$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f522895-55ad-3557-ae4c-8ce2a696a854.roa File: 8f522895-55ad-3557-ae4c-8ce2a696a854.roa (raw, json) Hash identifier: L980sI+R/xYgETr4RXp90T0OdGZP3Hc1Pq3RrrtthJk= Subject key identifier: 55:2F:67:FD:66:5C:F1:C4:81:7E:C0:94:DD:98:18:23:65:0D:E0:E8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EBC803D3D4C01F8B149340 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f522895-55ad-3557-ae4c-8ce2a696a854.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33490 IP address blocks: 98.232.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:eb:c8:03:d3:d4:c0:1f:8b:14:93:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=d7099045-4285-490a-b43f-1a9a19f0ee3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a2:15:44:4d:7a:58:4b:bb:ca:ba:2e:8a:55: f2:ee:50:6d:0c:f9:57:31:6f:ea:a8:7c:74:1c:60: 12:c2:f2:77:1d:61:6c:58:f8:c5:8b:1d:4a:d9:53: 19:fb:51:ad:01:aa:5e:92:be:12:20:02:34:19:64: cb:c3:1b:8b:4e:de:05:eb:28:2e:c7:8a:58:a2:a7: f4:72:45:e4:ec:42:c3:ea:d3:8f:0a:34:e0:8e:ed: 36:0a:89:98:26:4a:82:23:b8:3d:18:42:3f:9d:32: 56:66:73:d6:66:a7:73:f0:a7:2a:8e:a9:9d:9a:14: 50:e0:87:db:21:e9:9c:93:fc:0e:c5:b8:43:8c:d8: 5d:86:24:4f:75:e2:66:bc:ef:54:b1:07:1f:3c:05: 3e:2e:83:d4:67:9a:81:8d:da:1c:bf:32:3c:55:81: fc:71:8c:c4:54:53:1c:52:60:55:0d:4e:38:2b:41: 97:fd:62:39:ea:70:fa:d1:95:38:aa:b5:6c:a1:64: 91:96:f7:97:8a:f3:e6:b1:0e:3f:96:2d:f6:80:e5: 91:63:62:67:8f:04:db:5c:32:d7:a2:1e:27:a4:84: 18:08:50:63:86:d2:13:f8:9b:3b:63:86:17:e9:d0: 82:56:84:43:6f:43:51:b2:2e:7d:cc:e5:08:9a:30: f7:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:2F:67:FD:66:5C:F1:C4:81:7E:C0:94:DD:98:18:23:65:0D:E0:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f522895-55ad-3557-ae4c-8ce2a696a854.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.232.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:93:7f:5a:90:44:02:f8:77:cf:a8:3d:9d:44:87:d7:5e:82: a8:5d:99:33:7f:e1:eb:d0:fe:f4:05:e1:65:2b:50:5f:e5:80: 0d:1b:d8:e5:79:98:93:37:6a:a9:89:a6:b4:06:16:9f:e6:79: 5d:ef:75:d1:33:bb:60:35:51:3b:54:45:7b:e8:26:e9:2a:0e: da:1d:7e:d1:2e:d8:36:be:7e:f2:56:1d:64:0d:ed:cc:53:6b: 3f:ff:c9:b5:e2:10:05:26:12:57:18:00:34:84:c2:91:f4:b1: 91:f0:ab:a7:89:a9:6f:52:92:34:47:0f:88:80:ab:01:ed:5e: fd:82:78:93:ef:12:66:80:df:b4:f5:44:cf:5d:ee:64:7f:90: 1a:78:c4:f5:c7:30:03:fc:51:51:a7:e1:54:08:c3:82:af:be: 07:74:8d:86:a8:6c:de:26:3d:8c:e0:95:8d:e8:0d:c7:6f:b5: a1:2c:52:62:af:32:d4:8a:5d:4e:5c:7e:a8:ea:e0:52:10:e0: ad:ba:6d:ed:71:2b:e7:71:6f:9c:04:2a:14:93:60:73:71:d9: 4d:df:71:a7:51:de:1b:c3:83:18:15:19:01:a1:22:4f:97:d0: 51:f1:7e:69:84:7e:34:7c:27:b2:02:11:ef:77:95:b9:56:fd: ed:4a:31:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq068gD09TAH4sUk0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk ZDcwOTkwNDUtNDI4NS00OTBhLWI0M2YtMWE5YTE5ZjBlZTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6IVRE16WEu7yrouilXy7lBtDPlXMW/qqHx0 HGASwvJ3HWFsWPjFix1K2VMZ+1GtAapekr4SIAI0GWTLwxuLTt4F6ygux4pYoqf0 ckXk7ELD6tOPCjTgju02ComYJkqCI7g9GEI/nTJWZnPWZqdz8KcqjqmdmhRQ4Ifb Iemck/wOxbhDjNhdhiRPdeJmvO9UsQcfPAU+LoPUZ5qBjdocvzI8VYH8cYzEVFMc UmBVDU44K0GX/WI56nD60ZU4qrVsoWSRlveXivPmsQ4/li32gOWRY2JnjwTbXDLX oh4npIQYCFBjhtIT+Js7Y4YX6dCCVoRDb0NRsi59zOUImjD36wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFUvZ/1mXPHEgX7AlN2YGCNlDeDoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGY1MjI4OTUtNTVhZC0z NTU3LWFlNGMtOGNlMmE2OTZhODU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYujYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+Tf1qQRAL4d8+oPZ1Eh9degqhdmTN/4evQ/vQF4WUrUF/lgA0b2OV5 mJM3aqmJprQGFp/meV3vddEzu2A1UTtURXvoJukqDtodftEu2Da+fvJWHWQN7cxT az//ybXiEAUmElcYADSEwpH0sZHwq6eJqW9SkjRHD4iAqwHtXv2CeJPvEmaA37T1 RM9d7mR/kBp4xPXHMAP8UVGn4VQIw4Kvvgd0jYaobN4mPYzglY3oDcdvtaEsUmKv MtSKXU5cfqjq4FIQ4K26be1xK+dxb5wEKhSTYHNx2U3fcadR3hvDgxgVGQGhIk+X 0FHxfmmEfjR8J7ICEe93lblW/e1KMUQ= -----END CERTIFICATE-----Generated at Sat Aug 23 23:55:17 2025 by rpki-client