$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c42da20-6726-3d1a-85d1-a6d776837620.roa File: 8c42da20-6726-3d1a-85d1-a6d776837620.roa (raw, json) Hash identifier: FNvjouSNNxDU6YD+JPcDVEUBBFxHmj1zORhibjkeQxU= Subject key identifier: 21:47:88:C9:81:B2:5C:81:B9:DC:88:E5:36:A8:FF:56:AC:2D:A2:CC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC56CDD276D3D5D8DD425C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c42da20-6726-3d1a-85d1-a6d776837620.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 98.234.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c5:6c:dd:27:6d:3d:5d:8d:d4:25:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=f385c3b8-1ce3-485f-a29e-9cb56ea10393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:99:0d:88:a3:d1:fa:58:6f:80:13:d5:a0:c1: 08:dd:ed:66:cf:de:45:9c:12:60:53:24:f3:1e:8b: f0:94:cf:ec:31:b3:5a:89:55:c6:dd:6d:72:ad:80: bb:c3:b0:ac:1b:fd:7d:0f:d3:aa:f9:92:ff:38:ce: 25:03:ee:e5:7d:b3:f2:9b:dc:3a:29:bc:e1:eb:43: c9:67:7f:ab:27:2a:99:57:8a:e9:2f:6a:2d:bc:57: 65:5f:15:cd:f1:35:c8:11:af:e3:34:ec:ec:22:99: f7:f4:1c:17:78:63:6e:99:b9:05:4b:51:04:ba:e8: a2:61:3c:a2:37:05:33:a7:32:6d:ec:50:14:9c:6d: 7f:bd:6b:72:a3:69:1b:62:9c:33:30:d3:9e:a8:2e: 88:d0:97:32:4a:7d:ba:86:07:00:da:3e:c5:e5:8f: 1a:4f:a5:34:bd:d6:1d:ee:38:42:2b:df:8b:9f:fb: 56:98:68:ea:ba:2e:d0:3f:b2:a8:23:83:e1:33:c0: ea:fb:67:fb:25:62:5c:a0:6f:7d:d6:e0:be:78:1a: 1f:ba:d0:23:37:ba:67:e2:ec:48:37:d5:7f:0c:f7: db:40:74:d0:92:ca:ca:6b:d7:67:13:c4:7e:d0:ea: 4e:15:f6:39:13:9f:f4:eb:87:de:eb:fd:24:86:c5: 41:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:47:88:C9:81:B2:5C:81:B9:DC:88:E5:36:A8:FF:56:AC:2D:A2:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c42da20-6726-3d1a-85d1-a6d776837620.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.234.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cc:60:54:52:e0:3b:11:00:ff:1d:7b:7c:84:3e:9d:5f:85:f7: da:54:f5:1a:ee:6a:64:ed:95:ef:ea:33:35:58:92:6b:df:c8: a8:d0:a8:56:8a:3b:41:28:5d:21:d8:15:93:a8:e1:70:cc:f7: 4e:bf:35:66:19:e0:19:5e:09:c3:1f:f3:43:94:8d:cc:59:5b: 3b:58:89:eb:21:b2:9e:6d:05:a9:d9:7d:2b:1b:b5:e5:0a:20: bc:4a:35:2a:d7:67:49:5f:74:12:a8:59:cd:64:e2:f3:ed:9c: 99:a1:52:91:ea:f2:e3:e0:12:7d:0d:47:5a:b1:89:9d:52:b8: bc:e6:92:ec:14:99:2b:df:dc:19:61:46:5a:bc:2a:6b:31:e2: 5d:41:f3:38:79:d2:a8:fc:7a:f3:95:ac:13:a6:c0:4e:d7:80: 02:4b:ce:1d:f7:7e:92:98:be:70:9b:b9:2e:c2:42:4c:3b:d8: b8:be:4e:c0:31:88:3a:55:ac:57:45:54:fe:da:2c:43:35:18: b2:65:c7:48:d8:0b:b1:b7:9f:10:a1:98:7c:a3:96:a8:42:a8: 3f:b3:46:00:f7:13:58:8d:86:d6:d9:c1:db:db:a7:7a:fd:77: 97:2a:c4:3e:18:94:ac:8b:33:a6:bf:73:3a:e4:90:9a:69:ba: b3:26:31:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxWzdJ209XY3UJcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZjM4NWMzYjgtMWNlMy00ODVmLWEyOWUtOWNiNTZlYTEwMzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpkNiKPR+lhvgBPVoMEI3e1mz95FnBJgUyTz HovwlM/sMbNaiVXG3W1yrYC7w7CsG/19D9Oq+ZL/OM4lA+7lfbPym9w6Kbzh60PJ Z3+rJyqZV4rpL2otvFdlXxXN8TXIEa/jNOzsIpn39BwXeGNumbkFS1EEuuiiYTyi NwUzpzJt7FAUnG1/vWtyo2kbYpwzMNOeqC6I0JcySn26hgcA2j7F5Y8aT6U0vdYd 7jhCK9+Ln/tWmGjqui7QP7KoI4PhM8Dq+2f7JWJcoG991uC+eBofutAjN7pn4uxI N9V/DPfbQHTQksrKa9dnE8R+0OpOFfY5E5/064fe6/0khsVBAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFHiMmBslyBudyI5Tao/1asLaLMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGM0MmRhMjAtNjcyNi0z ZDFhLTg1ZDEtYTZkNzc2ODM3NjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYurwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMxgVFLgOxEA/x17fIQ+nV+F99pU9RruamTtle/qMzVYkmvfyKjQqFaK O0EoXSHYFZOo4XDM906/NWYZ4BleCcMf80OUjcxZWztYieshsp5tBanZfSsbteUK ILxKNSrXZ0lfdBKoWc1k4vPtnJmhUpHq8uPgEn0NR1qxiZ1SuLzmkuwUmSvf3Blh Rlq8Kmsx4l1B8zh50qj8evOVrBOmwE7XgAJLzh33fpKYvnCbuS7CQkw72Li+TsAx iDpVrFdFVP7aLEM1GLJlx0jYC7G3nxChmHyjlqhCqD+zRgD3E1iNhtbZwdvbp3r9 d5cqxD4YlKyLM6a/czrkkJppurMmMTE= -----END CERTIFICATE-----Generated at Sun Aug 24 03:58:20 2025 by rpki-client