$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e072241-856f-3219-a30e-a6c13d0d90e1.roa File: 1e072241-856f-3219-a30e-a6c13d0d90e1.roa (raw, json) Hash identifier: h9TBVeuUmm0Y30Zk+aTe8Y1zZNN0NwJL9DcXGbL6rV0= Subject key identifier: DF:4E:02:E9:E7:EC:FF:FE:22:AB:F3:7B:AE:51:79:1D:52:07:A0:83 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC4D8D25A6CA639AAEE6A80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e072241-856f-3219-a30e-a6c13d0d90e1.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 98.220.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:d8:d2:5a:6c:a6:39:aa:ee:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=4df5f33a-2109-43fd-bcb7-aa82221470b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:34:8a:73:1e:b1:0d:ac:fb:c4:f8:38:c3:15: cd:12:3d:7a:3a:12:34:6b:ee:0a:2b:71:35:4a:bb: 5e:b7:5d:f3:f9:c8:18:ac:cd:55:91:94:27:73:c4: 8c:df:21:dd:c7:e1:0c:01:60:15:bb:4f:e5:99:16: 8b:ed:58:54:6c:f0:0a:9d:ab:54:8f:81:a3:5a:cb: 29:5c:69:13:30:7f:1a:01:ba:52:0a:27:82:36:3c: 01:d8:f8:14:0f:d4:37:14:6b:7c:14:eb:13:2f:41: 4f:84:c0:96:4c:83:e4:0b:72:54:0e:73:f3:ab:93: 45:a4:20:b7:d1:2a:5c:c8:35:61:54:be:c9:2d:73: 41:4d:d3:57:6c:b6:ad:b3:2f:ff:9c:3d:d6:d8:26: 2d:bb:0c:78:34:76:33:b9:c6:33:29:6a:b8:80:20: 12:d1:72:a4:a8:ea:bc:c2:c3:bc:d0:13:25:b1:3c: 5e:aa:2c:d0:ad:11:75:54:02:24:87:20:d5:0f:6b: fc:4a:0c:e6:c9:cb:dd:f8:37:a3:ef:2e:4b:dc:49: 58:fa:e9:3c:bf:1f:80:cf:1f:45:dc:d7:ab:32:2b: 2a:b2:eb:bb:32:51:e2:c9:ea:65:57:b8:c8:83:c1: 6f:1b:03:51:7d:ee:81:5c:85:a0:2d:92:e5:7b:5d: 53:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:4E:02:E9:E7:EC:FF:FE:22:AB:F3:7B:AE:51:79:1D:52:07:A0:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e072241-856f-3219-a30e-a6c13d0d90e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.220.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:a5:ee:61:97:65:33:ff:c9:d0:a3:37:09:3f:93:d4:8a:18: 80:63:66:00:d2:37:3f:36:ee:a4:95:e2:66:cb:a9:1b:0c:34: 00:37:f0:81:ba:15:97:e6:ef:8c:91:ec:36:82:7b:97:81:0a: 9b:27:17:b8:d3:dd:f8:00:2f:52:cb:4f:37:d7:7f:e7:9b:7d: e8:30:df:80:de:95:e7:c8:3a:a6:e7:c1:17:61:d6:73:e6:b9: a1:db:c6:4d:77:cf:fb:83:15:4a:3f:9e:de:d7:51:c2:d6:cd: e0:61:88:8a:c8:52:b2:52:b6:dd:25:d6:38:15:64:d7:27:e2: 69:c9:55:11:a0:85:5c:5f:dd:fe:b7:a7:70:10:a6:cb:44:17: c7:a6:e0:97:dd:c3:47:ba:ed:0c:dc:08:59:80:57:e0:90:de: 56:81:2c:74:fa:37:c2:ec:3f:1b:5f:80:66:6c:35:bc:5b:f8: e8:44:18:aa:e0:c5:ad:af:fb:80:1f:16:35:e9:0a:a0:49:44: 94:8b:23:e7:34:2d:3d:21:73:fb:27:ce:11:bd:f9:c4:d6:da: e3:bd:17:90:0f:3c:ed:94:ed:9d:80:64:48:59:03:c1:8e:4a: 8c:38:52:46:c4:a6:4d:4c:19:68:94:3e:55:33:03:21:c9:81: 15:5c:ed:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxNjSWmymOaruaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NGRmNWYzM2EtMjEwOS00M2ZkLWJjYjctYWE4MjIyMTQ3MGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTSKcx6xDaz7xPg4wxXNEj16OhI0a+4KK3E1 Srtet13z+cgYrM1VkZQnc8SM3yHdx+EMAWAVu0/lmRaL7VhUbPAKnatUj4GjWssp XGkTMH8aAbpSCieCNjwB2PgUD9Q3FGt8FOsTL0FPhMCWTIPkC3JUDnPzq5NFpCC3 0SpcyDVhVL7JLXNBTdNXbLatsy//nD3W2CYtuwx4NHYzucYzKWq4gCAS0XKkqOq8 wsO80BMlsTxeqizQrRF1VAIkhyDVD2v8Sgzmycvd+Dej7y5L3ElY+uk8vx+Azx9F 3NerMisqsuu7MlHiyeplV7jIg8FvGwNRfe6BXIWgLZLle11TNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9OAunn7P/+Iqvze65ReR1SB6CDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWUwNzIyNDEtODU2Zi0z MjE5LWEzMGUtYTZjMTNkMGQ5MGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYtyQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALKl7mGXZTP/ydCjNwk/k9SKGIBjZgDSNz827qSV4mbLqRsMNAA38IG6 FZfm74yR7DaCe5eBCpsnF7jT3fgAL1LLTzfXf+ebfegw34DelefIOqbnwRdh1nPm uaHbxk13z/uDFUo/nt7XUcLWzeBhiIrIUrJStt0l1jgVZNcn4mnJVRGghVxf3f63 p3AQpstEF8em4Jfdw0e67QzcCFmAV+CQ3laBLHT6N8LsPxtfgGZsNbxb+OhEGKrg xa2v+4AfFjXpCqBJRJSLI+c0LT0hc/snzhG9+cTW2uO9F5APPO2U7Z2AZEhZA8GO Sow4UkbEpk1MGWiUPlUzAyHJgRVc7T4= -----END CERTIFICATE-----Generated at Sat Aug 23 23:15:16 2025 by rpki-client