$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a15ad97-aea1-3ad9-aa70-3da9d3482871.roa File: 4a15ad97-aea1-3ad9-aa70-3da9d3482871.roa (raw, json) Hash identifier: xmxgLMfEHdJsf2b57ZgtCNoiyYk6VuI/vXvNXkZfCgA= Subject key identifier: A0:F1:CE:BE:83:99:0D:38:E2:4C:D3:AA:F2:5F:F1:3B:73:0E:CE:07 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC4DC38F7407FA18AA9CE00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a15ad97-aea1-3ad9-aa70-3da9d3482871.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 98.223.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:dc:38:f7:40:7f:a1:8a:a9:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=c7f66379-5e69-4e9c-8c07-59c015d2007a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:94:ca:3a:67:80:c5:62:32:e3:cf:07:69:3e: 79:b0:f2:ba:f4:9d:79:2c:96:59:72:b6:a6:96:a9: 4f:bd:76:90:7f:81:c0:3b:40:33:b9:a2:ac:87:c7: 74:c0:8d:a9:8a:ed:2d:26:38:38:6f:7e:c9:89:fc: 4a:46:39:d6:e8:96:de:62:d7:7c:6e:b6:67:0b:22: b8:00:d8:8b:ea:00:28:4f:47:31:e1:64:3c:31:2e: e3:06:41:33:fa:90:d5:52:9a:e6:55:f3:56:79:31: 98:48:c1:e5:32:ea:3f:79:c0:49:3b:89:0b:da:70: 12:a3:ba:14:54:c9:51:26:5b:88:56:0f:db:c5:21: 91:22:34:3c:5d:06:2b:49:d6:97:6e:8e:a5:ca:c7: 5f:7e:7b:34:c5:fe:35:c9:4a:25:c8:80:3e:45:b3: 3a:9b:7a:21:a7:0e:13:67:ab:54:31:2f:70:6f:0b: 4b:36:8a:4d:28:37:6d:9e:9b:ed:e1:41:fc:08:00: fb:4f:3c:8b:e6:46:fa:80:c0:3b:b9:a9:8b:a5:f2: 76:e6:66:99:4a:64:16:64:f7:57:b6:71:94:5f:f8: 36:7d:05:a3:37:54:5c:4a:57:3b:ff:f1:59:82:b9: f7:55:2b:7a:d4:3e:85:ff:b9:09:f8:86:7f:bb:a8: 61:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F1:CE:BE:83:99:0D:38:E2:4C:D3:AA:F2:5F:F1:3B:73:0E:CE:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a15ad97-aea1-3ad9-aa70-3da9d3482871.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.223.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:30:bb:23:0f:f0:84:b4:ed:2b:7c:50:97:7b:2f:25:77:95: 2f:00:98:f3:15:2c:10:9c:47:9c:a2:3c:bb:f9:90:66:4e:bb: 28:67:36:ec:7c:fb:08:bb:44:43:2b:c4:31:1e:cf:92:28:49: de:97:71:9e:0c:28:b3:64:e2:e0:37:c2:c9:3b:6f:e0:d2:f5: 6a:de:f6:38:7e:1a:d7:46:d6:51:17:d7:36:07:b5:61:90:9f: 3e:05:20:66:fd:59:95:10:18:44:c8:1c:a8:76:e0:70:69:87: 6e:8a:e7:7a:02:97:50:29:80:66:6f:05:8a:ce:f9:ab:a4:d5: a5:fa:ab:59:f2:63:61:92:e6:23:58:ff:d3:82:bd:11:7e:89: 55:ac:73:f4:0d:22:25:39:22:5e:80:a9:4c:98:0b:c8:dc:fe: f6:e4:24:82:37:e5:b1:db:47:b2:05:a5:9a:32:c0:1b:12:2a: 2e:b6:9f:62:db:4d:09:de:ba:4b:c9:a9:00:ec:18:d2:54:4a: 81:50:0a:79:0f:5c:9e:ed:8b:a0:b4:c9:94:d4:37:cd:17:0e: ce:f8:cb:4f:84:e8:33:02:a6:6b:d7:3b:ca:6b:e4:0b:ec:95: c8:ee:e9:7c:0b:ca:60:7b:fb:39:9d:e7:d4:67:c9:0b:3d:6f: 22:94:73:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxNw490B/oYqpzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YzdmNjYzNzktNWU2OS00ZTljLThjMDctNTljMDE1ZDIwMDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZTKOmeAxWIy488HaT55sPK69J15LJZZcram lqlPvXaQf4HAO0AzuaKsh8d0wI2piu0tJjg4b37JifxKRjnW6JbeYtd8brZnCyK4 ANiL6gAoT0cx4WQ8MS7jBkEz+pDVUprmVfNWeTGYSMHlMuo/ecBJO4kL2nASo7oU VMlRJluIVg/bxSGRIjQ8XQYrSdaXbo6lysdffns0xf41yUolyIA+RbM6m3ohpw4T Z6tUMS9wbwtLNopNKDdtnpvt4UH8CAD7TzyL5kb6gMA7uamLpfJ25maZSmQWZPdX tnGUX/g2fQWjN1RcSlc7//FZgrn3VSt61D6F/7kJ+IZ/u6hhEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDxzr6DmQ044kzTqvJf8TtzDs4HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGExNWFkOTctYWVhMS0z YWQ5LWFhNzAtM2RhOWQzNDgyODcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYt+0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAowuyMP8IS07St8UJd7LyV3lS8AmPMVLBCcR5yiPLv5kGZOuyhnNux8 +wi7REMrxDEez5IoSd6XcZ4MKLNk4uA3wsk7b+DS9Wre9jh+GtdG1lEX1zYHtWGQ nz4FIGb9WZUQGETIHKh24HBph26K53oCl1ApgGZvBYrO+auk1aX6q1nyY2GS5iNY /9OCvRF+iVWsc/QNIiU5Il6AqUyYC8jc/vbkJII35bHbR7IFpZoywBsSKi62n2Lb TQneukvJqQDsGNJUSoFQCnkPXJ7ti6C0yZTUN80XDs74y0+E6DMCpmvXO8pr5Avs lcju6XwLymB7+zmd59RnyQs9byKUc68= -----END CERTIFICATE-----Generated at Sun Aug 24 04:05:07 2025 by rpki-client