$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/328bfacd-cd5f-303e-bc65-c6be62f65f42.roa File: 328bfacd-cd5f-303e-bc65-c6be62f65f42.roa (raw, json) Hash identifier: vUwGwNmH3MUUVEL7meCGxvpQf41JumtbuHcCXmDyHlM= Subject key identifier: C7:A1:7F:04:42:75:1F:A5:B0:D5:3D:74:CB:5C:A7:8A:0A:97:AE:11 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC4E34D2DBAE01B6E843100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/328bfacd-cd5f-303e-bc65-c6be62f65f42.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 98.228.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:e3:4d:2d:ba:e0:1b:6e:84:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=2b4053ad-9500-44d0-a171-72b037d9a2ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ea:71:2a:84:34:ee:aa:45:af:73:87:27:eb: 45:b9:5b:2e:82:8a:25:15:0e:1f:7b:50:64:16:fd: 22:fd:01:2f:e3:0f:5f:39:2d:d4:06:ab:6c:24:06: 80:b1:33:91:33:3d:26:97:c1:95:51:e2:b4:a6:2e: f9:a6:a7:4e:50:67:c1:f3:fc:1f:d8:27:6d:6e:14: 31:43:6f:4e:69:26:cf:01:34:1a:78:8a:2c:9b:48: 91:fd:58:b1:13:88:29:5f:52:d3:4d:ed:23:49:a4: 7b:61:2d:dc:4d:a6:70:44:24:92:a1:97:ba:53:e6: 6c:02:bd:4b:ff:92:69:56:92:a9:5e:89:33:87:55: 7d:68:82:da:43:3a:25:e9:05:99:ee:2d:fb:d9:1f: db:db:5c:a8:a9:15:82:b4:14:87:5f:66:9c:bf:d6: be:61:ce:2d:34:17:9e:d5:f9:c7:4e:d0:d6:8f:68: cf:3f:f8:ef:61:06:74:e8:21:6f:e9:dd:43:7b:39: 8a:f0:3c:64:48:d0:2b:40:29:3d:79:e1:68:84:08: c9:07:18:c1:d6:8f:8e:1d:c9:53:3c:bd:95:9e:f0: c5:d2:a2:13:09:74:52:ea:02:a4:33:c9:60:c6:b6: d2:c3:35:29:b9:93:db:4f:49:51:cc:bc:82:c7:6e: 1f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:A1:7F:04:42:75:1F:A5:B0:D5:3D:74:CB:5C:A7:8A:0A:97:AE:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/328bfacd-cd5f-303e-bc65-c6be62f65f42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.228.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:3e:ef:27:bd:7f:63:4b:cf:7f:a9:e0:07:48:3b:2c:15:81: 0b:5e:c0:df:0d:8d:cf:7b:69:82:5b:92:41:13:ee:1b:7a:ac: 29:f2:bf:0e:a2:65:f5:92:3a:df:02:5c:15:45:f3:13:ac:0e: fb:09:48:9f:01:85:85:7e:86:8e:dd:0a:22:db:82:83:b2:15: eb:54:09:07:0f:3f:94:e5:5f:27:6f:a1:e9:43:8f:5e:7b:14: cd:d6:39:cb:a7:99:69:0e:39:1a:51:91:e3:86:11:50:a2:17: 97:4b:87:1b:ff:67:9f:c7:54:2b:78:72:72:e1:9e:5a:98:d2: aa:93:48:22:33:b4:8a:51:74:42:ff:f7:60:c2:44:76:d4:95: 28:61:c7:44:a2:89:ed:51:58:04:26:43:27:8f:1e:56:f9:20: 8d:73:5f:40:e0:ce:ba:a3:a6:0f:c8:d9:a1:88:8e:b4:11:93: 68:46:3d:0f:af:67:4b:c9:70:51:6f:c2:10:c9:90:0a:b2:04: 76:e5:c1:9e:c9:7c:6c:dc:a5:74:95:ba:cb:c5:6a:8b:81:60: e7:05:82:53:de:02:0e:96:e8:44:3b:83:16:a0:16:cd:59:75: 23:65:0f:a7:eb:2f:e7:a9:45:2b:77:6c:64:17:46:54:a0:18: a9:1d:77:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxONNLbrgG26EMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MmI0MDUzYWQtOTUwMC00NGQwLWExNzEtNzJiMDM3ZDlhMmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOpxKoQ07qpFr3OHJ+tFuVsugoolFQ4fe1Bk Fv0i/QEv4w9fOS3UBqtsJAaAsTORMz0ml8GVUeK0pi75pqdOUGfB8/wf2CdtbhQx Q29OaSbPATQaeIosm0iR/VixE4gpX1LTTe0jSaR7YS3cTaZwRCSSoZe6U+ZsAr1L /5JpVpKpXokzh1V9aILaQzol6QWZ7i372R/b21yoqRWCtBSHX2acv9a+Yc4tNBee 1fnHTtDWj2jPP/jvYQZ06CFv6d1DezmK8DxkSNArQCk9eeFohAjJBxjB1o+OHclT PL2VnvDF0qITCXRS6gKkM8lgxrbSwzUpuZPbT0lRzLyCx24fXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMehfwRCdR+lsNU9dMtcp4oKl64RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzI4YmZhY2QtY2Q1Zi0z MDNlLWJjNjUtYzZiZTYyZjY1ZjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYuQoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABs+7ye9f2NLz3+p4AdIOywVgQtewN8Njc97aYJbkkET7ht6rCnyvw6i ZfWSOt8CXBVF8xOsDvsJSJ8BhYV+ho7dCiLbgoOyFetUCQcPP5TlXydvoelDj157 FM3WOcunmWkOORpRkeOGEVCiF5dLhxv/Z5/HVCt4cnLhnlqY0qqTSCIztIpRdEL/ 92DCRHbUlShhx0Siie1RWAQmQyePHlb5II1zX0Dgzrqjpg/I2aGIjrQRk2hGPQ+v Z0vJcFFvwhDJkAqyBHblwZ7JfGzcpXSVusvFaouBYOcFglPeAg6W6EQ7gxagFs1Z dSNlD6frL+epRSt3bGQXRlSgGKkdd8o= -----END CERTIFICATE-----Generated at Sun Aug 24 04:00:04 2025 by rpki-client