$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5eb21581-9283-3ef1-a4af-db9c5ca28b79.roa File: 5eb21581-9283-3ef1-a4af-db9c5ca28b79.roa (raw, json) Hash identifier: h9RJjO0Om1nPbfu6HHBWg1kgEfMW7m2oppqzHDER7Ik= Subject key identifier: 70:D4:1E:E1:64:34:D5:1A:01:3E:3E:4F:76:4D:C5:C2:97:93:05:57 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC57A053A63A99A1BEE1E40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5eb21581-9283-3ef1-a4af-db9c5ca28b79.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 98.45.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c5:7a:05:3a:63:a9:9a:1b:ee:1e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=80bc481b-a9a6-4830-8875-f535ecec8d44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:86:61:b3:b7:58:de:dc:75:30:7a:31:58:1e: 60:7b:59:9c:79:39:de:43:71:8f:dc:2b:35:38:21: 46:ff:15:76:fa:05:46:78:34:e2:a6:b7:20:09:6f: 4a:42:1d:22:93:e4:31:b4:bc:af:89:58:44:59:8e: 0f:6e:19:1f:d2:aa:94:35:80:ab:0f:ad:3b:06:24: 46:91:d8:2e:ca:1b:29:19:f9:7c:88:82:3d:58:59: 72:d7:27:f6:41:bd:94:7e:fd:4d:f8:32:e9:67:47: 75:10:aa:b0:3d:28:f8:b4:f9:a4:6b:db:97:5e:a3: 90:2f:fc:6e:45:02:9b:55:4e:e8:50:9e:eb:92:f4: 26:ae:6a:b4:66:71:89:80:2f:39:df:08:a8:a1:8d: f9:6f:b2:ac:50:4e:78:e6:a0:cd:90:ea:bd:47:f8: 33:74:b2:ea:8e:9c:c0:a3:dd:c7:a1:f2:ca:01:84: 94:98:7e:b9:fa:cb:68:22:24:f7:50:2e:8e:a1:2c: 43:b6:b3:cf:94:ec:67:ba:0d:ea:65:c5:74:16:c3: a1:4b:2b:bd:cf:0d:f4:c7:91:da:e4:3a:41:7d:ea: 24:89:4c:62:54:9f:05:41:80:ce:94:69:6c:a3:03: 89:41:4f:3c:4a:44:0b:f2:51:76:7d:01:af:07:1c: 1a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:D4:1E:E1:64:34:D5:1A:01:3E:3E:4F:76:4D:C5:C2:97:93:05:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5eb21581-9283-3ef1-a4af-db9c5ca28b79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.45.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:97:aa:d1:f2:05:a1:28:3f:fa:25:b1:6e:3f:68:96:75:2e: 30:b8:d6:33:8c:3b:47:29:1a:a4:d6:ce:ac:db:78:87:1d:33: fe:72:65:99:f2:0a:5f:db:63:63:21:77:cb:cb:de:d5:26:f6: 5b:56:63:c6:6d:51:ba:ac:e8:c5:c7:31:27:e4:e8:43:5e:25: 80:5b:72:64:1c:d8:7a:95:e0:93:fd:af:de:ee:d9:60:03:3f: dc:c6:56:35:83:5b:e5:11:19:bb:41:5d:fe:cf:ac:13:a7:39: 42:2a:f9:b3:3b:41:92:c6:25:de:1b:bd:bc:67:98:c6:48:fe: 86:6d:45:c4:34:dd:ed:e5:04:a4:cc:a8:3a:ee:c5:62:4b:5d: 89:55:2a:1c:5e:db:47:ce:31:f4:51:9f:49:3c:e7:6d:31:28: 18:9d:54:90:13:a7:e3:bd:5c:d9:73:69:7b:65:f3:03:43:ef: 1b:4e:9c:ad:a7:52:d8:1e:59:92:f8:6c:e2:d0:db:cf:02:88: 32:ad:5e:f9:91:d9:04:fa:09:be:78:4a:2e:02:8b:e9:06:79: dd:4e:93:d9:bc:f0:45:5d:5f:50:39:47:57:20:f9:73:11:54: 40:d4:86:78:91:3b:93:bf:0e:57:f2:55:9f:ef:5f:4f:7b:05: 37:f3:34:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxXoFOmOpmhvuHkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ODBiYzQ4MWItYTlhNi00ODMwLTg4NzUtZjUzNWVjZWM4ZDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYZhs7dY3tx1MHoxWB5ge1mceTneQ3GP3Cs1 OCFG/xV2+gVGeDTiprcgCW9KQh0ik+QxtLyviVhEWY4Pbhkf0qqUNYCrD607BiRG kdguyhspGfl8iII9WFly1yf2Qb2Ufv1N+DLpZ0d1EKqwPSj4tPmka9uXXqOQL/xu RQKbVU7oUJ7rkvQmrmq0ZnGJgC853wiooY35b7KsUE545qDNkOq9R/gzdLLqjpzA o93HofLKAYSUmH65+stoIiT3UC6OoSxDtrPPlOxnug3qZcV0FsOhSyu9zw30x5Ha 5DpBfeokiUxiVJ8FQYDOlGlsowOJQU88SkQL8lF2fQGvBxwarwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHDUHuFkNNUaAT4+T3ZNxcKXkwVXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWViMjE1ODEtOTI4My0z ZWYxLWE0YWYtZGI5YzVjYTI4Yjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYi3IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEyXqtHyBaEoP/olsW4/aJZ1LjC41jOMO0cpGqTWzqzbeIcdM/5yZZny Cl/bY2Mhd8vL3tUm9ltWY8ZtUbqs6MXHMSfk6ENeJYBbcmQc2HqV4JP9r97u2WAD P9zGVjWDW+URGbtBXf7PrBOnOUIq+bM7QZLGJd4bvbxnmMZI/oZtRcQ03e3lBKTM qDruxWJLXYlVKhxe20fOMfRRn0k8520xKBidVJATp+O9XNlzaXtl8wND7xtOnK2n UtgeWZL4bOLQ288CiDKtXvmR2QT6Cb54Si4Ci+kGed1Ok9m88EVdX1A5R1cg+XMR VEDUhniRO5O/DlfyVZ/vX097BTfzNGo= -----END CERTIFICATE-----Generated at Sat Aug 23 23:14:55 2025 by rpki-client