$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/631edf74-58f1-3407-95d9-7870e16d3e4e.roa File: 631edf74-58f1-3407-95d9-7870e16d3e4e.roa (raw, json) Hash identifier: 7lc4QXfGwEBM9WVo2IFG3mmaTQDJS38n6b+UzaWVrrg= Subject key identifier: 4A:82:C1:7E:BC:8B:7D:E3:1A:38:C1:64:C1:00:60:4C:34:60:96:91 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC2B8EA90700DA806674DE0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/631edf74-58f1-3407-95d9-7870e16d3e4e.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 98.206.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:b8:ea:90:70:0d:a8:06:67:4d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=8f0d1b45-8cfd-451b-b67a-5dab883fdecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:4f:70:8a:58:10:52:b7:a6:f7:f2:2a:7e:4a: bf:ad:67:ec:7a:07:ba:02:08:30:a9:b3:7b:4f:3c: db:46:60:2e:f4:28:8d:ad:5c:d0:c5:05:8e:ea:dd: aa:2e:63:3e:37:12:9c:f2:b5:3e:d9:29:ea:23:64: 6e:8f:50:54:30:38:90:b1:4d:5e:90:50:0b:22:0f: ac:71:6a:a1:8d:91:eb:9b:14:35:92:5e:0d:30:8d: 53:bb:88:cb:e1:56:30:9e:b2:6b:00:19:02:49:a5: 56:dd:e9:d9:fd:e7:27:b7:11:10:91:4c:2b:5a:d6: 3a:ea:10:81:8a:04:90:ed:55:f1:bc:95:1b:30:e1: 45:3a:26:04:bc:c1:29:e7:90:0d:00:cd:73:6a:41: a2:6e:d9:ce:e8:90:a0:c8:0c:c5:93:73:36:db:c9: 44:d8:6a:af:7e:a3:cd:44:12:14:0e:32:4b:ff:b0: 7d:5c:bd:a1:1b:e4:8e:b0:19:5f:de:86:3a:c5:8b: 8c:83:74:07:a0:34:a4:0b:90:08:13:bc:82:80:1e: 04:3e:da:09:aa:70:18:55:9a:20:6c:c7:6a:67:e9: 84:bb:db:21:bb:da:58:eb:23:30:23:28:cf:fe:3e: 09:a1:b1:69:8a:2c:a3:9e:8e:fa:c4:8b:6a:d4:9f: 5e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:82:C1:7E:BC:8B:7D:E3:1A:38:C1:64:C1:00:60:4C:34:60:96:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/631edf74-58f1-3407-95d9-7870e16d3e4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.206.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:0d:74:c1:c7:04:32:da:91:3b:dd:c0:69:c2:9d:8a:53:21: f6:cf:50:5d:ad:bb:d0:0b:fe:fb:eb:19:6c:f5:9e:5c:55:59: 17:9c:bb:f5:58:15:61:26:86:e8:b6:f1:62:a3:61:ef:14:28: 94:3b:a0:3c:27:af:7f:f3:12:59:00:94:da:12:93:d2:d3:c6: 21:2e:13:78:58:58:b1:e1:cd:9e:73:5a:ff:3b:98:17:0f:56: ce:a5:55:9f:76:64:b5:3c:e9:b1:c5:6e:91:39:61:a9:5b:d0: 19:3d:bf:d3:c6:f4:f9:5e:f2:a9:f5:85:d7:d9:4b:ce:d2:d6: 61:bb:04:2f:00:ec:d0:37:83:7c:02:7d:03:b0:8c:b9:e2:21: e0:65:3f:18:b0:b9:24:13:6b:df:a7:03:9d:cd:5d:f0:f5:87: 99:65:3b:6b:56:a1:69:43:96:ba:56:7a:81:b2:74:31:5e:b7: 97:8f:df:9a:f2:80:c2:0c:d7:c6:6e:26:d6:e9:f1:15:6a:d0: ba:7a:cb:fb:f3:ca:38:2e:4d:14:7b:fd:16:a3:97:1a:bf:d0: cf:53:b3:7e:6d:53:7d:24:32:b6:dd:3e:39:76:ea:5b:92:a7: ef:1d:b2:d3:cb:8b:54:24:b6:ae:95:46:d6:e0:2b:f5:43:02: 08:fc:d1:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswrjqkHANqAZnTeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk OGYwZDFiNDUtOGNmZC00NTFiLWI2N2EtNWRhYjg4M2ZkZWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhk9wilgQUrem9/Iqfkq/rWfsege6AggwqbN7 TzzbRmAu9CiNrVzQxQWO6t2qLmM+NxKc8rU+2SnqI2Ruj1BUMDiQsU1ekFALIg+s cWqhjZHrmxQ1kl4NMI1Tu4jL4VYwnrJrABkCSaVW3enZ/ecntxEQkUwrWtY66hCB igSQ7VXxvJUbMOFFOiYEvMEp55ANAM1zakGibtnO6JCgyAzFk3M228lE2GqvfqPN RBIUDjJL/7B9XL2hG+SOsBlf3oY6xYuMg3QHoDSkC5AIE7yCgB4EPtoJqnAYVZog bMdqZ+mEu9shu9pY6yMwIyjP/j4JobFpiiyjno76xItq1J9ejQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEqCwX68i33jGjjBZMEAYEw0YJaRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjMxZWRmNzQtNThmMS0z NDA3LTk1ZDktNzg3MGUxNmQzZTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYs7gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwNdMHHBDLakTvdwGnCnYpTIfbPUF2tu9AL/vvrGWz1nlxVWRecu/VY FWEmhui28WKjYe8UKJQ7oDwnr3/zElkAlNoSk9LTxiEuE3hYWLHhzZ5zWv87mBcP Vs6lVZ92ZLU86bHFbpE5Yalb0Bk9v9PG9Ple8qn1hdfZS87S1mG7BC8A7NA3g3wC fQOwjLniIeBlPxiwuSQTa9+nA53NXfD1h5llO2tWoWlDlrpWeoGydDFet5eP35ry gMIM18ZuJtbp8RVq0Lp6y/vzyjguTRR7/Rajlxq/0M9Ts35tU30kMrbdPjl26luS p+8dstPLi1Qktq6VRtbgK/VDAgj80fk= -----END CERTIFICATE-----Generated at Sat Aug 23 23:34:21 2025 by rpki-client