$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cec94898-6ba7-33df-a99c-78ce088f9cc3.roa File: cec94898-6ba7-33df-a99c-78ce088f9cc3.roa (raw, json) Hash identifier: Sro6xbiugShBnEW2Eo0mQ13bwNKg7nJ8uTi848A5ylc= Subject key identifier: 42:9C:3C:06:6F:DE:90:5B:38:46:DF:C0:D8:E1:FA:63:86:2F:47:AD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AAEE9A7B81ABD6F5B93900 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cec94898-6ba7-33df-a99c-78ce088f9cc3.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 98.201.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:ee:9a:7b:81:ab:d6:f5:b9:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=86e8cc3f-b027-45b6-a0ed-ee045e8c3705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:26:02:09:e4:93:97:d1:4f:f2:a9:e7:ed:2e: aa:d4:58:58:e0:b5:69:20:1d:8c:d5:2e:3a:b2:f8: 48:0e:f4:74:b4:99:9b:40:35:27:5c:7e:b5:39:1d: de:68:c5:fa:93:db:ec:6b:9c:54:5c:27:af:99:b8: 34:c7:fb:96:cd:c3:79:14:f7:9f:b9:66:7f:37:b6: 04:cb:91:94:0d:24:b8:65:ef:fb:e1:e7:85:a0:97: cd:28:81:b8:df:64:75:3c:cf:9a:42:f0:14:5c:20: 1a:64:2d:df:f4:35:e9:b7:43:0a:46:bd:0c:8f:61: ad:9b:18:46:75:7f:f1:fe:4c:cd:5f:13:b3:99:63: aa:98:bf:83:64:45:f2:df:aa:1e:34:39:1b:8f:95: f6:c3:49:7a:a7:e4:7a:37:2a:8c:90:65:c7:97:0e: bf:10:a6:e5:97:6a:82:05:c9:08:e3:25:1c:95:05: d1:0e:ea:0f:68:0a:ee:46:45:52:47:3b:47:84:18: 37:62:1e:ed:ff:05:16:f7:3f:54:27:95:7a:d6:34: 72:df:bf:9e:08:6e:c1:9d:90:ba:26:fc:99:6c:38: 81:1b:f0:10:dc:8f:8a:1a:ad:65:46:b0:ab:46:b8: bd:0f:9f:48:ff:ed:f3:f5:5a:dc:8b:4d:a2:6c:6e: a9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:9C:3C:06:6F:DE:90:5B:38:46:DF:C0:D8:E1:FA:63:86:2F:47:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cec94898-6ba7-33df-a99c-78ce088f9cc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.201.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:5a:aa:08:78:90:1f:2e:f2:02:1c:ed:3d:97:94:83:83:82: 90:fe:29:1d:91:92:88:9b:45:de:83:ea:d0:ef:b5:0f:65:3a: 9c:f4:8d:07:61:80:15:e4:b1:03:de:cb:45:ee:30:21:4d:c2: c8:1a:b8:0f:b5:59:4e:11:00:2e:37:35:0a:3e:ed:a7:7e:53: 7f:6e:78:d1:f5:00:80:4f:50:db:08:d6:47:30:9d:89:60:b9: 60:be:fc:c8:83:86:dc:39:50:37:31:3a:0d:4f:9a:4b:0c:36: 2b:ba:53:4c:8b:3e:7f:c0:ab:20:18:a9:e5:0d:a6:a5:0a:1b: 8b:3b:85:06:98:b3:3c:f5:c3:cc:09:02:60:0e:91:ae:41:df: 84:18:ab:85:10:5b:ab:23:25:28:5a:5a:f4:64:1c:f0:48:bb: 91:47:c7:f5:20:68:ed:54:12:5a:79:fc:75:cf:06:5a:ab:16: 8e:4c:d5:d6:7f:c6:0c:95:be:7b:94:72:78:69:66:0c:e1:b4: 42:62:1a:df:61:11:1d:cd:c8:3b:6b:99:e8:6b:6c:db:75:4b: 4d:0d:3e:c1:df:3d:ee:c1:3d:f1:d2:51:85:b9:83:54:7d:0e: 77:5c:0a:72:33:9d:d7:2f:d2:62:35:54:ef:e7:26:0a:26:3c: ee:ae:2f:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqu6ae4Gr1vW5OQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ODZlOGNjM2YtYjAyNy00NWI2LWEwZWQtZWUwNDVlOGMzNzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SYCCeSTl9FP8qnn7S6q1FhY4LVpIB2M1S46 svhIDvR0tJmbQDUnXH61OR3eaMX6k9vsa5xUXCevmbg0x/uWzcN5FPefuWZ/N7YE y5GUDSS4Ze/74eeFoJfNKIG432R1PM+aQvAUXCAaZC3f9DXpt0MKRr0Mj2GtmxhG dX/x/kzNXxOzmWOqmL+DZEXy36oeNDkbj5X2w0l6p+R6NyqMkGXHlw6/EKbll2qC BckI4yUclQXRDuoPaAruRkVSRztHhBg3Yh7t/wUW9z9UJ5V61jRy37+eCG7BnZC6 JvyZbDiBG/AQ3I+KGq1lRrCrRri9D59I/+3z9Vrci02ibG6pGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKcPAZv3pBbOEbfwNjh+mOGL0etMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2VjOTQ4OTgtNmJhNy0z M2RmLWE5OWMtNzhjZTA4OGY5Y2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYsmuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALNaqgh4kB8u8gIc7T2XlIODgpD+KR2RkoibRd6D6tDvtQ9lOpz0jQdh gBXksQPey0XuMCFNwsgauA+1WU4RAC43NQo+7ad+U39ueNH1AIBPUNsI1kcwnYlg uWC+/MiDhtw5UDcxOg1PmksMNiu6U0yLPn/AqyAYqeUNpqUKG4s7hQaYszz1w8wJ AmAOka5B34QYq4UQW6sjJShaWvRkHPBIu5FHx/UgaO1UElp5/HXPBlqrFo5M1dZ/ xgyVvnuUcnhpZgzhtEJiGt9hER3NyDtrmehrbNt1S00NPsHfPe7BPfHSUYW5g1R9 DndcCnIzndcv0mI1VO/nJgomPO6uL6U= -----END CERTIFICATE-----Generated at Wed Nov 5 02:50:01 2025 by rpki-client