$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf2e17e3-e14a-3eb2-bf6b-a2b5fada9bea.roa File: bf2e17e3-e14a-3eb2-bf6b-a2b5fada9bea.roa (raw, json) Hash identifier: AUxmw6Ll3r1dZP6zd3epu6E+HtsP7omcrCg/bdH+B/Q= Subject key identifier: 38:A4:32:33:81:C0:B5:F0:EA:45:80:65:DC:C5:14:52:B5:CE:FF:9C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB8D15C31556CE85648B240 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf2e17e3-e14a-3eb2-bf6b-a2b5fada9bea.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22909 IP address blocks: 98.40.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:d1:5c:31:55:6c:e8:56:48:b2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=6a389d54-2b8a-492e-892f-aa7ebe4c5f58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b1:9c:24:92:ce:98:3c:19:0b:cb:40:9c:8b: db:d8:a1:42:63:c6:0f:74:ea:0b:80:5f:cd:a7:81: 23:b0:5d:a9:71:24:f2:cc:8c:e6:9f:ad:da:90:ee: 50:dd:00:52:32:9e:31:b1:68:76:26:34:83:10:bf: 4c:c7:54:46:5b:5d:9d:37:2e:3d:1b:9d:51:87:90: 28:02:51:f8:6b:c9:4d:b7:0a:b2:7b:61:03:65:f2: f5:5f:86:e3:7d:93:61:c0:d2:57:d8:e6:67:17:66: a4:a7:e5:3f:d0:dd:30:17:f4:4f:4e:c3:b8:d1:e1: 73:17:ee:d8:c0:0f:43:c8:9b:e1:35:34:56:ba:d2: 3c:ef:cf:78:27:33:62:6f:cb:29:60:76:5b:2f:88: 7a:cc:21:3b:c0:79:06:35:56:53:85:34:e7:3a:25: 9e:a7:89:91:d8:bf:c2:90:27:8e:68:ac:b6:b9:5d: 2c:7b:14:be:a0:d0:a8:42:99:51:ed:68:7d:f2:a1: 2d:b0:20:1b:49:3c:ee:39:83:a4:af:8f:6f:2e:48: d6:a0:54:65:a4:1f:33:61:e6:d0:fa:ba:88:c1:23: c5:95:ec:6d:9f:34:57:a7:dd:b2:78:d7:43:a7:5b: 5c:39:4b:f3:64:b0:a3:6c:cb:37:e7:d8:e5:d8:f2: 21:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A4:32:33:81:C0:B5:F0:EA:45:80:65:DC:C5:14:52:B5:CE:FF:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf2e17e3-e14a-3eb2-bf6b-a2b5fada9bea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.40.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:54:84:05:39:8e:21:90:8e:f4:2b:e6:e1:78:06:31:7a:eb: 6f:aa:47:1b:9b:49:20:d2:ef:03:0a:79:ca:d5:e6:e0:75:16: 26:03:02:79:88:f6:c8:91:ca:2c:88:69:88:78:5c:08:1b:9c: 2e:8d:aa:58:e5:3d:b3:6e:c5:ba:7f:20:99:59:85:a0:2f:e9: 53:68:74:5f:9c:55:99:8e:4b:41:99:59:0a:52:3d:69:04:08: 08:bf:d4:d6:dd:08:d6:78:62:3a:ee:8d:24:37:4c:4a:67:31: 0d:b5:94:2d:de:64:a1:fd:ca:2c:e3:33:38:86:7c:bb:7b:32: ca:de:c8:c1:4a:49:27:12:67:ea:b4:e1:b5:83:2a:d0:f9:e1: 08:0e:e4:4b:2f:c6:e1:b6:c7:3e:5b:8a:76:a9:39:df:3c:52: bf:3a:e1:e9:af:fb:0f:da:de:da:6a:7c:10:d7:b1:52:ed:71: 76:f3:f1:e6:5a:68:4b:fa:d7:ad:3b:51:03:39:09:9f:d4:3a: e6:27:28:1d:a8:01:60:58:7e:32:a4:91:e3:cb:78:2c:10:8e: 64:22:e0:8e:3e:de:cf:d3:da:3d:44:25:58:61:a9:b7:e2:e3: 1c:aa:f2:0b:d4:8b:a9:d9:17:98:e5:18:02:65:1d:3b:65:46: d0:2f:79:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uNFcMVVs6FZIskAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NmEzODlkNTQtMmI4YS00OTJlLTg5MmYtYWE3ZWJlNGM1ZjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLGcJJLOmDwZC8tAnIvb2KFCY8YPdOoLgF/N p4EjsF2pcSTyzIzmn63akO5Q3QBSMp4xsWh2JjSDEL9Mx1RGW12dNy49G51Rh5Ao AlH4a8lNtwqye2EDZfL1X4bjfZNhwNJX2OZnF2akp+U/0N0wF/RPTsO40eFzF+7Y wA9DyJvhNTRWutI87894JzNib8spYHZbL4h6zCE7wHkGNVZThTTnOiWep4mR2L/C kCeOaKy2uV0sexS+oNCoQplR7Wh98qEtsCAbSTzuOYOkr49vLkjWoFRlpB8zYebQ +rqIwSPFlextnzRXp92yeNdDp1tcOUvzZLCjbMs359jl2PIhEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDikMjOBwLXw6kWAZdzFFFK1zv+cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmYyZTE3ZTMtZTE0YS0z ZWIyLWJmNmItYTJiNWZhZGE5YmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYigRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALJUhAU5jiGQjvQr5uF4BjF662+qRxubSSDS7wMKecrV5uB1FiYDAnmI 9siRyiyIaYh4XAgbnC6NqljlPbNuxbp/IJlZhaAv6VNodF+cVZmOS0GZWQpSPWkE CAi/1NbdCNZ4YjrujSQ3TEpnMQ21lC3eZKH9yizjMziGfLt7MsreyMFKSScSZ+q0 4bWDKtD54QgO5EsvxuG2xz5binapOd88Ur864emv+w/a3tpqfBDXsVLtcXbz8eZa aEv61607UQM5CZ/UOuYnKB2oAWBYfjKkkePLeCwQjmQi4I4+3s/T2j1EJVhhqbfi 4xyq8gvUi6nZF5jlGAJlHTtlRtAvebY= -----END CERTIFICATE-----Generated at Mon Oct 20 06:27:00 2025 by rpki-client