$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d0aa4e2-6f5b-3a10-95f2-51c802716e1a.roa File: 2d0aa4e2-6f5b-3a10-95f2-51c802716e1a.roa (raw, json) Hash identifier: qnxoB9ZceTGAQJ6LjC9BWpAnMWPLnuT3snkL1RaaL84= Subject key identifier: 92:1E:16:72:81:1A:9D:0F:83:7B:04:E6:FB:21:55:ED:3C:8D:B7:31 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC4E75F1DC2A28726EDDC80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d0aa4e2-6f5b-3a10-95f2-51c802716e1a.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 98.34.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:e7:5f:1d:c2:a2:87:26:ed:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=27db3f70-a2d8-48bd-a67c-0dbbe84ff177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e4:c9:1f:94:2c:3a:7e:af:31:65:f6:68:89: c8:f9:5f:a5:1a:ba:0a:2f:1c:a9:6a:54:6c:e8:a0: 20:f5:3d:ff:ad:4f:e4:f4:d7:57:93:a1:35:98:fb: 72:12:26:fa:de:b0:b1:a8:ba:44:d0:26:d3:57:3d: 5b:7e:cd:35:a7:7e:7a:89:00:9f:a2:c3:01:c4:36: 64:4f:fb:fe:e0:e7:03:ec:39:f3:49:55:6e:9e:d5: df:ec:22:ae:7e:9c:2b:6e:4a:02:41:51:56:05:1e: f8:3f:88:e4:7b:a3:5d:2b:66:0f:92:41:2a:ea:61: 7d:96:1c:07:2e:72:f4:ab:ad:c7:2c:9f:45:94:1c: b4:96:16:fd:2c:17:e0:a6:2d:e4:64:41:18:56:ef: 2f:46:3c:8f:b1:e6:73:b6:0e:01:f9:9b:46:4d:73: 3b:16:23:a2:c7:8a:18:1b:ac:ae:58:e3:49:a3:87: 39:61:81:69:11:b5:63:c1:0e:dc:96:7c:b0:94:63: 22:2f:fc:b7:16:4e:18:42:3f:06:0c:7d:10:be:e3: 92:a2:6b:72:9a:1c:dc:0c:64:80:ea:7e:88:a0:a0: c8:9f:48:76:ec:d7:aa:7e:e7:ac:cc:29:3f:71:29: f5:f5:3e:8c:ff:90:f9:61:d5:83:d8:96:fd:c3:e1: 18:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:1E:16:72:81:1A:9D:0F:83:7B:04:E6:FB:21:55:ED:3C:8D:B7:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d0aa4e2-6f5b-3a10-95f2-51c802716e1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.34.46.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:17:f6:6c:f0:5a:40:1c:ed:85:ff:79:a8:88:0c:68:73:95: e6:1c:51:16:e5:91:41:cf:f7:f9:35:71:ea:cd:ad:c8:92:7b: ad:cb:71:de:e7:a5:55:a7:50:ba:fd:11:a0:94:26:93:74:92: 0f:f0:c6:8f:8b:8c:c5:b4:f1:83:88:b4:14:b3:c3:ab:e5:7e: 07:02:d9:89:24:00:54:5b:a3:92:f7:2b:ca:bf:ec:a1:57:9b: ce:2c:5e:ed:15:41:5d:6a:09:54:78:8e:2e:e3:37:41:bb:9f: 16:7f:f1:4b:ad:ce:61:1e:0b:7d:5a:d6:46:d4:34:ab:05:73: 44:e4:82:15:14:c4:21:cd:b5:73:b2:cc:9d:c7:e4:e7:44:7b: 27:2b:72:05:e8:44:ed:2d:2d:a3:89:8e:34:9f:a2:b5:38:e5: 86:5f:4e:6e:1b:bc:a0:82:26:8a:2a:f6:49:30:f0:25:91:c1: 9a:4a:0e:f6:c0:81:b5:cc:e0:ef:46:88:53:17:42:23:64:56: fd:ca:f4:2e:ef:7d:e2:5d:ba:4d:68:b1:42:46:f7:30:e8:36: 36:70:46:a9:0f:7a:7c:69:a6:5a:43:64:4e:4e:05:0e:4f:49: 35:c1:da:54:82:14:e7:9d:03:1e:53:88:25:04:dd:a4:3a:9b: 44:dd:e6:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxOdfHcKihybt3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MjdkYjNmNzAtYTJkOC00OGJkLWE2N2MtMGRiYmU4NGZmMTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuTJH5QsOn6vMWX2aInI+V+lGroKLxypalRs 6KAg9T3/rU/k9NdXk6E1mPtyEib63rCxqLpE0CbTVz1bfs01p356iQCfosMBxDZk T/v+4OcD7DnzSVVuntXf7CKufpwrbkoCQVFWBR74P4jke6NdK2YPkkEq6mF9lhwH LnL0q63HLJ9FlBy0lhb9LBfgpi3kZEEYVu8vRjyPseZztg4B+ZtGTXM7FiOix4oY G6yuWONJo4c5YYFpEbVjwQ7clnywlGMiL/y3Fk4YQj8GDH0QvuOSomtymhzcDGSA 6n6IoKDIn0h27NeqfueszCk/cSn19T6M/5D5YdWD2Jb9w+EYRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJIeFnKBGp0Pg3sE5vshVe08jbcxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmQwYWE0ZTItNmY1Yi0z YTEwLTk1ZjItNTFjODAyNzE2ZTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYiIuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKIX9mzwWkAc7YX/eaiIDGhzleYcURblkUHP9/k1cerNrciSe63Lcd7n pVWnULr9EaCUJpN0kg/wxo+LjMW08YOItBSzw6vlfgcC2YkkAFRbo5L3K8q/7KFX m84sXu0VQV1qCVR4ji7jN0G7nxZ/8UutzmEeC31a1kbUNKsFc0TkghUUxCHNtXOy zJ3H5OdEeycrcgXoRO0tLaOJjjSforU45YZfTm4bvKCCJooq9kkw8CWRwZpKDvbA gbXM4O9GiFMXQiNkVv3K9C7vfeJduk1osUJG9zDoNjZwRqkPenxpplpDZE5OBQ5P STXB2lSCFOedAx5TiCUE3aQ6m0Td5kg= -----END CERTIFICATE-----Generated at Wed Nov 5 15:11:32 2025 by rpki-client