$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39b93b61-cc02-33b5-a9f8-4be6ccd02324.roa File: 39b93b61-cc02-33b5-a9f8-4be6ccd02324.roa (raw, json) Hash identifier: nIWEczmrxVCSSwd7pzlHxazFHnXR6Yrn6i7QPOS3IqA= Subject key identifier: 4D:37:FC:46:22:C2:D6:7B:76:05:C7:E3:E6:45:2C:98:90:CF:8A:AB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC4D430349D777BFC5476C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39b93b61-cc02-33b5-a9f8-4be6ccd02324.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 98.212.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:d4:30:34:9d:77:7b:fc:54:76:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=5971af7a-245b-4467-9267-f3c661b363f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:7d:12:4b:94:b7:d6:76:a8:8c:a4:96:1d:95: 76:0b:c0:50:cf:fe:48:a5:f4:18:fc:bf:4f:76:13: 71:24:17:7b:b5:5e:a0:e5:b9:49:47:67:56:e2:3a: 3e:87:09:51:fe:8a:89:65:00:22:97:27:7e:b7:85: 62:9a:a9:ef:5d:3e:eb:b1:08:cf:46:92:14:36:97: 95:f1:37:34:4b:b9:f3:c5:6e:66:b5:78:63:48:f5: 78:9b:7d:5c:16:b5:2c:0f:20:00:6b:ab:a3:56:a9: e5:e8:47:24:e1:f5:a8:d1:b3:71:28:e6:1a:8d:26: 3b:a2:c1:8d:ff:17:37:a0:74:6f:b6:f1:c4:bf:e6: c9:ba:48:43:93:78:af:b6:3b:a0:7d:47:14:68:37: b3:65:33:5e:39:8d:0a:f5:56:aa:b8:24:8c:b9:c7: c4:f2:72:62:54:12:a4:ca:1d:8b:39:cb:49:d0:00: 18:9c:b1:22:a0:15:76:7e:ee:fb:70:ff:ef:58:a5: b4:e2:71:4d:84:11:a4:7a:09:a0:d9:cd:eb:63:f4: 43:b6:1f:e3:56:4c:a8:49:68:2d:8d:28:6f:68:0c: 0e:22:ef:3b:52:09:e4:c3:f3:22:69:32:21:0f:f2: e2:b6:aa:a4:54:ee:f5:6b:41:42:5f:38:74:8a:52: 9a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:37:FC:46:22:C2:D6:7B:76:05:C7:E3:E6:45:2C:98:90:CF:8A:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39b93b61-cc02-33b5-a9f8-4be6ccd02324.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.212.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:64:f8:93:35:d2:df:4d:53:28:cc:f0:21:25:c6:1a:51:be: e2:34:5f:b0:a5:d4:ef:f9:65:3c:e9:e5:c2:43:24:63:c1:fe: 72:fc:c9:84:42:e0:d3:dc:1e:d7:7a:b4:65:3b:42:7f:8a:43: 6b:de:b4:76:28:af:8b:9e:b3:89:84:91:a1:c7:c4:ff:6d:4a: 43:07:4f:5f:4d:8a:a3:b0:2b:68:d1:05:27:56:ef:4a:e8:63: ee:47:ae:8e:ff:82:68:79:45:74:4b:9b:2e:43:61:d1:1a:e6: 61:45:c9:56:7a:0c:93:e4:9a:55:d8:8b:1c:90:f1:70:a6:54: 0d:1f:e9:9d:ba:25:d1:36:02:62:1b:25:55:f8:d3:e4:fc:18: 9b:63:e2:7f:38:49:ad:4e:a0:6b:e5:c0:ae:28:59:74:ae:65: ba:78:eb:73:e1:8d:26:13:13:05:b1:41:8c:60:e6:79:8a:11: d7:8a:bb:1f:af:9c:1f:db:7f:2b:24:05:af:83:96:27:bf:14: 11:4b:83:ce:dc:90:53:7d:07:01:e1:a3:66:4c:28:b0:7a:a6: 79:cc:4b:0b:e6:c3:c1:cf:4e:7d:b4:da:2f:2a:81:29:ea:0e: 2f:d9:43:87:fc:34:c2:ab:8b:7d:31:28:44:b4:07:6c:60:5c: 81:a7:de:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxNQwNJ13e/xUdsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NTk3MWFmN2EtMjQ1Yi00NDY3LTkyNjctZjNjNjYxYjM2M2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjX0SS5S31naojKSWHZV2C8BQz/5IpfQY/L9P dhNxJBd7tV6g5blJR2dW4jo+hwlR/oqJZQAilyd+t4VimqnvXT7rsQjPRpIUNpeV 8Tc0S7nzxW5mtXhjSPV4m31cFrUsDyAAa6ujVqnl6Eck4fWo0bNxKOYajSY7osGN /xc3oHRvtvHEv+bJukhDk3ivtjugfUcUaDezZTNeOY0K9VaquCSMucfE8nJiVBKk yh2LOctJ0AAYnLEioBV2fu77cP/vWKW04nFNhBGkegmg2c3rY/RDth/jVkyoSWgt jShvaAwOIu87Ugnkw/MiaTIhD/LitqqkVO71a0FCXzh0ilKa7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE03/EYiwtZ7dgXH4+ZFLJiQz4qrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzliOTNiNjEtY2MwMi0z M2I1LWE5ZjgtNGJlNmNjZDAyMzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYtREMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK1k+JM10t9NUyjM8CElxhpRvuI0X7Cl1O/5ZTzp5cJDJGPB/nL8yYRC 4NPcHtd6tGU7Qn+KQ2vetHYor4ues4mEkaHHxP9tSkMHT19NiqOwK2jRBSdW70ro Y+5Hro7/gmh5RXRLmy5DYdEa5mFFyVZ6DJPkmlXYixyQ8XCmVA0f6Z26JdE2AmIb JVX40+T8GJtj4n84Sa1OoGvlwK4oWXSuZbp463PhjSYTEwWxQYxg5nmKEdeKux+v nB/bfyskBa+Dlie/FBFLg87ckFN9BwHho2ZMKLB6pnnMSwvmw8HPTn202i8qgSnq Di/ZQ4f8NMKri30xKES0B2xgXIGn3vc= -----END CERTIFICATE-----Generated at Sat Aug 23 23:09:34 2025 by rpki-client