$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e21640a-dfe6-35db-82e7-47b902f6c3d5.roa File: 1e21640a-dfe6-35db-82e7-47b902f6c3d5.roa (raw, json) Hash identifier: Wsr4UeZnh/BTuC/JXq0jx4Rpi+Gst5UuOnYPDpDVILs= Subject key identifier: E4:C1:5E:43:16:BE:EE:67:F1:6D:36:FC:DB:5D:E6:39:D7:50:91:90 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC4D41FEF84F734F40E2B40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e21640a-dfe6-35db-82e7-47b902f6c3d5.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 98.212.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:d4:1f:ef:84:f7:34:f4:0e:2b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=94a3af00-8314-41ae-9890-650ac9ec970b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c3:5b:1b:25:d0:b6:35:ff:f9:54:49:10:67: 56:83:76:b4:ca:25:5b:80:9e:04:3c:ae:a5:ab:69: 83:cb:1d:a2:8c:30:40:34:12:03:4b:08:5b:21:4f: 4a:cc:22:24:df:36:16:32:3a:ca:ed:42:1c:23:4d: 2d:40:d6:13:e9:c5:a5:ee:ec:ed:27:c1:37:2d:74: 2a:d8:3b:f6:75:2d:04:e3:58:1d:33:45:43:f7:84: 4d:75:98:11:65:58:9c:fb:c9:27:b7:ce:28:1c:68: 3d:7a:7d:bd:1e:be:ce:d0:d7:b4:6b:c4:0f:4b:8e: 1d:87:3b:50:44:c3:fe:83:58:6c:6b:1a:48:0f:74: 52:32:6f:c2:d4:27:f8:16:8a:f4:22:8b:11:70:be: b6:89:ec:ef:8a:76:11:33:e2:f3:11:0f:2c:9f:72: fb:4a:48:90:a1:b6:09:16:92:e1:fb:02:0f:83:c3: a4:10:03:49:f6:35:63:18:ec:f7:bc:3a:a4:24:da: 49:ff:58:3d:03:e7:6c:45:d6:01:a8:a3:a3:33:46: 8b:c3:6a:17:bd:a5:52:b6:eb:7a:68:a5:e7:1d:72: 0e:98:7e:02:ce:61:87:06:72:fc:a4:e4:ff:a9:ff: bf:e0:2c:a1:18:4e:35:d4:ee:9f:81:05:56:c4:f4: 68:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:C1:5E:43:16:BE:EE:67:F1:6D:36:FC:DB:5D:E6:39:D7:50:91:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e21640a-dfe6-35db-82e7-47b902f6c3d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.212.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:af:07:05:72:08:c5:c2:8a:25:ee:6b:70:05:d1:88:fa:d6: a0:8f:94:29:89:7a:b4:f4:27:da:73:a2:90:27:ff:6d:61:29: fd:86:8e:a4:fa:b9:e6:fc:ba:77:23:58:25:c1:5e:01:2e:53: a2:82:c7:e0:da:f6:c7:5b:f4:ab:ce:47:b4:97:03:ee:d9:bd: 70:e6:11:29:b8:51:73:e9:ea:a1:d0:ba:f5:5d:03:bd:17:31: b7:44:05:3c:10:c2:9d:2d:eb:3b:e0:40:b1:f1:68:9a:59:1e: ba:32:46:50:8c:f9:5e:4c:ae:bb:74:a4:46:e5:17:0b:58:8f: ca:49:b8:3b:26:d0:d1:ba:4c:46:25:49:40:7d:cc:7b:e5:6e: f8:60:ff:e5:11:32:7e:02:f1:a3:44:5a:63:96:d5:2a:76:fe: 1c:b0:41:4e:53:42:e2:9c:52:88:19:99:8a:e4:f9:35:1d:7a: a2:41:84:e9:2a:5f:89:78:53:51:55:31:59:9c:d9:4a:36:5d: 50:ed:31:7a:91:18:8e:ee:72:55:cd:07:77:08:a5:64:88:22: 81:64:c7:b1:2a:6b:9a:02:3c:9a:3a:3a:b7:15:4c:86:b2:e2: 47:e3:5d:27:2e:96:8c:e3:d1:61:00:d3:e5:f9:1e:b4:d9:76: 6f:c6:5e:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxNQf74T3NPQOK0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk OTRhM2FmMDAtODMxNC00MWFlLTk4OTAtNjUwYWM5ZWM5NzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcNbGyXQtjX/+VRJEGdWg3a0yiVbgJ4EPK6l q2mDyx2ijDBANBIDSwhbIU9KzCIk3zYWMjrK7UIcI00tQNYT6cWl7uztJ8E3LXQq 2Dv2dS0E41gdM0VD94RNdZgRZVic+8knt84oHGg9en29Hr7O0Ne0a8QPS44dhztQ RMP+g1hsaxpID3RSMm/C1Cf4For0IosRcL62iezvinYRM+LzEQ8sn3L7SkiQobYJ FpLh+wIPg8OkEANJ9jVjGOz3vDqkJNpJ/1g9A+dsRdYBqKOjM0aLw2oXvaVStut6 aKXnHXIOmH4CzmGHBnL8pOT/qf+/4CyhGE411O6fgQVWxPRo6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOTBXkMWvu5n8W02/Ntd5jnXUJGQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWUyMTY0MGEtZGZlNi0z NWRiLTgyZTctNDdiOTAyZjZjM2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYtRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJevBwVyCMXCiiXua3AF0Yj61qCPlCmJerT0J9pzopAn/21hKf2GjqT6 ueb8uncjWCXBXgEuU6KCx+Da9sdb9KvOR7SXA+7ZvXDmESm4UXPp6qHQuvVdA70X MbdEBTwQwp0t6zvgQLHxaJpZHroyRlCM+V5Mrrt0pEblFwtYj8pJuDsm0NG6TEYl SUB9zHvlbvhg/+URMn4C8aNEWmOW1Sp2/hywQU5TQuKcUogZmYrk+TUdeqJBhOkq X4l4U1FVMVmc2Uo2XVDtMXqRGI7uclXNB3cIpWSIIoFkx7Eqa5oCPJo6OrcVTIay 4kfjXSculozj0WEA0+X5HrTZdm/GXms= -----END CERTIFICATE-----Generated at Sat Aug 23 22:58:50 2025 by rpki-client