$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21222292-714d-35fd-815a-6cced63111e1.roa File: 21222292-714d-35fd-815a-6cced63111e1.roa (raw, json) Hash identifier: V0rzxSt5P6ZiV9ZB5faY/T2xGnTVxRRVzQD6WGUaSIU= Subject key identifier: 98:4F:AA:3B:B9:7D:25:63:57:42:5F:F8:6E:46:53:F9:77:E2:73:48 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC36593DD59D7EAEA5E2DA0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21222292-714d-35fd-815a-6cced63111e1.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33660 IP address blocks: 73.98.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:65:93:dd:59:d7:ea:ea:5e:2d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=0afae5b2-d537-48e2-8355-a392fb0a0737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9c:54:9f:c9:48:bc:9d:c1:d2:37:c4:26:45: bc:12:f2:e4:06:5d:86:7f:93:66:f9:6d:b7:f9:30: a0:ce:6b:2e:d1:34:29:11:e1:e5:36:f6:b8:8b:83: ad:f6:8c:ab:d5:1a:21:80:54:45:43:18:08:0e:cb: fe:a4:cd:a8:cf:45:ab:b9:68:e5:6e:70:22:cf:aa: c9:16:7e:83:5a:b3:ca:e0:c7:95:81:2d:e4:4f:de: 75:69:61:57:69:3b:a8:e5:11:23:df:ac:81:05:ae: 48:b6:72:33:65:63:19:57:99:53:f5:90:7b:21:ce: 2e:7a:3f:64:58:4c:a7:57:5f:e9:64:8c:03:59:18: 7c:64:c4:83:50:3b:6e:a8:2f:be:ae:e4:dd:b6:43: ae:98:c4:73:82:d9:4c:9f:82:94:0a:7f:79:10:18: 6a:1d:b3:09:c1:3e:40:be:29:a7:9d:7e:b0:fe:a0: 8e:66:87:e6:e1:d1:46:a8:d7:12:0e:44:7e:d9:d3: ff:0a:9e:60:c6:37:51:d5:f2:e6:95:be:3e:c2:95: f5:41:d2:fb:b0:0b:86:54:14:65:a0:ed:14:8a:0c: 04:84:a2:15:47:32:f8:35:86:be:7d:f7:06:b4:12: c7:d2:8f:65:4c:53:0d:9c:93:b2:da:e5:aa:a6:8f: cc:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:4F:AA:3B:B9:7D:25:63:57:42:5F:F8:6E:46:53:F9:77:E2:73:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21222292-714d-35fd-815a-6cced63111e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.98.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:82:d9:6a:40:46:92:65:76:c4:e8:b7:e4:be:1a:99:90:d4: 8a:37:2d:05:d6:6f:49:12:fc:40:23:48:c6:e8:4c:cc:95:6b: 13:4e:3e:03:82:67:4b:fb:36:89:ef:79:08:69:22:a2:9c:35: e5:c9:13:78:61:df:97:00:0f:e2:8f:05:5a:25:fe:5a:33:e5: d7:73:d5:98:9c:67:5f:d1:51:95:12:83:da:42:6f:b3:1d:d7: 75:3f:15:c7:dc:53:53:1b:d0:0e:49:b3:1c:c5:93:1a:9e:a1: f8:6b:8f:76:77:b6:b3:5c:80:e8:1c:96:73:3f:79:a0:0d:a0: 9f:96:ca:63:91:c9:b2:f4:a5:b6:26:b9:c5:0a:65:70:76:31: f7:fc:c5:1d:3b:ba:12:ff:cb:38:b6:12:65:94:54:44:16:fa: 87:05:05:b8:be:7c:0d:c0:d2:67:05:a1:54:a8:80:97:3c:7b: b7:15:25:5a:08:d8:53:60:4d:02:28:40:81:a0:c1:9e:54:72: e9:67:ea:97:7e:bc:3b:78:f1:bb:d3:42:ee:7e:1a:93:59:5d: 5c:04:96:b3:61:80:14:c1:8c:0c:55:a5:d9:d9:7d:69:86:79: 6f:31:e8:73:33:40:9a:a6:0d:00:6b:83:28:24:9e:3d:ba:d8: 23:9c:21:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw2WT3VnX6upeLaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MGFmYWU1YjItZDUzNy00OGUyLTgzNTUtYTM5MmZiMGEwNzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5xUn8lIvJ3B0jfEJkW8EvLkBl2Gf5Nm+W23 +TCgzmsu0TQpEeHlNva4i4Ot9oyr1RohgFRFQxgIDsv+pM2oz0WruWjlbnAiz6rJ Fn6DWrPK4MeVgS3kT951aWFXaTuo5REj36yBBa5ItnIzZWMZV5lT9ZB7Ic4uej9k WEynV1/pZIwDWRh8ZMSDUDtuqC++ruTdtkOumMRzgtlMn4KUCn95EBhqHbMJwT5A vimnnX6w/qCOZofm4dFGqNcSDkR+2dP/Cp5gxjdR1fLmlb4+wpX1QdL7sAuGVBRl oO0UigwEhKIVRzL4NYa+ffcGtBLH0o9lTFMNnJOy2uWqpo/M6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJhPqju5fSVjV0Jf+G5GU/l34nNIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjEyMjIyOTItNzE0ZC0z NWZkLTgxNWEtNmNjZWQ2MzExMWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSWLCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCC2WpARpJldsTot+S+GpmQ1Io3LQXWb0kS/EAjSMboTMyVaxNOPgOC Z0v7NonveQhpIqKcNeXJE3hh35cAD+KPBVol/loz5ddz1ZicZ1/RUZUSg9pCb7Md 13U/FcfcU1Mb0A5JsxzFkxqeofhrj3Z3trNcgOgclnM/eaANoJ+WymORybL0pbYm ucUKZXB2Mff8xR07uhL/yzi2EmWUVEQW+ocFBbi+fA3A0mcFoVSogJc8e7cVJVoI 2FNgTQIoQIGgwZ5Uculn6pd+vDt48bvTQu5+GpNZXVwElrNhgBTBjAxVpdnZfWmG eW8x6HMzQJqmDQBrgygknj262COcIWI= -----END CERTIFICATE-----Generated at Sun Aug 24 03:07:57 2025 by rpki-client