$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfc883ac-9eaa-3808-9079-3020efa47f13.roa File: bfc883ac-9eaa-3808-9079-3020efa47f13.roa (raw, json) Hash identifier: vQ/EozWK4x1ChljecuG8XiDdGCrTRxcCaBK9gpnaN/Y= Subject key identifier: 71:CC:81:40:1B:07:AC:6B:CF:2B:34:A8:7C:FC:13:DD:51:D3:8E:B2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8F9CCA205B2B7F3589440 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfc883ac-9eaa-3808-9079-3020efa47f13.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 98.250.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:f9:cc:a2:05:b2:b7:f3:58:94:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=83bda495-d48a-4469-8fe5-304943cb8e09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3c:94:10:28:a3:0e:af:31:ea:15:13:b4:f5: da:81:b3:80:cc:9f:59:36:70:12:e1:f6:ec:57:58: fa:1e:f3:0f:69:d5:c1:36:5d:3e:58:58:a9:de:4d: bd:bf:4b:ec:09:06:0c:ba:03:85:56:3b:18:ad:73: 16:03:f7:e1:26:65:7c:7e:85:14:a8:5f:50:7c:17: a2:07:69:67:e8:8f:fb:c9:15:35:3c:7e:1f:33:61: 6a:a3:bd:ee:4f:1f:91:2b:18:9a:33:2e:b7:ea:de: f5:f8:90:91:17:da:79:d9:92:c1:86:34:17:73:8b: ee:1e:d2:58:56:71:b8:62:31:66:37:b1:61:13:2e: 53:9b:a6:ea:f2:83:18:1b:fd:09:c4:7b:79:c0:c0: 9d:c7:a4:58:26:ec:1a:e8:79:0d:20:39:7d:ff:e7: 9a:52:fa:b7:24:c3:92:75:da:fa:27:dd:ed:df:19: b1:a1:e9:85:da:f8:2a:ab:ee:50:d3:b3:f3:72:5b: 4f:b1:d3:fb:d9:b6:4c:e6:9b:c5:e4:81:5d:96:19: 7a:7e:ea:de:cb:a5:e8:99:1a:40:fd:3a:e2:06:0e: 70:f5:f9:df:c1:6e:e5:c7:12:2c:b2:98:38:db:d0: 29:d3:e8:b4:57:cb:72:ed:7c:02:35:5e:4f:a6:c6: 21:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:CC:81:40:1B:07:AC:6B:CF:2B:34:A8:7C:FC:13:DD:51:D3:8E:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfc883ac-9eaa-3808-9079-3020efa47f13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.250.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:a7:6e:e2:6f:f6:0b:a5:5a:77:11:e0:9a:c9:30:c9:02:4d: 69:f4:35:f4:00:58:e9:16:78:c0:27:04:8e:0f:96:f4:ea:f7: 7e:a9:ed:e1:42:1c:53:86:39:8c:e8:76:33:96:01:75:f9:aa: 96:47:81:1c:ac:32:7b:a7:a5:3e:93:0b:b0:2b:1d:01:78:ac: d1:73:90:29:f5:dd:84:a1:0f:15:16:35:95:a7:b1:54:c3:38: ff:ff:4f:22:29:e4:21:41:fd:56:cd:f4:b7:c8:b8:47:a2:38: 7d:94:11:b1:5a:a9:de:a4:47:e0:e4:52:75:56:d3:64:79:c0: 48:aa:4f:5c:ee:2f:fb:e4:3e:09:d9:59:69:89:5f:5b:10:4c: 4c:ff:29:97:cd:c1:ed:24:c3:de:6d:e8:96:9a:6a:22:fb:22: b0:92:ca:b9:ee:75:0a:67:fa:c8:dc:ab:a8:9f:64:11:1b:d3: 99:e4:ba:49:97:58:c6:02:26:28:94:65:c7:41:63:90:ab:f2: 73:48:f3:c0:fe:41:cc:db:99:31:f3:7b:2b:69:e0:32:b4:3a: 03:69:40:8d:79:f9:67:5c:3b:72:ec:3f:c4:18:b2:a4:ff:a8: ed:9e:29:3d:87:55:36:d7:52:07:6d:a2:cf:28:37:62:f5:87: fb:36:05:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqPnMogWyt/NYlEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ODNiZGE0OTUtZDQ4YS00NDY5LThmZTUtMzA0OTQzY2I4ZTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzyUECijDq8x6hUTtPXagbOAzJ9ZNnAS4fbs V1j6HvMPadXBNl0+WFip3k29v0vsCQYMugOFVjsYrXMWA/fhJmV8foUUqF9QfBei B2ln6I/7yRU1PH4fM2Fqo73uTx+RKxiaMy636t71+JCRF9p52ZLBhjQXc4vuHtJY VnG4YjFmN7FhEy5Tm6bq8oMYG/0JxHt5wMCdx6RYJuwa6HkNIDl9/+eaUvq3JMOS ddr6J93t3xmxoemF2vgqq+5Q07PzcltPsdP72bZM5pvF5IFdlhl6furey6XomRpA /TriBg5w9fnfwW7lxxIsspg429Ap0+i0V8ty7XwCNV5PpsYhOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHMgUAbB6xrzys0qHz8E91R046yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmZjODgzYWMtOWVhYS0z ODA4LTkwNzktMzAyMGVmYTQ3ZjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYvqMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKnbuJv9gulWncR4JrJMMkCTWn0NfQAWOkWeMAnBI4PlvTq936p7eFC HFOGOYzodjOWAXX5qpZHgRysMnunpT6TC7ArHQF4rNFzkCn13YShDxUWNZWnsVTD OP//TyIp5CFB/VbN9LfIuEeiOH2UEbFaqd6kR+DkUnVW02R5wEiqT1zuL/vkPgnZ WWmJX1sQTEz/KZfNwe0kw95t6JaaaiL7IrCSyrnudQpn+sjcq6ifZBEb05nkukmX WMYCJiiUZcdBY5Cr8nNI88D+QczbmTHzeytp4DK0OgNpQI15+WdcO3LsP8QYsqT/ qO2eKT2HVTbXUgdtos8oN2L1h/s2BcA= -----END CERTIFICATE-----Generated at Tue Oct 21 19:46:13 2025 by rpki-client