$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5231da3-95d8-3af9-b483-84be0260da15.roa File: b5231da3-95d8-3af9-b483-84be0260da15.roa (raw, json) Hash identifier: Dbx6r+BUQ5i4f2dUl3WE4Zm7y1SxLkHPHTU4FL7GHsg= Subject key identifier: 6D:F2:94:88:4B:CF:F7:6B:4C:C7:6C:23:5F:07:C3:DF:A3:34:6E:56 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC342D8DBC2359827F24EF0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5231da3-95d8-3af9-b483-84be0260da15.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 98.234.244.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:42:d8:db:c2:35:98:27:f2:4e:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=58517c1d-1b8b-4d34-b17c-db6698d2fc10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:51:91:4a:9e:67:54:b3:8f:c3:46:e0:d5:49: 91:ab:fb:21:b3:fe:9c:a0:87:74:72:fa:93:c4:64: c3:fe:7c:09:42:9c:e5:55:de:e4:7c:dc:55:a0:43: a4:12:6a:36:ab:f4:3c:a9:87:67:45:0b:97:3b:fe: 40:ad:26:a0:cd:e9:30:44:79:eb:31:6a:78:56:bd: b4:0f:f6:db:59:2b:39:fc:90:5a:c8:82:6b:86:b5: 86:ac:36:65:ea:e2:93:a3:1c:21:1f:de:6e:be:e8: cb:66:2b:71:cf:a7:97:d0:ec:cd:f3:d6:8b:f5:01: 82:a3:b6:ce:5c:c6:1e:01:98:83:d8:10:bf:b2:0e: de:57:5e:0e:2f:1e:fc:5b:10:8b:3f:54:22:3f:77: 34:6f:fb:66:c4:5c:5c:f8:e2:b2:56:af:40:af:ae: b3:31:f2:3e:3f:3c:cb:21:a4:6e:e4:75:cc:40:df: c6:ff:52:36:6a:7c:7d:32:2c:39:9c:1d:44:72:82: fc:b4:b7:c6:6e:6c:06:83:84:71:72:8a:d2:ce:e3: 83:e2:9c:b2:fa:ee:1a:eb:fc:74:7e:4d:92:ad:37: c1:5a:24:ed:70:13:2a:7b:49:3d:1a:e6:b8:0d:ff: 9f:95:f8:4c:2e:a2:bf:d6:98:54:99:86:bc:86:1d: a3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:F2:94:88:4B:CF:F7:6B:4C:C7:6C:23:5F:07:C3:DF:A3:34:6E:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5231da3-95d8-3af9-b483-84be0260da15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.234.244.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:97:23:f6:97:ed:cd:0e:73:ec:5c:c8:01:dd:a9:b6:60:39: 8f:d5:6c:bf:58:30:bf:71:2b:b0:80:98:2b:ee:08:62:67:78: 36:59:d8:40:ae:84:06:d3:c9:dc:ad:72:a3:33:09:8d:36:a4: ca:4b:d6:b2:fd:eb:d8:61:5b:3f:1d:79:b9:5d:4a:8e:ce:ba: 55:c9:d0:1b:d1:cd:ff:e6:bd:d7:f7:42:23:8a:ea:2e:1a:2d: c5:86:41:58:f0:cc:3b:e5:9d:00:26:24:b4:b5:b8:a6:73:5a: ea:57:20:80:f9:57:27:76:7d:10:9e:f3:0c:be:45:78:23:c3: a6:a5:65:b1:6a:6f:38:93:b9:5b:71:4f:d6:44:91:34:91:f3: 06:a7:ab:fb:b4:5a:09:14:97:63:2f:7b:fe:15:1c:5f:b2:c8: 0f:eb:7c:4e:b8:79:61:61:1a:88:f6:f0:a3:e0:b9:9c:25:07: d3:38:d6:03:03:47:a4:c0:be:6a:8c:4f:09:80:09:91:80:97: bd:e8:73:f5:0b:e6:a9:28:2d:af:4c:f2:9c:53:a0:c7:b7:df: 2a:33:a7:bc:c4:01:63:40:d9:19:79:28:5d:6d:c3:c5:b1:4f: 45:48:a8:4a:a6:a3:ea:99:ca:62:a2:ea:96:9e:2e:7d:ff:54: 34:6f:77:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw0LY28I1mCfyTvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NTg1MTdjMWQtMWI4Yi00ZDM0LWIxN2MtZGI2Njk4ZDJmYzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVGRSp5nVLOPw0bg1UmRq/shs/6coId0cvqT xGTD/nwJQpzlVd7kfNxVoEOkEmo2q/Q8qYdnRQuXO/5ArSagzekwRHnrMWp4Vr20 D/bbWSs5/JBayIJrhrWGrDZl6uKToxwhH95uvujLZitxz6eX0OzN89aL9QGCo7bO XMYeAZiD2BC/sg7eV14OLx78WxCLP1QiP3c0b/tmxFxc+OKyVq9Ar66zMfI+PzzL IaRu5HXMQN/G/1I2anx9Miw5nB1EcoL8tLfGbmwGg4RxcorSzuOD4pyy+u4a6/x0 fk2SrTfBWiTtcBMqe0k9Gua4Df+flfhMLqK/1phUmYa8hh2jiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG3ylIhLz/drTMdsI18Hw9+jNG5WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjUyMzFkYTMtOTVkOC0z YWY5LWI0ODMtODRiZTAyNjBkYTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYur0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+XI/aX7c0Oc+xcyAHdqbZgOY/VbL9YML9xK7CAmCvuCGJneDZZ2ECu hAbTydytcqMzCY02pMpL1rL969hhWz8debldSo7OulXJ0BvRzf/mvdf3QiOK6i4a LcWGQVjwzDvlnQAmJLS1uKZzWupXIID5Vyd2fRCe8wy+RXgjw6alZbFqbziTuVtx T9ZEkTSR8wanq/u0WgkUl2Mve/4VHF+yyA/rfE64eWFhGoj28KPguZwlB9M41gMD R6TAvmqMTwmACZGAl73oc/UL5qkoLa9M8pxToMe33yozp7zEAWNA2Rl5KF1tw8Wx T0VIqEqmo+qZymKi6paeLn3/VDRvd2Y= -----END CERTIFICATE-----Generated at Sun Aug 24 04:03:14 2025 by rpki-client