$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad4995cc-8ec5-3eae-8266-407b48bcd90e.roa File: ad4995cc-8ec5-3eae-8266-407b48bcd90e.roa (raw, json) Hash identifier: eTxhp2NExbT44O+aWdZI5G+vP1VQHqpL005jtx4amP8= Subject key identifier: A1:CA:16:A0:3F:9B:04:E6:48:95:5D:6F:40:DB:F2:0C:0E:43:46:26 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A94434FF88097C3A187180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad4995cc-8ec5-3eae-8266-407b48bcd90e.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 98.199.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:44:34:ff:88:09:7c:3a:18:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=2fff1252-da8c-4364-9b58-4c7f3996c064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9f:1f:43:f5:f8:3c:72:c4:2d:b1:81:32:11: e5:70:15:f6:89:60:16:f9:0e:de:56:d7:18:e0:ba: dd:8d:16:ca:61:c8:67:30:29:3a:0e:22:99:22:24: 36:10:43:dc:df:6c:20:3b:01:be:f9:e0:8d:c3:6d: df:46:89:e9:69:cf:23:6c:d8:7a:4c:1c:18:71:c7: 86:a1:7f:5d:22:ec:80:fa:6e:7c:a0:ee:cd:ba:95: f2:68:7b:33:a6:af:b7:41:c3:01:d2:6c:7a:35:e1: 8b:49:36:ff:e2:fe:43:17:44:a9:3d:36:6c:55:a3: 8d:18:57:2e:da:ea:41:3d:26:02:ff:ed:d1:72:ee: 2b:d3:63:44:b1:d8:1e:9a:8a:b9:01:cd:43:e7:a9: 4b:eb:ae:7b:90:dd:db:94:a5:c2:e6:f0:b5:bf:61: 7d:5a:6e:8f:b2:5e:9b:28:02:3d:89:1f:2d:a0:08: 1c:d1:b1:41:84:98:11:4a:cf:f3:4f:59:60:6e:93: 97:37:c6:10:30:c3:98:46:33:bc:0c:90:e0:74:9d: c8:55:ee:37:c7:fb:ce:d2:5d:a2:06:4c:a4:91:73: 65:e2:7a:67:7c:db:b3:8b:78:8e:ee:23:ce:f3:c3: bf:41:3b:04:ec:ad:6f:6a:97:fd:13:44:eb:23:39: b3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:CA:16:A0:3F:9B:04:E6:48:95:5D:6F:40:DB:F2:0C:0E:43:46:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad4995cc-8ec5-3eae-8266-407b48bcd90e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.199.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:0b:0e:b8:e1:6d:57:b1:5f:b3:29:89:ea:91:00:8f:d3:20: 9f:a8:a3:d8:80:3f:77:90:25:c2:3c:0b:f2:0d:8e:21:45:4b: 73:c0:d4:cd:0f:7d:10:f6:fb:4a:22:57:20:e3:bf:21:86:2b: 5e:e1:a2:2c:5a:fb:15:1d:86:9d:ba:f4:eb:24:80:e1:1e:b2: 20:df:02:71:d4:30:23:61:fb:6b:a0:53:e3:29:f5:9e:b1:62: 5d:0c:c7:dc:74:41:03:30:10:18:eb:dc:8a:40:6b:e9:3d:1e: 9b:18:26:e7:b6:48:ae:03:f0:8e:c9:65:3e:1f:0c:76:f5:10: 1f:39:50:7f:03:17:21:6a:74:c6:2a:9e:e6:60:10:d8:fe:07: c9:30:db:e8:00:e7:11:8b:d0:03:88:f5:bf:4f:f9:80:fa:65: 57:aa:14:5d:0b:18:b1:01:aa:e4:28:49:be:11:f7:01:25:d2: 43:5b:50:54:4a:d1:8e:7b:fb:9b:5b:bc:da:e3:8a:78:d9:90: 9b:07:65:2c:d9:e9:8c:7a:a6:1a:82:9c:56:ac:d2:c4:fd:04: 26:f4:cb:4d:04:89:b7:20:e7:2b:47:ef:fc:33:e3:86:6b:aa: cc:c1:fd:84:61:8b:61:ac:4a:ae:12:74:a5:b5:95:91:e0:72: 87:04:92:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqUQ0/4gJfDoYcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MmZmZjEyNTItZGE4Yy00MzY0LTliNTgtNGM3ZjM5OTZjMDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJ8fQ/X4PHLELbGBMhHlcBX2iWAW+Q7eVtcY 4LrdjRbKYchnMCk6DiKZIiQ2EEPc32wgOwG++eCNw23fRonpac8jbNh6TBwYcceG oX9dIuyA+m58oO7NupXyaHszpq+3QcMB0mx6NeGLSTb/4v5DF0SpPTZsVaONGFcu 2upBPSYC/+3Rcu4r02NEsdgemoq5Ac1D56lL6657kN3blKXC5vC1v2F9Wm6Psl6b KAI9iR8toAgc0bFBhJgRSs/zT1lgbpOXN8YQMMOYRjO8DJDgdJ3IVe43x/vO0l2i BkykkXNl4npnfNuzi3iO7iPO88O/QTsE7K1vapf9E0TrIzmzewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKHKFqA/mwTmSJVdb0Db8gwOQ0YmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWQ0OTk1Y2MtOGVjNS0z ZWFlLTgyNjYtNDA3YjQ4YmNkOTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYsfQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsLDrjhbVexX7MpieqRAI/TIJ+oo9iAP3eQJcI8C/INjiFFS3PA1M0P fRD2+0oiVyDjvyGGK17hoixa+xUdhp269OskgOEesiDfAnHUMCNh+2ugU+Mp9Z6x Yl0Mx9x0QQMwEBjr3IpAa+k9HpsYJue2SK4D8I7JZT4fDHb1EB85UH8DFyFqdMYq nuZgENj+B8kw2+gA5xGL0AOI9b9P+YD6ZVeqFF0LGLEBquQoSb4R9wEl0kNbUFRK 0Y57+5tbvNrjinjZkJsHZSzZ6Yx6phqCnFas0sT9BCb0y00Eibcg5ytH7/wz44Zr qszB/YRhi2GsSq4SdKW1lZHgcocEkiA= -----END CERTIFICATE-----Generated at Wed Oct 22 00:18:44 2025 by rpki-client