$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae7ce39c-5f3e-36b3-a850-63c2f324699a.roa File: ae7ce39c-5f3e-36b3-a850-63c2f324699a.roa (raw, json) Hash identifier: cfv3gY5AGs99wXcuQm5fHbawzq4Vk6aAL9SSmcNSd8E= Subject key identifier: D5:4D:2C:21:66:D6:44:A8:20:FE:05:24:7B:2A:59:63:F0:C4:4E:19 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC2CE65AC983E831523AB00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae7ce39c-5f3e-36b3-a850-63c2f324699a.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 98.253.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:ce:65:ac:98:3e:83:15:23:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=2c0dc346-a666-45ae-8e9a-4f9871c79b94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8d:d6:0b:40:48:b2:db:54:cd:c9:2a:9c:d4: 0b:9a:61:27:99:e6:a6:46:e8:51:90:ca:95:54:ae: b6:29:33:0e:2a:b3:1c:43:51:e1:74:92:f5:74:cf: 68:42:76:2d:04:c3:f7:67:6e:64:9f:f8:16:fe:a0: f0:26:12:3c:7d:98:8b:26:98:a3:9d:84:7a:88:2a: c7:0a:82:ac:ec:52:e6:fa:00:9e:f7:b7:ac:61:ce: 86:b9:e2:be:ed:8e:ce:08:b6:f0:95:7e:2f:26:74: b6:42:27:8a:0f:e7:68:ce:14:3a:99:2f:d2:5c:78: 38:8f:36:1b:4e:5d:b3:fd:ea:78:4b:22:de:5c:09: 25:ab:14:35:96:e3:4a:d2:58:0e:2d:d5:2f:a6:7c: bc:18:6c:ab:bb:30:ab:d4:d8:3e:fc:61:ec:35:c4: 44:b0:d5:4a:fe:c5:96:75:7e:49:a6:33:dc:a9:4d: d5:f6:6e:68:9b:5c:0b:7b:11:55:59:34:cb:be:b0: 86:aa:7f:a0:22:1f:f4:b0:62:9e:17:47:37:48:4c: a4:1f:ad:93:91:d5:77:e6:a7:b4:60:fe:3a:d2:cc: 1d:b5:ea:37:c2:71:68:5f:8f:ee:06:b5:94:a7:54: 33:0a:bd:bb:3e:c1:ae:b6:c5:51:3c:90:a4:2f:59: 32:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:4D:2C:21:66:D6:44:A8:20:FE:05:24:7B:2A:59:63:F0:C4:4E:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae7ce39c-5f3e-36b3-a850-63c2f324699a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.253.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:8a:57:82:dc:89:97:09:4f:79:7a:72:47:cf:d6:20:7e:c7: c8:26:2c:fe:76:9c:51:62:52:0a:d6:6e:fa:07:1e:3a:f9:97: 79:75:f5:8b:3a:4c:62:18:86:d7:94:9d:c1:8f:3b:5a:6b:e5: a3:f2:25:c0:52:a6:9f:78:3b:73:80:9e:2a:5b:11:d9:3a:14: 91:07:14:78:e4:3a:1a:ff:42:64:d5:37:a8:cd:58:59:d0:54: 2f:86:95:8b:68:b5:04:53:5e:af:ed:4c:eb:fb:7d:2c:0a:84: 44:f6:24:63:4f:5f:1d:b6:63:b5:30:f9:62:ad:33:36:25:b0: a5:a3:a5:96:87:ca:c7:e8:7d:ef:2a:05:3a:ff:fa:11:ed:dc: ca:e8:98:32:80:03:62:4b:88:9e:42:99:50:54:f7:03:12:29: 81:9b:88:ca:f4:3c:bd:f1:05:da:b0:e9:cf:b8:49:72:13:ed: ff:3a:3e:0d:ab:3e:41:ad:34:09:1d:1c:3d:a0:ca:b7:84:a8: c6:f3:9d:c0:5b:b1:19:fa:63:db:aa:aa:d0:0c:34:4c:ce:9a: c2:68:30:0d:2e:b9:5d:3c:4a:34:14:aa:ef:8d:fc:9d:ce:e8: 93:21:b8:47:b0:69:5e:0b:2c:20:a4:ea:19:e9:cc:50:83:aa: cd:3a:ad:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsws5lrJg+gxUjqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MmMwZGMzNDYtYTY2Ni00NWFlLThlOWEtNGY5ODcxYzc5Yjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm43WC0BIsttUzckqnNQLmmEnmeamRuhRkMqV VK62KTMOKrMcQ1HhdJL1dM9oQnYtBMP3Z25kn/gW/qDwJhI8fZiLJpijnYR6iCrH CoKs7FLm+gCe97esYc6GueK+7Y7OCLbwlX4vJnS2QieKD+dozhQ6mS/SXHg4jzYb Tl2z/ep4SyLeXAklqxQ1luNK0lgOLdUvpny8GGyruzCr1Ng+/GHsNcREsNVK/sWW dX5JpjPcqU3V9m5om1wLexFVWTTLvrCGqn+gIh/0sGKeF0c3SEykH62TkdV35qe0 YP460swdteo3wnFoX4/uBrWUp1QzCr27PsGutsVRPJCkL1kyIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNVNLCFm1kSoIP4FJHsqWWPwxE4ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWU3Y2UzOWMtNWYzZS0z NmIzLWE4NTAtNjNjMmYzMjQ2OTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYv04MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqKV4LciZcJT3l6ckfP1iB+x8gmLP52nFFiUgrWbvoHHjr5l3l19Ys6 TGIYhteUncGPO1pr5aPyJcBSpp94O3OAnipbEdk6FJEHFHjkOhr/QmTVN6jNWFnQ VC+GlYtotQRTXq/tTOv7fSwKhET2JGNPXx22Y7Uw+WKtMzYlsKWjpZaHysfofe8q BTr/+hHt3MromDKAA2JLiJ5CmVBU9wMSKYGbiMr0PL3xBdqw6c+4SXIT7f86Pg2r PkGtNAkdHD2gyreEqMbzncBbsRn6Y9uqqtAMNEzOmsJoMA0uuV08SjQUqu+N/J3O 6JMhuEewaV4LLCCk6hnpzFCDqs06rTY= -----END CERTIFICATE-----Generated at Sat Aug 23 23:03:53 2025 by rpki-client