$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d93ac7a-0617-3f77-b81f-0a0e542217bc.roa File: 1d93ac7a-0617-3f77-b81f-0a0e542217bc.roa (raw, json) Hash identifier: 90BCPwC+WUYSP9IbQ+CE/XHxJWpD1gCnMtc9As9utYY= Subject key identifier: 34:09:F3:B8:AA:02:84:CF:03:E0:94:68:D3:A2:E2:4B:10:53:7D:B3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC4D2720EAAF9B6DACC0B80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d93ac7a-0617-3f77-b81f-0a0e542217bc.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 98.212.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:d2:72:0e:aa:f9:b6:da:cc:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=98903268-5d4c-45b7-8ea4-e8e956bac8bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c4:88:84:a9:0b:33:58:7c:9e:ac:30:5f:ad: 0b:88:a8:2a:f2:d3:ec:93:bd:10:6e:8d:b5:ad:97: 1e:89:29:7e:cd:33:11:6d:65:64:16:4b:30:2c:e9: 23:98:a3:21:6e:3a:23:2d:29:50:0a:30:a1:59:80: 61:11:a1:40:9a:0d:2d:de:52:30:9a:4d:7d:04:aa: 13:b5:61:62:af:d4:91:8c:a3:69:6d:92:18:c4:d7: 64:df:a4:05:26:9a:bd:0d:e9:0c:57:a1:62:b9:78: 93:94:35:a7:5b:84:77:11:c8:e6:d8:93:37:ce:e0: 47:6d:53:ed:c0:f6:5f:af:a0:85:6f:d7:5c:9c:5f: 23:92:95:38:4d:30:1a:e9:9e:17:4d:b4:de:4a:5b: 1c:f3:6d:43:f4:b9:e1:5a:52:8e:c3:e0:5f:73:37: 82:7d:7c:40:b3:38:97:0f:eb:c0:18:c3:84:d5:08: 5f:1f:a8:2e:fd:72:53:ca:e5:0b:57:35:1e:91:f6: 27:7e:60:09:de:3c:8b:20:33:f8:6d:e5:65:83:6a: 56:48:ae:a4:1b:7d:1c:4a:27:9f:14:03:56:cc:1f: 6c:18:de:4a:7c:d0:09:4f:49:9f:f0:e6:de:6f:b7: d0:a6:a3:08:ef:50:76:01:39:36:47:a1:cf:4e:b4: 84:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:09:F3:B8:AA:02:84:CF:03:E0:94:68:D3:A2:E2:4B:10:53:7D:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d93ac7a-0617-3f77-b81f-0a0e542217bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.212.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:5c:bc:84:d9:d6:67:b8:2c:cc:30:29:b8:5b:17:c3:07:dd: 82:e3:a3:c3:27:07:5a:26:2b:dc:ec:0a:2c:23:ac:16:a3:c3: bc:fa:3c:86:f1:16:78:42:bd:34:db:34:4f:02:68:aa:7b:3f: 45:36:ed:b1:af:bb:d4:a0:8f:dc:49:a8:9f:04:c6:91:f2:87: a3:82:cf:2d:66:f3:e2:a9:e8:e6:c5:78:3a:c6:b8:9a:f8:9d: df:ef:63:3e:e1:e6:6c:f5:9e:5d:29:47:cc:d5:53:5f:62:61: 90:2f:6d:20:9f:e9:0d:d4:6e:22:29:b3:0f:63:2d:9d:09:89: 4b:ef:84:7e:79:8e:11:dd:24:e1:fe:96:7c:dd:0a:78:11:3b: 36:48:53:2e:c2:c0:19:27:14:43:b9:e0:9a:54:08:27:cc:62: bd:4d:65:a1:2c:30:65:25:32:8f:7d:46:ef:d3:a3:04:81:c9: 17:53:fe:49:5b:e7:d1:7c:0a:8a:38:1d:f2:97:de:16:23:31: 60:77:3e:f6:33:5a:e4:57:d0:09:28:74:ae:83:30:c7:c5:38: 6c:13:c4:85:cd:22:46:a7:7f:26:4a:20:70:9c:c2:3f:b0:f3: f7:84:70:7a:0a:27:39:b9:61:9f:53:af:82:81:8f:41:59:eb: bc:d5:de:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxNJyDqr5ttrMC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk OTg5MDMyNjgtNWQ0Yy00NWI3LThlYTQtZThlOTU2YmFjOGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsSIhKkLM1h8nqwwX60LiKgq8tPsk70Qbo21 rZceiSl+zTMRbWVkFkswLOkjmKMhbjojLSlQCjChWYBhEaFAmg0t3lIwmk19BKoT tWFir9SRjKNpbZIYxNdk36QFJpq9DekMV6FiuXiTlDWnW4R3Ecjm2JM3zuBHbVPt wPZfr6CFb9dcnF8jkpU4TTAa6Z4XTbTeSlsc821D9LnhWlKOw+BfczeCfXxAsziX D+vAGMOE1QhfH6gu/XJTyuULVzUekfYnfmAJ3jyLIDP4beVlg2pWSK6kG30cSief FANWzB9sGN5KfNAJT0mf8Obeb7fQpqMI71B2ATk2R6HPTrSEqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQJ87iqAoTPA+CUaNOi4ksQU32zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWQ5M2FjN2EtMDYxNy0z Zjc3LWI4MWYtMGEwZTU0MjIxN2JjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYtSKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL9cvITZ1me4LMwwKbhbF8MH3YLjo8MnB1omK9zsCiwjrBajw7z6PIbx FnhCvTTbNE8CaKp7P0U27bGvu9Sgj9xJqJ8ExpHyh6OCzy1m8+Kp6ObFeDrGuJr4 nd/vYz7h5mz1nl0pR8zVU19iYZAvbSCf6Q3UbiIpsw9jLZ0JiUvvhH55jhHdJOH+ lnzdCngROzZIUy7CwBknFEO54JpUCCfMYr1NZaEsMGUlMo99Ru/TowSByRdT/klb 59F8Coo4HfKX3hYjMWB3PvYzWuRX0AkodK6DMMfFOGwTxIXNIkanfyZKIHCcwj+w 8/eEcHoKJzm5YZ9Tr4KBj0FZ67zV3k0= -----END CERTIFICATE-----Generated at Sun Aug 24 01:13:25 2025 by rpki-client