$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d821450-6ad5-324a-8973-3453cc435c48.roa File: 9d821450-6ad5-324a-8973-3453cc435c48.roa (raw, json) Hash identifier: dJE5REhDenJqDGwu63UbDvVAk5K5nURML9gnFSBYgaE= Subject key identifier: 10:41:0A:92:F9:A5:48:DE:63:FA:75:99:5D:E9:94:FE:97:4A:88:61 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC346A939BC66C4D631B380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d821450-6ad5-324a-8973-3453cc435c48.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 98.33.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:46:a9:39:bc:66:c4:d6:31:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=2bdd03ea-b3b7-49fe-8d98-1741652c5dcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d7:d3:c7:5b:af:5c:ca:78:4a:d9:86:95:8f: 6a:0f:5f:c3:43:75:45:3f:5e:15:22:c9:9e:8f:bb: b0:55:2a:7c:7e:40:1f:d8:a8:c1:e5:39:2f:cd:87: 1e:fc:67:ef:37:aa:df:1e:e7:15:52:3a:50:b5:6d: 13:c3:8e:19:2a:b9:3a:84:be:f9:2b:75:bc:14:a9: 11:ab:f7:78:fc:62:92:03:e6:47:89:45:49:e3:93: ae:08:45:63:a4:6d:fa:95:b2:53:48:6c:79:9c:86: ef:db:41:70:b6:bb:df:9f:6c:04:f5:0f:d4:66:88: b8:c4:de:0a:9b:fb:3a:ae:d2:88:51:61:df:f0:0e: bc:24:b6:d0:ff:1c:ef:57:bd:b7:fe:6b:cd:bd:e8: 77:af:c3:bf:60:0b:ed:b0:3a:a4:45:47:54:68:c0: ce:97:8a:cb:56:80:a4:22:bd:29:9f:ea:19:6a:f3: e2:6c:ea:d9:b5:e8:b9:06:4e:08:71:52:19:91:b1: 5a:8b:b2:71:69:db:3b:55:bf:7c:24:6b:ca:39:a5: bc:1e:1a:37:57:e2:91:e9:2d:60:11:f1:89:a8:72: 4a:8b:bb:74:7a:2a:4c:c2:37:19:04:3a:5f:57:60: 2d:0a:1a:84:cd:95:ac:a1:c0:88:ea:28:02:2a:99: 7a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:41:0A:92:F9:A5:48:DE:63:FA:75:99:5D:E9:94:FE:97:4A:88:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d821450-6ad5-324a-8973-3453cc435c48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.33.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:36:fb:f7:3b:af:85:3b:a2:7c:f0:e3:49:45:88:72:4a:61: 09:9a:f1:9c:1a:93:06:a6:77:47:a8:f9:71:52:2a:a2:d1:3d: 2b:64:e0:aa:58:39:3b:1b:ef:03:73:d7:c7:ba:ba:e2:1e:c7: 53:03:b7:e8:41:8a:2f:58:1d:86:42:10:44:54:d6:df:14:26: 23:b5:0e:8d:3c:8a:01:a7:11:fb:83:84:a9:47:a7:7b:62:b3: 85:1c:48:2f:38:bb:6e:c8:65:00:6d:43:0c:d0:91:00:05:12: cf:2a:dc:66:1e:ee:97:3f:ae:ca:90:ef:da:25:d0:0d:be:43: b8:20:19:6a:f4:e5:9d:18:0f:21:00:98:da:ca:63:34:b4:3f: 80:98:9c:ce:f1:7a:a0:37:3a:0b:f2:96:52:ce:08:67:3d:db: 45:73:c7:e6:8b:7c:99:58:d7:e9:22:55:a0:76:7f:ab:6c:29: 4c:fe:55:91:ba:6c:ad:cb:d2:98:dd:0d:2c:1d:a9:97:b5:16: 1d:71:cb:7f:22:40:e3:89:64:67:32:6b:bf:cc:4a:c5:1d:e8: e0:b2:1d:47:de:be:11:0b:02:38:6e:5d:19:4d:0c:d4:6b:84: 9b:06:07:13:f8:06:65:04:c9:e2:66:17:ca:cb:a9:4e:be:bf: d6:12:92:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw0apObxmxNYxs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MmJkZDAzZWEtYjNiNy00OWZlLThkOTgtMTc0MTY1MmM1ZGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtfTx1uvXMp4StmGlY9qD1/DQ3VFP14VIsme j7uwVSp8fkAf2KjB5TkvzYce/GfvN6rfHucVUjpQtW0Tw44ZKrk6hL75K3W8FKkR q/d4/GKSA+ZHiUVJ45OuCEVjpG36lbJTSGx5nIbv20Fwtrvfn2wE9Q/UZoi4xN4K m/s6rtKIUWHf8A68JLbQ/xzvV723/mvNveh3r8O/YAvtsDqkRUdUaMDOl4rLVoCk Ir0pn+oZavPibOrZtei5Bk4IcVIZkbFai7Jxads7Vb98JGvKOaW8Hho3V+KR6S1g EfGJqHJKi7t0eipMwjcZBDpfV2AtChqEzZWsocCI6igCKpl6RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBBBCpL5pUjeY/p1mV3plP6XSohhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWQ4MjE0NTAtNmFkNS0z MjRhLTg5NzMtMzQ1M2NjNDM1YzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYiF2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKg2+/c7r4U7onzw40lFiHJKYQma8Zwakwamd0eo+XFSKqLRPStk4KpY OTsb7wNz18e6uuIex1MDt+hBii9YHYZCEERU1t8UJiO1Do08igGnEfuDhKlHp3ti s4UcSC84u27IZQBtQwzQkQAFEs8q3GYe7pc/rsqQ79ol0A2+Q7ggGWr05Z0YDyEA mNrKYzS0P4CYnM7xeqA3OgvyllLOCGc920Vzx+aLfJlY1+kiVaB2f6tsKUz+VZG6 bK3L0pjdDSwdqZe1Fh1xy38iQOOJZGcya7/MSsUd6OCyHUfevhELAjhuXRlNDNRr hJsGBxP4BmUEyeJmF8rLqU6+v9YSkqw= -----END CERTIFICATE-----Generated at Sun Aug 24 04:33:38 2025 by rpki-client