$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48801bae-6526-3cc2-b764-68efb4a319fe.roa File: 48801bae-6526-3cc2-b764-68efb4a319fe.roa (raw, json) Hash identifier: GGx8aTvX0DHdMlanqZ/yiZ+RuJ2oLi+2NkOOm7Fukkc= Subject key identifier: A3:B3:D5:5F:23:61:D0:42:A2:96:56:5D:40:EC:B5:CB:3D:54:E2:AD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8F16B00182AAF6BBCBE40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48801bae-6526-3cc2-b764-68efb4a319fe.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 98.209.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:f1:6b:00:18:2a:af:6b:bc:be:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=06c27a40-072d-4db1-8ceb-780943da441a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:1c:89:19:9e:8f:65:7b:cb:2f:44:bc:26:d3: 93:41:ad:ae:4e:9a:40:86:5f:e5:ae:f0:b1:9e:46: ec:f8:dd:fb:c2:49:ba:0b:ee:0e:10:23:27:94:ed: 6c:e2:fb:09:b1:ec:72:26:35:09:e6:b0:41:c9:e7: 87:67:43:05:87:d7:21:f0:e6:f2:f9:18:83:af:f6: d6:7f:c6:57:fc:90:da:5d:d7:13:c7:bb:16:49:fb: 83:ff:b5:70:e6:ce:6e:38:e5:49:4f:22:da:b9:fc: 4c:0c:20:09:8f:63:1f:f3:40:4e:7f:76:97:3e:0b: c6:a7:c6:c6:d0:13:99:4e:d5:0d:76:fc:8d:ee:e0: e7:84:7e:2b:39:ea:fd:cf:f3:7e:94:ea:c1:66:d7: c2:bc:bb:bb:ef:2e:5d:45:13:70:10:d7:66:46:d8: 13:c0:d2:b4:0f:64:c0:28:60:96:35:49:64:1b:69: 73:05:79:91:a7:76:2f:92:d0:8f:ef:d5:93:3d:f5: ee:f1:52:c0:31:08:c7:7f:01:1e:17:85:5e:5a:a5: 15:7c:44:30:37:a6:ce:7b:19:3a:59:52:45:c1:4c: 6d:86:f5:d3:a0:db:cb:ed:f8:04:93:65:c2:9b:74: 78:31:74:af:03:30:b5:df:66:f8:4b:3e:69:bb:11: e3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:B3:D5:5F:23:61:D0:42:A2:96:56:5D:40:EC:B5:CB:3D:54:E2:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48801bae-6526-3cc2-b764-68efb4a319fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.209.166.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:a4:14:21:e3:91:1c:09:49:7e:67:83:de:be:1d:5c:50:87: 4c:87:e3:1c:bb:4e:74:4b:f1:23:6f:4f:6d:71:0a:92:46:0f: 77:da:91:16:5f:6e:4b:72:4a:41:49:2d:6a:d6:93:4a:02:6d: cb:33:ce:d9:3f:2b:71:c8:9f:70:de:8f:fc:4a:c7:55:6d:96: 76:27:98:1d:90:71:a0:70:73:d9:82:e8:ee:b5:46:9c:84:90: 7f:f1:e6:4d:de:36:11:42:23:72:01:f1:7b:ab:95:72:6e:85: 87:dc:c6:75:57:f7:ec:c8:a2:c1:8f:db:5a:ca:ec:c7:c7:d8: ad:f6:5a:a0:b0:43:1b:9c:df:ab:57:a8:b1:86:1e:df:33:e7: 04:07:9b:5d:4c:28:87:fd:b4:13:01:4e:44:90:f7:c7:c2:78: 0e:dd:0d:da:7f:72:71:35:25:8a:91:3d:7d:21:58:9b:2c:03: 31:b4:ac:a3:58:d1:8b:cb:28:91:5c:c7:53:e7:3b:25:31:a8: 0b:55:51:ed:1b:4e:1c:c3:11:b7:0e:45:4f:c5:e6:3b:3b:27: 2f:34:77:60:27:aa:61:4f:85:8b:b0:79:bf:76:62:2d:96:e6: e3:69:ae:80:18:c5:ea:48:42:42:2e:72:d0:02:52:34:12:c0: 55:51:53:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqPFrABgqr2u8vkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MDZjMjdhNDAtMDcyZC00ZGIxLThjZWItNzgwOTQzZGE0NDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ByJGZ6PZXvLL0S8JtOTQa2uTppAhl/lrvCx nkbs+N37wkm6C+4OECMnlO1s4vsJsexyJjUJ5rBByeeHZ0MFh9ch8Oby+RiDr/bW f8ZX/JDaXdcTx7sWSfuD/7Vw5s5uOOVJTyLaufxMDCAJj2Mf80BOf3aXPgvGp8bG 0BOZTtUNdvyN7uDnhH4rOer9z/N+lOrBZtfCvLu77y5dRRNwENdmRtgTwNK0D2TA KGCWNUlkG2lzBXmRp3YvktCP79WTPfXu8VLAMQjHfwEeF4VeWqUVfEQwN6bOexk6 WVJFwUxthvXToNvL7fgEk2XCm3R4MXSvAzC132b4Sz5puxHjIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOz1V8jYdBCopZWXUDstcs9VOKtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDg4MDFiYWUtNjUyNi0z Y2MyLWI3NjQtNjhlZmI0YTMxOWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYtGmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMekFCHjkRwJSX5ng96+HVxQh0yH4xy7TnRL8SNvT21xCpJGD3fakRZf bktySkFJLWrWk0oCbcszztk/K3HIn3Dej/xKx1VtlnYnmB2QcaBwc9mC6O61RpyE kH/x5k3eNhFCI3IB8XurlXJuhYfcxnVX9+zIosGP21rK7MfH2K32WqCwQxuc36tX qLGGHt8z5wQHm11MKIf9tBMBTkSQ98fCeA7dDdp/cnE1JYqRPX0hWJssAzG0rKNY 0YvLKJFcx1PnOyUxqAtVUe0bThzDEbcORU/F5js7Jy80d2AnqmFPhYuweb92Yi2W 5uNproAYxepIQkIuctACUjQSwFVRU0k= -----END CERTIFICATE-----Generated at Wed Oct 22 00:28:06 2025 by rpki-client