$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d0e97e6-9eae-32db-a2a2-e6200a762ae0.roa File: 8d0e97e6-9eae-32db-a2a2-e6200a762ae0.roa (raw, json) Hash identifier: gfrX+9heTwv0CqMWCNpV2i+20cEUXWZoctxk2Yqs/0U= Subject key identifier: CC:97:62:2A:07:AF:17:86:BE:C0:B8:48:64:11:89:65:5B:22:81:AD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC2C01ED13C6805FB8FC800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d0e97e6-9eae-32db-a2a2-e6200a762ae0.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 98.220.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:c0:1e:d1:3c:68:05:fb:8f:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=ad7cb874-ecb9-497d-8f4d-12918d14ce9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e4:15:05:53:b5:e6:e8:59:2a:e6:e0:5c:c2: 79:29:87:30:81:d1:89:90:fa:fe:b4:51:4d:43:22: e9:4f:a0:59:bd:a5:dd:3e:f9:14:85:2a:ce:e2:bb: 25:f1:bf:64:5b:28:ce:43:fe:cf:df:32:8c:21:6c: b5:b8:31:ba:1d:82:15:31:18:0f:8e:31:61:f5:e2: 7c:78:fb:b9:22:46:76:13:cc:f2:c6:6b:53:7b:98: 3f:cb:92:ea:38:ea:9f:a8:24:4f:4b:aa:c2:b7:35: d4:53:83:2d:dd:3f:5a:74:a1:58:dc:ca:20:17:b6: 97:49:36:06:a4:a8:91:1c:38:22:6b:95:c5:ad:f7: 9b:3b:a0:08:89:a1:4e:02:72:7c:ac:99:57:90:40: d0:ff:31:d9:95:9a:d1:7b:10:34:75:30:3e:67:7d: 21:f0:2a:1b:b2:13:51:d9:e4:bd:4d:31:5f:4f:18: 44:0f:18:1f:0d:25:ab:dd:00:13:3b:c2:72:54:04: b1:93:55:fc:41:2f:3a:68:be:e2:90:1d:4d:ca:a7: 4e:1e:07:27:aa:e5:9a:5d:dc:21:6d:5f:c2:1b:0d: 96:cb:d1:ae:f8:1f:4e:1e:62:41:ca:46:3e:81:73: 0a:9c:60:50:ed:12:3b:42:e7:d0:ef:4d:a6:13:45: 7c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:97:62:2A:07:AF:17:86:BE:C0:B8:48:64:11:89:65:5B:22:81:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d0e97e6-9eae-32db-a2a2-e6200a762ae0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.220.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:c6:8f:af:3e:ec:6e:cb:d2:fe:09:13:b0:4f:c9:fd:a8:17: 98:54:9a:ae:26:53:5e:4f:e3:d5:42:1a:3c:90:08:83:0b:f5: c4:a9:6b:a9:46:c8:1a:e2:69:a7:2d:cf:b3:24:21:ab:a0:86: 91:ed:4c:27:a7:60:76:05:e3:26:7a:70:c0:b2:a0:8f:e8:bc: 0c:0d:84:66:fb:6c:10:48:78:c9:9b:e7:98:d6:af:a2:cc:a8: 5a:a6:9d:e7:4e:b9:d4:34:b2:08:85:c7:9e:70:ec:62:2f:eb: d2:dd:27:45:08:e0:10:d0:2f:70:58:d5:ae:bb:0e:e3:95:c8: 16:fe:64:2d:7b:16:c1:88:e0:e5:0a:2b:f4:5c:5a:4c:60:3b: a0:fa:46:3f:25:fa:3d:2e:37:83:6f:73:71:3b:b2:61:9c:46: 9f:19:59:d4:43:5c:19:94:d9:b3:e0:2b:19:02:64:9f:c1:b0: d7:6b:33:ab:05:51:82:29:f4:6c:0e:81:35:2b:80:3c:53:f1: 56:6d:96:50:5a:38:7f:75:4c:5c:24:78:b0:55:f3:7a:ce:d9: d8:ac:e8:11:4b:4a:eb:38:be:9a:f4:f6:43:09:ac:f2:ee:fa: a4:43:6d:64:ca:c9:de:38:12:67:b4:c1:a6:55:ab:c0:6e:87: b2:f0:12:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswsAe0TxoBfuPyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YWQ3Y2I4NzQtZWNiOS00OTdkLThmNGQtMTI5MThkMTRjZTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneQVBVO15uhZKubgXMJ5KYcwgdGJkPr+tFFN QyLpT6BZvaXdPvkUhSrO4rsl8b9kWyjOQ/7P3zKMIWy1uDG6HYIVMRgPjjFh9eJ8 ePu5IkZ2E8zyxmtTe5g/y5LqOOqfqCRPS6rCtzXUU4Mt3T9adKFY3MogF7aXSTYG pKiRHDgia5XFrfebO6AIiaFOAnJ8rJlXkEDQ/zHZlZrRexA0dTA+Z30h8CobshNR 2eS9TTFfTxhEDxgfDSWr3QATO8JyVASxk1X8QS86aL7ikB1NyqdOHgcnquWaXdwh bV/CGw2Wy9Gu+B9OHmJBykY+gXMKnGBQ7RI7QufQ702mE0V8EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMyXYioHrxeGvsC4SGQRiWVbIoGtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGQwZTk3ZTYtOWVhZS0z MmRiLWEyYTItZTYyMDBhNzYyYWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYtyqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTGj68+7G7L0v4JE7BPyf2oF5hUmq4mU15P49VCGjyQCIML9cSpa6lG yBriaactz7MkIaughpHtTCenYHYF4yZ6cMCyoI/ovAwNhGb7bBBIeMmb55jWr6LM qFqmnedOudQ0sgiFx55w7GIv69LdJ0UI4BDQL3BY1a67DuOVyBb+ZC17FsGI4OUK K/RcWkxgO6D6Rj8l+j0uN4Nvc3E7smGcRp8ZWdRDXBmU2bPgKxkCZJ/BsNdrM6sF UYIp9GwOgTUrgDxT8VZtllBaOH91TFwkeLBV83rO2dis6BFLSus4vpr09kMJrPLu +qRDbWTKyd44Eme0waZVq8Buh7LwEoU= -----END CERTIFICATE-----Generated at Sat Aug 23 22:58:14 2025 by rpki-client