$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8a8e09e-84e0-32a9-88e8-7abc11fe41e1.roa File: c8a8e09e-84e0-32a9-88e8-7abc11fe41e1.roa (raw, json) Hash identifier: b4/GzxHn5zTYEZww+OrDlqZqNF7VIDSJiTnYXUfKVkI= Subject key identifier: BC:7C:CD:8E:9F:F9:8A:15:63:8A:E1:5F:9F:14:F0:8F:DB:91:7D:A1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A9934939A8007E7EB3EF80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8a8e09e-84e0-32a9-88e8-7abc11fe41e1.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33490 IP address blocks: 98.246.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:93:49:39:a8:00:7e:7e:b3:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=fba240e1-fe05-42d8-9ef8-a9e0d7b13d95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:db:16:42:b6:ca:08:cb:c7:d6:9f:99:d5:55: 01:ef:db:a1:94:32:1f:de:74:1b:9b:90:e0:ef:21: 24:d7:76:6e:b5:d4:14:5d:97:6c:b6:f2:29:2e:66: 4a:b4:82:e7:91:a7:e0:bc:19:2a:dd:ae:5e:db:d6: 01:f3:cf:4d:44:4e:7c:53:ab:4b:d8:a1:3f:6c:98: 7c:6b:49:c7:f5:cc:d6:a6:eb:f5:13:d6:6f:f2:9e: c9:19:7d:21:c2:64:b0:e7:fc:85:72:82:ab:39:50: 76:08:38:50:02:2e:03:30:dd:84:6f:3f:39:fe:93: e2:4a:83:0f:91:15:fa:ac:ba:49:6e:96:8a:df:13: ac:bd:5a:02:5e:23:dd:ec:3e:8d:9b:04:8b:35:07: 21:e0:9a:1c:59:94:14:63:c4:29:9a:f5:49:e5:48: f8:ee:81:19:38:df:2a:fa:ba:d7:8e:2c:a2:c2:49: 93:07:0f:1e:ad:21:8b:58:40:09:26:0c:ce:4e:32: d0:78:24:c7:30:e6:de:76:31:8c:38:94:25:5b:17: b5:36:3d:69:ba:ce:8b:18:54:ae:09:06:13:ff:8c: f0:db:37:92:53:08:13:00:9e:06:9d:f3:4e:11:13: 26:5a:e2:07:f6:a2:24:99:f4:cd:73:3e:67:34:71: 54:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:7C:CD:8E:9F:F9:8A:15:63:8A:E1:5F:9F:14:F0:8F:DB:91:7D:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8a8e09e-84e0-32a9-88e8-7abc11fe41e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.246.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:67:31:6e:24:20:7d:6d:d2:a3:cd:e0:bc:5f:d7:db:14:68: b2:6b:d3:41:ee:4a:fd:4b:d2:4a:6b:01:51:58:4e:b1:ea:d2: a3:06:8b:21:95:be:4c:d6:f5:8a:76:32:86:05:b4:a0:d6:9e: 69:0d:11:96:53:25:f8:cb:f0:cd:96:23:6c:4c:14:75:cb:02: 56:a5:fe:22:f9:86:a8:25:af:12:c2:df:4f:b4:85:3a:cb:81: a9:39:b6:61:c7:18:d3:dd:e5:01:94:45:a6:d0:70:58:dc:c2: 3e:01:fd:fc:fc:05:b2:f9:49:10:9f:f1:f1:fd:f4:93:d4:90: 6d:ea:7f:75:b0:1c:99:24:45:58:0d:6a:17:a4:6a:6b:f1:c4: fb:4b:2f:f8:02:32:b1:8a:4b:50:16:c3:44:b9:48:8d:f5:c0: 9f:c4:e2:85:13:b4:f7:3c:e0:83:db:ee:76:fa:a0:c3:54:23: ee:88:83:dd:be:5f:3c:30:87:6c:73:71:c4:cc:19:d3:f3:52: 8a:8c:91:56:18:b9:4e:40:20:ff:60:8f:5e:32:90:3f:45:04: d7:5e:77:ed:88:0d:3f:38:cb:b2:a2:11:ec:3f:09:70:fc:d6: 8e:bb:e5:a5:ae:81:66:25:43:98:99:0e:33:07:52:9d:17:6f: 02:22:2b:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqZNJOagAfn6z74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZmJhMjQwZTEtZmUwNS00MmQ4LTllZjgtYTllMGQ3YjEzZDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9sWQrbKCMvH1p+Z1VUB79uhlDIf3nQbm5Dg 7yEk13ZutdQUXZdstvIpLmZKtILnkafgvBkq3a5e29YB889NRE58U6tL2KE/bJh8 a0nH9czWpuv1E9Zv8p7JGX0hwmSw5/yFcoKrOVB2CDhQAi4DMN2Ebz85/pPiSoMP kRX6rLpJbpaK3xOsvVoCXiPd7D6NmwSLNQch4JocWZQUY8QpmvVJ5Uj47oEZON8q +rrXjiyiwkmTBw8erSGLWEAJJgzOTjLQeCTHMObedjGMOJQlWxe1Nj1pus6LGFSu CQYT/4zw2zeSUwgTAJ4GnfNOERMmWuIH9qIkmfTNcz5nNHFUxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLx8zY6f+YoVY4rhX58U8I/bkX2hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzhhOGUwOWUtODRlMC0z MmE5LTg4ZTgtN2FiYzExZmU0MWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYvb8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERnMW4kIH1t0qPN4Lxf19sUaLJr00HuSv1L0kprAVFYTrHq0qMGiyGV vkzW9Yp2MoYFtKDWnmkNEZZTJfjL8M2WI2xMFHXLAlal/iL5hqglrxLC30+0hTrL gak5tmHHGNPd5QGURabQcFjcwj4B/fz8BbL5SRCf8fH99JPUkG3qf3WwHJkkRVgN ahekamvxxPtLL/gCMrGKS1AWw0S5SI31wJ/E4oUTtPc84IPb7nb6oMNUI+6Ig92+ Xzwwh2xzccTMGdPzUoqMkVYYuU5AIP9gj14ykD9FBNded+2IDT84y7KiEew/CXD8 1o675aWugWYlQ5iZDjMHUp0XbwIiKws= -----END CERTIFICATE-----Generated at Tue Oct 21 19:23:22 2025 by rpki-client