$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e8ae82c-8f04-3887-9d65-04211d56a760.roa File: 4e8ae82c-8f04-3887-9d65-04211d56a760.roa (raw, json) Hash identifier: 1IUIjRfb+KZZYw5xrG5a7Bip5NQ15sfwbmw6ml7qusQ= Subject key identifier: CF:7D:29:CC:2C:76:22:A3:8F:B4:E0:A6:E4:45:FD:1C:E8:A1:2D:E7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC3438BC8CB7A107FA4AA00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e8ae82c-8f04-3887-9d65-04211d56a760.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 98.234.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:43:8b:c8:cb:7a:10:7f:a4:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=c656710b-7478-4992-952c-d2d4529873cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:7d:50:1f:26:f4:40:32:6a:14:9b:67:55:2e: 65:a0:d0:46:65:39:62:33:b4:87:24:a8:79:e5:13: 0c:29:bb:9d:d4:69:20:0f:dc:43:2b:cc:3d:b5:07: 5f:a0:b1:04:fc:ec:9b:bf:24:03:b3:fb:26:c7:0b: d0:ba:5e:fa:b7:3d:b3:17:5b:22:7b:cd:4f:0b:d9: c7:ba:c1:b3:f8:e0:89:91:28:a5:e9:23:c5:0d:74: 6a:5e:ef:ec:a5:7a:8e:c7:f0:cd:d2:14:f1:29:54: d6:30:3c:0d:aa:73:f2:56:4c:fd:3a:17:46:e9:f0: 5e:a5:69:a7:1c:3e:2f:6b:4d:f4:85:a1:a0:f8:73: d2:24:03:46:19:33:55:61:ac:56:e6:61:f3:ce:9b: a0:63:2e:f3:bf:c9:f2:18:6a:66:6f:01:3b:50:e0: b7:18:1e:eb:f2:57:ca:46:ca:db:0f:bc:24:c3:08: ad:ba:3a:c2:32:9a:81:ea:1a:49:2e:db:9d:15:cb: ea:2b:64:5b:11:dc:6b:8c:86:70:db:55:6a:37:60: 21:6c:b3:b6:f2:f0:33:e5:9c:0e:71:5e:fb:79:eb: 26:fe:80:ba:e9:de:41:80:80:cc:89:e0:6d:2d:f6: 5e:d9:d2:58:8b:31:b8:2e:33:d4:9f:1d:c4:7c:a3: ad:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:7D:29:CC:2C:76:22:A3:8F:B4:E0:A6:E4:45:FD:1C:E8:A1:2D:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e8ae82c-8f04-3887-9d65-04211d56a760.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.234.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:03:02:36:3e:d3:d2:01:09:ab:29:69:6b:87:f4:94:4c:cc: bc:e5:31:9f:dd:41:66:17:f8:ee:d7:63:4e:09:bb:b7:69:2c: f2:19:8b:4a:c3:ce:cc:58:a2:f5:9f:96:17:0a:34:4a:26:c0: 3d:87:0f:1c:ea:77:64:94:4d:29:75:3e:00:0e:37:97:52:4e: cb:46:22:af:76:44:c3:31:32:15:d1:66:98:01:85:81:a5:c7: f9:fd:b7:c7:2b:e6:ef:37:85:64:86:da:59:ca:ee:8e:4b:9b: 61:e1:ea:25:3a:4e:50:e6:e1:2c:02:95:54:ef:36:5e:14:a7: d1:25:a3:3a:05:f6:8c:f3:8b:a8:3a:d4:74:99:26:02:cb:9d: 26:97:6d:c7:64:07:77:dc:b4:5c:9e:ec:57:b2:77:60:01:3b: 95:be:58:bc:95:f4:2d:81:21:49:c5:c9:05:f3:93:04:50:9c: aa:0a:a3:a5:b5:66:d1:65:f5:6b:b2:a6:72:60:11:e0:9d:42: c1:5d:4b:9d:a3:4a:f8:24:47:ec:47:54:cb:9f:b3:c3:9f:a8: 8b:72:82:bc:8f:a8:4e:b0:9e:38:4d:46:49:b6:d1:96:b3:09: 40:ff:1f:47:b3:dc:f3:f3:46:24:03:ef:5f:f4:04:ac:74:35: 76:da:40:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw0OLyMt6EH+kqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YzY1NjcxMGItNzQ3OC00OTkyLTk1MmMtZDJkNDUyOTg3M2NkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhX1QHyb0QDJqFJtnVS5loNBGZTliM7SHJKh5 5RMMKbud1GkgD9xDK8w9tQdfoLEE/OybvyQDs/smxwvQul76tz2zF1sie81PC9nH usGz+OCJkSil6SPFDXRqXu/spXqOx/DN0hTxKVTWMDwNqnPyVkz9OhdG6fBepWmn HD4va030haGg+HPSJANGGTNVYaxW5mHzzpugYy7zv8nyGGpmbwE7UOC3GB7r8lfK RsrbD7wkwwitujrCMpqB6hpJLtudFcvqK2RbEdxrjIZw21VqN2AhbLO28vAz5ZwO cV77eesm/oC66d5BgIDMieBtLfZe2dJYizG4LjPUnx3EfKOt8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM99KcwsdiKjj7TgpuRF/RzooS3nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGU4YWU4MmMtOGYwNC0z ODg3LTlkNjUtMDQyMTFkNTZhNzYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYupIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMcDAjY+09IBCaspaWuH9JRMzLzlMZ/dQWYX+O7XY04Ju7dpLPIZi0rD zsxYovWflhcKNEomwD2HDxzqd2SUTSl1PgAON5dSTstGIq92RMMxMhXRZpgBhYGl x/n9t8cr5u83hWSG2lnK7o5Lm2Hh6iU6TlDm4SwClVTvNl4Up9ElozoF9ozzi6g6 1HSZJgLLnSaXbcdkB3fctFye7Feyd2ABO5W+WLyV9C2BIUnFyQXzkwRQnKoKo6W1 ZtFl9WuypnJgEeCdQsFdS52jSvgkR+xHVMufs8OfqItygryPqE6wnjhNRkm20Zaz CUD/H0ez3PPzRiQD71/0BKx0NXbaQOY= -----END CERTIFICATE-----Generated at Sun Aug 24 03:57:32 2025 by rpki-client