$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9653b10d-9e56-3a43-a43b-c82fd0b1e819.roa File: 9653b10d-9e56-3a43-a43b-c82fd0b1e819.roa (raw, json) Hash identifier: Ah5jCPga2sbm4na0yVc49BcX+OGXfZSYrkqsGpEsHRM= Subject key identifier: 34:6C:8E:2E:78:93:64:D5:34:60:9F:21:02:48:35:2C:23:3D:BB:1D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC2CFD8FCB9E37FC12A0F80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9653b10d-9e56-3a43-a43b-c82fd0b1e819.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 98.34.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:cf:d8:fc:b9:e3:7f:c1:2a:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=fe19c349-2f30-429e-94c4-a8d29bebeac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:5a:b7:a8:05:a3:ae:95:29:8b:4f:dc:41:c6: aa:db:fa:db:ff:2a:f5:ec:eb:df:c7:fb:23:e3:cb: 8b:0d:54:1e:c1:f4:32:b8:44:4d:99:f9:b6:6b:ee: f7:42:0c:ff:f3:0d:e0:a2:3e:b9:a1:c6:af:22:98: 17:a3:2b:47:eb:03:a0:0e:bb:3d:93:5c:1b:b7:68: 5f:87:dc:5c:0a:1a:38:fc:a4:15:e5:da:97:af:c9: 60:45:3b:78:d8:81:9a:79:f0:ec:bd:f6:93:7e:90: 19:19:0a:74:d0:b7:53:5b:41:8e:bc:63:d6:24:28: 86:ee:4c:b1:d6:d4:5f:a0:4d:8b:8f:a0:b6:1b:75: b6:d6:76:59:dc:82:d6:c0:53:50:13:cb:f4:cf:5b: 8e:25:01:20:80:8f:29:18:3a:2a:52:82:18:e4:73: df:19:cf:88:51:41:16:18:2f:2c:7b:9e:f6:bb:11: 66:0f:63:5a:e3:49:50:fc:87:52:de:15:02:a3:19: be:fb:ec:5d:13:d1:7d:4d:76:9e:61:16:f3:be:83: 6d:00:0b:e6:4b:7d:fe:b5:dc:97:2e:fb:76:e5:58: 48:42:8c:21:ef:9e:59:9e:81:ad:0d:6c:c5:f1:4b: 53:3c:fd:e6:a3:c1:4d:96:ad:21:82:8b:bb:6b:12: aa:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:6C:8E:2E:78:93:64:D5:34:60:9F:21:02:48:35:2C:23:3D:BB:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9653b10d-9e56-3a43-a43b-c82fd0b1e819.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.34.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:b3:b0:de:f9:bf:03:ee:64:a1:ee:0e:47:c2:52:45:e4:2e: ed:fd:1b:1c:8b:f0:e6:d7:d3:59:94:50:4b:e9:d0:15:4d:6d: b5:f2:a5:84:40:8c:b1:df:78:ff:29:8d:5a:39:21:b8:11:4c: 7f:f6:2b:cd:a8:a7:0b:cb:c1:75:b1:1d:04:2e:ca:56:25:6b: 99:c3:2b:7d:dc:a4:91:30:fa:f3:0e:8e:48:f3:96:f9:41:31: 83:3e:03:05:f7:37:51:79:fb:2c:f6:6f:c2:37:01:ed:df:78: f8:bb:f0:74:a8:8e:fa:f6:bd:bd:16:04:0b:ec:b3:5f:e6:38: 13:72:d0:83:72:7e:e7:ed:d9:6e:bc:94:d3:d6:72:01:a0:6a: 9c:43:35:16:46:d4:57:be:0a:ba:4d:57:1c:fa:c5:c0:85:db: 19:be:f3:a5:e9:3c:09:fe:56:85:ae:97:9d:07:aa:ab:d7:34: f0:b0:bb:cd:ac:09:9a:b8:dd:ac:8f:e5:74:c1:f8:eb:84:96: 7f:1d:08:7e:a3:c6:46:93:32:55:51:15:b6:1a:46:4f:12:e3: 8a:ae:4d:e6:c6:e0:19:a6:57:3c:09:37:f9:a5:53:14:b8:07: 44:05:8d:2e:1f:d8:cd:f6:fa:f8:e2:6b:87:13:05:50:c9:13: 9f:b1:71:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsws/Y/Lnjf8EqD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZmUxOWMzNDktMmYzMC00MjllLTk0YzQtYThkMjliZWJlYWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglq3qAWjrpUpi0/cQcaq2/rb/yr17Ovfx/sj 48uLDVQewfQyuERNmfm2a+73Qgz/8w3goj65ocavIpgXoytH6wOgDrs9k1wbt2hf h9xcCho4/KQV5dqXr8lgRTt42IGaefDsvfaTfpAZGQp00LdTW0GOvGPWJCiG7kyx 1tRfoE2Lj6C2G3W21nZZ3ILWwFNQE8v0z1uOJQEggI8pGDoqUoIY5HPfGc+IUUEW GC8se572uxFmD2Na40lQ/IdS3hUCoxm+++xdE9F9TXaeYRbzvoNtAAvmS33+tdyX Lvt25VhIQowh755ZnoGtDWzF8UtTPP3mo8FNlq0hgou7axKqmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDRsji54k2TVNGCfIQJINSwjPbsdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTY1M2IxMGQtOWU1Ni0z YTQzLWE0M2ItYzgyZmQwYjFlODE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYiIkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6zsN75vwPuZKHuDkfCUkXkLu39GxyL8ObX01mUUEvp0BVNbbXypYRA jLHfeP8pjVo5IbgRTH/2K82opwvLwXWxHQQuylYla5nDK33cpJEw+vMOjkjzlvlB MYM+AwX3N1F5+yz2b8I3Ae3fePi78HSojvr2vb0WBAvss1/mOBNy0INyfuft2W68 lNPWcgGgapxDNRZG1Fe+CrpNVxz6xcCF2xm+86XpPAn+VoWul50HqqvXNPCwu82s CZq43ayP5XTB+OuEln8dCH6jxkaTMlVRFbYaRk8S44quTebG4BmmVzwJN/mlUxS4 B0QFjS4f2M32+vjia4cTBVDJE5+xcWQ= -----END CERTIFICATE-----Generated at Sat Aug 23 23:03:06 2025 by rpki-client