$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/80546c08-06d6-31e4-a41a-2312775b2f2c.roa File: 80546c08-06d6-31e4-a41a-2312775b2f2c.roa (raw, json) Hash identifier: kfMToEtQIjEZP6lDWl771/VZEBKipmS8xVYd6HL+f4A= Subject key identifier: 40:A2:4C:4D:7D:10:B5:78:9A:48:DC:C1:70:FA:FA:D4:F6:42:DA:D4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A94F4A53B97785B4B65260 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/80546c08-06d6-31e4-a41a-2312775b2f2c.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 98.44.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:4f:4a:53:b9:77:85:b4:b6:52:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=25f80186-2a6d-4ff4-b9ef-3319cdd1ede2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:80:a8:8b:22:1a:e2:ad:74:43:63:f5:b2:99: 1d:4f:31:cd:fc:bc:a4:3e:b2:e9:26:5c:26:37:da: 36:c3:ff:11:6e:52:58:c4:33:a9:e5:fe:b2:7a:b1: 71:b8:b0:24:cf:f9:0a:32:aa:0a:9a:cf:23:a4:fe: f7:0a:a4:13:74:8b:3d:13:43:d9:b1:c0:0b:5d:05: f4:31:2f:a0:fb:d2:64:47:a6:ea:aa:5a:57:4a:fa: 26:a9:6a:2f:c9:ff:3f:7c:d8:98:9c:e2:07:93:c2: dc:35:ba:e2:eb:33:16:f7:80:3e:32:e9:ec:07:54: a7:2e:b3:81:dc:c2:5e:3c:43:17:d6:6a:21:48:ef: 90:7c:95:55:04:4b:34:df:9e:00:54:17:e6:0f:8a: d1:e9:70:df:1b:f0:b8:f5:54:74:7f:47:7d:95:af: 70:da:58:de:e8:61:90:5c:6f:7a:9f:68:21:be:02: c4:59:45:46:9e:7c:96:fd:71:03:c6:2f:f2:eb:9e: 11:c3:fe:57:2f:f3:c5:17:1f:e2:9f:8d:e4:1e:62: 54:1a:90:f0:95:a4:59:b7:ff:f9:50:ce:49:24:d1: f1:6a:15:c9:54:10:1b:41:4a:18:7f:c4:67:45:8e: c8:94:63:98:d8:77:44:bf:ff:c9:26:b9:38:3d:9e: ca:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:A2:4C:4D:7D:10:B5:78:9A:48:DC:C1:70:FA:FA:D4:F6:42:DA:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/80546c08-06d6-31e4-a41a-2312775b2f2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.44.18.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:75:ed:6d:45:83:3b:cd:72:f4:44:82:00:c0:08:2e:c0:58: e4:0c:d2:f5:e0:01:ce:e9:5c:4f:24:ee:26:34:d3:78:70:14: 3d:ad:8c:07:24:ee:db:b7:28:79:30:78:e5:8b:de:80:9d:66: 56:b8:b1:58:d7:b3:f7:90:28:11:c6:8f:62:e7:2d:f8:69:df: 48:ed:48:43:88:44:8c:35:a7:f1:53:5c:27:f6:f0:9b:d8:f4: 02:69:f5:02:fe:cb:79:a7:86:c7:8c:32:ed:77:02:7d:37:a8: 94:c0:9a:ae:72:06:02:a4:a6:fc:ea:55:3d:94:9f:f4:f5:7e: f9:38:bd:33:08:41:e4:48:50:9d:8a:1f:f7:c5:0a:d1:52:24: a1:10:f6:28:67:12:48:1e:90:34:7e:06:4e:50:53:7b:08:f4: d4:49:84:87:15:42:58:85:6d:2a:ee:31:3d:76:fb:d2:86:29: 6c:ea:03:77:da:e5:d3:bc:61:9e:93:e7:1f:0c:d9:54:ae:f9: 34:fe:f0:47:ae:14:54:40:6d:b9:d9:80:ce:ad:e3:f6:96:09: b3:b5:22:12:7b:9a:6f:ff:ee:13:1c:f9:38:25:65:0a:d9:8a: 7f:b7:44:03:7d:f3:bb:ee:e9:a4:57:95:d6:17:ed:4b:4a:36: 54:4c:63:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqU9KU7l3hbS2UmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MjVmODAxODYtMmE2ZC00ZmY0LWI5ZWYtMzMxOWNkZDFlZGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24CoiyIa4q10Q2P1spkdTzHN/LykPrLpJlwm N9o2w/8RblJYxDOp5f6yerFxuLAkz/kKMqoKms8jpP73CqQTdIs9E0PZscALXQX0 MS+g+9JkR6bqqlpXSvomqWovyf8/fNiYnOIHk8LcNbri6zMW94A+MunsB1SnLrOB 3MJePEMX1mohSO+QfJVVBEs0354AVBfmD4rR6XDfG/C49VR0f0d9la9w2lje6GGQ XG96n2ghvgLEWUVGnnyW/XEDxi/y654Rw/5XL/PFFx/in43kHmJUGpDwlaRZt//5 UM5JJNHxahXJVBAbQUoYf8RnRY7IlGOY2HdEv//JJrk4PZ7KIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECiTE19ELV4mkjcwXD6+tT2QtrUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODA1NDZjMDgtMDZkNi0z MWU0LWE0MWEtMjMxMjc3NWIyZjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYiwSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACl17W1FgzvNcvREggDACC7AWOQM0vXgAc7pXE8k7iY003hwFD2tjAck 7tu3KHkweOWL3oCdZla4sVjXs/eQKBHGj2LnLfhp30jtSEOIRIw1p/FTXCf28JvY 9AJp9QL+y3mnhseMMu13An03qJTAmq5yBgKkpvzqVT2Un/T1fvk4vTMIQeRIUJ2K H/fFCtFSJKEQ9ihnEkgekDR+Bk5QU3sI9NRJhIcVQliFbSruMT12+9KGKWzqA3fa 5dO8YZ6T5x8M2VSu+TT+8EeuFFRAbbnZgM6t4/aWCbO1IhJ7mm//7hMc+TglZQrZ in+3RAN987vu6aRXldYX7UtKNlRMY0s= -----END CERTIFICATE-----Generated at Tue Oct 21 06:27:58 2025 by rpki-client