$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e974dd8-7afb-32be-a6f8-668591a2ff57.roa File: 1e974dd8-7afb-32be-a6f8-668591a2ff57.roa (raw, json) Hash identifier: xApwmJo9SM0KCL1ODXDpjXK8IK/M7Q5AtaehjvfGnXA= Subject key identifier: 3D:70:6E:C8:44:7A:6A:8A:67:3C:DB:83:78:42:26:01:A0:18:2F:0E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC1F53AFE96A56799EAFDB4 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e974dd8-7afb-32be-a6f8-668591a2ff57.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33287 IP address blocks: 76.98.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:f5:3a:fe:96:a5:67:99:ea:fd:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=8ceffcec-4f0a-431f-a4a6-2455948f0a3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5d:09:8b:ee:8e:bf:ac:cc:7d:d9:c3:89:15: a6:cc:64:17:2d:63:12:16:7e:f7:8f:e0:ee:e2:f3: 3f:57:4b:0c:bc:51:1a:1a:4a:6a:b5:17:49:8f:e6: 95:ac:8a:c9:7f:73:c3:5a:f3:d0:ea:9d:86:8e:72: 05:1c:5f:e4:45:a1:7e:8f:e8:b9:dd:fd:6f:21:ad: 6e:d6:a1:d3:bf:51:43:1d:eb:81:ea:36:b5:8d:46: d3:fe:e5:5c:b2:dd:ca:9c:14:90:3f:25:09:18:95: 64:4a:34:aa:17:a4:7c:db:eb:5d:77:4d:7a:5b:e5: b1:63:82:eb:b2:45:28:94:c5:13:8b:7a:f0:3b:c5: aa:d9:4a:06:fa:23:28:1e:df:b0:ae:2e:ca:2d:f3: ac:4c:15:6a:94:17:d8:fd:f9:b0:43:81:ee:7e:71: 90:b4:c4:5f:b2:2e:ae:4d:a2:61:e8:90:40:7a:9c: 03:6a:68:09:62:ed:66:94:33:66:66:11:fa:66:1a: 21:f2:95:05:81:3d:22:e8:64:d3:ad:5f:a6:33:db: 10:6a:55:70:4f:ed:d7:60:9a:a4:9e:19:20:fb:ac: 15:bb:28:ba:36:1b:a0:0b:37:85:86:c0:84:56:07: 4f:69:d0:22:b6:78:cb:20:c2:be:be:cc:d6:c4:b4: 87:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:70:6E:C8:44:7A:6A:8A:67:3C:DB:83:78:42:26:01:A0:18:2F:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e974dd8-7afb-32be-a6f8-668591a2ff57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.98.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption da:a4:12:8d:4d:ac:d2:a8:6b:41:00:e5:b3:e8:f6:21:47:97: 63:e2:d6:f3:a6:c4:00:e1:df:b6:6c:ee:03:a6:76:1d:de:78: ca:f3:04:b1:46:00:23:2c:55:d1:6f:9a:96:bc:fe:1e:d1:ad: cb:e5:2f:96:b3:85:bf:a6:ee:17:64:58:13:f7:d2:80:06:b9: aa:f8:d6:be:a9:c7:67:19:a9:bd:c5:f5:42:5b:f1:5d:2f:ad: 7e:8b:2d:ce:b9:ec:15:34:0f:7e:9f:a1:b5:e2:84:b3:76:ac: ce:a2:88:be:59:30:52:06:01:8b:f9:35:b5:ff:15:ee:f6:2a: d3:66:8e:06:d7:c5:ec:d6:55:89:aa:01:fc:bb:ad:b4:ea:32: a6:b9:b3:2a:38:6e:54:97:51:ac:aa:0a:2e:6c:ca:49:e0:0b: 15:e1:e6:ba:67:2f:83:3f:3e:58:b7:a7:e2:e3:fe:8f:0d:16: 1b:49:af:b6:7d:0e:65:e0:33:c2:f2:26:76:b7:76:87:f3:5b: 68:59:92:21:9b:9c:17:34:05:8a:ee:17:01:28:bc:2e:8c:b0: a5:27:60:bf:e2:05:9e:7f:c5:6d:44:6c:bb:b5:de:fe:c7:f2: e3:45:16:ff:e2:f5:f4:eb:21:0f:b6:98:e4:2c:67:73:81:71: a9:1b:fb:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswfU6/palZ5nq/bQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk OGNlZmZjZWMtNGYwYS00MzFmLWE0YTYtMjQ1NTk0OGYwYTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl10Ji+6Ov6zMfdnDiRWmzGQXLWMSFn73j+Du 4vM/V0sMvFEaGkpqtRdJj+aVrIrJf3PDWvPQ6p2GjnIFHF/kRaF+j+i53f1vIa1u 1qHTv1FDHeuB6ja1jUbT/uVcst3KnBSQPyUJGJVkSjSqF6R82+tdd016W+WxY4Lr skUolMUTi3rwO8Wq2UoG+iMoHt+wri7KLfOsTBVqlBfY/fmwQ4HufnGQtMRfsi6u TaJh6JBAepwDamgJYu1mlDNmZhH6Zhoh8pUFgT0i6GTTrV+mM9sQalVwT+3XYJqk nhkg+6wVuyi6NhugCzeFhsCEVgdPadAitnjLIMK+vszWxLSHQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD1wbshEemqKZzzbg3hCJgGgGC8OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWU5NzRkZDgtN2FmYi0z MmJlLWE2ZjgtNjY4NTkxYTJmZjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTGJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANqkEo1NrNKoa0EA5bPo9iFHl2Pi1vOmxADh37Zs7gOmdh3eeMrzBLFG ACMsVdFvmpa8/h7RrcvlL5azhb+m7hdkWBP30oAGuar41r6px2cZqb3F9UJb8V0v rX6LLc657BU0D36fobXihLN2rM6iiL5ZMFIGAYv5NbX/Fe72KtNmjgbXxezWVYmq Afy7rbTqMqa5syo4blSXUayqCi5sykngCxXh5rpnL4M/Pli3p+Lj/o8NFhtJr7Z9 DmXgM8LyJna3dofzW2hZkiGbnBc0BYruFwEovC6MsKUnYL/iBZ5/xW1EbLu13v7H 8uNFFv/i9fTrIQ+2mOQsZ3OBcakb+wg= -----END CERTIFICATE-----Generated at Sun Aug 24 09:33:47 2025 by rpki-client