$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b84cf85f-05e8-3761-869c-d65282b9d5be.roa File: b84cf85f-05e8-3761-869c-d65282b9d5be.roa (raw, json) Hash identifier: paR5vDhHFhEShllvRzhgsGxgLEikjKiIILeEDsDYWVI= Subject key identifier: 06:54:49:E0:A1:0B:4F:D0:7D:C8:3C:0B:71:F7:00:72:CE:EC:BC:C3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC3493FA7B971EDC1EE7D80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b84cf85f-05e8-3761-869c-d65282b9d5be.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 98.37.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:49:3f:a7:b9:71:ed:c1:ee:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=c441229b-dde9-4a40-83a7-62e28348f269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:19:2e:f7:5e:6f:6a:54:f4:79:97:7d:6f:e6: c8:9a:21:dc:05:d3:3a:a2:97:2e:93:37:98:53:88: 03:d5:8b:f5:26:e8:f8:e5:71:8e:e2:82:02:9d:9d: 81:1c:ba:3d:93:b5:a4:d1:29:c6:97:77:78:58:78: 53:e1:ba:c9:95:83:3f:4b:ff:de:38:b9:03:9c:c0: cc:4e:73:20:4b:31:14:d8:e8:6a:03:13:9d:30:68: bf:73:90:5c:98:62:27:76:39:5a:b0:d7:f3:2d:ea: d8:1c:76:2c:a0:8e:c6:8d:ef:70:83:10:7e:97:f0: 8e:c0:32:7c:1d:5d:79:0a:f9:0e:e7:89:56:7b:be: 50:68:57:a3:83:8c:a1:62:f4:b3:04:cc:bc:6d:2d: 7f:74:ce:61:e6:29:33:75:b9:42:72:5f:7e:ec:1b: ff:f4:07:24:5d:a3:38:c9:5f:d2:6b:85:a7:b1:fe: 6f:3c:ad:46:03:8a:5c:63:f0:6c:09:e0:4b:d5:90: d0:14:33:0b:50:8a:35:42:60:74:ea:83:af:ce:0c: 6b:d2:57:98:f1:f1:c6:ec:b4:14:11:3a:dc:7a:5b: 5e:7c:35:44:c2:c5:40:d6:56:c2:03:93:62:f3:01: f3:a2:36:a4:d8:cc:26:b4:1d:23:fe:22:33:b1:55: aa:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:54:49:E0:A1:0B:4F:D0:7D:C8:3C:0B:71:F7:00:72:CE:EC:BC:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b84cf85f-05e8-3761-869c-d65282b9d5be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.37.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:6c:aa:c1:8a:62:50:7c:e2:f9:f2:0a:4c:e3:c1:f1:6c:28: b3:cd:53:96:1a:66:fd:56:44:e4:1c:0a:79:d9:51:dc:7c:0b: 36:61:2a:17:8e:0f:d0:3b:e9:df:e6:d2:27:bc:d0:fc:7e:04: a2:f3:97:8c:d9:ca:d2:23:3c:4b:22:8e:48:d6:b2:9f:98:e3: 44:df:b8:d1:c7:90:f6:4c:21:29:48:cf:43:86:53:50:12:e8: 5e:ac:be:29:dd:67:a2:a9:be:81:34:ad:ff:29:7c:4f:a3:83: c9:a9:28:3f:12:44:5b:c3:70:d5:2c:9e:cd:44:3b:be:05:b1: d3:22:40:e5:4a:73:44:00:61:31:4d:4b:f7:2b:ac:c0:bd:1e: 01:7c:2b:ff:f1:b1:28:28:38:94:f4:12:86:c4:15:59:92:83: b7:29:e5:f5:5c:68:7e:d2:dd:ac:88:01:12:14:89:d5:54:be: d6:43:1a:6f:db:65:21:94:92:6d:26:12:c5:a2:68:d2:4f:8d: 0d:39:07:e0:d4:9a:d6:ae:38:c1:74:6b:46:7d:51:9e:a9:26: 5f:e0:6a:06:76:1f:c1:91:89:f0:f2:d3:51:e3:2b:1e:18:62: c1:f8:f7:3a:0b:3e:3c:02:87:42:97:a7:6e:b0:07:1b:d7:61: 27:23:63:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw0k/p7lx7cHufYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk YzQ0MTIyOWItZGRlOS00YTQwLTgzYTctNjJlMjgzNDhmMjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhku915valT0eZd9b+bImiHcBdM6opcukzeY U4gD1Yv1Juj45XGO4oICnZ2BHLo9k7Wk0SnGl3d4WHhT4brJlYM/S//eOLkDnMDM TnMgSzEU2OhqAxOdMGi/c5BcmGIndjlasNfzLerYHHYsoI7Gje9wgxB+l/COwDJ8 HV15CvkO54lWe75QaFejg4yhYvSzBMy8bS1/dM5h5ikzdblCcl9+7Bv/9AckXaM4 yV/Sa4Wnsf5vPK1GA4pcY/BsCeBL1ZDQFDMLUIo1QmB06oOvzgxr0leY8fHG7LQU ETrceltefDVEwsVA1lbCA5Ni8wHzojak2MwmtB0j/iIzsVWqmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZUSeChC0/Qfcg8C3H3AHLO7LzDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjg0Y2Y4NWYtMDVlOC0z NzYxLTg2OWMtZDY1MjgyYjlkNWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYiWEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBsqsGKYlB84vnyCkzjwfFsKLPNU5YaZv1WROQcCnnZUdx8CzZhKheO D9A76d/m0ie80Px+BKLzl4zZytIjPEsijkjWsp+Y40TfuNHHkPZMISlIz0OGU1AS 6F6svindZ6KpvoE0rf8pfE+jg8mpKD8SRFvDcNUsns1EO74FsdMiQOVKc0QAYTFN S/crrMC9HgF8K//xsSgoOJT0EobEFVmSg7cp5fVcaH7S3ayIARIUidVUvtZDGm/b ZSGUkm0mEsWiaNJPjQ05B+DUmtauOMF0a0Z9UZ6pJl/gagZ2H8GRifDy01HjKx4Y YsH49zoLPjwCh0KXp26wBxvXYScjYwM= -----END CERTIFICATE-----Generated at Sun Aug 24 07:39:16 2025 by rpki-client