$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af6ac3ce-8e00-3d36-a4e4-ef68ac2d118e.roa File: af6ac3ce-8e00-3d36-a4e4-ef68ac2d118e.roa (raw, json) Hash identifier: S3koV9arJpc2vwzGtbcxp4IWFSHEAj1/9RCo1eEmC3I= Subject key identifier: 83:BD:3D:8D:99:3A:6B:A1:EE:5A:42:FB:85:8B:95:EB:8D:7A:18:50 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC4E49048A6D772B7AE1580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af6ac3ce-8e00-3d36-a4e4-ef68ac2d118e.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 98.253.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:e4:90:48:a6:d7:72:b7:ae:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=a7f6368a-f503-44c2-8ddf-363741895dd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:92:8f:6b:30:e5:32:98:c1:81:e3:df:00:f4: fb:7e:e3:78:ff:20:4c:b6:17:93:82:d6:d5:26:db: 49:58:d5:7a:b8:2f:23:85:a0:f9:18:8a:eb:51:5c: 19:64:b7:cd:85:0a:1b:c0:ea:a2:50:c7:d8:c5:68: 13:82:9d:da:08:0d:43:ee:1a:d9:ad:fa:17:83:df: 2f:da:e7:8b:25:5b:a5:ce:67:07:fe:5f:81:25:17: a1:a7:8a:8a:87:9b:95:8f:1e:4b:a0:fc:2d:53:44: c6:f2:e7:32:24:d1:c9:e0:67:ca:04:1b:da:36:0f: 43:07:f1:e7:fc:fc:43:9a:75:85:6c:64:6f:a2:85: 6f:66:c5:40:4a:9c:3d:72:0a:fa:4e:96:7e:1b:fe: 28:80:03:d8:d9:23:4e:4f:85:3d:88:ed:ce:73:45: a6:fb:85:fa:5c:20:09:64:74:44:b3:20:54:63:e3: ac:1f:f2:8c:b5:26:96:d2:f4:39:8f:99:93:3f:3c: 4a:c5:ad:17:1e:22:25:63:75:a6:42:06:81:9b:45: 1e:0e:37:24:17:62:02:c1:d9:59:f9:ff:3a:3c:fe: cd:a6:f1:62:2a:c9:09:2b:d5:e3:dd:7c:77:bc:cc: 36:40:27:e3:c2:23:a0:b7:b9:a1:6c:09:d3:7a:1c: 83:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:BD:3D:8D:99:3A:6B:A1:EE:5A:42:FB:85:8B:95:EB:8D:7A:18:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af6ac3ce-8e00-3d36-a4e4-ef68ac2d118e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.253.186.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:c6:ee:f1:33:31:85:fa:48:92:84:4b:f4:a6:6a:62:d6:ea: 6a:84:41:bc:51:2d:1f:10:9c:65:f8:fc:f3:9e:e3:83:4b:20: 5d:7b:60:d0:b6:a8:5e:5b:fc:ad:20:31:91:58:ae:08:95:03: c1:5d:b8:97:4c:6e:4d:bb:45:c3:df:e3:ca:34:7f:65:57:e6: 19:8d:1b:a9:ea:7c:12:ae:64:6c:4e:4b:c8:e8:eb:9f:32:f4: b4:f1:e8:c5:cf:ec:2b:ec:ac:2d:7f:07:a4:b1:cd:68:bf:6d: d8:db:d3:bf:a7:f8:f4:df:e2:32:72:fc:5d:da:97:1f:bf:9a: f8:c4:e9:74:21:d4:a7:64:a5:80:36:12:4e:ea:be:c4:29:9e: d9:92:9f:0f:26:c3:d9:b8:f7:0e:56:12:f2:45:5e:df:98:01: 83:be:85:2d:57:32:96:74:a2:db:a7:04:b9:4a:8e:24:7f:cb: c9:9e:6e:15:22:e4:02:88:08:cf:a0:57:d6:8f:72:fc:bf:8a: a8:58:fe:67:7c:29:f9:cf:e9:c2:c9:14:e8:2c:28:f8:c4:e7: a9:85:4d:d9:f1:ca:40:14:fa:5d:30:61:5c:eb:b3:e7:98:1b: 76:f2:25:23:e8:11:e0:3d:9c:b0:80:3c:17:ea:7b:49:bd:fc: 9a:eb:da:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxOSQSKbXcreuFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YTdmNjM2OGEtZjUwMy00NGMyLThkZGYtMzYzNzQxODk1ZGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZKPazDlMpjBgePfAPT7fuN4/yBMtheTgtbV JttJWNV6uC8jhaD5GIrrUVwZZLfNhQobwOqiUMfYxWgTgp3aCA1D7hrZrfoXg98v 2ueLJVulzmcH/l+BJRehp4qKh5uVjx5LoPwtU0TG8ucyJNHJ4GfKBBvaNg9DB/Hn /PxDmnWFbGRvooVvZsVASpw9cgr6TpZ+G/4ogAPY2SNOT4U9iO3Oc0Wm+4X6XCAJ ZHREsyBUY+OsH/KMtSaW0vQ5j5mTPzxKxa0XHiIlY3WmQgaBm0UeDjckF2ICwdlZ +f86PP7NpvFiKskJK9Xj3Xx3vMw2QCfjwiOgt7mhbAnTehyDlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIO9PY2ZOmuh7lpC+4WLleuNehhQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWY2YWMzY2UtOGUwMC0z ZDM2LWE0ZTQtZWY2OGFjMmQxMThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYv26MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErG7vEzMYX6SJKES/SmamLW6mqEQbxRLR8QnGX4/POe44NLIF17YNC2 qF5b/K0gMZFYrgiVA8FduJdMbk27RcPf48o0f2VX5hmNG6nqfBKuZGxOS8jo658y 9LTx6MXP7CvsrC1/B6SxzWi/bdjb07+n+PTf4jJy/F3alx+/mvjE6XQh1KdkpYA2 Ek7qvsQpntmSnw8mw9m49w5WEvJFXt+YAYO+hS1XMpZ0otunBLlKjiR/y8mebhUi 5AKICM+gV9aPcvy/iqhY/md8KfnP6cLJFOgsKPjE56mFTdnxykAU+l0wYVzrs+eY G3byJSPoEeA9nLCAPBfqe0m9/Jrr2ns= -----END CERTIFICATE-----Generated at Sun Aug 24 04:04:14 2025 by rpki-client