$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/817e6f81-c1b7-3259-82e1-5027e39d61b8.roa File: 817e6f81-c1b7-3259-82e1-5027e39d61b8.roa (raw, json) Hash identifier: PhlSEdrNrm1LKxXnzgvwp5Cg69ZdCmEpXmMXlBqSqGc= Subject key identifier: 2A:EB:FC:AB:C5:2F:D5:FF:36:F7:79:F9:7B:D0:7B:54:F8:1F:31:BF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC348A52D6F64B481AE3480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/817e6f81-c1b7-3259-82e1-5027e39d61b8.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 98.35.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:48:a5:2d:6f:64:b4:81:ae:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=e01cb674-1e56-40f7-a8f2-096e97c16f45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e5:e6:35:01:06:6b:ac:ad:a7:72:56:6e:88: 86:01:9f:66:8e:4b:ee:ff:27:de:80:27:ac:49:d6: aa:94:b0:af:78:6b:4d:63:7e:5a:d7:9d:74:46:80: fa:32:a1:80:2a:ec:fd:8a:21:7c:d1:b1:ec:d4:b1: 09:97:aa:6b:97:8b:dc:f6:b0:97:d2:20:04:c8:4c: 4e:4b:c4:ff:33:c3:76:0c:84:c8:47:3c:8a:2c:07: e3:b9:4d:b9:40:3e:62:c4:b3:e7:35:c4:05:b3:0b: 1a:1d:70:db:58:ab:74:c0:1b:cf:6d:3e:75:f0:2d: 72:98:75:3f:c3:87:40:60:df:1f:4e:78:c2:fe:70: 10:c6:33:02:f9:cd:09:1e:82:f5:82:23:78:1c:32: f7:58:74:1f:b3:05:f5:a1:d2:2b:f3:63:23:2f:21: 15:fb:a9:06:c9:1f:26:5b:ac:b5:69:1b:be:05:aa: f7:ab:58:fb:6b:6e:db:79:65:1c:cd:a8:aa:7a:0d: 46:58:2e:e5:34:34:23:30:0b:14:4b:76:0d:bd:9e: 73:a1:dc:4b:d3:35:e3:23:1a:58:b8:ee:6d:d0:4c: ee:01:c9:77:6f:e5:6c:76:5b:53:c0:63:1f:eb:6e: 77:33:76:d4:f0:15:09:7e:ae:6e:90:54:38:4e:a2: 55:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:EB:FC:AB:C5:2F:D5:FF:36:F7:79:F9:7B:D0:7B:54:F8:1F:31:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/817e6f81-c1b7-3259-82e1-5027e39d61b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.35.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:d4:75:5b:b2:ec:1d:c9:36:c0:b7:62:85:f1:83:82:a5:74: df:18:8b:ee:e7:68:f0:17:35:7f:01:18:8b:09:d3:31:38:17: 17:f0:41:ff:1b:f8:08:f4:da:ed:e8:42:08:89:35:f1:de:a2: a5:d0:cf:e8:7a:68:53:f9:0d:a8:ee:96:0d:99:d0:14:2f:12: 3d:ca:4b:37:d8:16:1e:37:24:be:a9:a2:39:d8:d2:43:43:f2: 44:3c:55:eb:64:26:bb:c3:b1:60:7c:62:f1:8a:1b:55:53:44: d0:51:b3:72:07:7c:c2:01:09:a8:bb:57:27:e7:e3:88:de:f9: 60:16:66:b5:d3:0b:6e:91:27:e1:44:1f:4f:f3:3f:0b:5f:e9: ee:29:65:7a:d5:39:2d:b1:a7:54:a8:9b:4e:f3:3d:e5:7d:1e: a3:7b:50:20:7c:ec:22:f5:31:0c:97:09:35:4f:a2:d9:ea:3e: 86:8d:ba:70:21:26:d7:d8:d0:b0:db:34:9b:71:6f:ab:7d:e8: f2:4f:17:11:54:ae:fb:a1:0e:d1:4f:c9:f8:e1:8d:4a:98:14: 3f:73:74:e1:03:e9:c0:65:bd:53:3c:cd:9d:e0:83:da:28:07: 64:be:6e:90:49:80:17:02:cf:b1:82:ee:48:e7:80:1f:75:ae: c4:8e:c4:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw0ilLW9ktIGuNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZTAxY2I2NzQtMWU1Ni00MGY3LWE4ZjItMDk2ZTk3YzE2ZjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOXmNQEGa6ytp3JWboiGAZ9mjkvu/yfegCes SdaqlLCveGtNY35a1510RoD6MqGAKuz9iiF80bHs1LEJl6prl4vc9rCX0iAEyExO S8T/M8N2DITIRzyKLAfjuU25QD5ixLPnNcQFswsaHXDbWKt0wBvPbT518C1ymHU/ w4dAYN8fTnjC/nAQxjMC+c0JHoL1giN4HDL3WHQfswX1odIr82MjLyEV+6kGyR8m W6y1aRu+Bar3q1j7a27beWUczaiqeg1GWC7lNDQjMAsUS3YNvZ5zodxL0zXjIxpY uO5t0EzuAcl3b+VsdltTwGMf6253M3bU8BUJfq5ukFQ4TqJVjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCrr/KvFL9X/Nvd5+XvQe1T4HzG/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODE3ZTZmODEtYzFiNy0z MjU5LTgyZTEtNTAyN2UzOWQ2MWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYiMEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALjUdVuy7B3JNsC3YoXxg4KldN8Yi+7naPAXNX8BGIsJ0zE4FxfwQf8b +Aj02u3oQgiJNfHeoqXQz+h6aFP5Dajulg2Z0BQvEj3KSzfYFh43JL6pojnY0kND 8kQ8VetkJrvDsWB8YvGKG1VTRNBRs3IHfMIBCai7Vyfn44je+WAWZrXTC26RJ+FE H0/zPwtf6e4pZXrVOS2xp1Som07zPeV9HqN7UCB87CL1MQyXCTVPotnqPoaNunAh JtfY0LDbNJtxb6t96PJPFxFUrvuhDtFPyfjhjUqYFD9zdOED6cBlvVM8zZ3gg9oo B2S+bpBJgBcCz7GC7kjngB91rsSOxMQ= -----END CERTIFICATE-----Generated at Sun Aug 24 01:19:28 2025 by rpki-client