$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4ef708a-c054-3e3a-b1a2-b5320ed9a14f.roa File: b4ef708a-c054-3e3a-b1a2-b5320ed9a14f.roa (raw, json) Hash identifier: q5PZCPsKYMIHZOPrs2QVN/fzmdTesMjwNOHSs0Mkcfc= Subject key identifier: A0:55:B6:AC:5C:02:48:2D:2D:37:14:F8:BC:EB:39:44:B7:E8:65:BB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC2BEF758E11408C89A23C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4ef708a-c054-3e3a-b1a2-b5320ed9a14f.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 98.215.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:be:f7:58:e1:14:08:c8:9a:23:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=511e21c1-dae7-427c-ba1e-3621754b8b8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2c:36:b6:a2:41:38:85:bb:2e:ca:a5:e3:41: 3e:25:33:21:39:bd:32:2a:bf:27:72:84:e0:3d:6d: 0f:06:e8:fc:7e:6e:18:ae:02:f9:f1:ee:82:8f:02: c0:bf:c1:14:d0:ff:2b:af:8b:ad:b1:71:5b:ad:ac: 79:de:32:a0:e1:e2:dd:6f:21:fb:5a:43:d3:97:d1: ec:76:dd:2b:b4:51:5d:47:18:a9:26:24:96:98:91: fa:a2:6e:50:4d:1c:19:a2:a7:0a:00:51:85:e2:d2: d8:90:7b:e3:76:2b:71:ff:5e:af:9c:e9:2a:be:03: 11:aa:74:a5:48:5b:28:e5:7a:40:a0:43:e9:c1:b0: bc:d3:c2:e3:ec:f3:74:02:64:1f:0e:9c:d7:e3:a0: 91:4f:6f:95:bf:eb:f6:ee:79:cc:bf:f7:0a:54:2e: ef:c6:a3:af:3c:19:fb:5d:4a:5a:12:d6:a8:1f:2f: e3:ce:68:11:08:be:4b:ed:88:88:13:37:27:90:87: 0b:18:73:96:40:99:1a:7a:b4:9f:74:46:f8:d5:c0: cb:ff:ae:42:2c:eb:18:53:84:22:f2:d0:78:9f:0e: 66:52:d9:9f:cd:9f:00:42:92:d5:79:ff:f5:6f:c8: da:c7:20:01:53:fd:08:82:29:d8:59:b8:eb:58:36: 98:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:55:B6:AC:5C:02:48:2D:2D:37:14:F8:BC:EB:39:44:B7:E8:65:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b4ef708a-c054-3e3a-b1a2-b5320ed9a14f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.215.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:16:5b:5d:7a:63:03:3c:83:13:5d:7a:ac:44:b1:7c:66:2b: 51:72:c4:99:cd:7e:05:f5:5c:e4:6c:63:50:dc:94:3b:92:d6: de:02:a4:b2:bc:97:4c:df:6d:96:c8:f8:ce:12:a2:2f:9d:67: e0:8b:17:29:83:d1:24:60:0e:35:0a:de:65:9a:2a:1a:be:8b: 36:72:21:48:52:93:dd:9a:64:b3:04:08:08:3d:7e:ef:ea:21: e4:35:0f:27:a5:9a:fd:8a:a2:b4:2f:85:b0:9a:64:73:1d:21: 5a:da:ec:7e:8d:53:3a:da:01:ee:57:fc:f4:92:3a:ce:c6:cc: 57:eb:9b:a8:0d:fc:48:92:c1:1f:61:1c:c2:e7:4a:86:96:d1: 4f:df:42:77:8e:e5:66:45:c8:f0:2b:52:f2:db:48:de:6f:0a: 56:da:3f:b2:50:85:d4:89:2c:6e:c6:d0:84:71:b6:ac:b5:6b: f4:15:18:f0:ae:e6:e1:b0:99:19:52:a1:47:04:26:46:9c:a5: ea:00:cb:f5:99:20:d8:85:9e:e0:92:f2:2e:4d:0f:e0:cb:81: db:03:c3:a8:ff:03:16:59:b4:98:a0:86:51:2e:8d:b5:2a:ec: 39:89:97:96:ba:ff:84:70:41:c0:35:e8:0d:c2:90:e8:29:17: 71:7c:ed:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswr73WOEUCMiaI8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NTExZTIxYzEtZGFlNy00MjdjLWJhMWUtMzYyMTc1NGI4YjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyw2tqJBOIW7Lsql40E+JTMhOb0yKr8ncoTg PW0PBuj8fm4YrgL58e6CjwLAv8EU0P8rr4utsXFbrax53jKg4eLdbyH7WkPTl9Hs dt0rtFFdRxipJiSWmJH6om5QTRwZoqcKAFGF4tLYkHvjditx/16vnOkqvgMRqnSl SFso5XpAoEPpwbC808Lj7PN0AmQfDpzX46CRT2+Vv+v27nnMv/cKVC7vxqOvPBn7 XUpaEtaoHy/jzmgRCL5L7YiIEzcnkIcLGHOWQJkaerSfdEb41cDL/65CLOsYU4Qi 8tB4nw5mUtmfzZ8AQpLVef/1b8jaxyABU/0IginYWbjrWDaYPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKBVtqxcAkgtLTcU+LzrOUS36GW7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjRlZjcwOGEtYzA1NC0z ZTNhLWIxYTItYjUzMjBlZDlhMTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYtcoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgWW116YwM8gxNdeqxEsXxmK1FyxJnNfgX1XORsY1DclDuS1t4CpLK8 l0zfbZbI+M4Soi+dZ+CLFymD0SRgDjUK3mWaKhq+izZyIUhSk92aZLMECAg9fu/q IeQ1Dyelmv2KorQvhbCaZHMdIVra7H6NUzraAe5X/PSSOs7GzFfrm6gN/EiSwR9h HMLnSoaW0U/fQneO5WZFyPArUvLbSN5vClbaP7JQhdSJLG7G0IRxtqy1a/QVGPCu 5uGwmRlSoUcEJkacpeoAy/WZINiFnuCS8i5ND+DLgdsDw6j/AxZZtJighlEujbUq 7DmJl5a6/4RwQcA16A3CkOgpF3F87Ss= -----END CERTIFICATE-----Generated at Sun Aug 24 09:32:56 2025 by rpki-client