$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21bf9adf-4b3a-3f18-9d0b-c9ba9f0ecea7.roa File: 21bf9adf-4b3a-3f18-9d0b-c9ba9f0ecea7.roa (raw, json) Hash identifier: PFnyim0viNWX0bHed/BrgoKcPPh1qb6VbZLYKrfZHs0= Subject key identifier: 7E:A7:BB:96:FA:4D:BF:F9:A3:45:35:FE:66:B7:5F:37:A2:5A:10:16 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC56BD8F2B995086E6124C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21bf9adf-4b3a-3f18-9d0b-c9ba9f0ecea7.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 98.234.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c5:6b:d8:f2:b9:95:08:6e:61:24:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=427924ec-4a19-4e35-a09f-8212d0c3a65e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:60:f0:17:4c:cd:09:0d:e7:08:85:55:c8:20: 63:aa:e1:60:e0:92:8c:f9:36:b7:40:bb:52:52:04: e1:ea:3d:a7:d2:7c:66:29:b6:6e:c2:10:9a:8c:03: bd:6c:30:fa:08:da:f0:90:d8:f5:43:bd:41:2c:c0: d8:14:24:b4:f0:72:c3:41:3a:08:42:ab:5e:68:74: 76:1f:50:6c:f5:59:f7:81:f7:79:73:d8:23:17:b2: 74:3a:62:b1:6f:d7:e4:5d:36:8a:bc:8e:79:09:3a: f6:4d:d8:ad:3b:ee:c9:75:bb:06:42:a6:34:38:00: 34:7a:3e:11:a7:88:62:41:58:f5:f9:13:3b:7e:d2: 31:a6:21:99:94:b5:b0:cf:02:52:df:ab:13:48:8f: 0c:9c:ff:5e:97:36:e9:d6:28:71:9f:d7:04:9a:b5: be:87:69:ff:fd:9f:4f:ca:7d:69:2e:79:e5:c3:3c: 42:38:55:bb:df:36:e7:6a:54:17:53:1f:d0:2c:90: 68:a5:e0:72:e3:04:98:c0:d6:30:cd:8d:51:db:32: 08:e1:4c:be:4d:1f:e3:84:5e:9b:f0:bf:55:e8:4a: 41:08:70:dc:87:81:1d:66:66:c6:0b:98:63:cb:18: 5d:74:6a:e6:4d:d8:0b:a2:ab:b6:6c:42:5e:b3:bf: b8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:A7:BB:96:FA:4D:BF:F9:A3:45:35:FE:66:B7:5F:37:A2:5A:10:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21bf9adf-4b3a-3f18-9d0b-c9ba9f0ecea7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.234.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:b7:10:48:3e:ea:5b:74:c4:4a:12:4d:fd:19:6a:9e:45:85: 11:b1:a0:6e:82:33:f6:07:30:24:6c:3d:bf:fa:4c:21:c7:9b: b5:4a:21:e8:dd:96:68:58:a2:6b:0f:72:cf:1e:0c:63:33:3e: 26:89:af:0e:bd:b0:8d:1e:08:01:09:b4:0f:59:38:d9:f6:44: 50:4a:e2:af:d2:a3:8f:bf:0d:64:1d:c9:2b:fb:ba:de:ae:c0: d8:41:c4:b0:3f:b0:ad:8f:5d:dd:09:6d:d0:83:2f:3b:10:bb: 6f:e6:eb:e3:3c:5f:ad:de:ee:06:9f:64:0d:4b:28:16:eb:08: 4a:6d:98:51:e9:40:e3:c7:d8:f7:48:ca:c2:ec:ed:d0:29:4c: 7d:9c:cf:9a:fa:e0:b0:f6:2e:13:62:e1:4a:b0:be:20:a2:c4: 30:e4:87:3c:7f:91:0e:6c:67:f0:b2:91:f5:7e:9d:b6:3f:91: ff:29:ce:24:12:6c:f9:a5:75:93:b7:83:c7:0f:bb:36:04:e4: ee:44:ee:bc:db:4a:ae:69:72:d7:57:ae:1c:bb:03:e5:bb:0a: 54:87:7d:b9:b2:61:68:8b:d8:ce:d3:86:dd:d1:f2:c4:17:8a: 34:b4:fe:2b:c9:db:34:0c:d5:b3:4c:f2:de:a8:96:80:b4:23: 40:a2:37:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxWvY8rmVCG5hJMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NDI3OTI0ZWMtNGExOS00ZTM1LWEwOWYtODIxMmQwYzNhNjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWDwF0zNCQ3nCIVVyCBjquFg4JKM+Ta3QLtS UgTh6j2n0nxmKbZuwhCajAO9bDD6CNrwkNj1Q71BLMDYFCS08HLDQToIQqteaHR2 H1Bs9Vn3gfd5c9gjF7J0OmKxb9fkXTaKvI55CTr2TditO+7JdbsGQqY0OAA0ej4R p4hiQVj1+RM7ftIxpiGZlLWwzwJS36sTSI8MnP9elzbp1ihxn9cEmrW+h2n//Z9P yn1pLnnlwzxCOFW73zbnalQXUx/QLJBopeBy4wSYwNYwzY1R2zII4Uy+TR/jhF6b 8L9V6EpBCHDch4EdZmbGC5hjyxhddGrmTdgLoqu2bEJes7+4tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH6nu5b6Tb/5o0U1/ma3XzeiWhAWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjFiZjlhZGYtNGIzYS0z ZjE4LTlkMGItYzliYTlmMGVjZWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYuqIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFC3EEg+6lt0xEoSTf0Zap5FhRGxoG6CM/YHMCRsPb/6TCHHm7VKIejd lmhYomsPcs8eDGMzPiaJrw69sI0eCAEJtA9ZONn2RFBK4q/So4+/DWQdySv7ut6u wNhBxLA/sK2PXd0JbdCDLzsQu2/m6+M8X63e7gafZA1LKBbrCEptmFHpQOPH2PdI ysLs7dApTH2cz5r64LD2LhNi4UqwviCixDDkhzx/kQ5sZ/CykfV+nbY/kf8pziQS bPmldZO3g8cPuzYE5O5E7rzbSq5pctdXrhy7A+W7ClSHfbmyYWiL2M7Tht3R8sQX ijS0/ivJ2zQM1bNM8t6oloC0I0CiN/I= -----END CERTIFICATE-----Generated at Sat Aug 23 22:53:30 2025 by rpki-client