$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9954a7db-b1f4-337c-96ce-8eeb04c831cd.roa File: 9954a7db-b1f4-337c-96ce-8eeb04c831cd.roa (raw, json) Hash identifier: ea3Tf3pc6GoAgj4Q9T3zR9F/PGvZ37iixT5FwLqNsEI= Subject key identifier: 1F:89:5E:05:2F:54:69:85:28:24:7D:D7:7B:58:CF:56:DE:C8:05:7B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AAED564FCEFDDC8B45D800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9954a7db-b1f4-337c-96ce-8eeb04c831cd.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 98.201.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:ed:56:4f:ce:fd:dc:8b:45:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=4893ef15-1ba9-4ccb-bcb7-b9f5946bd03c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:14:c9:ad:52:c5:f8:29:a6:47:eb:d4:96:8f: a8:cd:d4:82:b5:71:89:bf:ca:87:63:df:8b:93:21: 06:e4:d8:e0:5a:4d:72:92:74:0e:bc:23:31:5f:2e: 46:cb:47:4d:c2:34:50:2b:a1:79:49:40:ce:d3:59: 3a:ea:47:b0:33:ab:8b:fc:a3:2f:f8:82:ae:5a:fe: 39:29:62:f4:09:c9:28:cf:4a:32:d8:6a:d0:ec:73: 74:be:84:31:bf:84:e7:ab:17:24:0f:6b:af:37:ee: 37:70:bf:48:3e:7f:a2:6a:5a:96:41:06:4a:b1:5c: e6:8d:2a:e7:f6:dd:c5:b9:49:cb:57:fe:d9:1b:83: de:8b:f2:7c:02:59:f3:6f:63:2d:95:e4:7b:58:0c: 26:1c:c5:4f:0e:fd:e7:05:b5:5c:00:3f:9f:59:bd: 46:ac:1a:dc:c0:c3:70:1e:33:8b:c9:45:83:ab:c5: 16:34:ae:32:be:ec:5a:3d:89:96:1e:09:e7:cf:89: b1:e1:17:fb:93:72:3e:11:ed:2e:40:a9:f3:eb:f4: 3f:d1:b7:24:21:a2:13:38:be:cb:6b:14:40:46:ed: 48:a5:e0:97:52:d8:0f:a1:71:a9:4e:88:30:66:98: a3:98:09:d5:07:34:67:0b:c3:88:bf:21:a2:40:0b: 6f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:89:5E:05:2F:54:69:85:28:24:7D:D7:7B:58:CF:56:DE:C8:05:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9954a7db-b1f4-337c-96ce-8eeb04c831cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.201.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:10:94:0b:6a:01:d7:ab:c7:b1:8c:7d:db:4a:a0:b4:dd:03: bf:c0:95:0f:0a:9f:35:79:a1:e4:77:d7:06:4d:f3:9a:ac:34: 48:0f:d6:50:00:3b:31:26:19:99:a0:08:44:8a:18:7a:fa:5e: 8c:ba:07:e8:62:96:bb:95:f5:e0:01:7a:c5:f1:89:e1:b5:ba: 14:47:4a:8d:d6:23:33:a7:fc:9d:0b:36:3a:35:d8:7c:40:66: cd:0a:5e:2a:c7:a3:3a:ad:8b:04:32:7c:a1:7c:97:a4:7b:01: 8a:bb:10:c5:5f:ce:e8:7c:71:14:f7:ce:9b:6f:36:82:bf:e7: 98:92:9c:7b:eb:c9:3d:b7:88:3f:80:34:d0:81:17:ec:22:5d: 23:74:96:16:68:81:d8:52:e1:61:39:cb:98:1f:56:d0:8e:47: 66:37:ce:c3:ec:d3:20:0c:1e:0f:b6:46:b8:e1:de:a1:58:37: d2:b9:e3:e2:3b:ed:89:14:b9:fb:ca:04:d6:1e:17:31:1e:b5: 02:1f:6c:17:ba:cd:89:a6:2b:54:89:20:1c:91:68:fe:46:51: b8:7a:87:46:ac:ca:91:03:53:1d:b4:83:2b:29:e4:c9:82:d3: c4:0c:51:9e:64:d6:70:86:68:4e:7f:af:f4:16:10:14:c3:92: 4d:26:bd:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqu1WT8793ItF2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NDg5M2VmMTUtMWJhOS00Y2NiLWJjYjctYjlmNTk0NmJkMDNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBTJrVLF+CmmR+vUlo+ozdSCtXGJv8qHY9+L kyEG5NjgWk1yknQOvCMxXy5Gy0dNwjRQK6F5SUDO01k66kewM6uL/KMv+IKuWv45 KWL0Cckoz0oy2GrQ7HN0voQxv4TnqxckD2uvN+43cL9IPn+ialqWQQZKsVzmjSrn 9t3FuUnLV/7ZG4Pei/J8Alnzb2MtleR7WAwmHMVPDv3nBbVcAD+fWb1GrBrcwMNw HjOLyUWDq8UWNK4yvuxaPYmWHgnnz4mx4Rf7k3I+Ee0uQKnz6/Q/0bckIaITOL7L axRARu1IpeCXUtgPoXGpTogwZpijmAnVBzRnC8OIvyGiQAtvwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+JXgUvVGmFKCR913tYz1beyAV7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTk1NGE3ZGItYjFmNC0z MzdjLTk2Y2UtOGVlYjA0YzgzMWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYslsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4QlAtqAderx7GMfdtKoLTdA7/AlQ8KnzV5oeR31wZN85qsNEgP1lAA OzEmGZmgCESKGHr6Xoy6B+hilruV9eABesXxieG1uhRHSo3WIzOn/J0LNjo12HxA Zs0KXirHozqtiwQyfKF8l6R7AYq7EMVfzuh8cRT3zptvNoK/55iSnHvryT23iD+A NNCBF+wiXSN0lhZogdhS4WE5y5gfVtCOR2Y3zsPs0yAMHg+2Rrjh3qFYN9K54+I7 7YkUufvKBNYeFzEetQIfbBe6zYmmK1SJIByRaP5GUbh6h0asypEDUx20gysp5MmC 08QMUZ5k1nCGaE5/r/QWEBTDkk0mvaI= -----END CERTIFICATE-----Generated at Tue Oct 21 21:39:39 2025 by rpki-client