$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0eb30f4b-41a9-3b3e-af37-1f4ba5325993.roa File: 0eb30f4b-41a9-3b3e-af37-1f4ba5325993.roa (raw, json) Hash identifier: 5E0bW1Dwo4EAzpWzfV+SeswXOluOV7+VYoFcjvfs5h8= Subject key identifier: A9:A8:17:76:F5:11:60:1C:2D:27:9C:F4:BC:5C:22:DF:50:8E:17:A3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC4D6DC5BF25F86CBA4FA00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0eb30f4b-41a9-3b3e-af37-1f4ba5325993.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 98.214.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:d6:dc:5b:f2:5f:86:cb:a4:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=19f6a218-01f7-40c2-a2be-3984070f9054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:27:e7:b0:a7:42:56:a0:8d:0c:62:85:4f:2b: 77:9e:2f:4b:70:ce:79:d2:6f:fc:47:70:01:55:1d: e0:c5:0f:01:7d:8b:bc:ba:4b:b1:bc:e9:1c:3f:5c: ac:7c:4a:71:42:5c:65:0a:15:47:2c:6f:3b:bb:4a: 88:79:59:aa:da:3b:b3:b3:04:02:21:2f:ff:80:26: ae:83:82:20:07:9d:3f:4a:72:c1:68:13:00:a5:88: 43:c6:9c:2c:2c:39:5a:f3:1d:e9:ed:64:46:22:bc: 40:e9:90:76:dc:25:46:6f:2e:ab:b7:0e:f1:c1:bb: 1d:d1:2b:f8:af:78:e3:e8:0a:18:47:fd:39:3a:05: 97:4f:1a:14:78:76:6f:f8:42:75:8d:9b:ff:3a:28: b1:3b:3a:8d:46:5e:d9:bf:b0:7c:05:ba:50:80:56: 52:23:b5:13:81:ee:cf:2c:96:d1:e1:55:46:34:d8: 2f:42:55:cf:33:32:e1:57:d5:a5:a4:9d:7d:8e:85: f8:b1:de:af:1d:54:3f:9e:c9:7a:4e:a2:51:04:45: 04:33:e5:02:16:0c:23:f2:80:70:cf:43:57:55:95: a8:9e:70:52:c8:ff:bc:aa:d8:2c:c8:dd:52:38:b6: 36:65:03:ac:a1:e2:c9:9e:b2:dc:8e:65:f6:67:d7: 16:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A8:17:76:F5:11:60:1C:2D:27:9C:F4:BC:5C:22:DF:50:8E:17:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0eb30f4b-41a9-3b3e-af37-1f4ba5325993.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.214.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:e3:9c:3e:ec:90:a9:5c:b0:81:2b:73:9b:86:9f:b8:86:d9: cd:9e:66:37:5c:26:c9:7c:5b:83:4a:de:2a:9e:a8:85:58:72: 5f:99:b0:42:e8:09:12:45:03:f6:d7:d8:09:7d:d4:3a:79:d4: e0:52:88:c7:16:bb:76:34:fd:6c:36:cc:85:0e:c7:a5:c7:48: f0:ad:58:c7:ce:85:57:14:d7:01:13:6f:e1:36:29:78:91:e4: c8:14:bb:2e:47:62:da:a3:ea:94:17:a7:a6:ad:f8:f8:aa:af: 0e:66:b5:28:3f:f7:50:7f:6b:98:0d:e4:58:d9:37:f9:4e:6f: c1:34:12:66:07:b0:63:e3:5d:65:fa:28:ec:9b:0a:f9:32:fe: c0:98:67:2a:0b:d7:0e:95:9f:c5:bb:37:ab:d9:aa:c1:88:67: b5:04:52:36:2c:b3:4f:ad:9f:bc:b0:17:ab:cb:0a:fd:4d:f4: 76:65:8c:b6:4b:cd:d2:b8:e2:c1:e1:a7:d2:63:3e:07:73:cc: f8:29:97:5b:50:3e:74:9c:68:48:32:ed:8b:27:f4:0f:94:2b: 18:30:e5:d5:03:be:d2:ec:1f:39:ac:23:79:41:04:64:a5:0f: 6d:8a:47:ca:30:c6:cb:6b:1b:42:b2:0a:7d:28:91:68:6b:a1: a7:67:7e:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxNbcW/Jfhsuk+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MTlmNmEyMTgtMDFmNy00MGMyLWEyYmUtMzk4NDA3MGY5MDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSfnsKdCVqCNDGKFTyt3ni9LcM550m/8R3AB VR3gxQ8BfYu8ukuxvOkcP1ysfEpxQlxlChVHLG87u0qIeVmq2juzswQCIS//gCau g4IgB50/SnLBaBMApYhDxpwsLDla8x3p7WRGIrxA6ZB23CVGby6rtw7xwbsd0Sv4 r3jj6AoYR/05OgWXTxoUeHZv+EJ1jZv/OiixOzqNRl7Zv7B8BbpQgFZSI7UTge7P LJbR4VVGNNgvQlXPMzLhV9WlpJ19joX4sd6vHVQ/nsl6TqJRBEUEM+UCFgwj8oBw z0NXVZWonnBSyP+8qtgsyN1SOLY2ZQOsoeLJnrLcjmX2Z9cW1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmoF3b1EWAcLSec9LxcIt9QjhejMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGViMzBmNGItNDFhOS0z YjNlLWFmMzctMWY0YmE1MzI1OTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYtawMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjjnD7skKlcsIErc5uGn7iG2c2eZjdcJsl8W4NK3iqeqIVYcl+ZsELo CRJFA/bX2Al91Dp51OBSiMcWu3Y0/Ww2zIUOx6XHSPCtWMfOhVcU1wETb+E2KXiR 5MgUuy5HYtqj6pQXp6at+Piqrw5mtSg/91B/a5gN5FjZN/lOb8E0EmYHsGPjXWX6 KOybCvky/sCYZyoL1w6Vn8W7N6vZqsGIZ7UEUjYss0+tn7ywF6vLCv1N9HZljLZL zdK44sHhp9JjPgdzzPgpl1tQPnScaEgy7Ysn9A+UKxgw5dUDvtLsHzmsI3lBBGSl D22KR8owxstrG0KyCn0okWhroadnfnA= -----END CERTIFICATE-----Generated at Sat Aug 23 23:23:56 2025 by rpki-client