$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8cee1346-9c30-37af-9217-e8d33c9f960d.roa File: 8cee1346-9c30-37af-9217-e8d33c9f960d.roa (raw, json) Hash identifier: pFellAuOi+ZDloLrTl2yazX7Oz3Acz/tmSdA2Av6Y/8= Subject key identifier: 60:8A:A0:7D:94:D3:3B:D7:DA:7D:82:02:D7:3B:3E:75:B1:7C:B6:23 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AE031815D2E708747D269C680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8cee1346-9c30-37af-9217-e8d33c9f960d.roa Signing time: Sat 16 Aug 2025 13:00:42 +0000 ROA not before: Sat 16 Aug 2025 13:00:42 +0000 ROA not after: Fri 14 Nov 2025 14:00:42 +0000 asID: 7725 IP address blocks: 98.252.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e0:31:81:5d:2e:70:87:47:d2:69:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 16 13:00:42 2025 GMT Not After : Nov 14 14:00:42 2025 GMT Subject: CN=5b0cd6d4-803c-4b03-9b2b-37809deac7bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9e:5a:14:3d:8b:98:af:2f:b2:f5:61:14:3f: a3:8b:03:70:d7:b2:b7:77:50:10:e5:f1:0a:cd:11: 3b:5f:89:84:28:da:45:f8:4e:b2:f9:e8:8d:d6:ad: c1:ec:26:14:57:7a:39:3d:27:79:72:6b:68:cf:d1: 93:81:e2:09:df:04:eb:45:04:00:9a:ab:6f:aa:2f: 7d:60:66:9a:b5:93:f4:43:9a:08:f1:52:99:62:5a: b1:fc:29:40:f0:49:01:e8:c5:21:63:eb:ac:86:1d: bd:58:65:15:8e:2d:34:68:6d:4f:f5:e3:ea:e4:1b: b6:ab:87:20:eb:5f:0a:2a:02:7b:bf:52:2e:1d:c5: d9:d7:9c:e1:ac:82:c0:a2:a2:b6:63:4c:13:29:c7: 1d:d0:5f:57:f7:81:dd:bb:20:fd:dc:b5:ca:29:7b: 71:a6:52:14:2f:48:a9:db:29:d9:e1:15:18:6f:40: a5:de:7a:bd:6a:44:a8:4a:8f:a7:c8:8f:89:64:87: 53:da:70:20:30:1c:15:ba:fd:8b:81:4d:24:27:f8: 1f:0c:3a:24:63:0d:5e:24:ff:15:69:86:c1:a7:77: fd:b3:a5:7c:41:1b:ce:a2:00:0d:c4:38:dd:ba:88: 96:c5:91:e6:e2:c9:5f:74:b9:04:3f:11:d8:f3:c2: b3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:8A:A0:7D:94:D3:3B:D7:DA:7D:82:02:D7:3B:3E:75:B1:7C:B6:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8cee1346-9c30-37af-9217-e8d33c9f960d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.252.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:2e:5e:76:b1:34:c9:7e:61:36:ae:73:3c:ec:85:9d:f0:30: 9a:56:1a:30:c2:b2:64:3d:6e:e1:45:ee:75:03:a2:44:ee:7f: 1b:1b:06:9a:dc:f8:43:fc:1d:c5:79:5d:d6:4d:57:5e:9d:84: 67:69:0e:0e:47:b5:78:30:ca:ce:77:08:59:7c:2d:07:31:f5: 39:d7:a4:37:12:c2:e9:49:07:0c:64:c6:8c:0a:ed:15:5c:71: e3:a3:19:e3:7b:e3:07:f2:19:da:93:cd:71:f2:ef:af:47:86: c3:6b:8e:15:1e:3e:98:51:c8:9e:b6:fe:ec:9d:49:3b:47:84: fd:c7:61:fc:c0:a9:11:8c:57:f7:22:f7:df:fa:95:ce:9c:f4: 96:ca:c5:b8:f0:78:68:fe:a4:7f:9d:37:34:1f:e8:6a:db:f1: d4:69:76:a7:09:0d:21:0e:43:44:36:60:5e:4b:07:a1:c1:51: 4d:7a:33:87:0f:01:8f:2f:ab:27:cb:ab:1d:b1:66:13:03:89: d7:d5:58:7b:57:82:82:b1:bd:b8:78:4f:65:9b:a0:d5:cc:c4: d1:7b:22:09:fe:1e:b0:54:6b:55:b3:97:bf:e1:ad:9a:28:64: d3:a7:da:b4:1d:a3:24:98:bd:a2:f4:d3:76:74:09:7e:47:cd: e9:29:6c:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErgMYFdLnCHR9JpxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgxNjEzMDA0MloXDTI1MTExNDE0MDA0MlowLzEtMCsGA1UEAxMk NWIwY2Q2ZDQtODAzYy00YjAzLTliMmItMzc4MDlkZWFjN2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnp5aFD2LmK8vsvVhFD+jiwNw17K3d1AQ5fEK zRE7X4mEKNpF+E6y+eiN1q3B7CYUV3o5PSd5cmtoz9GTgeIJ3wTrRQQAmqtvqi99 YGaatZP0Q5oI8VKZYlqx/ClA8EkB6MUhY+ushh29WGUVji00aG1P9ePq5Bu2q4cg 618KKgJ7v1IuHcXZ15zhrILAoqK2Y0wTKccd0F9X94HduyD93LXKKXtxplIUL0ip 2ynZ4RUYb0Cl3nq9akSoSo+nyI+JZIdT2nAgMBwVuv2LgU0kJ/gfDDokYw1eJP8V aYbBp3f9s6V8QRvOogANxDjduoiWxZHm4slfdLkEPxHY88KzMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCKoH2U0zvX2n2CAtc7PnWxfLYjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGNlZTEzNDYtOWMzMC0z N2FmLTkyMTctZThkMzNjOWY5NjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYvzIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcuXnaxNMl+YTauczzshZ3wMJpWGjDCsmQ9buFF7nUDokTufxsbBprc +EP8HcV5XdZNV16dhGdpDg5HtXgwys53CFl8LQcx9TnXpDcSwulJBwxkxowK7RVc ceOjGeN74wfyGdqTzXHy769HhsNrjhUePphRyJ62/uydSTtHhP3HYfzAqRGMV/ci 99/6lc6c9JbKxbjweGj+pH+dNzQf6Grb8dRpdqcJDSEOQ0Q2YF5LB6HBUU16M4cP AY8vqyfLqx2xZhMDidfVWHtXgoKxvbh4T2WboNXMxNF7Ign+HrBUa1Wzl7/hrZoo ZNOn2rQdoySYvaL003Z0CX5HzekpbFk= -----END CERTIFICATE-----Generated at Sun Aug 24 01:36:20 2025 by rpki-client