$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0303f939-abaa-3037-aff3-6ee8a8e2e917.roa File: 0303f939-abaa-3037-aff3-6ee8a8e2e917.roa (raw, json) Hash identifier: VTd8IlFZ+jQs9X1FJVyAVwFBCjgAdS6+IKnqR/PeWc0= Subject key identifier: 40:F3:FE:96:B6:85:B3:08:CA:75:4A:61:0E:1B:D3:08:6C:20:E6:2C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA3A710544578096758530 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0303f939-abaa-3037-aff3-6ee8a8e2e917.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 98.229.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:3a:71:05:44:57:80:96:75:85:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=43e205fd-8251-457c-bb91-7dea27261c51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e2:6a:c2:69:14:2e:12:82:8c:94:0b:d3:ba: 58:a3:41:50:6a:44:7a:82:45:ae:df:41:58:f8:a6: f7:91:93:87:2b:29:a3:dd:0c:67:20:71:30:3c:a3: cb:72:89:2f:11:7d:4e:94:9c:56:37:07:b7:71:3e: ea:12:2d:1e:f9:b7:d0:1d:76:60:09:97:5a:1b:44: e0:f8:52:90:c3:ab:09:fc:49:95:c2:54:13:39:fa: ba:8f:1a:e3:ea:e3:fe:27:0f:92:b3:90:f2:82:e5: 77:9c:26:73:9b:b0:e7:4c:a4:4d:73:40:26:2d:25: 2b:85:d6:ce:38:32:77:37:80:a7:db:84:e2:54:44: f9:90:eb:04:41:24:9a:26:00:24:b3:c0:20:fc:fc: d5:cb:0a:f6:ac:a6:b0:09:de:1f:a6:ce:82:85:d1: 3d:21:db:1a:c8:5e:22:af:fd:8f:1b:41:d3:31:a7: 77:7e:4d:70:68:38:3f:02:01:a1:03:e7:c5:94:4e: d5:8b:31:e2:9d:0e:2a:2e:ce:be:2b:ac:de:fa:a3: 6b:9a:ff:58:1a:e9:89:b9:1d:9d:e9:0b:a4:d1:11: 87:58:4e:62:a2:95:95:7f:73:d0:ec:a4:df:8e:1f: 0d:62:ac:41:37:53:13:c7:ca:5e:1f:08:5c:a2:e7: 7a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F3:FE:96:B6:85:B3:08:CA:75:4A:61:0E:1B:D3:08:6C:20:E6:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0303f939-abaa-3037-aff3-6ee8a8e2e917.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.229.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:b6:b9:bb:00:69:bc:5c:c5:30:c5:17:3e:d5:71:21:b7:80: d1:a7:02:aa:f6:04:9b:ad:4c:b0:1e:5c:47:db:61:ae:08:e9: a4:0d:d6:51:34:6d:bd:cc:19:30:67:fc:5f:cb:95:87:22:7a: fd:38:9c:c1:a1:d6:97:b1:69:ad:5d:03:f7:d4:98:3e:e2:84: 91:fc:2f:d8:8a:8a:dd:bf:62:f8:32:08:dd:01:a0:c5:86:e1: 19:89:75:33:ad:1f:5d:71:ca:ef:c1:04:44:0f:04:13:24:0d: f0:db:82:cb:9e:d1:a4:cc:94:f7:b2:e4:cd:f8:52:b5:c6:fd: b2:a3:94:5e:33:eb:d0:d5:48:dd:4e:32:37:45:0f:3a:75:1d: 75:83:b8:2d:6d:59:60:fd:69:55:7e:a5:e1:f1:47:0a:93:3d: bf:36:47:07:d3:ef:45:99:07:e0:84:0d:ea:37:c4:95:b3:dd: 5e:79:75:21:64:4e:eb:b3:d0:85:dc:e9:82:e1:c7:3e:86:ab: 61:69:06:2d:f1:3b:ca:9c:18:98:b4:57:d4:8a:7c:19:40:1e: aa:bd:c2:be:d7:f9:12:e0:0c:de:a0:f7:af:f2:13:34:be:be: 07:18:ec:90:a8:f7:fa:0a:0e:00:eb:0f:8b:9f:10:3d:79:0a: 06:5f:f3:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqjpxBURXgJZ1hTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NDNlMjA1ZmQtODI1MS00NTdjLWJiOTEtN2RlYTI3MjYxYzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruJqwmkULhKCjJQL07pYo0FQakR6gkWu30FY +Kb3kZOHKymj3QxnIHEwPKPLcokvEX1OlJxWNwe3cT7qEi0e+bfQHXZgCZdaG0Tg +FKQw6sJ/EmVwlQTOfq6jxrj6uP+Jw+Ss5DyguV3nCZzm7DnTKRNc0AmLSUrhdbO ODJ3N4Cn24TiVET5kOsEQSSaJgAks8Ag/PzVywr2rKawCd4fps6ChdE9IdsayF4i r/2PG0HTMad3fk1waDg/AgGhA+fFlE7VizHinQ4qLs6+K6ze+qNrmv9YGumJuR2d 6Quk0RGHWE5iopWVf3PQ7KTfjh8NYqxBN1MTx8peHwhcoud6fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDz/pa2hbMIynVKYQ4b0whsIOYsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDMwM2Y5MzktYWJhYS0z MDM3LWFmZjMtNmVlOGE4ZTJlOTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYuWwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMi2ubsAabxcxTDFFz7VcSG3gNGnAqr2BJutTLAeXEfbYa4I6aQN1lE0 bb3MGTBn/F/LlYciev04nMGh1pexaa1dA/fUmD7ihJH8L9iKit2/YvgyCN0BoMWG 4RmJdTOtH11xyu/BBEQPBBMkDfDbgsue0aTMlPey5M34UrXG/bKjlF4z69DVSN1O MjdFDzp1HXWDuC1tWWD9aVV+peHxRwqTPb82RwfT70WZB+CEDeo3xJWz3V55dSFk Tuuz0IXc6YLhxz6Gq2FpBi3xO8qcGJi0V9SKfBlAHqq9wr7X+RLgDN6g96/yEzS+ vgcY7JCo9/oKDgDrD4ufED15CgZf8zI= -----END CERTIFICATE-----Generated at Mon Oct 20 21:08:19 2025 by rpki-client