$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/94b68b07-06bf-32f8-817e-2cfcd45968be.roa File: 94b68b07-06bf-32f8-817e-2cfcd45968be.roa (raw, json) Hash identifier: ksn2mm5vCAe7X+x+7jHjPKJyrZltJ7Q3nnGVWEor168= Subject key identifier: 2D:91:B0:72:2B:CE:34:28:53:06:BC:27:A2:BE:8A:BD:DD:52:1E:7D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC345AA6CD15E5811B33F80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/94b68b07-06bf-32f8-817e-2cfcd45968be.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 98.248.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:45:aa:6c:d1:5e:58:11:b3:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=bc75cb36-9189-4883-96d7-d3db2ee4cf0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6f:07:c6:55:f4:b2:c6:b9:60:16:44:fc:44: 4f:58:a6:88:43:a7:0a:07:ed:7d:4b:f3:af:e4:3c: 80:c2:72:2e:14:21:e2:1e:51:2d:bf:82:35:2d:87: ea:0a:f8:7a:8a:64:df:b7:20:d1:66:53:64:d4:f8: 41:d4:7a:a3:6e:5c:b6:4b:72:18:38:80:98:e8:ce: aa:e7:64:ee:a8:86:b5:44:b9:92:c8:61:51:07:0a: a4:be:df:99:af:3c:49:79:25:1f:3f:c3:23:78:6d: a3:7a:2d:4b:82:63:b1:6f:b8:c5:b6:2d:30:6d:db: e3:5d:75:5b:26:60:3d:64:b0:d2:7c:07:58:ba:fc: 06:ec:ea:b5:9d:a8:cc:a8:78:4d:0f:d1:22:e6:d2: a6:77:6d:7c:42:3c:2c:27:ce:3c:da:da:8a:f5:d8: f3:ad:4b:68:d7:35:db:1c:38:25:d1:f8:c0:cc:99: fd:a6:1b:a8:a9:eb:80:b9:12:e1:3b:1e:99:20:ee: 17:00:a4:63:09:e3:a1:e1:21:b2:07:21:08:d1:c3: aa:85:63:92:2f:60:a7:0d:fb:94:a1:c2:41:5a:e5: 66:07:b3:a1:11:f2:f6:9a:61:64:c6:a7:ee:d1:4e: 4d:2f:8d:2f:2e:18:4f:6e:33:ed:d5:85:39:f3:80: 2d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:91:B0:72:2B:CE:34:28:53:06:BC:27:A2:BE:8A:BD:DD:52:1E:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/94b68b07-06bf-32f8-817e-2cfcd45968be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.248.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:7b:73:89:05:e0:ef:e7:40:03:69:6f:02:72:a9:e8:f7:1e: e6:84:46:a0:97:b1:a5:26:14:c8:73:39:f8:92:46:e9:20:a0: 09:56:aa:a1:7f:38:06:9b:ae:ce:c8:bc:ef:fe:70:f7:7e:c2: c3:f1:da:14:bd:e6:3a:3c:b5:1a:5d:ec:88:eb:e4:13:61:63: a3:69:61:68:89:fb:02:28:83:df:47:c5:30:60:9b:f8:02:a2: 0e:7c:62:33:17:a0:84:9e:3d:be:5b:5a:b1:d2:02:40:7a:2a: 6a:7f:9a:6b:d5:ce:b9:ef:b9:0d:05:f1:63:91:33:42:13:c8: 61:66:7c:96:38:b7:0f:ba:a8:d8:73:0e:82:1e:9c:68:4e:9c: bb:85:8c:24:5e:ce:32:a8:b4:f6:97:4d:f1:bd:ac:40:10:24: 7b:df:8f:26:b3:68:4d:2e:45:9f:89:74:01:4d:31:b0:01:5f: 31:a2:e2:03:f5:aa:c7:b5:de:50:9e:85:a6:f7:cd:15:6e:02: eb:ae:90:e7:e4:52:4c:5c:32:56:e2:94:e5:63:d2:ad:cf:5a: e4:ec:d6:5e:dc:2e:d5:a9:6b:09:e2:e4:e5:06:c5:7e:7c:84: f3:a2:cc:9a:6f:a6:0a:84:00:90:42:d4:cb:f6:00:b0:ca:e3: 7f:be:6d:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw0WqbNFeWBGzP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YmM3NWNiMzYtOTE4OS00ODgzLTk2ZDctZDNkYjJlZTRjZjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG8HxlX0ssa5YBZE/ERPWKaIQ6cKB+19S/Ov 5DyAwnIuFCHiHlEtv4I1LYfqCvh6imTftyDRZlNk1PhB1Hqjbly2S3IYOICY6M6q 52TuqIa1RLmSyGFRBwqkvt+ZrzxJeSUfP8MjeG2jei1LgmOxb7jFti0wbdvjXXVb JmA9ZLDSfAdYuvwG7Oq1najMqHhND9Ei5tKmd218QjwsJ8482tqK9djzrUto1zXb HDgl0fjAzJn9phuoqeuAuRLhOx6ZIO4XAKRjCeOh4SGyByEI0cOqhWOSL2CnDfuU ocJBWuVmB7OhEfL2mmFkxqfu0U5NL40vLhhPbjPt1YU584AtuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2RsHIrzjQoUwa8J6K+ir3dUh59MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTRiNjhiMDctMDZiZi0z MmY4LTgxN2UtMmNmY2Q0NTk2OGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYvjwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIl7c4kF4O/nQANpbwJyqej3HuaERqCXsaUmFMhzOfiSRukgoAlWqqF/ OAabrs7IvO/+cPd+wsPx2hS95jo8tRpd7Ijr5BNhY6NpYWiJ+wIog99HxTBgm/gC og58YjMXoISePb5bWrHSAkB6Kmp/mmvVzrnvuQ0F8WORM0ITyGFmfJY4tw+6qNhz DoIenGhOnLuFjCRezjKotPaXTfG9rEAQJHvfjyazaE0uRZ+JdAFNMbABXzGi4gP1 qse13lCehab3zRVuAuuukOfkUkxcMlbilOVj0q3PWuTs1l7cLtWpawni5OUGxX58 hPOizJpvpgqEAJBC1Mv2ALDK43++bUw= -----END CERTIFICATE-----Generated at Wed Nov 5 17:49:54 2025 by rpki-client