$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/956e0a1e-eed4-3d50-8e00-aa0b765f0660.roa File: 956e0a1e-eed4-3d50-8e00-aa0b765f0660.roa (raw, json) Hash identifier: a+al7zQnV+TN6Zs1JGbzwcZTPUrEiCWfO6cdCtwNq3w= Subject key identifier: 86:13:93:08:B8:7F:A2:2B:0C:B0:B0:14:4D:3B:1B:0B:60:0E:7C:E4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC57484D54488144B8B4850 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/956e0a1e-eed4-3d50-8e00-aa0b765f0660.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 98.37.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c5:74:84:d5:44:88:14:4b:8b:48:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=b03f8852-f67f-4a5d-a8b5-baaadbcc0a7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:68:f6:8f:68:63:f8:27:96:51:21:b2:9d:bb: a0:04:9c:c9:19:e0:ad:ed:78:96:11:14:84:0d:ab: 2c:ae:68:c9:97:90:a6:40:ff:74:94:49:d2:33:f4: 83:3c:d8:f6:18:40:a2:fd:39:97:55:9f:85:b3:c0: c6:65:c9:77:18:42:23:c2:05:f9:e5:fc:4a:b8:14: 86:6b:33:b6:75:2c:e7:f3:64:99:48:c2:fa:b0:a7: 19:a3:ae:8d:86:15:9b:47:1a:f7:1a:ad:43:62:4e: 28:0b:d3:b1:06:ee:62:a4:63:e2:72:0e:8e:d0:9a: 32:cd:2d:58:05:95:48:dd:dd:24:fe:5b:64:69:c8: 64:99:6c:8b:3e:63:89:5d:2f:25:20:63:20:1b:3e: d5:ab:21:34:09:d5:1f:7e:b9:e2:c7:00:9a:7f:84: fd:84:32:39:21:f0:8b:c4:57:ab:36:ca:05:2b:29: 79:58:01:4a:d8:3d:0f:42:54:9f:98:6d:69:60:d9: f5:36:ad:44:99:94:86:67:a2:68:70:f9:5b:93:91: 54:40:43:81:1a:56:4d:ea:11:36:48:34:dd:5d:be: 02:e3:bb:79:b3:6a:26:40:4d:34:fc:73:ab:93:d9: dc:bb:51:9d:18:7d:4b:05:db:1c:e4:f2:4f:80:5b: 63:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:13:93:08:B8:7F:A2:2B:0C:B0:B0:14:4D:3B:1B:0B:60:0E:7C:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/956e0a1e-eed4-3d50-8e00-aa0b765f0660.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.37.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:d3:13:bf:67:fd:4a:c6:32:51:4b:fd:91:0a:3a:44:0e:df: 0e:c2:5c:de:30:27:b8:22:0c:bd:f5:46:13:d9:1d:3b:63:40: 02:d8:2e:06:b7:dd:2c:c5:15:bf:72:40:fa:b3:00:30:14:18: d2:8a:37:71:56:4c:c9:82:38:1a:6f:00:5e:87:b4:68:d6:a7: f3:23:3a:91:a5:e4:27:cf:2b:ca:85:12:8d:27:8d:bd:dd:44: bc:11:9f:d8:2d:cb:f0:dd:1a:20:fd:a1:e7:84:ad:38:97:62: ed:99:60:4c:64:99:88:df:36:a1:7d:c6:06:8e:9a:86:85:cc: 30:f4:b2:a3:8d:f1:60:12:5c:af:d7:15:19:7d:4b:44:8b:22: d7:69:84:74:6c:c0:2f:10:40:1a:c4:5d:12:1e:27:96:65:69: e5:26:44:dc:26:31:d3:59:c1:0c:d1:3c:b9:01:11:1e:cd:84: ee:6a:a2:11:a1:da:1e:f1:75:bf:30:7c:4a:62:2f:5d:96:18: 1d:ab:d1:90:f2:6c:52:80:39:01:93:aa:d0:1c:f0:0e:4b:f6: e7:12:a5:6c:9a:9d:20:75:45:91:d0:90:61:0a:d3:2f:c0:a6: 7a:e2:92:19:d3:34:99:ee:90:f3:b6:1f:82:db:e7:0a:70:bf: fa:13:0f:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxXSE1USIFEuLSFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YjAzZjg4NTItZjY3Zi00YTVkLWE4YjUtYmFhYWRiY2MwYTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGj2j2hj+CeWUSGynbugBJzJGeCt7XiWERSE DassrmjJl5CmQP90lEnSM/SDPNj2GECi/TmXVZ+Fs8DGZcl3GEIjwgX55fxKuBSG azO2dSzn82SZSML6sKcZo66NhhWbRxr3Gq1DYk4oC9OxBu5ipGPicg6O0JoyzS1Y BZVI3d0k/ltkachkmWyLPmOJXS8lIGMgGz7VqyE0CdUffrnixwCaf4T9hDI5IfCL xFerNsoFKyl5WAFK2D0PQlSfmG1pYNn1Nq1EmZSGZ6JocPlbk5FUQEOBGlZN6hE2 SDTdXb4C47t5s2omQE00/HOrk9ncu1GdGH1LBdsc5PJPgFtjfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYTkwi4f6IrDLCwFE07GwtgDnzkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTU2ZTBhMWUtZWVkNC0z ZDUwLThlMDAtYWEwYjc2NWYwNjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYiW8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDTE79n/UrGMlFL/ZEKOkQO3w7CXN4wJ7giDL31RhPZHTtjQALYLga3 3SzFFb9yQPqzADAUGNKKN3FWTMmCOBpvAF6HtGjWp/MjOpGl5CfPK8qFEo0njb3d RLwRn9gty/DdGiD9oeeErTiXYu2ZYExkmYjfNqF9xgaOmoaFzDD0sqON8WASXK/X FRl9S0SLItdphHRswC8QQBrEXRIeJ5ZlaeUmRNwmMdNZwQzRPLkBER7NhO5qohGh 2h7xdb8wfEpiL12WGB2r0ZDybFKAOQGTqtAc8A5L9ucSpWyanSB1RZHQkGEK0y/A pnrikhnTNJnukPO2H4Lb5wpwv/oTDyc= -----END CERTIFICATE-----Generated at Sun Aug 24 04:25:45 2025 by rpki-client