$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1294aecc-ea5e-35c9-a3f2-4c55f9dcb95e.roa File: 1294aecc-ea5e-35c9-a3f2-4c55f9dcb95e.roa (raw, json) Hash identifier: dlvcbmKtCrDDmgG+3m5TM9hycK+KCaYk3mCoGI9qB2I= Subject key identifier: 2D:86:31:87:B3:72:F6:11:56:67:67:F5:62:2F:15:A6:82:77:00:47 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AAF5A00BDDAFA3FE007100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1294aecc-ea5e-35c9-a3f2-4c55f9dcb95e.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 98.40.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:f5:a0:0b:dd:af:a3:fe:00:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=734a490f-70b6-470d-a20b-a43d47ee4fa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:61:9b:13:2c:32:a7:49:bd:aa:89:eb:2c:a7: 62:6c:e0:1e:f3:1a:34:71:d3:4f:21:58:58:89:f2: 35:9f:5d:c5:66:06:99:96:af:4b:5e:3b:45:70:2f: 43:c4:f9:6f:39:b5:da:b9:d3:4c:1b:70:87:76:8b: 77:11:e7:09:d3:fa:ae:90:d5:d6:27:4e:66:13:76: 72:2c:c6:28:85:d7:c9:e5:c2:f6:5c:45:2b:eb:92: a7:be:a0:a9:4c:71:7c:94:7a:36:d7:7a:51:0e:c7: 7a:b4:4c:3e:fb:ed:2b:30:ae:66:e5:e4:db:3b:8d: ff:2f:33:25:7b:a0:45:4d:a6:a6:14:1c:17:dc:c0: a3:15:ad:d1:bb:a9:48:f1:73:9f:da:cd:1a:1b:de: 53:fa:d1:c3:e1:96:9a:a8:22:eb:d2:87:8f:09:1a: 28:d0:b8:c3:a8:96:a7:b2:18:04:05:df:aa:b8:04: 27:1d:3f:9d:11:22:a6:28:bc:7f:aa:bc:31:75:39: c5:5e:d5:bb:3c:4f:e6:af:22:08:95:4b:0e:fc:cf: b8:b6:cd:ff:df:12:ac:fb:ae:fd:e7:4d:ec:95:0d: c8:cf:ea:d7:9c:7e:4b:1d:d9:29:20:b6:ec:87:1a: 6d:ca:43:26:2f:da:9c:06:b2:c2:c2:64:77:f6:4a: 90:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:86:31:87:B3:72:F6:11:56:67:67:F5:62:2F:15:A6:82:77:00:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1294aecc-ea5e-35c9-a3f2-4c55f9dcb95e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.40.186.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:25:1a:bf:e1:dd:2e:91:b8:5d:92:12:79:3a:59:68:45:96: 7e:a9:ec:82:49:17:5d:f1:46:c1:87:e8:28:b8:1f:35:fb:41: 3d:3c:cd:d0:77:cf:b4:33:67:32:8b:15:68:78:2c:b2:00:b9: 3c:d2:1b:96:de:79:be:48:0e:96:03:3c:0c:fe:25:5e:65:b4: a7:f0:5f:92:d1:a6:ce:04:72:71:13:73:80:0b:e9:0b:a1:f0: 69:53:9c:4a:db:c6:79:fc:03:3e:28:d2:8c:7c:85:bc:18:7e: 4a:b5:f5:cd:ec:d5:03:03:b6:2e:55:23:71:33:67:c6:16:9e: ff:ac:bc:d5:ed:0f:ac:11:1b:fc:20:9c:f5:0d:30:e4:68:07: 61:7c:cd:33:5e:c4:03:e3:db:e7:99:d5:7a:5a:84:23:15:75: f0:53:ca:4d:9e:96:b6:98:04:f1:91:c4:45:37:3a:de:94:8c: aa:a3:06:5d:7d:49:22:de:c0:ab:36:f3:9a:52:44:23:55:6f: cf:0a:c1:f7:5a:fc:49:a8:fe:3d:5f:6c:26:1f:c6:71:1f:22: 15:66:2d:14:fc:5f:48:8d:d3:a0:93:52:8a:b9:09:f5:7a:2c: d5:01:8b:6e:db:ca:76:69:86:c1:bd:86:57:5d:b7:98:34:52: a1:74:b1:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqvWgC92vo/4AcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NzM0YTQ5MGYtNzBiNi00NzBkLWEyMGItYTQzZDQ3ZWU0ZmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2GbEywyp0m9qonrLKdibOAe8xo0cdNPIVhY ifI1n13FZgaZlq9LXjtFcC9DxPlvObXaudNMG3CHdot3EecJ0/qukNXWJ05mE3Zy LMYohdfJ5cL2XEUr65KnvqCpTHF8lHo213pRDsd6tEw+++0rMK5m5eTbO43/LzMl e6BFTaamFBwX3MCjFa3Ru6lI8XOf2s0aG95T+tHD4ZaaqCLr0oePCRoo0LjDqJan shgEBd+quAQnHT+dESKmKLx/qrwxdTnFXtW7PE/mryIIlUsO/M+4ts3/3xKs+679 503slQ3Iz+rXnH5LHdkpILbshxptykMmL9qcBrLCwmR39kqQRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2GMYezcvYRVmdn9WIvFaaCdwBHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTI5NGFlY2MtZWE1ZS0z NWM5LWEzZjItNGM1NWY5ZGNiOTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYii6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKIlGr/h3S6RuF2SEnk6WWhFln6p7IJJF13xRsGH6Ci4HzX7QT08zdB3 z7QzZzKLFWh4LLIAuTzSG5beeb5IDpYDPAz+JV5ltKfwX5LRps4EcnETc4AL6Quh 8GlTnErbxnn8Az4o0ox8hbwYfkq19c3s1QMDti5VI3EzZ8YWnv+svNXtD6wRG/wg nPUNMORoB2F8zTNexAPj2+eZ1XpahCMVdfBTyk2elraYBPGRxEU3Ot6UjKqjBl19 SSLewKs285pSRCNVb88Kwfda/Emo/j1fbCYfxnEfIhVmLRT8X0iN06CTUoq5CfV6 LNUBi27bynZphsG9hlddt5g0UqF0sa4= -----END CERTIFICATE-----Generated at Tue Oct 21 21:30:07 2025 by rpki-client