$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a019d2b-764c-3d70-a8c6-d5c98472b80c.roa File: 5a019d2b-764c-3d70-a8c6-d5c98472b80c.roa (raw, json) Hash identifier: KN5jR/OnwdCBihg50+W9Arg4k1y08BPWPaBf9nbdIvA= Subject key identifier: 8B:6C:0B:A8:E2:4C:B7:FD:F5:06:70:DF:0B:44:D8:97:FE:35:B8:5E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AE031F919C41D6F96E6642800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a019d2b-764c-3d70-a8c6-d5c98472b80c.roa Signing time: Sat 16 Aug 2025 13:00:42 +0000 ROA not before: Sat 16 Aug 2025 13:00:42 +0000 ROA not after: Fri 14 Nov 2025 14:00:42 +0000 asID: 7725 IP address blocks: 98.54.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e0:31:f9:19:c4:1d:6f:96:e6:64:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 16 13:00:42 2025 GMT Not After : Nov 14 14:00:42 2025 GMT Subject: CN=8b05066d-fa31-406a-a9be-7c8fe366bd85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:52:e3:37:10:2e:da:1c:ab:ca:82:f3:6a:98: 71:f9:7a:be:7e:ab:b1:47:9a:3e:0b:20:1f:52:4c: 50:c0:e5:79:4b:b0:f0:89:16:e6:36:90:36:0a:9c: 92:c4:40:6c:39:aa:4d:08:3a:00:cb:5b:cc:81:c4: a2:72:3a:2c:db:83:7f:67:99:71:b2:24:7b:dc:53: 14:19:1f:ce:12:7e:ac:f7:57:4e:f1:1b:0e:38:de: 6b:61:5e:53:6e:ff:6a:c0:76:a6:31:a3:da:14:65: ff:68:55:38:01:c9:3f:d7:2f:d6:ce:d0:46:51:9a: bb:78:1b:7d:02:d0:02:fe:41:27:2c:46:44:8b:6a: 55:a2:8e:d5:f5:97:aa:7b:6c:4d:52:8e:c3:62:0c: e3:7f:7a:f5:5d:bb:4e:ba:9c:f6:b4:0e:84:14:e9: 25:d2:c4:f8:35:84:92:3a:12:f3:b1:f7:a5:4b:4e: 3a:c3:69:15:17:6a:36:42:e0:17:a7:98:f7:c4:e7: dc:d8:cd:0f:c6:dc:90:5f:16:a7:50:b6:19:f8:ce: 0b:3d:62:d1:d5:25:12:ab:3a:68:3a:da:ff:d8:69: fd:35:74:5c:74:ad:b9:cd:8d:f6:42:8c:a6:33:7e: 79:f7:4e:4b:c7:7f:a7:3a:87:19:7b:d9:92:1f:46: e8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:6C:0B:A8:E2:4C:B7:FD:F5:06:70:DF:0B:44:D8:97:FE:35:B8:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a019d2b-764c-3d70-a8c6-d5c98472b80c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.54.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:a7:b2:65:85:ac:71:23:fa:b1:00:c5:2a:57:e9:ad:e8:fb: ed:82:b7:8a:21:aa:7a:85:fb:d8:8b:55:f0:9d:63:0b:41:24: 21:5d:51:0f:8a:34:45:09:b7:74:64:d9:ee:5a:4e:e5:d4:3c: 23:ae:ce:32:f8:5d:3f:b4:72:1f:be:5c:9d:1f:f5:e5:70:3d: 57:18:37:5b:c0:55:67:16:76:2b:fe:8b:d9:7f:95:3d:c4:e4: ef:2d:5f:c2:5d:fd:50:f8:6a:a4:99:53:77:c9:db:7c:05:b7: 56:b3:d4:f3:cc:67:ae:4e:38:22:fa:ee:3a:de:ad:fe:f6:b9: 11:b1:92:f6:1c:4d:8a:61:82:14:97:00:f8:fc:64:91:05:1a: 1a:b1:bf:b0:dd:f6:e2:27:d2:c6:a7:f4:7a:60:32:8b:74:10: d0:18:8a:c4:95:bf:06:ec:12:ec:e8:90:b4:7d:04:d6:d9:59: 55:85:06:f3:ea:28:69:af:af:1d:91:19:01:75:be:22:3a:78: 24:88:b0:3e:23:02:62:fe:40:3a:60:f4:3e:32:b9:24:53:b4: 67:19:05:d0:92:b7:15:ab:1c:aa:de:e8:bb:c6:cd:77:31:ec: cc:95:44:fd:a1:17:3c:cf:88:fe:58:a9:16:98:8f:37:24:33: 46:69:e5:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErgMfkZxB1vluZkKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgxNjEzMDA0MloXDTI1MTExNDE0MDA0MlowLzEtMCsGA1UEAxMk OGIwNTA2NmQtZmEzMS00MDZhLWE5YmUtN2M4ZmUzNjZiZDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFLjNxAu2hyryoLzaphx+Xq+fquxR5o+CyAf UkxQwOV5S7DwiRbmNpA2CpySxEBsOapNCDoAy1vMgcSicjos24N/Z5lxsiR73FMU GR/OEn6s91dO8RsOON5rYV5Tbv9qwHamMaPaFGX/aFU4Ack/1y/WztBGUZq7eBt9 AtAC/kEnLEZEi2pVoo7V9Zeqe2xNUo7DYgzjf3r1XbtOupz2tA6EFOkl0sT4NYSS OhLzsfelS046w2kVF2o2QuAXp5j3xOfc2M0PxtyQXxanULYZ+M4LPWLR1SUSqzpo Otr/2Gn9NXRcdK25zY32QoymM355905Lx3+nOocZe9mSH0boNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItsC6jiTLf99QZw3wtE2Jf+NbheMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWEwMTlkMmItNzY0Yy0z ZDcwLWE4YzYtZDVjOTg0NzJiODBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYjYcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACunsmWFrHEj+rEAxSpX6a3o++2Ct4ohqnqF+9iLVfCdYwtBJCFdUQ+K NEUJt3Rk2e5aTuXUPCOuzjL4XT+0ch++XJ0f9eVwPVcYN1vAVWcWdiv+i9l/lT3E 5O8tX8Jd/VD4aqSZU3fJ23wFt1az1PPMZ65OOCL67jrerf72uRGxkvYcTYphghSX APj8ZJEFGhqxv7Dd9uIn0san9HpgMot0ENAYisSVvwbsEuzokLR9BNbZWVWFBvPq KGmvrx2RGQF1viI6eCSIsD4jAmL+QDpg9D4yuSRTtGcZBdCStxWrHKre6LvGzXcx 7MyVRP2hFzzPiP5YqRaYjzckM0Zp5QU= -----END CERTIFICATE-----Generated at Sun Aug 24 00:41:06 2025 by rpki-client