$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/58488c22-cac9-3fa5-8345-45a1707d9b69.roa File: 58488c22-cac9-3fa5-8345-45a1707d9b69.roa (raw, json) Hash identifier: gUkQF1Bu0QRaIS/rYPgcYdnXKmgy6vmnrz6mZV3AAIQ= Subject key identifier: 2B:27:AC:96:AA:7E:E4:3B:8A:85:5C:D5:4C:E2:B3:89:AC:21:BB:17 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC581AB52923E53B2A60F00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/58488c22-cac9-3fa5-8345-45a1707d9b69.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 98.51.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c5:81:ab:52:92:3e:53:b2:a6:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=0fa01647-9b9d-4f6b-93b6-e580c9a92a35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:47:81:7f:5f:b0:13:df:a4:6e:0f:78:eb:73: 76:e1:7f:e0:44:ef:ed:c0:5c:c6:d5:52:0e:3e:e4: 0b:47:cf:95:ac:83:51:14:98:96:2a:ad:fe:4d:74: 67:a4:40:f2:e9:ba:cd:53:95:7a:26:34:e9:f8:af: 29:59:c5:66:21:9f:7c:35:36:7f:93:0e:15:5f:77: 21:b1:5a:a0:a7:a4:f5:99:69:b8:f7:92:25:e5:61: 24:2a:b8:21:a5:00:2e:b6:e5:3e:a1:86:34:d3:53: 0d:7c:48:66:d7:16:0a:ee:91:39:ae:ff:ee:21:59: 67:a6:f3:6c:3a:61:c5:6a:6d:ab:a4:e8:26:1a:45: 23:95:7f:3e:61:b5:23:9a:5f:f7:49:0d:3b:b5:fb: 08:72:0f:71:fb:12:c4:bc:60:d2:50:06:33:55:07: 5d:74:ee:0e:08:ac:ae:11:73:3e:3f:15:3d:c7:e8: 47:a4:fb:4f:dd:f3:7c:b7:67:2f:f4:e1:89:3a:67: 71:c6:8a:08:7e:04:e3:88:4e:b1:b3:b4:5e:95:b5: 0a:bd:5d:6d:0d:4b:56:fe:3a:1e:80:b9:cd:ce:45: a9:ab:49:57:7a:5e:4b:77:b3:d2:11:35:d1:5f:2c: 35:b0:03:e7:8b:2b:bf:0e:28:98:fb:0b:f9:ad:72: a7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:27:AC:96:AA:7E:E4:3B:8A:85:5C:D5:4C:E2:B3:89:AC:21:BB:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/58488c22-cac9-3fa5-8345-45a1707d9b69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.51.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:db:71:3a:3d:01:69:5e:d0:83:1d:76:e0:0d:de:18:e9:7a: 6e:b7:2b:5e:c6:e3:55:77:5e:34:07:e1:d1:1d:7e:45:7a:4b: 96:e5:44:27:03:ec:eb:17:d7:2a:75:18:86:bb:6d:97:19:59: f7:2e:59:61:16:4b:7d:0f:69:ba:62:5f:fe:af:2e:6f:65:3e: c5:3b:e3:d3:2d:7e:34:89:61:91:18:34:49:67:7c:85:5d:00: d6:ac:23:9e:d0:88:2f:fc:fe:91:cb:29:98:0f:69:ee:36:9a: 9e:b8:38:71:df:db:26:64:c4:ac:32:b7:bf:9c:68:26:0e:70: 18:63:39:9e:ec:32:d2:a2:fe:e3:29:2e:13:22:53:f5:bf:8b: b0:5b:10:ed:21:f4:4b:75:5f:e9:2a:01:16:eb:29:43:4f:f0: 64:15:0f:a0:a0:8c:76:71:fe:4b:bb:70:f9:c1:33:7d:58:07: 43:80:4d:35:91:2c:30:31:f9:fc:e0:48:69:0f:03:d2:84:15: 9f:da:c3:d5:a3:04:d5:e8:5e:e8:34:8f:99:83:85:3c:da:5d: a2:6d:96:f0:0c:e9:4d:cc:71:cb:a5:95:7d:43:78:92:3e:c0: d6:6b:e2:d7:5d:80:87:ab:02:ef:24:39:b3:11:fd:69:ef:5d: 17:f9:53:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxYGrUpI+U7KmDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MGZhMDE2NDctOWI5ZC00ZjZiLTkzYjYtZTU4MGM5YTkyYTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUeBf1+wE9+kbg9463N24X/gRO/twFzG1VIO PuQLR8+VrINRFJiWKq3+TXRnpEDy6brNU5V6JjTp+K8pWcVmIZ98NTZ/kw4VX3ch sVqgp6T1mWm495Il5WEkKrghpQAutuU+oYY001MNfEhm1xYK7pE5rv/uIVlnpvNs OmHFam2rpOgmGkUjlX8+YbUjml/3SQ07tfsIcg9x+xLEvGDSUAYzVQdddO4OCKyu EXM+PxU9x+hHpPtP3fN8t2cv9OGJOmdxxooIfgTjiE6xs7RelbUKvV1tDUtW/joe gLnNzkWpq0lXel5Ld7PSETXRXyw1sAPniyu/DiiY+wv5rXKnqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCsnrJaqfuQ7ioVc1Uzis4msIbsXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTg0ODhjMjItY2FjOS0z ZmE1LTgzNDUtNDVhMTcwN2Q5YjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYjP6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3bcTo9AWle0IMdduAN3hjpem63K17G41V3XjQH4dEdfkV6S5blRCcD 7OsX1yp1GIa7bZcZWfcuWWEWS30PabpiX/6vLm9lPsU749MtfjSJYZEYNElnfIVd ANasI57QiC/8/pHLKZgPae42mp64OHHf2yZkxKwyt7+caCYOcBhjOZ7sMtKi/uMp LhMiU/W/i7BbEO0h9Et1X+kqARbrKUNP8GQVD6CgjHZx/ku7cPnBM31YB0OATTWR LDAx+fzgSGkPA9KEFZ/aw9WjBNXoXug0j5mDhTzaXaJtlvAM6U3MccullX1DeJI+ wNZr4tddgIerAu8kObMR/WnvXRf5U6k= -----END CERTIFICATE-----Generated at Sat Aug 23 23:34:26 2025 by rpki-client