$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3830ec24-cd21-39c1-8e94-63168dac9f5a.roa File: 3830ec24-cd21-39c1-8e94-63168dac9f5a.roa (raw, json) Hash identifier: FC/MZv9fJiH8XsPhuIcI3VPESAY9+y3vGrlyLlptxiY= Subject key identifier: 90:17:9F:AF:13:78:25:0F:C7:94:96:CA:77:FD:DB:36:EC:1F:83:FD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC1C169CD1A6CDC61AEB080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3830ec24-cd21-39c1-8e94-63168dac9f5a.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33659 IP address blocks: 98.221.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:c1:69:cd:1a:6c:dc:61:ae:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=d901861c-a9a7-4782-9eca-bc1925816120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:20:df:6a:81:39:f8:b3:73:9f:6d:eb:8e:cd: 06:c5:2c:2e:8c:b0:fe:9e:c9:d5:cf:2d:b0:f4:41: 2a:2e:a9:8b:78:82:a0:ee:d2:ea:4f:cc:11:06:a3: a2:e4:01:d8:d7:50:48:ad:68:58:d7:c0:fc:71:24: e7:23:bd:a9:0e:5b:00:bc:f9:41:7b:df:e6:23:46: 5f:78:d9:a5:b8:30:bc:9a:ba:4b:29:5d:e5:7e:17: 22:ad:8e:76:76:c9:a1:e0:db:cf:82:59:33:ab:95: bb:10:2f:ba:d1:50:e4:57:eb:f4:87:e3:b2:77:34: 06:c2:dd:54:70:ff:53:62:ee:ac:0a:7d:4a:bc:0a: d3:85:8f:b8:cd:32:44:1c:a8:18:f8:67:58:2e:56: 05:75:2f:3b:de:21:df:b3:fd:fe:06:16:51:f9:7c: 4a:0a:38:93:10:5a:b9:70:ae:a7:4c:11:d4:16:71: 36:94:88:cf:2a:fe:19:26:e1:9a:20:c6:a1:4c:94: 3f:de:99:89:f3:59:68:37:e5:7a:15:d9:75:81:80: d4:b1:46:8b:04:86:4f:8b:9f:dd:f5:57:58:65:1c: 24:94:7d:7b:9a:24:3f:15:25:7e:41:3b:a6:3d:ba: 50:7c:bc:7f:30:43:f5:d6:e6:77:ca:6c:58:6e:1c: da:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:17:9F:AF:13:78:25:0F:C7:94:96:CA:77:FD:DB:36:EC:1F:83:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3830ec24-cd21-39c1-8e94-63168dac9f5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.221.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:1a:b5:e3:21:03:01:de:a2:2b:f9:36:e2:15:ca:d5:f0:0b: 76:61:71:fb:50:8a:70:48:56:bc:5f:48:31:9d:c6:99:2c:5d: ec:64:3f:2f:ba:a1:a9:6a:ab:07:26:c9:01:f4:1d:44:c2:02: f1:6d:f6:0c:e5:ee:1d:29:2e:66:51:d4:a7:b8:02:f4:a6:54: 50:85:c0:a6:77:4c:49:b7:37:83:ec:ff:06:52:ec:ec:8b:cc: 1a:49:bd:fa:b1:25:80:6a:62:96:28:87:52:e1:39:c5:c7:9a: e5:04:b8:e5:4b:37:68:44:4c:47:10:db:cc:da:82:e3:87:80: 6f:9f:df:3e:09:11:e9:2e:83:e6:63:06:92:25:9b:49:f4:d3: 33:c0:a5:f5:d2:43:a9:ea:c6:5d:f7:08:9f:1e:86:dc:ff:a2: b4:14:71:4d:2b:bf:88:46:ae:bb:19:95:16:da:96:90:40:3a: 1d:95:d7:76:11:9a:a5:40:3d:31:85:f9:de:09:ec:40:06:46: 0d:a6:42:86:93:c6:07:93:75:79:ea:f4:8c:21:2b:3c:20:9d: 97:69:86:91:ec:06:ae:5d:24:40:f2:df:6b:92:b2:21:5a:3a: 36:a2:a5:a2:7e:8e:51:1e:9e:99:80:13:f8:01:46:e4:fa:19: 4c:8f:79:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswcFpzRps3GGusIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZDkwMTg2MWMtYTlhNy00NzgyLTllY2EtYmMxOTI1ODE2MTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyDfaoE5+LNzn23rjs0GxSwujLD+nsnVzy2w 9EEqLqmLeIKg7tLqT8wRBqOi5AHY11BIrWhY18D8cSTnI72pDlsAvPlBe9/mI0Zf eNmluDC8mrpLKV3lfhcirY52dsmh4NvPglkzq5W7EC+60VDkV+v0h+OydzQGwt1U cP9TYu6sCn1KvArThY+4zTJEHKgY+GdYLlYFdS873iHfs/3+BhZR+XxKCjiTEFq5 cK6nTBHUFnE2lIjPKv4ZJuGaIMahTJQ/3pmJ81loN+V6Fdl1gYDUsUaLBIZPi5/d 9VdYZRwklH17miQ/FSV+QTumPbpQfLx/MEP11uZ3ymxYbhza9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJAXn68TeCUPx5SWynf92zbsH4P9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzgzMGVjMjQtY2QyMS0z OWMxLThlOTQtNjMxNjhkYWM5ZjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYt3+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYateMhAwHeoiv5NuIVytXwC3ZhcftQinBIVrxfSDGdxpksXexkPy+6 oalqqwcmyQH0HUTCAvFt9gzl7h0pLmZR1Ke4AvSmVFCFwKZ3TEm3N4Ps/wZS7OyL zBpJvfqxJYBqYpYoh1LhOcXHmuUEuOVLN2hETEcQ28zaguOHgG+f3z4JEekug+Zj BpIlm0n00zPApfXSQ6nqxl33CJ8ehtz/orQUcU0rv4hGrrsZlRbalpBAOh2V13YR mqVAPTGF+d4J7EAGRg2mQoaTxgeTdXnq9IwhKzwgnZdphpHsBq5dJEDy32uSsiFa OjaipaJ+jlEenpmAE/gBRuT6GUyPecU= -----END CERTIFICATE-----Generated at Sat Aug 23 23:37:37 2025 by rpki-client