$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e323924-5149-385a-8f3c-da0e820bacc1.roa File: 0e323924-5149-385a-8f3c-da0e820bacc1.roa (raw, json) Hash identifier: AuUOmlhRYeAUY7kbNjL5rIM2jRtbejkO8L0wnueBSCI= Subject key identifier: 54:1B:07:E6:39:78:C7:57:BE:D8:7D:66:60:C8:6D:95:05:DB:87:E5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC2BF87929AFEF4562E4580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e323924-5149-385a-8f3c-da0e820bacc1.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 98.220.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:bf:87:92:9a:fe:f4:56:2e:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=8ddb48ac-b049-4867-8ee3-e599b52d0d3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4a:b2:6b:fb:06:fb:2b:f4:4d:69:f3:ea:b1: 02:8e:a3:31:98:66:be:6c:cd:73:0a:cc:df:9b:34: 45:86:36:49:8b:c9:c0:36:3d:b3:64:a8:31:71:00: e2:12:e7:4d:37:03:07:6b:57:da:a7:7a:aa:52:6f: 24:03:48:5c:87:72:f7:9e:0f:47:ee:3a:6c:75:fa: 2f:9a:d4:ee:db:9e:87:d8:d3:6a:a6:bd:6d:af:7f: 7a:4e:91:9c:8f:03:7b:67:9c:f6:9c:2a:7a:80:cb: 48:25:6e:4e:53:0d:ba:4d:e5:ba:87:1e:80:a2:d4: 87:79:8d:f5:3d:23:61:1f:41:64:63:1a:5f:4d:8b: 49:e1:a7:3b:09:0b:e0:52:7c:fb:dd:66:ff:a3:e4: 73:be:65:1d:4b:be:1f:4e:99:33:d2:a4:7f:a9:97: 7b:77:f8:ef:82:22:d7:6b:2e:52:18:42:b3:f5:54: c4:11:e1:d3:b1:93:57:a3:ce:cb:58:17:36:40:2f: f7:cf:44:08:84:8a:02:b8:80:3f:cd:f2:1b:71:79: 8f:c8:59:75:59:54:9c:e9:1e:af:f2:f0:28:14:ef: e9:17:52:be:00:e5:1b:43:2b:e3:d0:94:bd:60:56: cf:ab:68:67:04:9c:8e:2f:0d:f6:c3:ab:9b:7c:c1: 51:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:1B:07:E6:39:78:C7:57:BE:D8:7D:66:60:C8:6D:95:05:DB:87:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e323924-5149-385a-8f3c-da0e820bacc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.220.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:57:32:3a:a5:bb:7a:22:7e:b7:00:5e:7d:1f:dc:44:ee:45: 01:f1:04:1e:32:1a:e3:50:f1:80:fa:52:07:cb:c6:e4:a6:9c: a8:35:c2:bf:1e:1d:e6:1f:54:0c:66:32:ba:c9:0c:d2:3d:2d: f6:9d:eb:a8:c0:d2:e9:e5:b5:7e:1a:53:4a:9a:30:21:0a:50: 92:58:f8:61:48:1c:d8:e7:e7:de:a4:c5:b5:8a:ad:83:32:57: 01:27:3f:80:25:e3:d8:62:fa:24:99:8b:55:5a:c7:f1:88:41: 36:21:b9:9f:dd:17:72:8b:88:dd:c1:be:cd:57:f2:c1:82:07: 46:80:4d:cd:ef:e2:71:9b:86:e0:56:07:e8:5f:95:bc:b4:97: a5:a2:1a:8f:39:bc:c0:85:14:ff:15:be:5d:97:73:c2:51:de: c0:11:c0:38:33:7c:9f:d6:8f:fa:2c:80:06:f6:45:4a:52:46: 30:ec:41:ae:41:c3:5c:29:5f:1a:99:08:62:80:45:1b:81:d9: cf:e8:bb:bd:6d:82:98:80:99:bf:76:61:60:51:e9:1e:f6:48: ea:f6:1b:5a:37:dd:bd:64:45:7c:2b:d2:40:68:a6:4f:24:ca: ba:f8:d6:29:65:c4:a4:69:2b:35:f6:42:9d:36:8f:54:ae:2b: 87:02:01:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswr+Hkpr+9FYuRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk OGRkYjQ4YWMtYjA0OS00ODY3LThlZTMtZTU5OWI1MmQwZDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUqya/sG+yv0TWnz6rECjqMxmGa+bM1zCszf mzRFhjZJi8nANj2zZKgxcQDiEudNNwMHa1fap3qqUm8kA0hch3L3ng9H7jpsdfov mtTu256H2NNqpr1tr396TpGcjwN7Z5z2nCp6gMtIJW5OUw26TeW6hx6AotSHeY31 PSNhH0FkYxpfTYtJ4ac7CQvgUnz73Wb/o+RzvmUdS74fTpkz0qR/qZd7d/jvgiLX ay5SGEKz9VTEEeHTsZNXo87LWBc2QC/3z0QIhIoCuIA/zfIbcXmPyFl1WVSc6R6v 8vAoFO/pF1K+AOUbQyvj0JS9YFbPq2hnBJyOLw32w6ubfMFRCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQbB+Y5eMdXvth9ZmDIbZUF24flMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGUzMjM5MjQtNTE0OS0z ODVhLThmM2MtZGEwZTgyMGJhY2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYtxoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBXMjqlu3oifrcAXn0f3ETuRQHxBB4yGuNQ8YD6UgfLxuSmnKg1wr8e HeYfVAxmMrrJDNI9Lfad66jA0unltX4aU0qaMCEKUJJY+GFIHNjn596kxbWKrYMy VwEnP4Al49hi+iSZi1Vax/GIQTYhuZ/dF3KLiN3Bvs1X8sGCB0aATc3v4nGbhuBW B+hflby0l6WiGo85vMCFFP8Vvl2Xc8JR3sARwDgzfJ/Wj/osgAb2RUpSRjDsQa5B w1wpXxqZCGKARRuB2c/ou71tgpiAmb92YWBR6R72SOr2G1o33b1kRXwr0kBopk8k yrr41illxKRpKzX2Qp02j1SuK4cCASw= -----END CERTIFICATE-----Generated at Sun Aug 24 02:24:18 2025 by rpki-client