$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33369f81-d301-3db4-81ce-5b1dbe972de6.roa File: 33369f81-d301-3db4-81ce-5b1dbe972de6.roa (raw, json) Hash identifier: IomqGmDpwCNWc5KGDD88kjnbwh3v8xrSp8FXbOhiEOU= Subject key identifier: E5:7E:0F:B0:1D:D9:AA:F1:4E:6D:53:68:52:7F:7D:09:10:0E:1E:CB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC373814A149F6074D64980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33369f81-d301-3db4-81ce-5b1dbe972de6.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33660 IP address blocks: 98.202.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:73:81:4a:14:9f:60:74:d6:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=aeb489e0-59d6-49fe-864b-c03a3dadf0f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0b:0a:86:35:48:b8:71:61:0c:95:bc:f8:c3: 86:7e:5a:50:ab:9c:29:fe:4b:aa:66:50:9c:5e:ac: 00:1b:14:9f:1d:c3:a0:8b:28:47:33:e9:ca:11:08: 81:d1:4f:02:3d:3c:d6:d5:e9:84:2c:08:b9:bb:59: dc:52:9b:6f:7f:95:e3:12:9a:5b:47:b1:0a:e5:21: da:36:84:b3:43:89:47:22:7b:a7:04:68:86:8d:00: f1:7e:79:71:d7:b1:16:3a:47:1f:6a:42:b0:96:53: 13:b5:24:1e:c8:2c:9d:3d:f4:be:9f:f3:2a:12:45: 5b:a6:c0:a1:45:84:3b:a1:ad:3c:3e:f5:87:33:bc: 38:dc:83:ee:98:47:e9:4d:15:1d:f3:3a:92:4c:e9: 7f:8e:e0:5b:43:88:73:9e:80:79:68:cc:d4:35:0e: f4:84:f6:d6:e6:06:74:22:12:14:74:15:4c:fa:d5: 3d:f4:c3:22:75:f8:43:ca:37:4e:d7:01:1c:0f:d9: f8:ea:bb:45:2f:f5:19:82:2a:a3:d3:46:06:e4:08: 9e:c8:0a:f6:cb:79:8d:49:ce:99:ea:53:26:77:19: 32:a2:83:87:93:72:73:6e:66:0d:08:87:ab:b0:34: 5b:b7:dc:46:f8:39:67:99:77:dc:68:24:c7:89:b5: 83:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:7E:0F:B0:1D:D9:AA:F1:4E:6D:53:68:52:7F:7D:09:10:0E:1E:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33369f81-d301-3db4-81ce-5b1dbe972de6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.202.166.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:8d:7a:0a:74:f6:b3:1f:dd:49:c4:d3:4c:e8:a3:26:b7:58: 4b:6a:4b:13:68:69:15:c7:06:6c:46:e3:5c:df:19:26:57:14: 0d:0d:a6:e2:f8:ff:bf:e7:88:0b:ea:7d:fe:ff:8b:c8:88:57: be:4c:40:b1:1d:e4:26:31:a7:e9:bf:27:5c:10:a1:7f:92:e3: 4a:92:a1:8c:59:9b:fb:50:eb:b6:26:c6:d9:7a:6c:3c:d0:6d: 68:6f:2b:92:2f:cc:07:aa:1b:95:b6:b0:72:7a:5d:75:3a:2f: a7:11:54:54:cb:dd:9b:6d:7c:3c:64:ff:ff:59:97:fc:54:6b: d3:f2:b8:d9:0c:b7:2e:5f:ba:21:47:bb:91:1d:0b:b8:a0:a6: 8e:48:bf:df:0e:45:d9:ea:04:11:af:41:43:8c:a0:35:66:75: 8f:b7:6c:62:b7:f1:39:40:fe:d6:4b:dd:59:5f:50:16:57:d4: 8e:51:7d:8a:e2:ef:9e:ae:00:e2:fc:41:c1:16:75:49:f7:50: 37:91:15:ea:c4:4a:37:54:fa:39:d8:f9:94:8a:08:cb:3f:38: 69:cb:3f:96:27:26:6d:0e:01:15:5b:a2:a3:ef:e9:e5:ff:81: 09:a3:75:fb:c5:b7:2e:27:83:50:4a:6e:3c:e1:bc:ac:7c:59: ba:08:48:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw3OBShSfYHTWSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YWViNDg5ZTAtNTlkNi00OWZlLTg2NGItYzAzYTNkYWRmMGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAsKhjVIuHFhDJW8+MOGflpQq5wp/kuqZlCc XqwAGxSfHcOgiyhHM+nKEQiB0U8CPTzW1emELAi5u1ncUptvf5XjEppbR7EK5SHa NoSzQ4lHInunBGiGjQDxfnlx17EWOkcfakKwllMTtSQeyCydPfS+n/MqEkVbpsCh RYQ7oa08PvWHM7w43IPumEfpTRUd8zqSTOl/juBbQ4hznoB5aMzUNQ70hPbW5gZ0 IhIUdBVM+tU99MMidfhDyjdO1wEcD9n46rtFL/UZgiqj00YG5AieyAr2y3mNSc6Z 6lMmdxkyooOHk3JzbmYNCIersDRbt9xG+DlnmXfcaCTHibWDYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOV+D7Ad2arxTm1TaFJ/fQkQDh7LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzMzNjlmODEtZDMwMS0z ZGI0LTgxY2UtNWIxZGJlOTcyZGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYsqmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKKNegp09rMf3UnE00zooya3WEtqSxNoaRXHBmxG41zfGSZXFA0NpuL4 /7/niAvqff7/i8iIV75MQLEd5CYxp+m/J1wQoX+S40qSoYxZm/tQ67Ymxtl6bDzQ bWhvK5IvzAeqG5W2sHJ6XXU6L6cRVFTL3ZttfDxk//9Zl/xUa9PyuNkMty5fuiFH u5EdC7igpo5Iv98ORdnqBBGvQUOMoDVmdY+3bGK38TlA/tZL3VlfUBZX1I5RfYri 756uAOL8QcEWdUn3UDeRFerESjdU+jnY+ZSKCMs/OGnLP5YnJm0OARVboqPv6eX/ gQmjdfvFty4ng1BKbjzhvKx8WboISPY= -----END CERTIFICATE-----Generated at Sun Aug 24 04:02:24 2025 by rpki-client