$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/901ba81a-8bce-37a6-b0f3-60ed8fd6ad2d.roa File: 901ba81a-8bce-37a6-b0f3-60ed8fd6ad2d.roa (raw, json) Hash identifier: OOJYVlP4ZY7Cw8xJb9cW6FxkoHx6DFSuS9clQx1U2+E= Subject key identifier: A9:09:45:30:EC:EB:4A:3E:AA:9C:88:47:D1:1D:8A:B9:76:80:1E:AA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC2C2C2C8647BD6A4DDF5B5 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/901ba81a-8bce-37a6-b0f3-60ed8fd6ad2d.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 98.222.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:c2:c2:c8:64:7b:d6:a4:dd:f5:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=a97798d7-b305-47dc-afc4-576f5d1aa970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6d:6b:0a:f0:15:d3:03:ff:2f:8c:74:dc:83: 41:60:09:ac:77:0b:1a:39:50:23:fd:73:de:05:41: 92:16:a1:72:69:29:39:0c:04:ee:33:97:7c:4a:ea: ce:bf:34:0c:39:a2:b3:d1:5c:bb:87:95:2a:9d:83: 67:98:f0:ec:ec:cd:07:31:63:7e:9b:0f:37:64:23: 75:92:2a:78:1d:3f:5e:df:e4:ef:1f:f4:44:06:11: 55:60:ea:a4:90:b8:f6:12:6c:61:06:c5:e5:91:82: 79:bb:ba:a3:ba:6e:a4:4b:65:a9:53:1c:9b:56:87: d8:c0:8a:73:4c:83:3b:9f:94:a4:e9:5d:30:f7:b9: 0b:8b:0b:99:56:cb:ce:c3:22:7a:f6:03:87:30:f7: 7d:df:fc:cb:b1:8b:bb:f9:5d:22:27:90:b6:be:c6: 00:c7:32:6f:00:af:e6:62:c3:5f:d7:63:f1:e3:64: 78:db:78:43:47:eb:5a:51:78:88:c8:d8:d8:53:0d: a6:38:b1:ee:42:34:d4:3d:97:dd:d3:f2:8d:54:3a: af:9b:49:ce:64:89:8b:66:85:18:77:98:4d:1e:26: bb:84:54:9f:39:41:b4:46:e3:40:6a:3e:4e:10:51: f0:d3:7d:ef:f5:35:3c:c2:c4:12:62:e1:3d:40:f8: 5c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:09:45:30:EC:EB:4A:3E:AA:9C:88:47:D1:1D:8A:B9:76:80:1E:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/901ba81a-8bce-37a6-b0f3-60ed8fd6ad2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.222.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption db:ec:57:ea:e6:1d:3c:1a:95:f3:74:d7:2e:4d:a8:2e:49:7b: 20:80:49:66:0b:ca:12:90:dc:3e:95:78:9f:4d:34:23:ee:20: c2:51:85:8b:93:58:7d:9a:eb:88:4d:d1:b9:52:de:74:cf:c8: a1:ae:1c:9b:5a:d8:84:2c:9e:7b:f9:14:42:85:d6:ed:8a:4c: 01:45:88:a3:a3:e7:55:a2:77:75:97:65:b0:17:46:a1:12:96: ba:18:fb:f6:8c:98:99:ca:1f:db:32:22:b2:a2:86:8c:aa:6e: 05:c8:e0:f2:b1:49:71:db:56:91:2f:9c:fb:3c:7d:ad:6a:dc: bb:9c:a0:5a:d1:aa:3f:d1:02:ec:37:aa:eb:3c:f2:c5:e2:bf: 0d:37:cb:3d:7d:90:3f:97:45:28:b7:af:c2:f8:01:21:f6:81: c0:b3:59:94:b4:53:35:98:ea:a3:4e:9d:0b:54:08:53:73:0c: 2b:05:bc:68:ad:b7:da:4f:48:a2:d6:29:63:9b:5a:03:f3:ed: f1:e8:c4:a8:a7:dd:f9:93:2a:b0:73:c6:aa:49:de:7b:54:13: 76:07:b7:f5:d8:ac:39:4f:98:c8:4b:2a:51:51:7b:9d:7e:c9: 1f:bf:4e:44:04:28:a2:a4:b0:bd:45:e2:8c:67:3b:77:31:21: c4:5c:f2:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswsLCyGR71qTd9bUwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YTk3Nzk4ZDctYjMwNS00N2RjLWFmYzQtNTc2ZjVkMWFhOTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvG1rCvAV0wP/L4x03INBYAmsdwsaOVAj/XPe BUGSFqFyaSk5DATuM5d8SurOvzQMOaKz0Vy7h5UqnYNnmPDs7M0HMWN+mw83ZCN1 kip4HT9e3+TvH/REBhFVYOqkkLj2EmxhBsXlkYJ5u7qjum6kS2WpUxybVofYwIpz TIM7n5Sk6V0w97kLiwuZVsvOwyJ69gOHMPd93/zLsYu7+V0iJ5C2vsYAxzJvAK/m YsNf12Px42R423hDR+taUXiIyNjYUw2mOLHuQjTUPZfd0/KNVDqvm0nOZImLZoUY d5hNHia7hFSfOUG0RuNAaj5OEFHw033v9TU8wsQSYuE9QPhc0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkJRTDs60o+qpyIR9Edirl2gB6qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTAxYmE4MWEtOGJjZS0z N2E2LWIwZjMtNjBlZDhmZDZhZDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYt74MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANvsV+rmHTwalfN01y5NqC5JeyCASWYLyhKQ3D6VeJ9NNCPuIMJRhYuT WH2a64hN0blS3nTPyKGuHJta2IQsnnv5FEKF1u2KTAFFiKOj51Wid3WXZbAXRqES lroY+/aMmJnKH9syIrKihoyqbgXI4PKxSXHbVpEvnPs8fa1q3LucoFrRqj/RAuw3 qus88sXivw03yz19kD+XRSi3r8L4ASH2gcCzWZS0UzWY6qNOnQtUCFNzDCsFvGit t9pPSKLWKWObWgPz7fHoxKin3fmTKrBzxqpJ3ntUE3YHt/XYrDlPmMhLKlFRe51+ yR+/TkQEKKKksL1F4oxnO3cxIcRc8pw= -----END CERTIFICATE-----Generated at Sun Aug 24 08:05:18 2025 by rpki-client