$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39970791-dc68-3cd4-b50a-4cd2a2e731d6.roa File: 39970791-dc68-3cd4-b50a-4cd2a2e731d6.roa (raw, json) Hash identifier: +IZRBssfbW/XvpnG7TRDO/d+JxhUqz+/740Q1PWyTbo= Subject key identifier: 7E:B6:0F:F5:40:3E:32:19:63:27:79:0A:1C:30:1F:53:1D:0C:88:26 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC5867477EB2BCC95C4A980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39970791-dc68-3cd4-b50a-4cd2a2e731d6.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 7725 IP address blocks: 98.252.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c5:86:74:77:eb:2b:cc:95:c4:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=ad10d5af-62ad-458f-8825-5a30a88b28c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:30:2b:a1:f6:63:e7:5c:51:5d:9c:03:59:73: d9:4c:5d:7e:df:32:8a:1e:af:cd:6d:6c:77:9c:6c: d7:45:06:10:55:95:b9:a9:8f:a3:9f:cc:0b:7e:2f: dc:57:43:1d:ca:2b:22:6a:ce:29:af:a9:4c:e4:7a: 22:40:db:01:3f:8b:f7:30:9b:04:99:e3:bc:be:7b: 37:1e:eb:97:4c:ab:57:d5:78:6c:61:7d:c5:50:2d: 4f:0a:75:37:6a:1f:16:58:54:46:d2:52:01:60:9e: 1a:8e:22:ef:24:17:7d:e2:f2:f9:36:4f:72:1f:9f: 7c:23:02:3a:ec:d0:3f:11:ff:d4:e0:82:1f:d5:ef: 53:b6:ae:73:05:d6:be:c0:5d:77:ab:0e:a0:19:b9: 85:7c:d5:e2:b0:98:23:02:9b:27:6e:00:ad:a2:f1: 89:dc:d4:90:1c:8d:30:11:58:79:d0:a8:75:21:94: 0f:d3:bc:d6:7f:6c:73:38:9c:f7:f7:05:5a:7f:96: c4:5b:29:29:82:09:e9:04:f3:a3:2b:f7:0b:c8:68: 7c:07:e9:5c:cd:ec:2c:52:91:39:85:80:5e:ac:56: 36:d1:cf:bd:55:42:34:35:77:c3:47:67:8e:f4:65: d3:53:1c:5b:a9:13:1d:f7:fe:1a:f5:76:46:31:04: 5f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B6:0F:F5:40:3E:32:19:63:27:79:0A:1C:30:1F:53:1D:0C:88:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39970791-dc68-3cd4-b50a-4cd2a2e731d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.252.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:7b:25:b4:35:e9:0d:a5:eb:37:08:63:66:c0:44:9a:7f:fe: a5:30:10:c6:fa:af:1e:f4:6e:51:ab:c8:bc:2f:20:ab:e9:3a: 42:d3:b7:4b:b4:f2:19:2c:32:5c:43:6e:b4:a9:12:8d:68:ad: 52:b0:0b:30:af:3a:cf:fb:b3:ea:52:bf:f4:5b:93:55:83:ac: 28:9c:48:99:2d:20:b7:a0:1a:98:af:74:8a:54:25:9c:04:3c: 0d:2b:d6:60:47:50:8d:aa:60:bb:e8:bc:86:f6:9b:1e:27:23: 7b:88:39:e0:ae:27:a5:f4:60:db:ab:bb:11:8c:b5:81:e4:ff: db:cb:c4:e5:1c:f1:ef:69:03:a4:28:96:9e:ff:ba:26:72:2e: 62:f0:48:9a:78:ae:3f:10:38:24:1f:cb:dc:cb:f3:cd:53:74: e1:0e:27:bb:77:3b:51:63:a0:5b:a1:d0:1d:70:d9:ce:ab:04: 1a:9c:c7:4f:4f:f1:ae:4d:5d:59:50:5d:78:ce:f6:84:46:f1: d3:34:e5:73:b2:0f:d7:13:50:9f:d3:a2:c3:10:18:4f:6c:41: e0:76:88:4e:ab:9c:4e:62:ff:b4:91:c4:7a:41:85:c0:98:f3: df:c6:60:6c:16:a1:72:d2:fd:bb:86:8b:57:31:7e:87:4e:e8: a0:72:12:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxYZ0d+srzJXEqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YWQxMGQ1YWYtNjJhZC00NThmLTg4MjUtNWEzMGE4OGIyOGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7jArofZj51xRXZwDWXPZTF1+3zKKHq/NbWx3 nGzXRQYQVZW5qY+jn8wLfi/cV0Mdyisias4pr6lM5HoiQNsBP4v3MJsEmeO8vns3 HuuXTKtX1XhsYX3FUC1PCnU3ah8WWFRG0lIBYJ4ajiLvJBd94vL5Nk9yH598IwI6 7NA/Ef/U4IIf1e9Ttq5zBda+wF13qw6gGbmFfNXisJgjApsnbgCtovGJ3NSQHI0w EVh50Kh1IZQP07zWf2xzOJz39wVaf5bEWykpggnpBPOjK/cLyGh8B+lczewsUpE5 hYBerFY20c+9VUI0NXfDR2eO9GXTUxxbqRMd9/4a9XZGMQRfrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH62D/VAPjIZYyd5ChwwH1MdDIgmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzk5NzA3OTEtZGM2OC0z Y2Q0LWI1MGEtNGNkMmEyZTczMWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYvyKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABd7JbQ16Q2l6zcIY2bARJp//qUwEMb6rx70blGryLwvIKvpOkLTt0u0 8hksMlxDbrSpEo1orVKwCzCvOs/7s+pSv/Rbk1WDrCicSJktILegGpivdIpUJZwE PA0r1mBHUI2qYLvovIb2mx4nI3uIOeCuJ6X0YNuruxGMtYHk/9vLxOUc8e9pA6Qo lp7/uiZyLmLwSJp4rj8QOCQfy9zL881TdOEOJ7t3O1FjoFuh0B1w2c6rBBqcx09P 8a5NXVlQXXjO9oRG8dM05XOyD9cTUJ/TosMQGE9sQeB2iE6rnE5i/7SRxHpBhcCY 89/GYGwWoXLS/buGi1cxfodO6KByEj0= -----END CERTIFICATE-----Generated at Sat Aug 23 23:35:10 2025 by rpki-client