$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb2ba185-6afa-3e3a-a3f8-b65ca15c25e3.roa File: cb2ba185-6afa-3e3a-a3f8-b65ca15c25e3.roa (raw, json) Hash identifier: W5q1ZLLY+J5YRRvUiRgattJdGjcFhRHjEEXJrAgS8Lk= Subject key identifier: 44:14:C8:52:69:5F:A4:62:2F:22:C7:71:5C:EF:3B:5A:96:A5:8B:16 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B92DD393EE1C93417A0107540 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb2ba185-6afa-3e3a-a3f8-b65ca15c25e3.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 22258 IP address blocks: 98.251.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:39:3e:e1:c9:34:17:a0:10:75:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=672f85e2-d191-4c03-99ba-fc3fcccf297d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b2:0a:b4:fb:05:db:ed:50:b1:2e:61:98:4b: a9:dd:13:8e:c0:8c:63:c8:0f:07:02:1b:39:5c:27: ac:1b:bf:e5:2a:b0:c3:d6:bc:a1:72:45:99:57:a5: cd:69:cf:28:8d:09:89:b4:d2:5f:54:85:f4:f0:1e: e4:9b:b7:10:d8:5f:38:69:f1:00:cc:99:a5:49:b2: ab:c2:bd:69:a1:d8:2d:88:0c:ea:1b:fa:be:68:00: 50:42:73:c2:3e:66:b8:b5:d0:18:69:6a:68:e2:d6: 6d:a6:3e:cb:fe:06:1e:81:7b:6a:f2:69:fa:27:24: 69:93:13:4e:18:d6:a3:4e:3a:9b:f2:eb:0b:ae:c7: 72:05:13:7a:4d:38:d8:b9:f5:d1:ae:fa:19:b8:61: 14:16:14:f1:f8:6e:6f:2c:0c:23:d0:63:8e:25:5f: 74:07:75:56:9f:d5:49:fc:ba:6d:be:d4:fe:e5:88: c8:5f:bd:1a:4c:6e:bc:ce:aa:cb:7a:3a:68:95:71: e2:f7:58:d0:cc:24:3b:fb:aa:0d:e7:96:68:4d:f0: 68:d7:ae:7e:dc:d0:2a:f7:12:c8:d0:8c:7b:10:39: 1e:23:ff:14:2b:71:b7:2c:3f:18:20:a2:2b:e1:b6: 94:0e:73:fb:b2:20:16:b9:25:ef:af:5f:5d:76:64: de:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:14:C8:52:69:5F:A4:62:2F:22:C7:71:5C:EF:3B:5A:96:A5:8B:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb2ba185-6afa-3e3a-a3f8-b65ca15c25e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.251.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:16:f1:22:20:37:2d:9b:7b:68:ae:98:21:a3:4e:0a:f6:6e: 51:2a:59:ad:fe:c1:90:26:fb:a9:d7:f0:d8:85:1b:8e:1d:1d: 3e:0e:81:38:c3:76:7b:18:6b:2f:ef:d3:ec:6d:8d:29:9d:95: d7:fe:7b:bd:21:0d:a7:2e:90:d3:4c:59:34:44:94:1d:eb:45: af:77:58:92:34:6d:7c:5a:85:7e:46:b1:0c:1d:5f:ae:e2:32: 18:52:8a:f9:45:a9:55:8f:0a:36:c7:d5:8f:ef:5b:c6:1e:e3: 7e:96:38:e1:57:f8:ce:83:5c:f8:7b:6f:ca:7e:e5:66:3d:fb: b2:bb:25:ba:13:b1:d7:a4:11:2a:de:c6:44:a0:7a:01:a3:e0: ae:94:0c:13:20:9d:e8:ff:40:61:04:77:c1:05:dd:8f:81:23: 45:e9:80:34:88:f0:7b:e1:5c:1d:55:9b:df:da:e5:ea:84:84: fa:f2:77:3d:23:44:45:74:17:0e:e5:3b:80:d6:1e:73:d2:f4: bf:14:47:e3:9b:61:dd:be:0d:c1:f4:4e:4b:74:e7:74:d6:81: ba:54:43:2f:31:04:07:2a:2b:2a:5c:8a:91:ce:0b:c9:9c:6f: 08:09:ed:d0:e0:2e:2e:67:32:c0:68:86:20:20:15:fd:98:90: da:d3:30:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3Tk+4ck0F6AQdUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk NjcyZjg1ZTItZDE5MS00YzAzLTk5YmEtZmMzZmNjY2YyOTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbIKtPsF2+1QsS5hmEup3ROOwIxjyA8HAhs5 XCesG7/lKrDD1ryhckWZV6XNac8ojQmJtNJfVIX08B7km7cQ2F84afEAzJmlSbKr wr1podgtiAzqG/q+aABQQnPCPma4tdAYaWpo4tZtpj7L/gYegXtq8mn6JyRpkxNO GNajTjqb8usLrsdyBRN6TTjYufXRrvoZuGEUFhTx+G5vLAwj0GOOJV90B3VWn9VJ /LptvtT+5YjIX70aTG68zqrLejpolXHi91jQzCQ7+6oN55ZoTfBo165+3NAq9xLI 0Ix7EDkeI/8UK3G3LD8YIKIr4baUDnP7siAWuSXvr19ddmTeiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQUyFJpX6RiLyLHcVzvO1qWpYsWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2IyYmExODUtNmFmYS0z ZTNhLWEzZjgtYjY1Y2ExNWMyNWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYvvMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkW8SIgNy2be2iumCGjTgr2blEqWa3+wZAm+6nX8NiFG44dHT4OgTjD dnsYay/v0+xtjSmdldf+e70hDacukNNMWTRElB3rRa93WJI0bXxahX5GsQwdX67i MhhSivlFqVWPCjbH1Y/vW8Ye436WOOFX+M6DXPh7b8p+5WY9+7K7JboTsdekESre xkSgegGj4K6UDBMgnej/QGEEd8EF3Y+BI0XpgDSI8HvhXB1Vm9/a5eqEhPrydz0j REV0Fw7lO4DWHnPS9L8UR+ObYd2+DcH0Tkt053TWgbpUQy8xBAcqKypcipHOC8mc bwgJ7dDgLi5nMsBohiAgFf2YkNrTMKk= -----END CERTIFICATE-----Generated at Mon Oct 20 06:24:48 2025 by rpki-client