$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3f8958c-a80d-3e0f-94a8-1cc48eb7b952.roa File: b3f8958c-a80d-3e0f-94a8-1cc48eb7b952.roa (raw, json) Hash identifier: KszlGHOYwAnOxyL1naVRgPX3jTyHIL942qD1Fp1c/o0= Subject key identifier: 37:6C:08:E4:2D:08:19:9C:C7:C5:F4:02:7F:0F:16:54:08:9F:AF:85 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC4D8C54CB14CBA7F22B070 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3f8958c-a80d-3e0f-94a8-1cc48eb7b952.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 98.220.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:d8:c5:4c:b1:4c:ba:7f:22:b0:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=d11247ad-faa3-444f-b56a-a7df6275eb94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9f:c4:1e:9b:9f:b3:ef:1f:7c:71:59:95:b4: 62:04:27:c9:32:08:16:eb:78:84:6d:ae:7e:2a:3d: c6:c1:83:87:3d:6a:d5:e9:d5:48:70:01:7c:1f:60: cf:b0:0c:a6:70:a9:ba:0f:b0:4c:2f:91:da:27:80: 58:c5:15:fa:b6:9e:d6:c3:d7:ed:ca:ad:a2:40:97: 15:b2:08:66:bd:e7:9d:3f:53:a6:63:5e:1f:1c:53: 6a:8a:cc:15:65:53:f3:b9:f7:4d:ae:b0:16:30:1c: 2a:f2:29:00:cc:17:bb:23:49:5e:c1:f8:86:ba:30: 7e:ed:94:44:f0:fb:c7:f5:2e:04:80:e6:43:39:d7: 1d:fc:36:d1:7e:b4:f7:e5:cb:72:86:25:81:99:f2: ad:43:54:4a:d4:ed:55:87:43:26:d7:b8:a6:fc:21: fb:0b:59:fe:cc:8b:cb:4f:c2:cc:3b:07:db:36:e8: 85:c7:46:55:41:ee:fb:08:a1:be:2d:ac:e9:14:6f: 7a:0f:78:12:d1:3e:1d:20:48:28:45:cc:ce:d9:35: cd:f6:a0:94:d7:7a:2b:78:1b:5d:61:e7:65:4b:4e: 1f:51:c9:f2:39:d7:17:81:70:f0:82:49:07:ab:53: f6:bf:63:7b:3f:fa:69:95:3d:14:b1:de:34:aa:96: 4d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:6C:08:E4:2D:08:19:9C:C7:C5:F4:02:7F:0F:16:54:08:9F:AF:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3f8958c-a80d-3e0f-94a8-1cc48eb7b952.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.220.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:20:c5:81:7f:ee:ec:91:37:54:d9:c6:3f:5c:e9:a7:37:58: 42:d1:74:4e:a3:6e:8c:2d:29:17:d9:e0:76:14:11:d5:10:e8: 3c:66:44:57:af:a6:2b:25:a2:41:c7:7e:5b:1b:4a:99:43:33: 94:1c:78:94:bf:97:1e:fd:e8:ef:1a:9d:b8:a0:19:45:b6:c6: d3:b1:87:13:eb:ce:66:23:7d:3a:05:d0:c5:5b:ec:db:3c:85: f9:88:f2:74:18:cb:87:aa:dc:12:3c:6f:34:63:fc:96:e8:b8: df:9a:35:27:87:ff:50:67:0e:97:c8:e1:d3:9e:0b:b1:d3:d4: 6a:23:c0:86:18:01:cb:b8:63:13:6d:63:5a:22:a1:06:77:75: 5e:2e:3d:69:6c:cf:43:2f:e5:aa:57:a6:b9:f3:51:fe:b5:4f: ec:5c:44:b4:ae:8f:83:d6:27:bd:d7:d9:1c:5c:92:1e:2a:26: 3d:60:b9:cc:ce:e8:45:f0:84:dc:21:f8:d3:d7:11:53:7b:ee: e3:95:c6:1c:e7:45:ee:59:ac:a2:45:c2:bf:b1:71:9c:ee:6b: 0d:2a:49:46:c9:44:d6:79:26:38:e6:2e:83:fa:0f:e1:52:98: a3:bb:9e:42:96:8f:64:80:94:62:06:0a:84:47:57:eb:f2:da: c4:0b:4d:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxNjFTLFMun8isHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZDExMjQ3YWQtZmFhMy00NDRmLWI1NmEtYTdkZjYyNzVlYjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsp/EHpufs+8ffHFZlbRiBCfJMggW63iEba5+ Kj3GwYOHPWrV6dVIcAF8H2DPsAymcKm6D7BML5HaJ4BYxRX6tp7Ww9ftyq2iQJcV sghmveedP1OmY14fHFNqiswVZVPzufdNrrAWMBwq8ikAzBe7I0lewfiGujB+7ZRE 8PvH9S4EgOZDOdcd/DbRfrT35ctyhiWBmfKtQ1RK1O1Vh0Mm17im/CH7C1n+zIvL T8LMOwfbNuiFx0ZVQe77CKG+LazpFG96D3gS0T4dIEgoRczO2TXN9qCU13oreBtd YedlS04fUcnyOdcXgXDwgkkHq1P2v2N7P/pplT0Usd40qpZN5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDdsCOQtCBmcx8X0An8PFlQIn6+FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjNmODk1OGMtYTgwZC0z ZTBmLTk0YTgtMWNjNDhlYjdiOTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYtyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQgxYF/7uyRN1TZxj9c6ac3WELRdE6jbowtKRfZ4HYUEdUQ6DxmRFev pislokHHflsbSplDM5QceJS/lx796O8anbigGUW2xtOxhxPrzmYjfToF0MVb7Ns8 hfmI8nQYy4eq3BI8bzRj/JbouN+aNSeH/1BnDpfI4dOeC7HT1GojwIYYAcu4YxNt Y1oioQZ3dV4uPWlsz0Mv5apXprnzUf61T+xcRLSuj4PWJ73X2Rxckh4qJj1guczO 6EXwhNwh+NPXEVN77uOVxhznRe5ZrKJFwr+xcZzuaw0qSUbJRNZ5JjjmLoP6D+FS mKO7nkKWj2SAlGIGCoRHV+vy2sQLTVw= -----END CERTIFICATE-----Generated at Sat Aug 23 23:02:05 2025 by rpki-client