$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3301244d-0096-3fc4-a05f-e5a632d5749a.roa File: 3301244d-0096-3fc4-a05f-e5a632d5749a.roa (raw, json) Hash identifier: e2GyeJBQKCyQZRk05uLvYnhtwFry5hkcvY5b9YPM2bk= Subject key identifier: 64:B9:69:01:87:38:98:24:19:A1:C1:A1:4B:46:03:66:CD:90:B0:E6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4ED45761FD81995AF3841C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3301244d-0096-3fc4-a05f-e5a632d5749a.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33662 IP address blocks: 98.57.66.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ed:45:76:1f:d8:19:95:af:38:41:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=eb56d874-e7be-47c0-9df6-8cd67ead33af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8b:66:0b:86:43:9c:7c:b6:7a:db:34:8a:89: af:37:31:3a:f9:5d:46:d4:58:1d:7c:6f:4e:64:1d: 18:57:40:de:3e:4c:6b:04:05:43:f3:7b:3e:9b:de: 93:78:38:fb:db:a8:98:dc:37:a3:e6:21:d6:49:00: ec:e0:1b:ca:77:04:c0:84:64:08:ea:35:58:ff:b0: 67:57:bd:4e:eb:49:5d:8b:94:22:27:48:fc:20:07: a2:9e:45:b3:2c:66:70:a9:62:f5:89:01:3e:65:7e: 1b:92:b5:c5:67:ab:77:60:ae:12:4f:7c:de:4d:dc: fd:ec:f0:aa:eb:58:35:d0:49:c5:a3:f1:ea:c2:27: c5:88:9b:0d:16:46:4c:d8:8c:5b:65:1c:3d:94:43: a5:9d:e0:dc:70:91:5e:bb:df:88:2b:32:bc:9c:52: 04:0c:9d:c5:1e:c1:52:17:45:96:88:60:a6:3c:55: d0:b7:f4:b9:50:ea:83:ba:54:7a:a0:51:f5:a0:e4: 09:b6:e0:c7:98:7d:61:1d:fb:fd:d0:f8:44:13:c0: 95:ed:f3:fa:4a:56:b2:4d:2a:e3:35:f7:10:c9:62: 71:57:aa:da:84:07:e5:ec:fc:97:99:88:da:58:68: 8b:05:43:cd:d0:1e:16:74:ce:1d:1d:c7:aa:f2:b2: 55:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B9:69:01:87:38:98:24:19:A1:C1:A1:4B:46:03:66:CD:90:B0:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3301244d-0096-3fc4-a05f-e5a632d5749a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.57.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:1a:7f:fc:15:65:0c:f2:c0:6d:29:ea:94:5e:55:22:6b:a5: 34:3a:8a:35:28:c7:63:57:95:be:a0:7d:e5:76:e1:54:f0:f9: 5a:c0:05:62:8f:b1:09:f7:c0:6b:92:1b:21:59:a4:f4:fb:79: 9f:aa:a0:2f:bf:38:be:00:d2:e1:21:fa:be:f7:53:61:a6:5b: 47:7e:36:3a:7a:10:09:cd:29:aa:e4:7f:ad:60:02:5d:d9:f4: 45:23:e2:b2:dc:a6:9f:32:33:29:4a:ef:28:16:7e:9b:0f:3d: 70:ed:27:e4:44:0d:be:bc:f0:b6:0d:31:33:ea:3c:2b:72:69: 51:28:36:d9:e0:7c:c0:e0:77:b6:d3:c3:52:c8:4d:23:c1:03: bc:f3:eb:44:ed:b1:0e:de:e3:d0:65:51:89:04:af:3c:88:75: ee:69:1a:67:23:c5:8f:15:ae:ab:bc:d1:5c:24:3b:f3:d0:4b: 02:5c:73:9a:69:74:8e:5e:77:69:d7:d2:f2:76:f9:f7:73:2e: a3:31:1c:e8:2c:6b:77:28:b0:24:21:bc:96:e1:d1:19:66:56: aa:79:3b:27:d8:c3:1d:f4:f7:d4:4c:d1:02:80:be:d0:6f:d5: 6d:1e:80:2a:42:90:19:cf:b9:d5:ef:8d:e9:2a:3d:5a:c0:f4: a6:4e:6d:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07UV2H9gZla84QcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk ZWI1NmQ4NzQtZTdiZS00N2MwLTlkZjYtOGNkNjdlYWQzM2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4tmC4ZDnHy2ets0iomvNzE6+V1G1FgdfG9O ZB0YV0DePkxrBAVD83s+m96TeDj726iY3Dej5iHWSQDs4BvKdwTAhGQI6jVY/7Bn V71O60ldi5QiJ0j8IAeinkWzLGZwqWL1iQE+ZX4bkrXFZ6t3YK4ST3zeTdz97PCq 61g10EnFo/HqwifFiJsNFkZM2IxbZRw9lEOlneDccJFeu9+IKzK8nFIEDJ3FHsFS F0WWiGCmPFXQt/S5UOqDulR6oFH1oOQJtuDHmH1hHfv90PhEE8CV7fP6SlayTSrj NfcQyWJxV6rahAfl7PyXmYjaWGiLBUPN0B4WdM4dHceq8rJV3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGS5aQGHOJgkGaHBoUtGA2bNkLDmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzMwMTI0NGQtMDA5Ni0z ZmM0LWEwNWYtZTVhNjMyZDU3NDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYjlCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJkaf/wVZQzywG0p6pReVSJrpTQ6ijUox2NXlb6gfeV24VTw+VrABWKP sQn3wGuSGyFZpPT7eZ+qoC+/OL4A0uEh+r73U2GmW0d+Njp6EAnNKarkf61gAl3Z 9EUj4rLcpp8yMylK7ygWfpsPPXDtJ+REDb688LYNMTPqPCtyaVEoNtngfMDgd7bT w1LITSPBA7zz60TtsQ7e49BlUYkErzyIde5pGmcjxY8Vrqu80VwkO/PQSwJcc5pp dI5ed2nX0vJ2+fdzLqMxHOgsa3cosCQhvJbh0RlmVqp5OyfYwx3099RM0QKAvtBv 1W0egCpCkBnPudXvjekqPVrA9KZObTE= -----END CERTIFICATE-----Generated at Sat Aug 23 23:23:37 2025 by rpki-client