$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0f5cd7a-b132-3ee9-9623-cf5e398ac934.roa File: a0f5cd7a-b132-3ee9-9623-cf5e398ac934.roa (raw, json) Hash identifier: TGrjGNi+a571+k2PIb+zU3XDBilu0bMbgbIWP0zJAcc= Subject key identifier: F6:39:59:A2:D3:9A:28:6E:1B:54:A7:D0:F0:0F:3A:BF:23:C8:37:D6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC2BD52B11EE9FE45DD4580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0f5cd7a-b132-3ee9-9623-cf5e398ac934.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 98.214.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:bd:52:b1:1e:e9:fe:45:dd:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=9b55110c-34c9-4ef3-9154-77c4f4c2dd5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b3:04:5b:4e:6b:6d:b9:ef:bb:6f:fe:91:bf: 90:e9:fb:d8:be:57:50:17:c0:5e:ba:34:99:b0:9a: a5:84:ff:c9:90:31:d2:9e:4e:71:c1:81:88:50:30: 82:2c:5f:38:0e:5f:3d:69:8d:fd:5e:46:a5:18:65: 86:52:37:1b:92:1a:16:79:27:ac:a2:78:0f:95:d6: 47:83:6a:11:87:e0:ed:07:7c:26:16:fc:96:bc:12: 91:47:67:6e:b1:b8:cb:ba:a1:90:28:da:c2:29:b5: 82:89:c7:f3:1a:9c:96:f0:b8:9a:3f:0a:e9:8f:43: ef:b7:26:da:77:31:89:42:94:2d:c0:a7:5a:54:af: 23:d4:26:fe:a6:ed:22:05:c6:33:00:50:c4:65:33: 05:ad:16:00:c2:6c:d6:fb:c4:98:86:b7:60:22:1f: 6e:75:68:65:f3:0a:94:1b:e3:18:3b:c3:9d:fd:86: 5c:d0:b1:1a:ff:b4:2c:c3:2d:c8:5c:c0:24:11:72: 49:9c:5a:17:42:ac:55:97:39:61:51:13:a2:49:f3: ef:cc:ce:6f:41:9b:69:ad:32:fd:ce:7f:99:e3:0c: 00:03:f2:1a:4b:b7:f1:84:8b:bd:51:da:b0:d1:97: ce:99:fe:66:3b:e8:9f:5f:22:e9:02:7e:17:63:56: 8a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:39:59:A2:D3:9A:28:6E:1B:54:A7:D0:F0:0F:3A:BF:23:C8:37:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0f5cd7a-b132-3ee9-9623-cf5e398ac934.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.214.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:30:27:23:6c:f1:7c:d4:2d:1f:b0:03:f2:04:80:f9:2c:02: 55:86:2a:c9:12:60:e4:7f:c8:6d:2c:ea:82:a2:68:36:19:80: 7c:f2:46:4b:72:f5:1e:20:d0:57:7c:a0:bf:21:51:f2:c2:9a: 37:28:b3:ab:79:19:26:00:48:bf:ee:cb:a2:93:84:e9:5d:df: 31:d5:9d:c3:61:b6:0c:79:f4:82:6b:89:1b:28:44:f4:9f:e8: 5f:5d:81:4f:02:8f:64:6c:53:94:8f:a0:b6:09:15:9b:ad:17: f5:a8:19:25:54:fd:ce:a7:fe:8d:ee:21:bb:31:72:48:2e:85: 2a:ea:20:c7:bc:99:32:eb:7b:bc:41:0e:3b:48:6a:12:23:84: 5d:28:ae:1a:0a:4f:6a:d5:9b:ae:ab:bc:8b:fe:9a:54:6a:85: 36:4f:18:11:66:ee:36:f6:9c:25:e2:1e:ba:60:b4:f7:80:29: 42:73:d0:93:c1:5c:68:be:32:29:aa:8a:b5:78:50:b0:63:8e: 51:62:0f:b5:dd:8a:55:8c:05:7e:18:9c:e4:2c:ab:b6:a2:4b: 5e:34:87:26:46:71:2a:c0:2d:33:4f:b1:9d:ef:5a:64:e2:cf: 9c:a2:a7:40:bd:59:69:d9:86:98:0f:49:53:61:68:a1:96:b1: a3:20:d2:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswr1SsR7p/kXdRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk OWI1NTExMGMtMzRjOS00ZWYzLTkxNTQtNzdjNGY0YzJkZDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirMEW05rbbnvu2/+kb+Q6fvYvldQF8BeujSZ sJqlhP/JkDHSnk5xwYGIUDCCLF84Dl89aY39XkalGGWGUjcbkhoWeSesongPldZH g2oRh+DtB3wmFvyWvBKRR2dusbjLuqGQKNrCKbWCicfzGpyW8LiaPwrpj0Pvtyba dzGJQpQtwKdaVK8j1Cb+pu0iBcYzAFDEZTMFrRYAwmzW+8SYhrdgIh9udWhl8wqU G+MYO8Od/YZc0LEa/7Qswy3IXMAkEXJJnFoXQqxVlzlhUROiSfPvzM5vQZtprTL9 zn+Z4wwAA/IaS7fxhIu9Udqw0ZfOmf5mO+ifXyLpAn4XY1aK8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPY5WaLTmihuG1Sn0PAPOr8jyDfWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTBmNWNkN2EtYjEzMi0z ZWU5LTk2MjMtY2Y1ZTM5OGFjOTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYtb+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAwJyNs8XzULR+wA/IEgPksAlWGKskSYOR/yG0s6oKiaDYZgHzyRkty 9R4g0Fd8oL8hUfLCmjcos6t5GSYASL/uy6KThOld3zHVncNhtgx59IJriRsoRPSf 6F9dgU8Cj2RsU5SPoLYJFZutF/WoGSVU/c6n/o3uIbsxckguhSrqIMe8mTLre7xB DjtIahIjhF0orhoKT2rVm66rvIv+mlRqhTZPGBFm7jb2nCXiHrpgtPeAKUJz0JPB XGi+MimqirV4ULBjjlFiD7XdilWMBX4YnOQsq7aiS140hyZGcSrALTNPsZ3vWmTi z5yip0C9WWnZhpgPSVNhaKGWsaMg0pM= -----END CERTIFICATE-----Generated at Sun Aug 24 03:57:26 2025 by rpki-client