$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e6f130a-d3ef-379c-aa6d-402f8a9b4e2c.roa File: 3e6f130a-d3ef-379c-aa6d-402f8a9b4e2c.roa (raw, json) Hash identifier: r5wqcMWU9yYYBqq060k6CmCkIQGYGC3OcF77KVL4j/g= Subject key identifier: D6:84:1C:D1:4C:B0:B5:5F:FC:67:C7:8C:A9:86:78:2C:CE:D4:B9:DA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B52A7775C861C2D937C5D2280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e6f130a-d3ef-379c-aa6d-402f8a9b4e2c.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 33491 IP address blocks: 98.228.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:77:5c:86:1c:2d:93:7c:5d:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=f12ba391-a758-4fa1-8d53-0e4452e6ea71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a7:df:40:27:3f:b4:e3:8a:a5:b7:90:ce:d9: 09:b9:3f:f5:30:e8:0b:e6:ca:d4:13:f4:ed:e1:45: 2d:41:96:e6:be:6b:e1:58:1d:b4:69:bd:b6:0e:55: b2:41:44:d7:c7:57:55:55:2a:6c:75:dc:a9:7a:80: a5:4f:f6:9f:b7:c6:6c:80:b6:d6:17:71:2e:93:f0: ef:c6:48:39:ee:ea:c4:c2:ab:52:ef:69:fa:21:59: bc:8d:6f:da:c8:6d:8e:05:cb:a2:d7:67:e2:4e:8e: 0f:71:19:06:28:e6:37:d5:ba:82:44:23:86:8d:74: db:7b:76:32:3b:4d:cc:a3:cc:96:1a:11:6a:4b:a2: cc:9d:65:a8:04:88:31:55:59:85:d4:3e:4b:06:ba: 14:13:42:f0:ea:6c:7c:22:a0:1a:07:87:d3:fd:63: 85:8a:b7:d7:e1:ad:80:90:bc:d0:63:74:9d:ac:89: f5:9b:6d:d3:70:4e:55:85:de:4a:3c:75:a2:45:db: ce:29:c5:c0:2f:bc:06:13:59:2a:d8:06:ae:ab:d2: 1b:bb:d2:46:e4:f0:31:9f:71:6b:59:b2:37:73:9f: e2:7f:4f:58:35:cb:c4:ac:c2:46:65:a2:90:0b:73: a6:16:d2:78:45:75:17:b6:25:78:49:d6:6a:6e:fb: ed:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:84:1C:D1:4C:B0:B5:5F:FC:67:C7:8C:A9:86:78:2C:CE:D4:B9:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e6f130a-d3ef-379c-aa6d-402f8a9b4e2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.228.46.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:43:48:15:02:af:31:ec:3e:bf:fc:19:b7:78:ea:56:9a:76: 61:4e:5a:97:90:53:52:14:e5:cd:8f:cd:27:fc:6c:fe:f8:9f: 8b:b1:b4:86:73:97:22:54:32:81:de:f8:7f:b1:b9:11:af:2b: b3:fb:78:c2:f8:21:e8:80:95:6f:11:a5:32:5c:af:22:ff:1e: 95:ef:d9:fa:a4:5a:6c:94:5c:ad:c0:3c:66:4d:4f:4b:9e:c4: 26:b8:dd:1b:72:f2:2c:c7:c3:b1:e6:2e:db:8b:b8:fe:a8:cf: 73:98:aa:71:6b:8f:37:f0:e7:be:81:94:db:9a:bf:cf:eb:3f: 7c:1f:f5:1a:f4:88:02:60:4c:12:5a:12:3c:ad:34:83:01:d2: ad:75:cd:d2:d7:3f:3a:98:fc:77:62:26:65:15:48:8d:5f:ea: 7c:73:a8:f8:87:de:48:cc:01:3f:be:25:5a:74:94:01:d1:5c: 75:77:4d:84:fc:5f:74:1b:02:4d:8c:1e:51:d6:f0:da:88:72: 09:97:ba:e1:9f:e5:82:64:cc:28:e3:da:bb:9f:73:b5:1a:67: 9e:e4:de:5a:ca:52:35:8f:ad:31:ca:f7:04:3e:01:65:f3:2d: 0c:f6:03:d6:9c:10:b7:7d:89:11:22:0a:bf:0c:3b:c3:c0:84: 2e:8c:0a:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp3dchhwtk3xdIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk ZjEyYmEzOTEtYTc1OC00ZmExLThkNTMtMGU0NDUyZTZlYTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6ffQCc/tOOKpbeQztkJuT/1MOgL5srUE/Tt 4UUtQZbmvmvhWB20ab22DlWyQUTXx1dVVSpsddypeoClT/aft8ZsgLbWF3Euk/Dv xkg57urEwqtS72n6IVm8jW/ayG2OBcui12fiTo4PcRkGKOY31bqCRCOGjXTbe3Yy O03Mo8yWGhFqS6LMnWWoBIgxVVmF1D5LBroUE0Lw6mx8IqAaB4fT/WOFirfX4a2A kLzQY3SdrIn1m23TcE5Vhd5KPHWiRdvOKcXAL7wGE1kq2Aauq9Ibu9JG5PAxn3Fr WbI3c5/if09YNcvErMJGZaKQC3OmFtJ4RXUXtiV4SdZqbvvtgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNaEHNFMsLVf/GfHjKmGeCzO1LnaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2U2ZjEzMGEtZDNlZi0z NzljLWFhNmQtNDAyZjhhOWI0ZTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYuQuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMJDSBUCrzHsPr/8Gbd46laadmFOWpeQU1IU5c2PzSf8bP74n4uxtIZz lyJUMoHe+H+xuRGvK7P7eML4IeiAlW8RpTJcryL/HpXv2fqkWmyUXK3APGZNT0ue xCa43Rty8izHw7HmLtuLuP6oz3OYqnFrjzfw576BlNuav8/rP3wf9Rr0iAJgTBJa EjytNIMB0q11zdLXPzqY/HdiJmUVSI1f6nxzqPiH3kjMAT++JVp0lAHRXHV3TYT8 X3QbAk2MHlHW8NqIcgmXuuGf5YJkzCjj2rufc7UaZ57k3lrKUjWPrTHK9wQ+AWXz LQz2A9acELd9iREiCr8MO8PAhC6MCog= -----END CERTIFICATE-----Generated at Wed Nov 5 00:41:02 2025 by rpki-client