$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d66d097a-fd7f-37c2-9f23-e96f95f9605b.roa File: d66d097a-fd7f-37c2-9f23-e96f95f9605b.roa (raw, json) Hash identifier: iJpOl4uymXmXa7odSf0TdX6Q1hH1Vv2OeT+0zB6RaoU= Subject key identifier: 14:8F:98:58:02:25:10:26:FE:C0:FD:80:8D:82:60:4B:9C:DF:84:84 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A93E7CC5079D0282ED7340 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d66d097a-fd7f-37c2-9f23-e96f95f9605b.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 98.197.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:3e:7c:c5:07:9d:02:82:ed:73:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=9f76652c-6a67-4f44-bbaf-6de1610ce85c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f5:26:f7:0c:f2:79:c1:df:7e:ee:d5:46:a1: e7:c4:7c:80:ef:ab:a5:d8:b4:56:a2:6e:e7:c2:72: 50:29:c2:45:15:21:95:96:8d:c3:92:58:66:74:9b: da:90:9c:98:a3:4a:25:57:bc:03:91:70:fb:55:97: b0:8d:06:f5:39:b1:03:78:94:bc:a3:45:9a:03:b3: 21:05:db:f8:e5:3a:90:58:5e:99:46:a4:13:c5:44: f8:2d:1e:f7:a7:ee:26:1a:46:03:db:3e:11:8d:c9: 7b:83:eb:20:f4:30:14:1f:2a:ff:c9:86:1c:00:5f: d2:48:e7:af:b6:65:c2:64:d1:51:fa:6f:41:3c:05: 8c:13:41:c2:d4:9d:b1:1a:a7:5f:af:04:43:95:07: 3e:a7:7b:3b:da:f8:54:12:8f:e8:ce:4e:0e:73:f8: e2:d2:be:49:31:b8:0d:9d:8f:46:db:af:49:21:e6: a5:9c:75:82:e1:0a:4c:10:1c:6a:65:31:cb:2f:3f: da:b1:6b:08:c3:e0:56:c5:42:0a:4c:eb:db:fb:08: ee:47:b4:2f:dc:e6:ba:bf:c8:f1:02:42:ea:b9:03: ee:31:b8:6f:ca:45:f6:90:5f:64:4c:a9:92:58:71: dc:64:01:24:f7:86:0e:e5:af:fe:bf:4d:0c:ba:b7: eb:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:8F:98:58:02:25:10:26:FE:C0:FD:80:8D:82:60:4B:9C:DF:84:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d66d097a-fd7f-37c2-9f23-e96f95f9605b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.197.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:e4:ff:59:93:64:52:c4:fe:e3:eb:8c:2f:f5:8d:af:fb:01: 26:d1:90:e2:3b:3a:c7:6f:fa:12:9f:f1:3c:3e:d7:22:ac:e9: 6a:69:81:98:2e:6e:5b:66:8e:e9:d1:9d:6f:61:de:6d:9a:a4: 6d:2c:12:d5:94:5d:38:e1:80:ab:ba:6a:7c:1e:5f:b9:e9:7d: 98:2c:e6:c3:ac:be:51:ba:0c:53:f1:2b:13:a4:8e:4e:99:f4: 92:3b:be:3f:d7:58:e2:c0:63:12:03:e3:4a:6b:c9:5f:bf:35: 66:34:d0:8a:2d:42:0f:03:10:8f:e7:78:3a:a8:27:2f:4c:e9: 64:21:f4:5f:8a:39:9f:8f:83:14:bd:f6:fc:9f:ff:8d:13:40: 73:58:b1:47:38:68:9b:3e:b1:c5:ea:8e:06:a0:29:77:33:e5: 36:b8:dc:62:f9:e6:91:03:54:1d:9f:a4:24:3a:f0:5c:35:83: d3:4b:de:82:f3:94:f5:12:3e:50:22:e1:78:ba:a1:55:cb:8a: 14:2f:4b:06:f4:26:45:63:9f:a9:d6:f0:d9:7a:2d:da:87:fc: f6:2f:77:15:82:f7:8d:ce:c4:b5:bb:ea:c8:8e:53:29:82:0a: cb:f7:63:0e:66:5e:51:a7:a9:e6:d1:4f:39:64:2c:2e:c6:12: 4d:af:81:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqT58xQedAoLtc0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk OWY3NjY1MmMtNmE2Ny00ZjQ0LWJiYWYtNmRlMTYxMGNlODVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/Um9wzyecHffu7VRqHnxHyA76ul2LRWom7n wnJQKcJFFSGVlo3DklhmdJvakJyYo0olV7wDkXD7VZewjQb1ObEDeJS8o0WaA7Mh Bdv45TqQWF6ZRqQTxUT4LR73p+4mGkYD2z4Rjcl7g+sg9DAUHyr/yYYcAF/SSOev tmXCZNFR+m9BPAWME0HC1J2xGqdfrwRDlQc+p3s72vhUEo/ozk4Oc/ji0r5JMbgN nY9G269JIealnHWC4QpMEBxqZTHLLz/asWsIw+BWxUIKTOvb+wjuR7Qv3Oa6v8jx AkLquQPuMbhvykX2kF9kTKmSWHHcZAEk94YO5a/+v00MurfrRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBSPmFgCJRAm/sD9gI2CYEuc34SEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDY2ZDA5N2EtZmQ3Zi0z N2MyLTlmMjMtZTk2Zjk1Zjk2MDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYsUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjk/1mTZFLE/uPrjC/1ja/7ASbRkOI7Osdv+hKf8Tw+1yKs6WppgZgu bltmjunRnW9h3m2apG0sEtWUXTjhgKu6anweX7npfZgs5sOsvlG6DFPxKxOkjk6Z 9JI7vj/XWOLAYxID40pryV+/NWY00IotQg8DEI/neDqoJy9M6WQh9F+KOZ+PgxS9 9vyf/40TQHNYsUc4aJs+scXqjgagKXcz5Ta43GL55pEDVB2fpCQ68Fw1g9NL3oLz lPUSPlAi4Xi6oVXLihQvSwb0JkVjn6nW8Nl6LdqH/PYvdxWC943OxLW76siOUymC Csv3Yw5mXlGnqebRTzlkLC7GEk2vgUU= -----END CERTIFICATE-----Generated at Tue Oct 21 19:22:26 2025 by rpki-client