$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c625f84-b529-345d-8f4a-aca2b3d15d50.roa File: 3c625f84-b529-345d-8f4a-aca2b3d15d50.roa (raw, json) Hash identifier: 1DF7n7XVMTLGOnF9Lh7erz+ODnekPlmVxbnRzta9HdE= Subject key identifier: 72:9F:96:4B:23:A6:72:C9:FF:05:33:08:0A:D1:FB:9C:04:D2:E0:93 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC57D60FFBB0E88C016AF00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c625f84-b529-345d-8f4a-aca2b3d15d50.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 98.47.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c5:7d:60:ff:bb:0e:88:c0:16:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=8e633294-1917-4ce7-85c7-016c739b0c9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:97:ce:fa:0d:a7:e1:6e:7d:5d:9f:7d:af:8e: 61:1a:2d:80:dc:6f:32:c5:91:49:7c:11:38:f5:7f: 6f:c0:96:09:17:1d:e2:33:26:75:18:40:f1:68:4b: d7:50:2c:85:30:0d:6b:fe:d1:f7:63:b6:90:fc:2d: 80:36:73:54:c7:5e:d1:41:3b:bf:f5:f8:4c:a9:c4: 8e:f6:55:0c:50:1c:4e:9c:cd:54:83:d1:ef:6f:fc: cc:d2:80:d8:77:74:45:f6:5e:e8:60:e8:ad:a8:5c: 0d:56:d7:91:43:75:f0:b8:7f:ed:11:7e:0f:4c:5e: a4:e6:8d:7c:ec:e4:45:0c:34:0b:54:40:1e:ed:fd: 93:98:6c:a4:27:92:3d:65:f3:c8:62:1c:2e:b4:73: 2c:fd:27:5f:d5:d2:7c:b4:30:83:4b:e1:37:fa:90: 33:b6:91:52:e2:a8:4d:60:06:bd:48:9a:f3:73:19: d0:fb:f7:6b:11:17:4a:e7:f4:0f:cf:44:ba:dd:43: fb:57:ef:5d:ab:ef:8e:a9:8c:52:a1:83:f0:10:8e: 50:b7:b9:78:38:37:88:ce:0e:d8:f4:78:3e:e5:e3: 30:06:50:d5:68:8e:9b:11:c6:d2:1c:53:60:bc:19: 72:37:05:a4:02:34:23:fe:7b:fc:be:51:e4:d9:9f: 0a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:9F:96:4B:23:A6:72:C9:FF:05:33:08:0A:D1:FB:9C:04:D2:E0:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c625f84-b529-345d-8f4a-aca2b3d15d50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.47.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:8f:97:56:f0:2c:dc:d2:d8:b7:fe:d2:6a:c1:0f:2c:6c:3b: 9a:35:93:a5:6a:a2:df:06:3a:25:69:06:27:0e:16:6c:f1:9a: cc:c0:0b:9e:ac:82:30:50:cf:77:84:54:03:19:e0:82:e2:6b: 87:81:56:44:5a:f7:5a:9c:e0:8a:fe:77:45:48:ed:c0:b8:67: ed:34:4a:71:26:0f:17:e9:6a:b7:be:ea:e3:58:d8:5c:fd:73: d4:97:bd:fe:16:bb:8c:c5:63:7b:00:0a:a0:91:ab:31:30:ca: 57:ec:60:be:c9:66:12:5a:6c:c9:3c:16:a1:81:c3:4b:7a:2a: 49:4f:59:8a:12:d3:a6:07:39:00:49:0c:a0:bc:e8:5c:51:26: 87:9f:62:9c:90:db:b0:10:46:b6:94:e6:d5:86:24:af:51:14: 4e:3e:fb:1f:53:7c:ed:f5:4d:20:86:d7:be:3a:7e:0c:82:5b: db:81:43:bb:f6:01:31:a5:a1:fe:ff:42:78:4a:fd:e0:38:d6: 7d:e9:be:df:fc:5c:0f:77:b1:79:26:03:90:de:b2:e2:65:5b: c6:4e:28:16:45:85:2d:69:39:45:e4:63:85:8a:6b:7d:22:0e: a9:ec:79:23:03:0b:4c:b8:18:99:69:00:bf:6d:03:9f:49:de: 20:4d:99:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxX1g/7sOiMAWrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk OGU2MzMyOTQtMTkxNy00Y2U3LTg1YzctMDE2YzczOWIwYzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJfO+g2n4W59XZ99r45hGi2A3G8yxZFJfBE4 9X9vwJYJFx3iMyZ1GEDxaEvXUCyFMA1r/tH3Y7aQ/C2ANnNUx17RQTu/9fhMqcSO 9lUMUBxOnM1Ug9Hvb/zM0oDYd3RF9l7oYOitqFwNVteRQ3XwuH/tEX4PTF6k5o18 7ORFDDQLVEAe7f2TmGykJ5I9ZfPIYhwutHMs/Sdf1dJ8tDCDS+E3+pAztpFS4qhN YAa9SJrzcxnQ+/drERdK5/QPz0S63UP7V+9dq++OqYxSoYPwEI5Qt7l4ODeIzg7Y 9Hg+5eMwBlDVaI6bEcbSHFNgvBlyNwWkAjQj/nv8vlHk2Z8KqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKflksjpnLJ/wUzCArR+5wE0uCTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2M2MjVmODQtYjUyOS0z NDVkLThmNGEtYWNhMmIzZDE1ZDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYi+oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMKPl1bwLNzS2Lf+0mrBDyxsO5o1k6Vqot8GOiVpBicOFmzxmszAC56s gjBQz3eEVAMZ4ILia4eBVkRa91qc4Ir+d0VI7cC4Z+00SnEmDxfpare+6uNY2Fz9 c9SXvf4Wu4zFY3sACqCRqzEwylfsYL7JZhJabMk8FqGBw0t6KklPWYoS06YHOQBJ DKC86FxRJoefYpyQ27AQRraU5tWGJK9RFE4++x9TfO31TSCG1746fgyCW9uBQ7v2 ATGlof7/QnhK/eA41n3pvt/8XA93sXkmA5DesuJlW8ZOKBZFhS1pOUXkY4WKa30i DqnseSMDC0y4GJlpAL9tA59J3iBNmSQ= -----END CERTIFICATE-----Generated at Sat Aug 23 23:36:44 2025 by rpki-client