$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8971559a-be5f-33aa-8e7b-af5f2429dc5f.roa File: 8971559a-be5f-33aa-8e7b-af5f2429dc5f.roa (raw, json) Hash identifier: 3dhoofHkoTu2CC0EK4ISYhkbBBGdhbftvXplTbPtVjw= Subject key identifier: 67:18:3D:66:A2:42:2B:E1:41:58:A1:0D:2F:2F:40:E3:9D:F5:EF:1F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC5672C86C38E0B87E2D6C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8971559a-be5f-33aa-8e7b-af5f2429dc5f.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 98.207.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c5:67:2c:86:c3:8e:0b:87:e2:d6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=61b63518-9b20-4dc9-9a15-9f074370a0e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c3:85:ea:7b:19:4a:29:81:18:d2:90:70:4d: 1d:3d:d9:50:9e:8a:44:09:8b:53:09:9e:4e:7a:32: cc:c9:a3:b5:e2:95:56:dd:87:bf:04:a3:27:49:93: 42:7c:dd:f5:09:b4:4e:31:d1:23:91:4b:a8:bf:7b: e8:ea:4a:6f:cb:ed:ae:3d:c3:7e:e8:29:11:f1:04: 99:7d:60:01:49:ea:34:c6:86:57:f6:3c:3e:02:5e: 82:bc:48:be:9b:be:8f:a7:bb:16:ce:2a:bc:84:66: 36:32:11:47:9b:f1:5c:1f:96:f6:77:f1:53:d8:7d: 80:f9:af:62:ad:c5:20:dc:27:6b:a2:d7:c6:b3:8b: 40:b2:65:c5:c5:0e:62:bd:51:9f:b8:c6:8c:4e:5d: fe:e8:54:c0:e6:17:00:ab:71:8d:ce:d1:4d:3b:23: 93:6f:01:c7:4c:3f:59:70:5e:e9:b7:57:5a:7d:67: 68:a1:9e:14:d4:0b:7c:34:ff:3f:bd:21:a6:00:37: 13:6b:19:b5:50:c5:ab:8d:b8:42:34:ca:ab:bd:62: b1:1c:51:e6:d1:91:74:fc:7e:78:ae:80:70:e0:6c: d0:0c:8f:1e:92:6b:22:df:05:9a:a9:cc:15:b4:dc: 60:25:d3:41:8a:ea:86:63:9b:16:fd:c9:42:ae:b9: 7a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:18:3D:66:A2:42:2B:E1:41:58:A1:0D:2F:2F:40:E3:9D:F5:EF:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8971559a-be5f-33aa-8e7b-af5f2429dc5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.207.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:fa:b3:cc:2e:7c:70:7b:b4:59:44:de:f9:fb:07:c4:a2:63: 19:fb:3a:9b:51:69:36:26:b7:8b:b1:66:59:af:e1:0f:65:a9: 71:35:3c:99:70:ea:86:49:54:9c:11:72:21:01:27:18:d8:6d: c2:2a:09:4a:d2:70:e6:1e:72:a1:ea:9c:2d:b2:b5:4d:03:5f: 5b:36:17:f6:2f:58:01:1d:39:c4:ae:d1:00:7d:4f:d8:9b:db: 55:e0:2b:d4:b2:5f:14:8e:c0:31:90:b6:f7:ad:cb:85:2f:93: 64:cc:19:6b:51:58:bf:bd:af:cf:cd:4c:15:5e:ea:fe:17:45: 66:0f:b4:74:81:e6:be:ec:19:cf:95:0d:5b:65:a7:76:7d:f0: 35:95:58:f5:12:31:12:c1:45:b9:26:f2:0c:79:91:f0:8a:8b: ff:e1:73:0f:e8:af:f2:32:a9:ec:38:32:cd:a4:df:ca:0b:76: de:1e:b0:76:63:b8:5d:c0:de:0e:df:d9:ed:d3:b9:0e:fe:ce: b1:81:e5:21:62:e8:5b:2f:56:a4:a4:ad:5d:d3:84:4a:4f:34: 18:51:bb:a6:1b:95:4d:9b:73:d8:ef:69:2f:e5:da:0f:36:19: cf:5c:be:4d:e0:18:69:e5:68:de:d5:ca:5f:62:ee:bd:e8:34: 8f:11:3c:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxWcshsOOC4fi1sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NjFiNjM1MTgtOWIyMC00ZGM5LTlhMTUtOWYwNzQzNzBhMGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4cOF6nsZSimBGNKQcE0dPdlQnopECYtTCZ5O ejLMyaO14pVW3Ye/BKMnSZNCfN31CbROMdEjkUuov3vo6kpvy+2uPcN+6CkR8QSZ fWABSeo0xoZX9jw+Al6CvEi+m76Pp7sWziq8hGY2MhFHm/FcH5b2d/FT2H2A+a9i rcUg3CdrotfGs4tAsmXFxQ5ivVGfuMaMTl3+6FTA5hcAq3GNztFNOyOTbwHHTD9Z cF7pt1dafWdooZ4U1At8NP8/vSGmADcTaxm1UMWrjbhCNMqrvWKxHFHm0ZF0/H54 roBw4GzQDI8ekmsi3wWaqcwVtNxgJdNBiuqGY5sW/clCrrl6vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGcYPWaiQivhQVihDS8vQOOd9e8fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODk3MTU1OWEtYmU1Zi0z M2FhLThlN2ItYWY1ZjI0MjlkYzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYs+eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAv6s8wufHB7tFlE3vn7B8SiYxn7OptRaTYmt4uxZlmv4Q9lqXE1PJlw 6oZJVJwRciEBJxjYbcIqCUrScOYecqHqnC2ytU0DX1s2F/YvWAEdOcSu0QB9T9ib 21XgK9SyXxSOwDGQtvety4Uvk2TMGWtRWL+9r8/NTBVe6v4XRWYPtHSB5r7sGc+V DVtlp3Z98DWVWPUSMRLBRbkm8gx5kfCKi//hcw/or/Iyqew4Ms2k38oLdt4esHZj uF3A3g7f2e3TuQ7+zrGB5SFi6FsvVqSkrV3ThEpPNBhRu6YblU2bc9jvaS/l2g82 Gc9cvk3gGGnlaN7Vyl9i7r3oNI8RPJ4= -----END CERTIFICATE-----Generated at Sun Aug 24 06:19:23 2025 by rpki-client