$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/424f3eb7-4208-3959-974f-daea24d1b471.roa File: 424f3eb7-4208-3959-974f-daea24d1b471.roa (raw, json) Hash identifier: RRuQWBs4EObCWar+QKrMut4sTzMI9uJc9EyzEs0ZOlM= Subject key identifier: BD:EB:7C:E3:78:C5:B2:6A:6C:E7:D0:A2:11:FA:99:7E:56:61:0F:0C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC2D07E5CA99CA3B2F5CB00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/424f3eb7-4208-3959-974f-daea24d1b471.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 98.46.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:d0:7e:5c:a9:9c:a3:b2:f5:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=8ec06606-fd66-45af-99e1-e42ef41080a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:86:1f:9a:96:57:a3:7a:39:e8:bd:36:12:4d: 23:49:24:35:19:15:42:d9:52:0b:f1:9d:e3:82:8c: c2:1c:34:c0:92:23:c2:8f:52:2b:e4:fb:59:b5:48: 1c:23:00:57:f3:18:e1:c6:8d:02:59:5e:b9:fe:a1: 3f:26:11:6e:c7:19:2f:4f:10:31:e4:a9:9d:2d:75: 9a:5f:fc:79:52:60:fa:23:d8:a8:af:2c:d1:92:1d: 60:e9:dc:30:58:54:44:97:1a:b8:02:f1:6e:0f:bf: 5e:f3:27:44:9c:33:47:96:01:d2:06:44:81:d3:9c: 02:32:01:98:e9:25:51:70:20:bc:9b:68:2b:5e:e0: db:db:4a:f6:a9:bb:b1:a3:be:2e:30:24:bb:fc:5e: e3:c9:86:11:60:7d:d3:ae:e4:fc:ee:76:00:10:cc: 20:8a:53:50:3d:99:38:41:dd:2b:b7:27:fb:0c:71: 82:02:fe:88:c4:62:f2:66:ec:fc:ce:5a:7c:5e:86: 7a:9c:91:d3:07:61:de:5c:73:5d:3b:87:b2:a5:19: 72:8d:5c:09:f9:b3:a3:12:55:82:5b:7f:0d:e1:d4: c5:19:64:95:8a:36:16:fc:32:5c:53:c2:7b:c3:50: 4e:c3:ab:0d:79:0e:9b:cb:e6:b6:df:95:4a:de:42: 92:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:EB:7C:E3:78:C5:B2:6A:6C:E7:D0:A2:11:FA:99:7E:56:61:0F:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/424f3eb7-4208-3959-974f-daea24d1b471.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.46.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:54:4f:cb:d7:1b:0a:f7:fb:c8:25:58:71:aa:7a:3f:40:ea: 60:18:44:12:ad:a5:c5:5a:8f:15:f9:18:b7:f2:d9:77:4a:5c: 4a:f8:cf:23:63:0c:32:3a:12:59:62:d2:65:02:99:f9:b7:a7: 32:3f:ce:b2:75:a0:93:16:0e:f7:65:e3:84:6e:57:f5:1f:6b: 17:b9:88:d2:0b:07:03:b8:f0:35:cd:00:d8:29:5d:f7:94:72: d1:a1:5b:39:3b:f6:d9:63:8b:3a:c4:c4:41:86:7f:38:11:22: b2:51:9d:0e:e0:ae:df:f9:2b:d3:fd:5d:08:1c:d3:66:4f:06: 05:db:5d:53:06:e5:ac:90:6d:37:b4:5e:db:62:9b:6a:03:e7: 35:c5:26:cd:89:ac:7f:a1:f0:a8:b1:4f:92:06:2f:86:cd:52: 03:6e:99:65:99:b4:0f:2a:88:3e:6b:e4:0f:6a:9b:d0:ee:c6: ed:4b:ab:fb:99:73:16:10:54:22:c5:31:d1:1f:70:97:65:4c: f2:c0:b7:90:f1:93:9a:bb:e4:91:df:a4:d7:35:dd:d8:d9:10: 43:73:80:00:af:92:86:10:88:dc:60:c6:b8:00:df:74:22:8d: 89:d3:91:24:95:5c:a3:09:cf:20:5c:2e:6c:06:60:a2:b7:55: cf:94:62:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswtB+XKmco7L1ywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk OGVjMDY2MDYtZmQ2Ni00NWFmLTk5ZTEtZTQyZWY0MTA4MGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4YfmpZXo3o56L02Ek0jSSQ1GRVC2VIL8Z3j gozCHDTAkiPCj1Ir5PtZtUgcIwBX8xjhxo0CWV65/qE/JhFuxxkvTxAx5KmdLXWa X/x5UmD6I9ioryzRkh1g6dwwWFRElxq4AvFuD79e8ydEnDNHlgHSBkSB05wCMgGY 6SVRcCC8m2grXuDb20r2qbuxo74uMCS7/F7jyYYRYH3TruT87nYAEMwgilNQPZk4 Qd0rtyf7DHGCAv6IxGLyZuz8zlp8XoZ6nJHTB2HeXHNdO4eypRlyjVwJ+bOjElWC W38N4dTFGWSVijYW/DJcU8J7w1BOw6sNeQ6by+a235VK3kKS6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL3rfON4xbJqbOfQohH6mX5WYQ8MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDI0ZjNlYjctNDIwOC0z OTU5LTk3NGYtZGFlYTI0ZDFiNDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYi54MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxUT8vXGwr3+8glWHGqej9A6mAYRBKtpcVajxX5GLfy2XdKXEr4zyNj DDI6Elli0mUCmfm3pzI/zrJ1oJMWDvdl44RuV/Ufaxe5iNILBwO48DXNANgpXfeU ctGhWzk79tljizrExEGGfzgRIrJRnQ7grt/5K9P9XQgc02ZPBgXbXVMG5ayQbTe0 Xttim2oD5zXFJs2JrH+h8KixT5IGL4bNUgNumWWZtA8qiD5r5A9qm9Duxu1Lq/uZ cxYQVCLFMdEfcJdlTPLAt5Dxk5q75JHfpNc13djZEENzgACvkoYQiNxgxrgA33Qi jYnTkSSVXKMJzyBcLmwGYKK3Vc+UYlM= -----END CERTIFICATE-----Generated at Sun Aug 24 04:26:37 2025 by rpki-client