$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/242a5d18-65a8-3af9-9d4c-dbde44a52ee8.roa File: 242a5d18-65a8-3af9-9d4c-dbde44a52ee8.roa (raw, json) Hash identifier: 02S5S+7Ie9LXi8MSvVbAVi/YAb1tGdpRvhBee3vgRZU= Subject key identifier: 07:12:44:E7:22:CD:F8:9A:09:A0:9D:3D:9E:00:F7:F2:52:6A:63:1B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC1C136D6A322BC6D7A1040 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/242a5d18-65a8-3af9-9d4c-dbde44a52ee8.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33659 IP address blocks: 98.221.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:c1:36:d6:a3:22:bc:6d:7a:10:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=b08ef213-8f6e-4594-a5a9-1bfe15560f46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8e:48:3d:7f:69:13:f5:d7:0c:c5:75:12:d2: 80:bf:be:e7:19:51:78:01:a1:dd:60:f0:d1:f5:a3: 33:47:30:37:8d:b8:d0:17:63:22:f5:ff:29:50:52: d3:4c:ae:9e:02:8a:8b:3f:d8:8e:cf:7d:e7:5f:7a: 14:c6:29:e2:9d:33:a1:1e:67:4f:02:16:a2:62:af: 3f:f6:8d:b6:f8:a1:3f:e5:f8:ba:f2:f6:2f:64:f1: 66:a4:96:00:3f:f1:61:6e:8b:ae:35:c5:46:1e:69: ec:d4:09:80:9b:c1:2d:6f:ab:57:31:9a:dd:e9:06: b7:28:3a:8c:60:12:8d:92:f3:29:76:fd:dc:d5:d6: a5:d5:03:80:53:6e:82:b3:80:05:c1:4c:1b:a5:fa: 70:e5:46:a6:0e:42:b5:63:e6:0f:ba:ef:1b:b0:32: d4:41:a6:b9:4b:cf:85:d5:db:02:3c:80:13:d5:d2: c3:23:26:14:e1:df:d3:37:a6:4f:71:98:fb:6f:38: a3:6a:f5:8b:8a:4d:b8:9b:17:74:84:ff:1b:18:25: 18:95:21:07:53:dc:c5:8a:d4:98:69:50:83:54:33: 18:52:ff:69:56:ed:7b:51:00:bd:42:6d:04:85:a5: f1:73:81:0d:16:bc:78:8d:93:df:3c:af:eb:63:a5: eb:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:12:44:E7:22:CD:F8:9A:09:A0:9D:3D:9E:00:F7:F2:52:6A:63:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/242a5d18-65a8-3af9-9d4c-dbde44a52ee8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.221.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d5:23:12:17:1f:86:d9:0a:01:51:f2:c0:79:cf:e1:0d:26:82: 50:66:1a:72:24:a5:e6:24:18:e1:90:74:3a:9e:ef:60:8e:3c: 78:62:36:d0:56:0e:52:3f:fc:10:68:85:09:93:9f:2a:4b:db: 19:d8:90:0e:fe:2d:7f:f3:64:71:96:d6:11:bc:51:c9:d8:08: f1:80:0c:b6:3d:f9:ce:ca:92:e7:ce:55:dd:81:8c:0a:b9:a5: bc:40:19:f1:b8:5e:24:f0:05:a6:71:d5:bb:82:b2:08:fc:ee: f7:68:91:29:f1:0a:a5:f1:a4:e2:e2:fc:34:f8:18:8e:1b:37: 26:37:84:3b:82:bc:bd:08:d5:59:65:f6:aa:a7:41:dc:29:5f: c3:3e:37:33:04:73:87:7c:b3:86:de:ac:39:2e:21:44:c4:53: 68:5d:87:52:81:26:ef:ed:42:ab:32:9c:bb:de:18:5f:b6:50: 5c:1f:f4:ef:6a:37:03:e0:71:90:43:b4:3a:d6:34:1f:e6:82: 71:f1:1d:2b:48:e9:98:3c:9d:90:ba:c2:15:5e:9f:4f:6c:ab: a8:ff:29:ba:ed:02:70:ba:c1:30:c9:6d:17:ca:fb:79:e8:2c: cd:91:fa:13:65:0a:33:94:3d:71:25:f3:5e:a3:dd:c4:4d:44: 9c:4a:2c:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswcE21qMivG16EEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YjA4ZWYyMTMtOGY2ZS00NTk0LWE1YTktMWJmZTE1NTYwZjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjo5IPX9pE/XXDMV1EtKAv77nGVF4AaHdYPDR 9aMzRzA3jbjQF2Mi9f8pUFLTTK6eAoqLP9iOz33nX3oUxininTOhHmdPAhaiYq8/ 9o22+KE/5fi68vYvZPFmpJYAP/FhbouuNcVGHmns1AmAm8Etb6tXMZrd6Qa3KDqM YBKNkvMpdv3c1dal1QOAU26Cs4AFwUwbpfpw5UamDkK1Y+YPuu8bsDLUQaa5S8+F 1dsCPIAT1dLDIyYU4d/TN6ZPcZj7bzijavWLik24mxd0hP8bGCUYlSEHU9zFitSY aVCDVDMYUv9pVu17UQC9Qm0EhaXxc4ENFrx4jZPfPK/rY6XraQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAcSROcizfiaCaCdPZ4A9/JSamMbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjQyYTVkMTgtNjVhOC0z YWY5LTlkNGMtZGJkZTQ0YTUyZWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYt3wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANUjEhcfhtkKAVHywHnP4Q0mglBmGnIkpeYkGOGQdDqe72COPHhiNtBW DlI//BBohQmTnypL2xnYkA7+LX/zZHGW1hG8UcnYCPGADLY9+c7KkufOVd2BjAq5 pbxAGfG4XiTwBaZx1buCsgj87vdokSnxCqXxpOLi/DT4GI4bNyY3hDuCvL0I1Vll 9qqnQdwpX8M+NzMEc4d8s4berDkuIUTEU2hdh1KBJu/tQqsynLveGF+2UFwf9O9q NwPgcZBDtDrWNB/mgnHxHStI6Zg8nZC6whVen09sq6j/KbrtAnC6wTDJbRfK+3no LM2R+hNlCjOUPXEl816j3cRNRJxKLGA= -----END CERTIFICATE-----Generated at Sun Aug 24 01:15:49 2025 by rpki-client