$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/128d7091-0236-34d7-a042-2b113a111f38.roa File: 128d7091-0236-34d7-a042-2b113a111f38.roa (raw, json) Hash identifier: 8v/TuHKPyMRQiA/jmqy2NFx6lVQSkOyR/2N2cvKX2Rk= Subject key identifier: 25:23:34:10:4E:C0:F5:65:69:0A:13:AB:C8:84:77:B3:E6:4B:C2:64 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC4DD288DE0C211E291CCC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/128d7091-0236-34d7-a042-2b113a111f38.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 98.223.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:dd:28:8d:e0:c2:11:e2:91:cc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=7f8d65af-9392-4606-a0dc-71e3f112cf1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ef:23:88:78:c9:33:c9:7b:65:2e:ad:ad:9e: 0c:be:e4:04:d1:d5:13:7e:ad:d6:b9:2b:8c:39:33: a7:41:e2:57:eb:42:e2:4a:bc:01:08:91:ef:7b:ca: 8e:cb:f3:0d:ae:19:67:23:c6:8c:72:10:43:da:67: 69:e8:ce:10:70:07:1f:4e:30:ff:50:fd:99:01:f4: 2e:d2:5a:c5:e4:e4:43:ce:f5:fe:48:98:fd:b5:81: 1c:3f:16:b8:a9:14:d4:e3:c4:4e:58:6e:4e:24:9e: 87:73:14:24:75:d3:92:fe:6b:03:87:3a:7a:73:d1: 13:ca:c6:a4:04:d7:de:75:c6:09:c0:d6:a4:a2:c6: df:0d:94:16:bb:93:7c:19:bd:a1:7b:eb:c9:87:61: 6c:13:ed:6c:26:b7:8c:d6:2b:55:9e:e3:bf:49:5c: 32:61:57:d1:ef:55:42:5d:a2:84:04:d5:30:83:6b: a6:75:96:a4:4f:20:4d:6f:6d:17:1a:50:ab:84:3f: 45:03:e7:69:81:90:f6:35:19:27:fd:64:ee:34:3b: 6a:5d:95:52:3d:4b:77:13:81:5f:d6:9b:ea:32:c3: d4:2e:7e:67:9b:91:09:8d:59:a3:59:19:1a:61:ed: 21:50:ab:76:9d:40:b4:83:c3:bd:74:7a:fb:97:a8: c7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:23:34:10:4E:C0:F5:65:69:0A:13:AB:C8:84:77:B3:E6:4B:C2:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/128d7091-0236-34d7-a042-2b113a111f38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.223.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d4:f4:98:af:41:59:fe:41:d2:bd:99:87:c6:bc:fd:cf:a5:b2: ab:4b:7f:c7:62:be:64:ae:28:b6:b2:a1:4d:3c:7b:b7:80:fc: 9a:34:9d:a2:f9:5a:37:1f:25:01:04:68:ae:93:0c:f4:28:6f: 2c:37:3a:06:e3:89:e2:1d:13:c2:d1:cd:18:56:61:62:b1:23: 7a:64:b9:19:0c:ba:9d:db:04:33:86:15:70:68:bc:fd:88:34: ef:e5:43:57:13:49:94:4f:79:0d:0b:a4:81:f6:33:68:8f:07: 93:94:8d:4f:f6:be:b4:44:4d:16:03:25:6b:83:53:ba:b6:98: aa:0a:b8:97:d3:01:c1:3e:69:2b:97:c3:7b:5d:90:95:d1:50: 22:89:fe:d7:94:13:b9:c1:0e:84:b4:20:07:c7:ee:b9:1c:4e: 7b:bb:d4:dd:5c:f3:0b:22:74:8d:26:b9:39:46:1d:f8:90:13: 12:82:51:79:fe:b8:4a:c4:43:59:75:0c:c2:23:57:bd:52:ff: 45:16:c6:46:f3:46:66:06:00:01:f7:88:23:94:97:69:69:0c: 7e:5c:fc:ef:3a:17:0f:3f:e3:3c:57:b3:9e:89:4b:34:27:59: e2:f2:a8:f3:a5:16:61:bb:77:7c:ca:4c:32:e5:a5:3a:23:8e: fb:39:3c:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxN0ojeDCEeKRzMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk N2Y4ZDY1YWYtOTM5Mi00NjA2LWEwZGMtNzFlM2YxMTJjZjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1e8jiHjJM8l7ZS6trZ4MvuQE0dUTfq3WuSuM OTOnQeJX60LiSrwBCJHve8qOy/MNrhlnI8aMchBD2mdp6M4QcAcfTjD/UP2ZAfQu 0lrF5ORDzvX+SJj9tYEcPxa4qRTU48ROWG5OJJ6HcxQkddOS/msDhzp6c9ETysak BNfedcYJwNakosbfDZQWu5N8Gb2he+vJh2FsE+1sJreM1itVnuO/SVwyYVfR71VC XaKEBNUwg2umdZakTyBNb20XGlCrhD9FA+dpgZD2NRkn/WTuNDtqXZVSPUt3E4Ff 1pvqMsPULn5nm5EJjVmjWRkaYe0hUKt2nUC0g8O9dHr7l6jHuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUjNBBOwPVlaQoTq8iEd7PmS8JkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTI4ZDcwOTEtMDIzNi0z NGQ3LWEwNDItMmIxMTNhMTExZjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYt9UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANT0mK9BWf5B0r2Zh8a8/c+lsqtLf8divmSuKLayoU08e7eA/Jo0naL5 WjcfJQEEaK6TDPQobyw3OgbjieIdE8LRzRhWYWKxI3pkuRkMup3bBDOGFXBovP2I NO/lQ1cTSZRPeQ0LpIH2M2iPB5OUjU/2vrRETRYDJWuDU7q2mKoKuJfTAcE+aSuX w3tdkJXRUCKJ/teUE7nBDoS0IAfH7rkcTnu71N1c8wsidI0muTlGHfiQExKCUXn+ uErEQ1l1DMIjV71S/0UWxkbzRmYGAAH3iCOUl2lpDH5c/O86Fw8/4zxXs56JSzQn WeLyqPOlFmG7d3zKTDLlpTojjvs5PH4= -----END CERTIFICATE-----Generated at Sat Aug 23 23:35:37 2025 by rpki-client