$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0afae46b-bac9-38bc-9126-df0075ae4558.roa File: 0afae46b-bac9-38bc-9126-df0075ae4558.roa (raw, json) Hash identifier: oy87ONJvyCv80KipEwJ+Dhkmzg3lkYOJoo6Zg6TRAAw= Subject key identifier: F0:CF:73:72:A5:FA:5A:A9:C5:4D:0E:6B:58:AC:FA:C8:80:D1:4D:EF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC4E4FA8A080C5BB85FB580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0afae46b-bac9-38bc-9126-df0075ae4558.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 98.253.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:e4:fa:8a:08:0c:5b:b8:5f:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=93fb86e0-fecc-40f2-b155-aa6e8b484891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f9:06:3a:a8:f0:06:08:97:46:46:06:1f:96: af:b0:a1:8e:e3:5e:0f:a6:69:7e:e1:f8:89:c3:81: 0b:1c:83:4e:45:cd:bd:e6:15:a0:65:c1:bc:ab:3c: 08:9a:44:a3:c2:18:64:ba:19:97:3b:71:d8:b3:67: 87:24:71:ce:fa:77:14:18:bb:35:f2:94:f3:f4:66: 7d:c2:40:97:9a:04:e1:73:49:b5:2e:39:a9:eb:6e: 78:d5:06:b1:c4:61:79:bf:0a:42:50:a1:68:96:ed: dd:35:c2:c9:db:dc:fa:25:b4:b0:78:6d:38:bf:bc: a6:6b:c8:d7:2b:dc:cf:c3:15:51:da:47:c0:b7:b6: 23:17:c9:a2:83:e1:91:0a:46:13:02:9e:40:46:05: b4:d5:3e:6d:ef:44:d0:00:a4:36:d9:0d:91:a1:6d: 6a:8e:4d:c5:af:ec:86:37:7d:f2:c4:e3:d3:db:82: 30:88:56:04:be:f5:9c:91:f0:3b:9c:81:f2:a3:c3: 7f:5e:aa:45:c2:f7:66:72:99:51:2c:cf:03:7c:f8: 69:23:21:c1:8d:2d:37:1b:07:3d:ad:51:e2:31:bc: a0:91:05:d1:f7:b5:6d:5f:4f:fb:73:c6:51:c1:d5: 7a:d5:36:42:1b:97:d9:07:48:95:20:2d:be:73:40: 64:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:CF:73:72:A5:FA:5A:A9:C5:4D:0E:6B:58:AC:FA:C8:80:D1:4D:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0afae46b-bac9-38bc-9126-df0075ae4558.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.253.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:0b:92:77:8f:1b:96:a7:ad:3c:92:18:56:10:a1:8e:f6:4d: 7a:ae:05:b7:0d:de:33:fb:bd:38:ea:47:7a:16:1b:a4:b8:8e: f7:5f:10:29:ec:60:d8:64:c1:af:16:b1:59:c8:81:bc:33:f7: 45:60:9f:3c:ae:6c:03:06:34:e3:85:88:db:ac:6d:cc:1c:ff: 66:8d:39:30:d8:35:7e:40:0d:e6:0a:d1:4d:28:70:de:db:3f: f9:a5:c6:91:f6:b5:5a:9a:00:14:2a:fe:46:b6:66:25:49:a0: ee:0c:11:3d:d8:c2:62:ae:6d:5d:a6:6a:ae:12:d7:83:ec:7d: 3f:b0:e9:b0:87:8a:47:15:e1:2c:45:29:59:a0:bd:3a:61:13: 38:b6:ea:1c:89:2b:20:60:c6:ce:20:5f:c4:43:71:7d:c9:d6: 72:bc:00:6a:4f:87:32:37:82:85:70:0e:f0:3d:09:41:d5:26: 2a:c5:f8:59:60:83:b7:49:4e:ba:a5:ff:54:0c:f0:9d:53:77: 38:13:89:cc:f9:af:f9:6a:6c:8d:3b:bb:29:0b:fb:e6:d4:93: bb:28:55:47:ac:2d:93:08:2c:47:7a:4b:c0:04:a6:f6:1b:5e: d7:60:e5:a7:08:32:bb:c3:30:26:2e:42:8a:1a:a7:bf:53:5b: ae:07:ed:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxOT6iggMW7hftYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk OTNmYjg2ZTAtZmVjYy00MGYyLWIxNTUtYWE2ZThiNDg0ODkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/kGOqjwBgiXRkYGH5avsKGO414Ppml+4fiJ w4ELHINORc295hWgZcG8qzwImkSjwhhkuhmXO3HYs2eHJHHO+ncUGLs18pTz9GZ9 wkCXmgThc0m1Ljmp62541QaxxGF5vwpCUKFolu3dNcLJ29z6JbSweG04v7yma8jX K9zPwxVR2kfAt7YjF8mig+GRCkYTAp5ARgW01T5t70TQAKQ22Q2RoW1qjk3Fr+yG N33yxOPT24IwiFYEvvWckfA7nIHyo8N/XqpFwvdmcplRLM8DfPhpIyHBjS03Gwc9 rVHiMbygkQXR97VtX0/7c8ZRwdV61TZCG5fZB0iVIC2+c0BkRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPDPc3Kl+lqpxU0Oa1is+siA0U3vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGFmYWU0NmItYmFjOS0z OGJjLTkxMjYtZGYwMDc1YWU0NTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYv3ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKALknePG5anrTySGFYQoY72TXquBbcN3jP7vTjqR3oWG6S4jvdfECns YNhkwa8WsVnIgbwz90VgnzyubAMGNOOFiNusbcwc/2aNOTDYNX5ADeYK0U0ocN7b P/mlxpH2tVqaABQq/ka2ZiVJoO4MET3YwmKubV2maq4S14PsfT+w6bCHikcV4SxF KVmgvTphEzi26hyJKyBgxs4gX8RDcX3J1nK8AGpPhzI3goVwDvA9CUHVJirF+Flg g7dJTrql/1QM8J1TdzgTicz5r/lqbI07uykL++bUk7soVUesLZMILEd6S8AEpvYb Xtdg5acIMrvDMCYuQooap79TW64H7aI= -----END CERTIFICATE-----Generated at Sun Aug 24 04:31:18 2025 by rpki-client