$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98913a73-741f-31bc-896c-402bd4856f72.roa File: 98913a73-741f-31bc-896c-402bd4856f72.roa (raw, json) Hash identifier: WN2VxowAMbkdWCVe9zgQAbZsWcYQmledL9HOOzC7qjY= Subject key identifier: 15:51:2F:2C:40:C1:C4:7C:CF:C5:0B:B9:B7:E1:40:F9:95:49:71:35 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8F1AD23A78A759F5CD1C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98913a73-741f-31bc-896c-402bd4856f72.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 98.209.188.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:f1:ad:23:a7:8a:75:9f:5c:d1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=b4da0359-f2b8-45e5-8f68-f8f4e6e04d8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:f7:2c:e2:8f:7c:d6:cd:bf:f2:8f:eb:a0:f8: 2f:97:31:8a:84:11:52:61:32:6c:91:7f:ed:7b:d2: 5b:89:b8:d5:61:41:ea:16:05:b3:df:a8:11:56:d5: 08:85:8c:76:4e:07:e7:70:35:bd:5e:58:21:26:f1: 71:e1:00:b4:7d:e7:e9:42:10:c4:3e:45:03:2b:78: 46:2c:72:a3:18:9d:8f:5a:55:03:df:45:f2:88:e3: 4f:68:22:a0:01:3d:84:c2:6b:c6:cd:e1:e4:93:62: a7:7a:99:07:70:a4:64:0f:54:cd:09:82:f8:32:f5: f7:cc:74:fe:24:cd:32:b5:d8:b9:4c:e9:75:02:10: 76:8b:07:22:00:0d:28:9c:f5:72:f3:36:92:2f:e0: 6f:05:76:45:f6:6c:98:11:1f:cc:eb:32:1c:49:30: 0f:17:2e:a4:cb:bd:c1:59:af:27:cd:92:45:3b:78: 76:d9:db:cb:88:23:73:b9:c7:05:3f:d0:52:f8:a9: 69:89:44:25:59:3e:38:bb:5f:66:6b:7e:c1:ff:bc: 3e:b3:c9:5c:8b:1c:ad:87:a0:9f:a1:b2:76:61:25: db:58:2b:17:a8:cc:1e:41:11:f2:ea:a6:e9:50:7f: 04:5d:bf:f3:70:cb:b3:f4:6f:2b:7e:c0:9a:65:d5: de:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:51:2F:2C:40:C1:C4:7C:CF:C5:0B:B9:B7:E1:40:F9:95:49:71:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98913a73-741f-31bc-896c-402bd4856f72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.209.188.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:84:c9:a0:50:63:84:7b:3b:48:a9:a8:16:c2:6f:00:09:49: 4e:42:55:72:fb:73:89:14:c4:6d:2e:8b:75:cc:11:c5:f5:6f: 2f:d2:e1:a5:e1:5e:06:97:21:2b:ca:2f:28:e4:75:c3:7a:5c: 34:e4:96:2f:1d:82:33:85:1c:45:1e:99:ea:1c:f2:df:24:67: 62:31:3a:7e:ae:89:ea:5d:73:52:da:03:4c:cd:19:ed:ae:ff: a2:76:fb:3d:68:9b:6f:b7:b3:ef:09:ff:40:90:76:c8:42:d4: f0:a3:f2:cb:25:62:14:83:37:e4:66:41:35:24:05:49:a3:45: a0:59:60:10:96:17:00:9f:b5:3e:1a:ba:eb:bf:34:7e:15:df: ac:07:93:39:eb:52:45:f6:ae:69:ee:4d:aa:f9:32:4b:3f:58: bf:c6:b8:cc:0b:d9:fb:6c:84:bb:2f:a2:14:d7:92:ab:18:e7: 75:23:89:04:91:32:59:1e:ff:78:c6:a5:55:17:fb:2c:11:e0: 95:cc:27:d0:3f:91:ce:4d:63:34:d6:2a:af:77:61:42:91:bf: ad:b4:ca:09:8d:21:52:cc:42:ee:32:7c:e5:2c:f3:bc:f0:00: ec:63:53:79:30:05:0d:4f:4e:bc:e5:b4:83:07:d7:e2:92:02: 44:f5:82:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqPGtI6eKdZ9c0cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YjRkYTAzNTktZjJiOC00NWU1LThmNjgtZjhmNGU2ZTA0ZDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Pcs4o981s2/8o/roPgvlzGKhBFSYTJskX/t e9JbibjVYUHqFgWz36gRVtUIhYx2TgfncDW9XlghJvFx4QC0fefpQhDEPkUDK3hG LHKjGJ2PWlUD30XyiONPaCKgAT2EwmvGzeHkk2KnepkHcKRkD1TNCYL4MvX3zHT+ JM0ytdi5TOl1AhB2iwciAA0onPVy8zaSL+BvBXZF9myYER/M6zIcSTAPFy6ky73B Wa8nzZJFO3h22dvLiCNzuccFP9BS+KlpiUQlWT44u19ma37B/7w+s8lcixyth6Cf obJ2YSXbWCsXqMweQRHy6qbpUH8EXb/zcMuz9G8rfsCaZdXewwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBVRLyxAwcR8z8ULubfhQPmVSXE1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTg5MTNhNzMtNzQxZi0z MWJjLTg5NmMtNDAyYmQ0ODU2ZjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYtG8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKEyaBQY4R7O0ipqBbCbwAJSU5CVXL7c4kUxG0ui3XMEcX1by/S4aXh XgaXISvKLyjkdcN6XDTkli8dgjOFHEUemeoc8t8kZ2IxOn6uiepdc1LaA0zNGe2u /6J2+z1om2+3s+8J/0CQdshC1PCj8sslYhSDN+RmQTUkBUmjRaBZYBCWFwCftT4a uuu/NH4V36wHkznrUkX2rmnuTar5Mks/WL/GuMwL2ftshLsvohTXkqsY53UjiQSR Mlke/3jGpVUX+ywR4JXMJ9A/kc5NYzTWKq93YUKRv620ygmNIVLMQu4yfOUs87zw AOxjU3kwBQ1PTrzltIMH1+KSAkT1ggU= -----END CERTIFICATE-----Generated at Tue Oct 21 22:21:41 2025 by rpki-client