$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf7ff88f-3a80-326a-bcf5-fd3597d011e2.roa File: bf7ff88f-3a80-326a-bcf5-fd3597d011e2.roa (raw, json) Hash identifier: 6Hq0IdPpcLNxGCPVJW5dTNVizwpEO19eCG4s37W9fdM= Subject key identifier: 7C:DC:7F:FB:19:EA:96:CA:0B:5E:D8:52:2A:D5:0C:D0:53:53:34:88 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B52A7244C0ECB561F511A4C00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf7ff88f-3a80-326a-bcf5-fd3597d011e2.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 33491 IP address blocks: 98.222.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:24:4c:0e:cb:56:1f:51:1a:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=69e6d747-e90e-474b-a641-a83d73e0aa51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:fa:37:b7:1b:02:f2:2c:6a:54:17:2c:6d:50: 80:4f:c6:79:3f:27:0b:8f:0d:cc:4b:52:4e:60:4d: 4b:11:fb:3f:9e:fa:81:f7:1b:d0:88:c9:be:f2:55: e9:78:2b:d1:f5:29:0d:8f:4f:39:bc:51:58:dd:8d: 0d:9a:0e:ae:8c:e9:d6:c5:d2:11:22:18:93:17:08: 3d:56:71:16:c6:bd:90:48:45:0c:26:0f:92:57:10: e6:02:66:ed:09:ec:c9:bc:16:9a:5f:db:e7:ff:37: c7:7f:d8:97:94:f1:a7:5e:0f:c3:72:90:34:59:90: 02:b8:95:2f:d4:11:0c:b3:eb:1a:ff:9d:e5:04:29: 5e:f3:e9:34:78:62:bd:04:78:f6:42:47:87:56:cc: 52:4d:bd:5c:ed:3d:d4:f2:a1:8f:a2:37:fd:46:d9: cb:55:5e:1b:2b:ac:96:44:53:e8:6b:e0:68:e6:53: 92:fe:8c:da:67:34:b2:d2:fb:ac:e2:21:da:2e:03: 1d:9c:6c:31:f1:b5:ab:dc:55:f3:0c:86:dd:8e:60: 3b:fe:9f:a4:8a:77:af:7f:d3:32:41:f5:e1:3f:08: 01:77:75:7c:60:0e:5c:23:9f:1c:c3:72:19:82:63: d8:9f:bc:b7:d3:ae:18:63:a6:f4:8b:cd:f7:11:1f: c6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:DC:7F:FB:19:EA:96:CA:0B:5E:D8:52:2A:D5:0C:D0:53:53:34:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf7ff88f-3a80-326a-bcf5-fd3597d011e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.222.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:c5:67:39:2a:fa:7a:16:b8:cd:a1:f9:2c:11:0d:31:b3:03: 0e:6d:db:3f:f2:27:e3:52:f0:b6:0b:d8:aa:41:97:c6:80:18: a1:b2:23:57:72:23:37:b2:b8:90:2c:21:10:cf:28:0b:75:05: ab:de:77:b3:0e:ea:8b:63:a6:28:16:43:70:99:9b:0e:d7:4c: 7a:92:e2:45:33:fa:76:45:71:a6:3c:49:24:bb:86:b5:40:1d: 14:78:f0:3b:65:0b:5e:4c:70:d2:63:82:a8:79:3d:6d:6b:a9: ba:b4:3b:f9:28:d5:13:4e:79:07:e5:da:25:aa:17:9c:47:99: 08:d0:f0:fd:16:40:47:43:ae:35:67:55:4c:9f:bb:23:9e:17: 0a:7e:92:b3:cb:1b:00:05:e2:52:3c:81:1f:b1:a2:bc:32:2a: 01:54:ca:1c:51:77:34:a8:90:71:31:08:d6:5c:9c:be:16:3d: 89:4d:e4:d8:42:26:cc:f4:93:87:86:e7:88:c3:6c:9a:52:88: 6b:63:41:5f:45:22:46:78:96:da:da:7c:82:b8:2d:8e:d5:77: 2f:f7:f3:0f:a2:67:ca:fa:b5:64:ee:ce:1b:88:f2:b7:d3:22: 43:22:97:a7:c4:b8:d7:60:f4:bb:5b:c8:a7:df:16:db:d1:ad: 54:45:97:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSpyRMDstWH1EaTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk NjllNmQ3NDctZTkwZS00NzRiLWE2NDEtYTgzZDczZTBhYTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vo3txsC8ixqVBcsbVCAT8Z5PycLjw3MS1JO YE1LEfs/nvqB9xvQiMm+8lXpeCvR9SkNj085vFFY3Y0Nmg6ujOnWxdIRIhiTFwg9 VnEWxr2QSEUMJg+SVxDmAmbtCezJvBaaX9vn/zfHf9iXlPGnXg/DcpA0WZACuJUv 1BEMs+sa/53lBCle8+k0eGK9BHj2QkeHVsxSTb1c7T3U8qGPojf9RtnLVV4bK6yW RFPoa+Bo5lOS/ozaZzSy0vus4iHaLgMdnGwx8bWr3FXzDIbdjmA7/p+kinevf9My QfXhPwgBd3V8YA5cI58cw3IZgmPYn7y3064YY6b0i833ER/GSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHzcf/sZ6pbKC17YUirVDNBTUzSIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmY3ZmY4OGYtM2E4MC0z MjZhLWJjZjUtZmQzNTk3ZDAxMWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYt51MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL/FZzkq+noWuM2h+SwRDTGzAw5t2z/yJ+NS8LYL2KpBl8aAGKGyI1dy IzeyuJAsIRDPKAt1Baved7MO6otjpigWQ3CZmw7XTHqS4kUz+nZFcaY8SSS7hrVA HRR48DtlC15McNJjgqh5PW1rqbq0O/ko1RNOeQfl2iWqF5xHmQjQ8P0WQEdDrjVn VUyfuyOeFwp+krPLGwAF4lI8gR+xorwyKgFUyhxRdzSokHExCNZcnL4WPYlN5NhC Jsz0k4eG54jDbJpSiGtjQV9FIkZ4ltrafIK4LY7Vdy/38w+iZ8r6tWTuzhuI8rfT IkMil6fEuNdg9LtbyKffFtvRrVRFl8g= -----END CERTIFICATE-----Generated at Mon Oct 20 03:31:34 2025 by rpki-client