$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/552100a7-0b3c-3793-9e95-8f110e22c43b.roa File: 552100a7-0b3c-3793-9e95-8f110e22c43b.roa (raw, json) Hash identifier: rOX2DyEAFiv5w6Bl+OT1zKxwEjytsd7MyVeUoO9ThIw= Subject key identifier: B3:25:C5:BE:11:2F:60:3E:CD:27:60:43:7E:0D:23:C0:74:25:A1:F7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC5733917FC7218E5FD7C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/552100a7-0b3c-3793-9e95-8f110e22c43b.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 98.35.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c5:73:39:17:fc:72:18:e5:fd:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=b6bb8ff1-8291-4b92-b1f5-469432e4240f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:1e:1c:11:7b:e0:09:a0:47:98:23:1e:c6:02: f1:3a:b8:8a:00:85:8b:61:12:56:89:0a:59:4b:88: 2a:dd:f5:82:00:a2:c1:f6:f2:84:f0:31:3e:2f:54: 8e:9e:34:f7:78:80:c9:09:d6:9d:70:1d:38:58:32: 3f:a9:3c:6c:1a:56:8d:08:85:a4:21:1e:65:db:cb: 69:85:5e:ff:f4:19:05:af:71:d7:bc:cf:48:ec:5b: b6:f5:33:e0:23:b0:8e:7e:c5:fc:7e:7b:0d:2f:90: 59:86:7f:92:18:8f:90:9c:40:5f:5b:74:5e:72:b9: 8f:ae:dd:cd:e4:84:41:24:4e:30:e3:a2:31:4a:23: 01:52:55:2d:08:25:74:a0:84:54:47:15:01:9a:cc: 4d:d1:eb:58:d7:08:18:4c:3d:ff:99:f3:9e:18:53: 54:67:02:48:cd:a7:46:cd:90:5c:17:63:87:3d:a8: b3:11:96:2d:b7:a5:08:a2:31:03:ce:1b:70:09:11: e3:6e:98:6f:48:1b:c8:ce:8a:96:35:f6:c2:26:e4: 90:75:66:18:d0:e2:f3:bc:0e:78:ba:83:2c:98:30: f8:4e:20:49:d8:8a:7c:cd:1a:91:b9:a0:47:06:5a: a8:75:7f:5f:dc:be:d3:61:94:21:69:77:97:8e:60: 88:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:25:C5:BE:11:2F:60:3E:CD:27:60:43:7E:0D:23:C0:74:25:A1:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/552100a7-0b3c-3793-9e95-8f110e22c43b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.35.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:7f:d9:7d:46:80:95:26:8a:48:45:bb:48:74:67:5f:6b:5c: 58:64:c3:6e:4d:88:d3:a4:61:f7:f7:2e:66:d4:de:28:f9:cc: 99:f6:f9:84:63:1e:97:05:14:43:35:5e:9a:03:69:24:64:7d: 59:92:67:f5:14:60:a0:a2:b6:f1:06:31:2a:06:cb:d7:ce:ed: cc:3e:2a:ad:99:3f:2e:91:b2:25:c0:43:d4:4d:2b:58:a7:c3: e0:19:92:81:19:43:b9:ce:97:7e:ed:30:29:7a:06:b6:b7:60: 02:11:c9:df:d4:6d:96:1f:cd:74:0e:aa:25:80:fa:7a:b6:4f: d1:44:66:e5:60:4e:4a:14:5f:a8:f4:28:a1:f7:ed:2a:e4:44: cd:f6:64:b0:b6:8c:98:11:59:74:2b:09:61:4c:64:ab:34:b7: 98:06:5a:85:1b:62:c1:4f:5f:fc:fa:45:38:6d:af:e4:83:4a: 13:91:9a:74:6f:53:0f:17:41:fe:17:17:bb:49:18:47:b7:71: 40:ec:84:46:44:ea:a8:d3:f3:a6:a6:46:ed:c1:45:52:eb:51: 9d:76:bc:6c:5c:fb:48:6a:c3:02:48:3b:ca:ce:d1:62:26:25: 6a:76:86:c7:ad:42:5c:b4:03:48:a2:f4:22:e6:13:d3:13:33: 21:ac:05:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxXM5F/xyGOX9fIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YjZiYjhmZjEtODI5MS00YjkyLWIxZjUtNDY5NDMyZTQyNDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiB4cEXvgCaBHmCMexgLxOriKAIWLYRJWiQpZ S4gq3fWCAKLB9vKE8DE+L1SOnjT3eIDJCdadcB04WDI/qTxsGlaNCIWkIR5l28tp hV7/9BkFr3HXvM9I7Fu29TPgI7COfsX8fnsNL5BZhn+SGI+QnEBfW3RecrmPrt3N 5IRBJE4w46IxSiMBUlUtCCV0oIRURxUBmsxN0etY1wgYTD3/mfOeGFNUZwJIzadG zZBcF2OHPaizEZYtt6UIojEDzhtwCRHjbphvSBvIzoqWNfbCJuSQdWYY0OLzvA54 uoMsmDD4TiBJ2Ip8zRqRuaBHBlqodX9f3L7TYZQhaXeXjmCIlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLMlxb4RL2A+zSdgQ34NI8B0JaH3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTUyMTAwYTctMGIzYy0z NzkzLTllOTUtOGYxMTBlMjJjNDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYiMmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALh/2X1GgJUmikhFu0h0Z19rXFhkw25NiNOkYff3LmbU3ij5zJn2+YRj HpcFFEM1XpoDaSRkfVmSZ/UUYKCitvEGMSoGy9fO7cw+Kq2ZPy6RsiXAQ9RNK1in w+AZkoEZQ7nOl37tMCl6Bra3YAIRyd/UbZYfzXQOqiWA+nq2T9FEZuVgTkoUX6j0 KKH37SrkRM32ZLC2jJgRWXQrCWFMZKs0t5gGWoUbYsFPX/z6RThtr+SDShORmnRv Uw8XQf4XF7tJGEe3cUDshEZE6qjT86amRu3BRVLrUZ12vGxc+0hqwwJIO8rO0WIm JWp2hsetQly0A0ii9CLmE9MTMyGsBXE= -----END CERTIFICATE-----Generated at Sat Aug 23 23:28:28 2025 by rpki-client