$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40792084-d69a-36ea-827f-01b91b3d8ebd.roa File: 40792084-d69a-36ea-827f-01b91b3d8ebd.roa (raw, json) Hash identifier: wB/QxfNTVNlsN0WXaOxk67tvTHlzhDwXDbvLRC9f7JQ= Subject key identifier: 5E:71:B6:02:56:07:D0:6E:3C:79:DA:6A:26:B8:DA:A6:3A:8F:34:54 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC4F030FA9093D3E1449580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40792084-d69a-36ea-827f-01b91b3d8ebd.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 98.52.66.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:f0:30:fa:90:93:d3:e1:44:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=c5ae931e-face-435e-8c2a-05b89a9771e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:95:e6:7d:01:53:3e:75:56:59:a0:60:02:13: 55:86:94:52:30:68:64:b3:1e:c6:0d:14:0a:25:dc: e0:ef:e5:61:40:55:1f:a5:32:98:36:46:b6:d5:10: 1b:2d:65:f2:83:86:35:b8:1c:a2:1e:86:c0:65:e5: 7d:d2:ae:15:dd:09:32:8e:0d:af:69:2c:52:af:76: 3c:f5:5a:fb:1b:a1:0e:ee:a0:a5:57:21:1c:ee:4d: bc:9a:98:db:3c:fc:9d:38:96:54:8c:64:00:b7:5c: f1:5c:fb:dd:ec:c9:62:57:56:5a:55:f8:7e:9b:d4: c2:98:58:6d:12:28:5f:99:7a:88:dc:55:ca:4c:13: 4b:df:c3:d0:41:b0:cf:7e:e3:7e:04:5c:37:74:66: b6:7b:b7:43:20:99:6d:3a:fb:27:9f:17:05:f0:10: dd:16:c1:1d:46:3c:50:32:1d:c1:43:25:d0:25:0e: 3f:0f:9e:0d:1c:b4:da:bb:59:e6:3c:94:33:04:31: 0e:06:82:43:0a:8c:6a:0f:7c:b6:1d:86:67:6c:6d: 33:2d:55:49:20:19:a3:5e:04:92:06:3d:f8:ea:ef: 46:10:0c:ff:bb:cd:84:96:2d:66:e3:56:6c:66:6d: 36:6b:6b:3c:cb:3a:ee:d3:af:44:e2:f0:63:db:bf: 97:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:71:B6:02:56:07:D0:6E:3C:79:DA:6A:26:B8:DA:A6:3A:8F:34:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40792084-d69a-36ea-827f-01b91b3d8ebd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.52.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:81:c6:1e:b8:fb:87:5f:06:93:35:91:39:7e:af:b3:b9:92: 8d:a7:4e:f7:fb:4d:26:0a:23:d9:e3:d8:f4:33:fc:17:62:ec: 16:eb:47:f9:c5:cd:99:31:50:ce:74:5b:68:94:d9:25:41:ab: 26:45:cb:5c:05:1e:c4:7c:18:f1:1f:de:70:85:20:30:6a:2b: 0d:a0:cd:45:e0:18:ef:67:b3:1d:da:70:61:ab:f8:e4:de:d6: 45:f7:59:3c:ae:52:98:42:ba:99:ea:46:2f:08:eb:0f:cb:6e: 16:3a:ba:3d:33:ca:be:d2:b2:75:b7:0a:40:7c:19:23:a9:ba: ff:f2:93:b1:ef:5f:aa:d6:8a:0a:8a:9e:3f:41:47:b8:83:57: e5:29:21:02:47:bf:bd:40:9b:c4:0b:b3:e2:b3:d5:d6:7e:d6: bd:ba:5b:b5:b6:cc:29:a1:23:75:a0:e3:7a:9b:b7:f9:ee:9e: 37:c7:af:3f:bc:a3:c9:b4:7e:fa:e8:70:c0:b2:fd:7e:45:3a: 5b:62:b9:23:c6:dd:83:92:7d:c0:50:88:71:f2:69:7a:f1:2c: c8:5e:5b:04:73:11:66:00:f2:72:9b:62:5c:95:79:9f:22:bd: 06:03:77:d5:14:8c:61:f1:26:14:15:a2:41:39:e8:c6:c6:23: 56:68:d4:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxPAw+pCT0+FElYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YzVhZTkzMWUtZmFjZS00MzVlLThjMmEtMDViODlhOTc3MWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpXmfQFTPnVWWaBgAhNVhpRSMGhksx7GDRQK Jdzg7+VhQFUfpTKYNka21RAbLWXyg4Y1uByiHobAZeV90q4V3Qkyjg2vaSxSr3Y8 9Vr7G6EO7qClVyEc7k28mpjbPPydOJZUjGQAt1zxXPvd7MliV1ZaVfh+m9TCmFht EihfmXqI3FXKTBNL38PQQbDPfuN+BFw3dGa2e7dDIJltOvsnnxcF8BDdFsEdRjxQ Mh3BQyXQJQ4/D54NHLTau1nmPJQzBDEOBoJDCoxqD3y2HYZnbG0zLVVJIBmjXgSS Bj346u9GEAz/u82Eli1m41ZsZm02a2s8yzru069E4vBj27+XqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF5xtgJWB9BuPHnaaia42qY6jzRUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDA3OTIwODQtZDY5YS0z NmVhLTgyN2YtMDFiOTFiM2Q4ZWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYjRCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGBxh64+4dfBpM1kTl+r7O5ko2nTvf7TSYKI9nj2PQz/Bdi7BbrR/nF zZkxUM50W2iU2SVBqyZFy1wFHsR8GPEf3nCFIDBqKw2gzUXgGO9nsx3acGGr+OTe 1kX3WTyuUphCupnqRi8I6w/LbhY6uj0zyr7SsnW3CkB8GSOpuv/yk7HvX6rWigqK nj9BR7iDV+UpIQJHv71Am8QLs+Kz1dZ+1r26W7W2zCmhI3Wg43qbt/nunjfHrz+8 o8m0fvrocMCy/X5FOltiuSPG3YOSfcBQiHHyaXrxLMheWwRzEWYA8nKbYlyVeZ8i vQYDd9UUjGHxJhQVokE56MbGI1Zo1CA= -----END CERTIFICATE-----Generated at Sat Aug 23 23:19:31 2025 by rpki-client