$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b21f7d48-3ad3-3c34-9ff8-209ae0d8a90a.roa File: b21f7d48-3ad3-3c34-9ff8-209ae0d8a90a.roa (raw, json) Hash identifier: RITKg15Lk2fHoqbL5bpa2yzzadKh9Ax2wz8S2Il1kIo= Subject key identifier: E2:4C:66:7E:56:9E:26:CA:C0:F6:3C:5B:9C:71:DB:E9:80:5E:E6:DD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A892C65C1DB9688E530B00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b21f7d48-3ad3-3c34-9ff8-209ae0d8a90a.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 98.229.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:92:c6:5c:1d:b9:68:8e:53:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=07dacaca-f368-4a3b-801c-068da3dca177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:55:44:ea:b9:a8:45:96:4d:4d:05:c7:61:b7: ed:cc:fb:9a:df:8b:6a:44:4a:b3:47:c0:85:35:f3: 41:8c:d7:fe:3a:e1:59:b2:c3:65:8c:4e:2e:f5:f9: 34:44:49:14:ac:da:7d:b2:71:cd:f0:83:45:93:26: 4b:c0:d0:8c:f0:dd:76:a7:22:69:6e:4e:fa:fc:6f: 81:c1:14:ab:3c:ac:95:13:e7:0b:ff:a5:bc:1d:07: 51:e8:8f:25:da:8c:62:fc:ff:9a:e3:0a:41:0e:e9: d8:64:09:1d:5e:6a:b6:0a:21:d2:8b:7c:4d:73:68: cc:61:56:c6:e1:06:3d:a8:11:b5:e8:f4:a8:35:b4: 78:6c:6e:99:7f:64:fd:20:74:81:d7:31:be:aa:7c: 9f:ec:e3:8f:12:18:04:1e:19:01:82:c7:25:2c:2d: d8:89:77:f5:a7:6d:6c:de:2b:27:9b:10:84:b7:dc: 8e:8d:44:c2:f9:cc:8a:80:02:40:41:2b:c9:2c:af: 34:56:8d:09:9d:27:3c:ff:c4:bf:bd:b9:21:54:2b: 33:02:33:bb:43:78:1b:00:fb:df:19:b3:4b:e3:22: 98:76:90:f2:68:d7:59:10:c8:d9:93:21:cb:df:73: de:04:88:92:f1:84:29:88:f5:77:49:c7:c3:a9:b1: fa:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:4C:66:7E:56:9E:26:CA:C0:F6:3C:5B:9C:71:DB:E9:80:5E:E6:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b21f7d48-3ad3-3c34-9ff8-209ae0d8a90a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.229.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:07:9c:07:64:3b:14:36:cd:8f:a1:84:eb:e7:fc:de:36:f9: a5:c5:58:e9:eb:b5:b8:ec:09:55:6a:9a:7e:e5:b0:e4:5f:41: 7a:ec:b2:a6:0f:d6:0a:b9:01:fa:aa:fb:1b:f1:ae:f0:bd:1e: eb:3d:81:a6:b6:97:43:65:7e:93:e3:c0:a6:61:46:dc:d6:5e: b1:ea:db:39:f5:0b:5f:9d:0e:81:21:eb:da:a6:64:59:98:12: f4:0e:e8:80:a3:ec:48:5e:63:5a:52:6f:92:d2:89:99:ab:1c: 70:71:eb:88:f6:f7:56:a2:af:9b:fd:7d:eb:bb:05:d6:80:3a: aa:a3:94:f3:60:0c:7a:3f:7b:01:3e:43:94:b1:59:27:43:16: 7d:fb:38:ca:a7:66:08:15:cd:64:2b:c6:58:9b:73:7d:c5:50: 2b:c3:1b:d2:f2:3e:a1:44:50:c2:d3:fa:3b:c8:20:5d:17:c9: 08:e4:8c:d7:f3:38:6c:93:5a:59:8a:64:69:42:de:88:a4:1f: eb:cb:e8:b2:a8:3a:7f:14:a2:0d:65:60:b8:3e:4b:82:ed:d6: cc:32:f3:c0:4d:2b:8e:55:dd:d0:7c:4a:b6:e7:97:3e:df:d5: 8b:51:e3:1d:e3:24:05:be:b9:0c:5d:b8:98:c2:b9:4c:4f:2e: 11:32:38:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqJLGXB25aI5TCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MDdkYWNhY2EtZjM2OC00YTNiLTgwMWMtMDY4ZGEzZGNhMTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVVE6rmoRZZNTQXHYbftzPua34tqREqzR8CF NfNBjNf+OuFZssNljE4u9fk0REkUrNp9snHN8INFkyZLwNCM8N12pyJpbk76/G+B wRSrPKyVE+cL/6W8HQdR6I8l2oxi/P+a4wpBDunYZAkdXmq2CiHSi3xNc2jMYVbG 4QY9qBG16PSoNbR4bG6Zf2T9IHSB1zG+qnyf7OOPEhgEHhkBgsclLC3YiXf1p21s 3isnmxCEt9yOjUTC+cyKgAJAQSvJLK80Vo0JnSc8/8S/vbkhVCszAjO7Q3gbAPvf GbNL4yKYdpDyaNdZEMjZkyHL33PeBIiS8YQpiPV3ScfDqbH64wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJMZn5WnibKwPY8W5xx2+mAXubdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjIxZjdkNDgtM2FkMy0z YzM0LTlmZjgtMjA5YWUwZDhhOTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYuWsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsHnAdkOxQ2zY+hhOvn/N42+aXFWOnrtbjsCVVqmn7lsORfQXrssqYP 1gq5Afqq+xvxrvC9Hus9gaa2l0NlfpPjwKZhRtzWXrHq2zn1C1+dDoEh69qmZFmY EvQO6ICj7EheY1pSb5LSiZmrHHBx64j291air5v9feu7BdaAOqqjlPNgDHo/ewE+ Q5SxWSdDFn37OMqnZggVzWQrxlibc33FUCvDG9LyPqFEUMLT+jvIIF0XyQjkjNfz OGyTWlmKZGlC3oikH+vL6LKoOn8Uog1lYLg+S4Lt1swy88BNK45V3dB8Srbnlz7f 1YtR4x3jJAW+uQxduJjCuUxPLhEyOO4= -----END CERTIFICATE-----Generated at Tue Oct 21 19:19:04 2025 by rpki-client