$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1420ac6-6780-3f82-98b9-3d8d48238909.roa File: a1420ac6-6780-3f82-98b9-3d8d48238909.roa (raw, json) Hash identifier: c8g+Gfbxj90PeAzoG10Hf13hiMACMtixGrggL+q0x88= Subject key identifier: D2:7B:D5:FE:8C:AF:0F:F1:93:0D:04:5C:04:48:49:7C:13:F0:09:63 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFB660FEBE4F9FD7CA8E500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1420ac6-6780-3f82-98b9-3d8d48238909.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 22909 IP address blocks: 98.211.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:66:0f:eb:e4:f9:fd:7c:a8:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=4a0d352d-659a-4591-acf7-a4de68f1b151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:9f:63:2f:12:06:f5:db:40:89:1a:d7:4d:b0: 35:a3:b4:55:24:c4:21:3a:05:3f:58:4a:9b:0e:5f: 2e:2b:f9:4d:e4:af:ab:7b:89:d9:f9:82:61:0a:2a: 41:9b:91:0d:7f:93:dc:50:50:61:bf:ac:d3:d8:1d: ed:82:01:e0:e3:36:1c:c1:fa:ff:32:20:72:9b:27: 2c:20:6c:65:4b:03:83:73:ab:c0:0d:98:2e:2a:9e: b5:75:ed:f3:47:3a:61:be:58:ae:53:06:56:50:3f: ef:1c:22:60:51:ab:80:75:4b:8d:7e:dc:58:bd:69: a5:4a:bb:50:66:37:e4:9d:e2:51:23:4a:06:57:c6: 7a:8b:d3:19:98:7e:0f:64:cd:62:b4:d2:53:7e:65: c0:49:93:64:a9:7c:b7:96:5c:0d:bc:8f:9e:dd:11: 05:dc:29:ef:99:42:c7:d3:2e:93:92:4f:7e:cd:36: 30:fc:c0:dd:1d:93:6b:b3:7d:97:5c:20:7c:09:4a: 26:d2:ba:cc:2a:28:c9:9e:cb:ed:5d:b2:20:23:24: 1c:b1:f2:35:fb:2c:49:ab:3a:69:2c:cf:7a:63:db: ee:e3:ee:52:21:59:2b:ce:4b:63:2b:b9:2e:cd:60: 87:89:12:17:e1:ef:ea:7f:7b:99:14:b0:c7:97:a3: f8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:7B:D5:FE:8C:AF:0F:F1:93:0D:04:5C:04:48:49:7C:13:F0:09:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1420ac6-6780-3f82-98b9-3d8d48238909.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.211.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:a1:99:86:b2:4a:18:ab:86:9a:0b:4d:bc:3d:c3:54:91:75: 78:54:62:7d:6f:77:be:d6:d7:ad:7d:22:66:2b:82:ca:9c:51: 5f:27:79:a8:e2:54:1b:97:5f:f0:94:4d:23:f9:f2:a9:4a:ff: 91:1e:48:23:c2:0c:91:ed:5c:e0:15:4e:08:59:21:73:c7:1a: d5:f3:44:de:e6:0c:bb:f3:5b:b9:b3:bb:2d:a1:52:8d:8d:b7: 97:bf:7e:42:1d:03:58:b3:99:65:39:13:c1:95:03:a5:58:6b: e2:a1:c9:ca:8c:22:92:ca:1c:ac:dc:97:67:62:ee:03:60:7e: dd:17:26:8b:a9:a8:f2:87:fd:19:c7:17:72:be:dd:ae:af:92: 4d:8e:b6:56:5e:9b:a6:58:f8:09:c9:17:6d:11:39:42:80:ab: 0c:54:03:d8:5f:c9:9d:a5:d3:79:d6:de:5c:ac:08:8e:2c:25: 59:44:57:78:b3:07:16:3b:e1:c5:c1:54:f9:22:b5:05:6f:e4: ce:85:50:c0:d5:ff:51:ac:63:36:65:25:1b:ec:cf:c3:22:1c: 83:11:d4:d2:6a:6b:7c:e8:f2:b0:0d:36:7a:ce:9b:ed:cf:b0: a3:b5:ba:8c:d7:23:b6:bd:ee:7d:35:0e:2b:6a:36:57:77:f8: 8a:78:19:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+2YP6+T5/Xyo5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk NGEwZDM1MmQtNjU5YS00NTkxLWFjZjctYTRkZTY4ZjFiMTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh59jLxIG9dtAiRrXTbA1o7RVJMQhOgU/WEqb Dl8uK/lN5K+re4nZ+YJhCipBm5ENf5PcUFBhv6zT2B3tggHg4zYcwfr/MiBymycs IGxlSwODc6vADZguKp61de3zRzphvliuUwZWUD/vHCJgUauAdUuNftxYvWmlSrtQ ZjfkneJRI0oGV8Z6i9MZmH4PZM1itNJTfmXASZNkqXy3llwNvI+e3REF3CnvmULH 0y6Tkk9+zTYw/MDdHZNrs32XXCB8CUom0rrMKijJnsvtXbIgIyQcsfI1+yxJqzpp LM96Y9vu4+5SIVkrzktjK7kuzWCHiRIX4e/qf3uZFLDHl6P4zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJ71f6Mrw/xkw0EXARISXwT8AljMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTE0MjBhYzYtNjc4MC0z ZjgyLTk4YjktM2Q4ZDQ4MjM4OTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYtMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKShmYayShirhpoLTbw9w1SRdXhUYn1vd77W1619ImYrgsqcUV8neaji VBuXX/CUTSP58qlK/5EeSCPCDJHtXOAVTghZIXPHGtXzRN7mDLvzW7mzuy2hUo2N t5e/fkIdA1izmWU5E8GVA6VYa+KhycqMIpLKHKzcl2di7gNgft0XJoupqPKH/RnH F3K+3a6vkk2OtlZem6ZY+AnJF20ROUKAqwxUA9hfyZ2l03nW3lysCI4sJVlEV3iz BxY74cXBVPkitQVv5M6FUMDV/1GsYzZlJRvsz8MiHIMR1NJqa3zo8rANNnrOm+3P sKO1uozXI7a97n01DitqNld3+Ip4GdA= -----END CERTIFICATE-----Generated at Mon Jun 30 23:45:33 2025 by rpki-client