1d:b4:3c:10:3b:b2:b4:15:b7:a7:d8:55:5f:4b:b2:f1:d8:74: 9c:00:f8:55:e6:0a:4c:2a:f5:78:f7:1a:f2:23:92:bf:66:2f: 93:8d:d3:96:a5:71:ae:e7:06:f5:8d:ec:01:d4:fe:66:69:60: 87:22:f8:ab:cc:37:33:fe:ab:56:8d:14:1e:f4:09:62:aa:bc: 95:e1:28:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqU8GD1aBB5ymqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZDFjZjhlMjMtNGQ1NS00YTYzLTk4ZDUtOWFhMDI5ZTMwM2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur479GFWhAWeGK8CvAwAgZIfphsHv1Ru0YrJ AZ83FvUYeh6HwvxaMPID1t2FM7jf7auCLbohjOhI6sV7gETa8WR+BeEJ/lw/1/Cf OnkeZ8cZTQQPEQakJNBBVo53B3Osnhk+gKs5VLrt8Uu0+/v1iSL3PEtVGQ53zetu bBRx7FiUYLrhooF71R/yJgBoC6VOgxrSN6SNRS9rCZD+TDaBtALjj59OvOfeRJYj c9GufA+o+3OjA/5qO6APESChxuMeTBvaCJsnR67O/h+13gJSkyf9e8+zRK1xuSrn 3O2D9LGsR3JVqyzqDU8o7oi2smFYD/7OxQB3iW4+CJMJCRCLTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEyvkiEpTxIOYk9ewOSq0z0u1tmPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGRmMWUxNTQtNzg2Mi0z OTAyLWJjZmItNDcxZThhMjJhOTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYix8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL/SIKrzQn3kOW/S+fRVfAv2IWpYg7X4AxcrjQjNykNZLj8HklHCKAxK 3JJm2l0UsvMAkzf2gqtvEDAm7pZU9wC38/ITWju0iQZitn0of/z+i2yJB/lQvfLf 3A1I58roqREVmAUHlwweYKTZuyY7DPsrIWCidnLEp+RHbmBWLDXEbITqyrfpQR5X ADui2m+V5qopngtbp7T9QPe1rkhSms3dZa5A7AUlmdpEnkkQzxGNuxr4KR20PBA7 srQVt6fYVV9LsvHYdJwA+FXmCkwq9Xj3GvIjkr9mL5ON05alca7nBvWN7AHU/mZp YIci+KvMNzP+q1aNFB70CWKqvJXhKMM= -----END CERTIFICATE-----Generated at Tue Oct 21 21:45:19 2025 by rpki-client