$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b0e6741f-0726-3f20-96d5-f240111c4af4.roa File: b0e6741f-0726-3f20-96d5-f240111c4af4.roa (raw, json) Hash identifier: 1DiFdRmLwNSce1KG88ADaOX05iMdQqBRoNE9bL0Eh1o= Subject key identifier: 4D:40:A8:23:FE:AC:C5:32:97:B0:EE:2E:38:FA:B9:4A:32:55:59:8B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A7E5D7ADB8B8C2AD0D4280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b0e6741f-0726-3f20-96d5-f240111c4af4.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33490 IP address blocks: 98.246.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:e5:d7:ad:b8:b8:c2:ad:0d:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=ca54d0ab-dba9-4283-a501-67a141adb8d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:66:79:5d:c3:50:01:aa:5b:db:7e:0b:c8:f3: ef:d3:e1:b3:04:e9:36:6a:4a:57:d1:0e:a8:d2:7f: 5e:30:66:94:7e:99:4a:0c:ee:56:b2:eb:d4:11:b5: d4:04:f5:3f:dd:25:11:00:a5:9b:1a:5b:74:92:05: da:1e:a9:f4:77:e3:4e:70:74:b0:7e:9a:d8:81:07: 11:01:84:a0:c7:80:35:84:21:ef:e8:32:0b:0e:be: 57:f0:cc:4c:95:c8:da:98:18:72:57:c7:d7:69:98: 4e:8a:36:d8:a5:80:b5:db:78:52:cf:4e:43:91:96: 9d:fc:6d:ca:ba:44:f1:3d:79:5b:ac:c1:fb:b3:95: a3:70:2e:ac:08:f2:d5:d1:13:44:2a:e0:34:5b:39: d6:f8:88:3a:0a:30:87:11:bd:05:91:75:44:7b:eb: a1:28:93:a3:32:74:38:ec:80:72:8e:f1:84:8a:e3: 00:d6:83:42:51:55:61:a9:d8:70:ac:de:79:59:bf: c3:7d:27:f2:a6:a6:44:4e:99:d8:34:13:8e:78:cf: 57:a6:f9:21:1d:8d:17:0e:22:bb:71:b5:57:3d:db: 35:03:c2:42:b9:9d:13:34:aa:b0:da:13:7b:fb:28: 62:9b:9a:9b:41:c3:db:84:30:ea:72:07:71:a5:e2: df:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:40:A8:23:FE:AC:C5:32:97:B0:EE:2E:38:FA:B9:4A:32:55:59:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b0e6741f-0726-3f20-96d5-f240111c4af4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.246.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:33:37:5d:1c:d7:49:49:cd:56:9e:a5:dd:0b:f6:aa:db:aa: 16:d1:b7:9a:db:a0:74:12:81:d1:56:7d:2a:8d:c4:15:1c:c5: b3:79:b8:13:31:0e:73:19:30:31:fc:c8:4a:23:19:87:a7:48: f1:ee:36:a3:84:6d:cb:c6:51:a0:0c:b8:b3:c9:24:3b:c8:f0: 39:b4:38:b3:78:10:16:19:71:f4:55:5d:14:7b:7d:1b:50:46: 70:0f:26:87:5f:41:66:c9:95:f0:36:2d:9a:3f:fc:b3:4f:e2: 42:8f:ac:04:82:69:07:5d:58:98:34:4a:2b:e5:4f:f5:78:56: 7a:67:73:c9:bf:bb:da:75:df:73:dd:3e:2d:b1:29:66:a1:ff: 92:32:24:a7:a0:d7:58:b5:1f:0d:2e:40:a9:86:7f:87:a4:05: 78:f4:26:1a:4d:92:17:2d:49:37:73:36:8a:72:f5:45:2b:08: 24:82:31:9d:d5:6b:72:74:db:b0:a4:4a:dc:8a:b2:c9:ff:ba: 8a:6a:ce:39:56:6d:06:97:bb:ea:3e:7f:00:9e:3a:40:59:6b: 81:d4:7d:a0:f6:a7:77:b3:ff:c3:96:ba:d0:65:88:eb:54:60: 44:86:b2:82:67:e5:2a:3a:ea:e9:10:8a:6f:cf:b6:8f:fb:a8: 0b:65:74:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp+XXrbi4wq0NQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk Y2E1NGQwYWItZGJhOS00MjgzLWE1MDEtNjdhMTQxYWRiOGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmZ5XcNQAapb234LyPPv0+GzBOk2akpX0Q6o 0n9eMGaUfplKDO5WsuvUEbXUBPU/3SURAKWbGlt0kgXaHqn0d+NOcHSwfprYgQcR AYSgx4A1hCHv6DILDr5X8MxMlcjamBhyV8fXaZhOijbYpYC123hSz05DkZad/G3K ukTxPXlbrMH7s5WjcC6sCPLV0RNEKuA0WznW+Ig6CjCHEb0FkXVEe+uhKJOjMnQ4 7IByjvGEiuMA1oNCUVVhqdhwrN55Wb/DfSfypqZETpnYNBOOeM9XpvkhHY0XDiK7 cbVXPds1A8JCuZ0TNKqw2hN7+yhim5qbQcPbhDDqcgdxpeLfRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1AqCP+rMUyl7DuLjj6uUoyVVmLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjBlNjc0MWYtMDcyNi0z ZjIwLTk2ZDUtZjI0MDExMWM0YWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYvaqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFozN10c10lJzVaepd0L9qrbqhbRt5rboHQSgdFWfSqNxBUcxbN5uBMx DnMZMDH8yEojGYenSPHuNqOEbcvGUaAMuLPJJDvI8Dm0OLN4EBYZcfRVXRR7fRtQ RnAPJodfQWbJlfA2LZo//LNP4kKPrASCaQddWJg0SivlT/V4Vnpnc8m/u9p133Pd Pi2xKWah/5IyJKeg11i1Hw0uQKmGf4ekBXj0JhpNkhctSTdzNopy9UUrCCSCMZ3V a3J027CkStyKssn/uopqzjlWbQaXu+o+fwCeOkBZa4HUfaD2p3ez/8OWutBliOtU YESGsoJn5So66ukQim/Pto/7qAtldLI= -----END CERTIFICATE-----Generated at Wed Oct 22 00:19:28 2025 by rpki-client