$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2cec672d-cc75-38a6-aeff-b63072f82b23.roa File: 2cec672d-cc75-38a6-aeff-b63072f82b23.roa (raw, json) Hash identifier: 6KZRTqaNqcXY2OLeR44l3ixR4fQ2BB6t3UgALQxkqDU= Subject key identifier: 3A:AC:06:53:43:97:A2:6E:B5:7F:B1:4C:0D:B4:BE:5F:5F:90:33:E1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A94E1556DBAB3F86959480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2cec672d-cc75-38a6-aeff-b63072f82b23.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 98.39.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:4e:15:56:db:ab:3f:86:95:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=2b0d12c9-8d2b-424a-9f25-27dbb5775fd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:61:6e:46:f5:bb:2c:82:db:f3:20:53:ea:71: f3:8c:b2:8b:67:c7:1c:f6:48:de:6d:46:0d:90:cf: 67:c7:ad:b2:67:bc:97:4d:d8:f3:45:89:aa:9a:11: 3c:f3:3b:e1:c7:db:ac:86:16:bb:2f:a3:ca:15:2b: 6c:1f:24:f4:7e:1d:7a:cf:d9:58:89:ea:11:ff:e3: 42:eb:0d:b9:a5:6a:15:4d:b1:a2:22:b7:e7:e8:09: 80:9c:5c:ad:75:60:3e:dd:d9:4e:39:ed:5b:04:73: 2a:45:27:07:f2:59:c4:51:25:43:04:95:20:61:d3: b6:ac:87:d0:f0:57:9d:26:cc:c7:ac:b6:79:fb:9a: 16:a4:19:29:36:1b:b3:74:fb:67:fa:1e:cf:a5:a0: ea:86:4c:b0:4c:ba:2f:d1:2f:7c:90:42:08:c3:6b: f8:61:48:bf:2c:85:f1:17:8f:e2:68:66:1e:46:e3: a3:c2:b2:ef:3e:59:54:ab:56:26:18:7f:f0:85:29: c7:0f:87:a7:5c:78:91:63:38:67:c8:e5:2a:47:7b: f2:6f:0b:39:cb:95:42:b4:89:25:72:c3:cc:14:af: 6b:a7:8f:6a:3a:eb:6d:9d:e5:23:dc:41:0a:c1:1b: a0:12:39:09:5f:5c:2c:ac:f3:ca:46:5b:91:be:6b: 8a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:AC:06:53:43:97:A2:6E:B5:7F:B1:4C:0D:B4:BE:5F:5F:90:33:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2cec672d-cc75-38a6-aeff-b63072f82b23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.39.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:a5:01:f0:0f:a8:0a:09:e8:90:cc:7e:0c:16:17:69:6a:95: 44:b9:0a:c7:e1:9d:fd:b6:63:b4:e4:c3:69:30:ed:d8:2a:0b: 3c:2a:11:d7:b8:77:e8:89:e8:f5:6c:0a:80:c3:c6:0c:e4:d5: 2e:6e:5d:92:23:13:20:c9:8b:0c:7b:e8:d4:a5:4a:da:28:fc: 88:05:35:f5:fe:bb:48:48:5b:83:5e:fb:4c:6c:b2:c0:05:e0: b8:f1:17:47:ee:8f:18:29:d9:b0:65:3d:8c:0e:1f:bf:12:cc: bb:c1:4c:39:6d:82:dd:93:8b:ac:a1:fb:9c:85:8e:b3:05:ee: 19:b2:83:48:d1:5f:c4:21:11:12:81:e7:f4:aa:19:b5:44:90: d6:90:b9:52:9c:3b:8f:0d:3f:50:bb:76:6a:b0:be:b4:87:ce: c9:1f:d9:87:2a:d4:3b:7d:bc:f8:6b:08:c6:5f:92:46:9c:22: 80:7e:b0:0a:4b:73:7b:72:42:c3:59:c1:50:7c:e4:05:12:b4: 4b:b9:c0:01:f5:3d:a9:71:c0:ad:e5:ec:5e:77:29:32:d4:58: 7b:ef:9b:74:53:c1:25:41:ff:b6:b2:39:f7:19:22:8c:13:de: 76:35:11:de:64:f2:9b:06:51:34:5a:91:7e:02:7b:56:91:08: 4f:ec:5b:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqU4VVturP4aVlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MmIwZDEyYzktOGQyYi00MjRhLTlmMjUtMjdkYmI1Nzc1ZmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmFuRvW7LILb8yBT6nHzjLKLZ8cc9kjebUYN kM9nx62yZ7yXTdjzRYmqmhE88zvhx9ushha7L6PKFStsHyT0fh16z9lYieoR/+NC 6w25pWoVTbGiIrfn6AmAnFytdWA+3dlOOe1bBHMqRScH8lnEUSVDBJUgYdO2rIfQ 8FedJszHrLZ5+5oWpBkpNhuzdPtn+h7PpaDqhkywTLov0S98kEIIw2v4YUi/LIXx F4/iaGYeRuOjwrLvPllUq1YmGH/whSnHD4enXHiRYzhnyOUqR3vybws5y5VCtIkl csPMFK9rp49qOuttneUj3EEKwRugEjkJX1wsrPPKRluRvmuKlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqsBlNDl6JutX+xTA20vl9fkDPhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmNlYzY3MmQtY2M3NS0z OGE2LWFlZmYtYjYzMDcyZjgyYjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYidbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+lAfAPqAoJ6JDMfgwWF2lqlUS5Csfhnf22Y7Tkw2kw7dgqCzwqEde4 d+iJ6PVsCoDDxgzk1S5uXZIjEyDJiwx76NSlStoo/IgFNfX+u0hIW4Ne+0xsssAF 4LjxF0fujxgp2bBlPYwOH78SzLvBTDltgt2Ti6yh+5yFjrMF7hmyg0jRX8QhERKB 5/SqGbVEkNaQuVKcO48NP1C7dmqwvrSHzskf2Ycq1Dt9vPhrCMZfkkacIoB+sApL c3tyQsNZwVB85AUStEu5wAH1PalxwK3l7F53KTLUWHvvm3RTwSVB/7ayOfcZIowT 3nY1Ed5k8psGUTRakX4Ce1aRCE/sW4U= -----END CERTIFICATE-----Generated at Tue Oct 21 21:57:52 2025 by rpki-client