$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7a6faaa-b5e0-3212-95c3-5081f5482483.roa File: a7a6faaa-b5e0-3212-95c3-5081f5482483.roa (raw, json) Hash identifier: XfDOw+rZlArZwR/cVwNi5NflHO7VooDZpurAkqPUQVk= Subject key identifier: 7B:3A:D3:14:A5:44:44:CA:8D:3A:D4:E8:5D:5D:3E:A4:F5:48:7A:E1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC347B8CDA66DBC0DF71D80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7a6faaa-b5e0-3212-95c3-5081f5482483.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 98.35.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:47:b8:cd:a6:6d:bc:0d:f7:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=2cb65d2e-fad7-46fc-b869-30c1fc814571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4d:ed:01:d0:87:8a:53:14:ce:c9:b8:30:8a: 92:18:f6:b5:71:41:44:55:aa:8d:3e:99:f7:f4:ab: 13:dd:e3:b4:1c:54:99:1f:fc:08:b9:56:c1:e9:2a: 8d:8b:58:5a:9d:66:96:15:52:ad:fd:62:46:19:b0: b2:ed:61:57:22:1e:c2:e7:93:bf:6b:5f:3b:cd:98: e2:10:fb:1f:f6:60:fd:a9:e7:db:43:39:84:f7:05: 78:4c:99:6b:34:d2:ff:1d:8b:1a:2c:9a:d2:9d:ad: af:22:5d:d3:37:0b:94:5f:5e:64:53:ec:ca:d1:32: f0:08:b7:85:c8:0c:23:96:7f:15:26:ad:6d:3b:27: 42:fe:5c:21:68:a2:a9:c6:a0:af:aa:6d:52:da:4e: 08:0e:e1:2c:f0:b8:99:38:c5:77:f9:41:95:01:a8: 3e:69:2b:f2:c4:42:1b:ca:bb:4a:ac:4e:3e:25:ac: 89:28:dd:81:58:56:99:a6:ae:0b:30:5b:50:55:57: a8:02:11:af:fc:ed:ac:7b:9e:7a:00:1b:4c:41:1a: 26:88:2a:ef:74:37:09:3b:bf:16:f3:92:35:25:cb: 46:c2:cd:8f:32:45:72:b9:cb:e8:7a:06:ec:74:34: 42:f6:2d:b4:4c:2d:fc:54:52:bb:f1:b5:bc:09:01: dd:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:3A:D3:14:A5:44:44:CA:8D:3A:D4:E8:5D:5D:3E:A4:F5:48:7A:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7a6faaa-b5e0-3212-95c3-5081f5482483.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.35.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:d3:79:30:35:d9:a5:2c:f1:00:cd:c4:a4:0b:83:34:ba:1a: 20:15:61:97:bd:50:cc:bf:ef:f7:c7:1d:33:17:4b:6a:5a:60: 7c:ca:1b:7d:aa:68:11:bb:bc:b3:aa:f1:c1:9e:6e:9b:1e:6c: b4:03:8b:18:e1:bb:9c:51:a0:8b:45:9e:28:13:84:af:78:ba: fa:9e:5a:10:d0:8c:fb:c8:9f:52:e0:31:6f:29:a6:e2:d4:5f: d1:ea:7e:0e:3e:fa:44:87:e9:02:bf:6d:da:99:af:41:a4:c8: 3b:6b:1e:40:d9:41:52:0e:87:13:cc:d6:6d:fd:04:fa:f7:d1: bb:f7:06:94:83:19:54:88:6a:24:26:5d:b2:bb:4a:bf:d4:d2: 54:de:1e:e8:8c:da:7b:7b:ef:05:1e:69:62:5d:29:76:b7:26: 1b:e5:0e:96:18:e2:e8:10:21:e6:54:49:c9:4a:0e:60:46:c9: da:1e:9c:dc:d4:3d:21:15:9b:65:46:63:49:7e:f4:2a:ca:1f: 68:06:a9:67:42:eb:a3:5b:8c:01:91:8f:e6:ec:08:ff:01:ea: b2:44:93:a8:09:6a:93:11:f1:78:c4:ee:a8:b2:66:a3:c3:3d: 2c:e1:b1:33:f4:7b:1c:2b:4c:0d:0d:86:7e:07:8f:ac:b6:dc: 44:05:0a:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw0e4zaZtvA33HYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MmNiNjVkMmUtZmFkNy00NmZjLWI4NjktMzBjMWZjODE0NTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlU3tAdCHilMUzsm4MIqSGPa1cUFEVaqNPpn3 9KsT3eO0HFSZH/wIuVbB6SqNi1hanWaWFVKt/WJGGbCy7WFXIh7C55O/a187zZji EPsf9mD9qefbQzmE9wV4TJlrNNL/HYsaLJrSna2vIl3TNwuUX15kU+zK0TLwCLeF yAwjln8VJq1tOydC/lwhaKKpxqCvqm1S2k4IDuEs8LiZOMV3+UGVAag+aSvyxEIb yrtKrE4+JayJKN2BWFaZpq4LMFtQVVeoAhGv/O2se556ABtMQRomiCrvdDcJO78W 85I1JctGws2PMkVyucvoegbsdDRC9i20TC38VFK78bW8CQHdPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHs60xSlRETKjTrU6F1dPqT1SHrhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTdhNmZhYWEtYjVlMC0z MjEyLTk1YzMtNTA4MWY1NDgyNDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYiPIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7TeTA12aUs8QDNxKQLgzS6GiAVYZe9UMy/7/fHHTMXS2paYHzKG32q aBG7vLOq8cGebpsebLQDixjhu5xRoItFnigThK94uvqeWhDQjPvIn1LgMW8ppuLU X9Hqfg4++kSH6QK/bdqZr0GkyDtrHkDZQVIOhxPM1m39BPr30bv3BpSDGVSIaiQm XbK7Sr/U0lTeHuiM2nt77wUeaWJdKXa3JhvlDpYY4ugQIeZUSclKDmBGydoenNzU PSEVm2VGY0l+9CrKH2gGqWdC66NbjAGRj+bsCP8B6rJEk6gJapMR8XjE7qiyZqPD PSzhsTP0exwrTA0Nhn4Hj6y23EQFCo4= -----END CERTIFICATE-----Generated at Wed Nov 5 02:00:13 2025 by rpki-client