$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3319c230-c10c-3153-8c46-0efff7d0e119.roa File: 3319c230-c10c-3153-8c46-0efff7d0e119.roa (raw, json) Hash identifier: 87vJfVF4LbD8BQnfYw1T8+cA3q/aRVewRHcxCgoJLJs= Subject key identifier: 6E:8D:55:FF:27:19:D7:70:F1:48:35:AF:0D:08:02:77:C2:41:F9:63 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC343F11EB1FC053F8CDB48 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3319c230-c10c-3153-8c46-0efff7d0e119.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 98.248.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:43:f1:1e:b1:fc:05:3f:8c:db:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=eda3baf0-bd8b-4ac1-9308-61f8604a9c91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ed:74:78:de:c2:06:1d:e8:35:5a:fb:f8:06: d8:23:74:1c:48:ce:87:14:12:81:a0:ab:97:c9:39: de:60:1b:b5:02:64:55:62:9b:16:43:d9:f0:70:ac: c9:49:ad:0e:75:46:8a:e0:64:14:27:0f:54:3d:52: ea:59:a8:14:da:35:a7:3c:d3:c6:b5:77:4b:8b:ec: 21:9f:14:88:b0:ea:b5:e0:b6:bf:20:99:e2:39:e3: 20:ba:9a:3f:dd:b8:3c:f8:45:df:dd:f9:bd:58:59: d1:5e:2b:02:d0:fa:94:a9:e8:6e:36:33:70:99:8a: 6c:ff:4f:05:01:65:2d:4f:f7:ea:d0:70:fe:7c:5d: 38:2d:a5:26:40:d3:46:1d:4e:8e:81:ea:2e:25:f7: b8:0a:3c:77:c2:cf:21:0e:35:69:cb:b7:a5:5b:eb: d5:8f:3d:1e:2d:21:2f:73:0f:36:99:25:66:5a:a1: 63:69:2e:32:47:a0:24:91:b6:25:ff:1f:b0:a8:79: ff:c8:6b:cc:d3:3d:3c:9f:3b:41:37:09:4f:2d:d4: 78:af:be:cd:4b:fe:cd:52:47:f8:85:e1:7d:37:d1: 09:07:1b:a3:67:ee:87:ea:4e:7c:61:f4:af:14:1e: 6d:2c:03:9b:c4:9b:a8:46:d4:af:f9:5f:d0:dd:c7: 12:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:8D:55:FF:27:19:D7:70:F1:48:35:AF:0D:08:02:77:C2:41:F9:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3319c230-c10c-3153-8c46-0efff7d0e119.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.248.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:fd:68:42:05:57:99:a9:1c:15:c0:a8:7d:02:b5:a9:1e:55: 24:cf:8e:d7:72:ae:a8:a6:f3:dc:3d:78:c3:d8:3a:d2:ce:16: 63:b6:7a:96:d2:cd:47:47:5d:54:9d:6d:b6:7a:ca:b1:c3:f0: 11:6a:52:fa:ab:ff:12:68:6d:5c:aa:a6:86:1a:a2:39:a8:94: 95:a9:b0:35:2e:db:4a:74:8d:9a:3c:ef:d7:04:58:0e:59:94: 01:1a:75:3b:a7:96:7d:b8:a6:26:fa:4a:29:44:b1:ed:d6:c1: 8e:a5:7a:b9:18:c6:6b:c6:e3:40:99:96:ef:d4:fe:fd:a9:75: 29:6b:75:a2:5d:fc:cf:63:62:a9:05:e5:dd:46:79:31:e1:3f: f9:16:f7:bc:18:69:8a:fa:d8:45:fb:8e:6a:a3:28:7c:06:a9: 4f:46:9e:7f:33:5c:54:eb:03:7f:ab:83:26:4d:4f:71:f6:38: 52:f2:f9:5b:8e:9f:b5:7e:2e:ba:79:b0:e8:7f:55:92:b5:60: df:8e:bd:ca:44:8f:8f:27:ef:c2:55:53:5b:99:09:19:da:30: 6d:b1:61:6c:bf:0b:47:6e:4d:8e:6e:f3:93:ef:4d:36:c8:26: e6:b6:a9:88:51:fb:8b:b7:fb:60:a4:b3:34:41:7b:56:d7:70: 31:2e:29:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw0PxHrH8BT+M20gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZWRhM2JhZjAtYmQ4Yi00YWMxLTkzMDgtNjFmODYwNGE5YzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+10eN7CBh3oNVr7+AbYI3QcSM6HFBKBoKuX yTneYBu1AmRVYpsWQ9nwcKzJSa0OdUaK4GQUJw9UPVLqWagU2jWnPNPGtXdLi+wh nxSIsOq14La/IJniOeMgupo/3bg8+EXf3fm9WFnRXisC0PqUqehuNjNwmYps/08F AWUtT/fq0HD+fF04LaUmQNNGHU6OgeouJfe4Cjx3ws8hDjVpy7elW+vVjz0eLSEv cw82mSVmWqFjaS4yR6AkkbYl/x+wqHn/yGvM0z08nztBNwlPLdR4r77NS/7NUkf4 heF9N9EJBxujZ+6H6k58YfSvFB5tLAObxJuoRtSv+V/Q3ccSLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6NVf8nGddw8Ug1rw0IAnfCQfljMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzMxOWMyMzAtYzEwYy0z MTUzLThjNDYtMGVmZmY3ZDBlMTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYviYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIf9aEIFV5mpHBXAqH0CtakeVSTPjtdyrqim89w9eMPYOtLOFmO2epbS zUdHXVSdbbZ6yrHD8BFqUvqr/xJobVyqpoYaojmolJWpsDUu20p0jZo879cEWA5Z lAEadTunln24pib6SilEse3WwY6lerkYxmvG40CZlu/U/v2pdSlrdaJd/M9jYqkF 5d1GeTHhP/kW97wYaYr62EX7jmqjKHwGqU9Gnn8zXFTrA3+rgyZNT3H2OFLy+VuO n7V+Lrp5sOh/VZK1YN+OvcpEj48n78JVU1uZCRnaMG2xYWy/C0duTY5u85PvTTbI Jua2qYhR+4u3+2CkszRBe1bXcDEuKYY= -----END CERTIFICATE-----Generated at Sun Aug 24 05:36:33 2025 by rpki-client