$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32c71d3e-5d56-3fec-a943-06518f781d6d.roa File: 32c71d3e-5d56-3fec-a943-06518f781d6d.roa (raw, json) Hash identifier: hRwVoeRMCQhFwY7H6HB/veMCWAiT4xNWvWyzlD7aHAI= Subject key identifier: 0D:7C:99:4A:14:F0:CD:0E:02:17:9F:61:79:AE:54:A5:D3:A0:E8:47 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC2D391FE425C6D01AFCC80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32c71d3e-5d56-3fec-a943-06518f781d6d.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 98.52.212.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:d3:91:fe:42:5c:6d:01:af:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=02be0596-3778-4204-a99a-e4c71cb956c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1b:fe:3e:cf:da:13:ef:72:53:b5:6f:56:3a: 94:f7:22:12:16:04:00:ee:81:8d:ce:72:98:86:29: e8:61:d0:7f:f5:fd:8b:75:b4:bf:db:50:4f:7d:e0: f0:61:bb:e6:8f:e5:48:61:eb:52:52:31:5b:45:0c: 18:c8:34:29:52:d7:a6:33:15:27:3b:e2:00:6f:8b: 57:bb:f0:5c:e1:e2:4f:3e:6f:fb:63:f3:8c:7b:a7: a4:60:09:8d:bd:bf:2f:61:ab:f3:8e:bf:5f:47:1f: 68:56:c3:80:55:a4:eb:33:aa:4d:d4:01:56:0f:b3: 17:63:21:73:31:0e:e4:41:eb:09:24:50:c8:13:24: 4c:93:06:cd:32:55:bb:a3:b7:b1:00:94:75:16:c6: 53:3f:3c:f1:82:f7:ea:28:ce:91:80:85:8b:84:55: d3:e6:eb:79:e0:2e:c2:57:af:1a:a9:e2:3e:bb:0d: e9:fe:eb:aa:e7:24:5e:9c:a3:22:ff:3c:31:eb:cd: c8:2d:ff:fc:d1:18:94:3a:b7:7d:57:9f:b2:aa:24: 16:6a:98:34:d5:68:f6:46:ce:4e:94:da:56:e0:57: b2:9f:59:52:23:e4:9c:af:99:70:be:e5:64:4f:5f: 7c:f8:d3:82:ea:59:d8:07:a0:89:0d:09:e3:79:75: 6d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:7C:99:4A:14:F0:CD:0E:02:17:9F:61:79:AE:54:A5:D3:A0:E8:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32c71d3e-5d56-3fec-a943-06518f781d6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.52.212.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:9a:27:db:f6:82:05:ff:75:64:fc:f7:d7:a4:df:e0:35:4e: 44:d9:11:f3:08:7f:0c:31:0c:de:46:93:a9:a6:29:57:b9:a9: b8:d8:16:40:73:c8:13:e6:82:11:71:38:ca:29:3a:63:a5:82: 85:d3:ec:0e:13:45:6d:f9:f2:0c:08:7a:3c:37:75:29:5b:e9: 24:f2:0d:4f:73:8d:df:29:e5:ac:1d:fa:ad:a1:73:88:bd:ce: 33:87:ca:18:89:b3:80:c4:3d:d9:e0:cf:c2:0c:fe:a3:6d:27: 8b:71:8c:06:5a:a4:2e:9a:d5:47:0a:52:f5:08:48:44:c5:f5: 0c:0e:ec:45:56:66:37:ca:02:a5:73:b4:56:35:ad:07:c3:52: bf:3c:09:fc:66:74:10:f4:29:51:33:0d:c4:59:a9:3b:8e:04: 2c:40:3b:fb:5d:a4:15:85:e3:45:8c:5f:dd:91:2f:57:54:c9: 62:d2:6f:1f:98:c4:a2:ee:0e:a8:f6:cb:a7:24:97:3c:aa:80: 06:02:43:73:5f:53:be:91:b2:74:e8:79:ef:35:76:ca:16:c8: a4:16:7c:64:55:54:b4:2f:92:84:7b:36:19:e1:96:2c:1f:67: cf:fd:8f:2c:4f:30:d6:3d:0d:e7:04:2e:b8:13:dd:34:5c:08: 48:4d:12:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswtOR/kJcbQGvzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MDJiZTA1OTYtMzc3OC00MjA0LWE5OWEtZTRjNzFjYjk1NmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhv+Ps/aE+9yU7VvVjqU9yISFgQA7oGNznKY hinoYdB/9f2LdbS/21BPfeDwYbvmj+VIYetSUjFbRQwYyDQpUtemMxUnO+IAb4tX u/Bc4eJPPm/7Y/OMe6ekYAmNvb8vYavzjr9fRx9oVsOAVaTrM6pN1AFWD7MXYyFz MQ7kQesJJFDIEyRMkwbNMlW7o7exAJR1FsZTPzzxgvfqKM6RgIWLhFXT5ut54C7C V68aqeI+uw3p/uuq5yRenKMi/zwx683ILf/80RiUOrd9V5+yqiQWapg01Wj2Rs5O lNpW4Feyn1lSI+Scr5lwvuVkT198+NOC6lnYB6CJDQnjeXVtgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA18mUoU8M0OAhefYXmuVKXToOhHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzJjNzFkM2UtNWQ1Ni0z ZmVjLWE5NDMtMDY1MThmNzgxZDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYjTUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHyaJ9v2ggX/dWT899ek3+A1TkTZEfMIfwwxDN5Gk6mmKVe5qbjYFkBz yBPmghFxOMopOmOlgoXT7A4TRW358gwIejw3dSlb6STyDU9zjd8p5awd+q2hc4i9 zjOHyhiJs4DEPdngz8IM/qNtJ4txjAZapC6a1UcKUvUISETF9QwO7EVWZjfKAqVz tFY1rQfDUr88CfxmdBD0KVEzDcRZqTuOBCxAO/tdpBWF40WMX92RL1dUyWLSbx+Y xKLuDqj2y6cklzyqgAYCQ3NfU76RsnToee81dsoWyKQWfGRVVLQvkoR7Nhnhliwf Z8/9jyxPMNY9DecELrgT3TRcCEhNEj0= -----END CERTIFICATE-----Generated at Sat Aug 23 23:07:21 2025 by rpki-client