$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d6cc9dc3-ae4b-39bb-a32e-4a8666ca929b.roa File: d6cc9dc3-ae4b-39bb-a32e-4a8666ca929b.roa (raw, json) Hash identifier: RrDbgNlQPRhD/pX18kVw/yJf8uQYGuIc4BeL5xx9Nic= Subject key identifier: 99:C6:1D:B2:6B:70:28:88:B3:F1:DF:6C:AB:24:FC:4A:25:16:A4:D5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC2C0DC05A62E0E44E82080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d6cc9dc3-ae4b-39bb-a32e-4a8666ca929b.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 98.220.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:c0:dc:05:a6:2e:0e:44:e8:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=8c29eb80-d1e7-4b73-a84b-88c4ab9be679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:04:a0:76:2d:ea:5e:8d:cd:74:c9:31:c2:9d: 18:e8:30:fd:3c:64:c1:eb:93:cf:85:f0:f0:a8:52: 89:af:62:d0:08:b7:14:ab:0b:da:81:7e:52:e0:03: fd:90:c5:e4:6e:f0:16:21:b7:a1:92:fa:e5:17:47: 90:d0:7f:3b:37:22:0d:17:32:57:21:a5:6e:a8:29: 80:92:c7:98:f9:1c:6d:11:31:3c:dd:0e:31:bf:e4: 34:ce:44:72:90:68:1b:6b:2f:db:c0:55:2c:98:8c: e7:8c:02:df:f7:7c:fd:d6:ed:9f:88:8d:19:a6:9f: fa:fd:25:ac:f3:a2:f1:23:e8:3a:b5:b2:c5:a3:aa: ae:6e:a9:3e:bb:c2:ec:4a:54:d5:d6:d0:b0:94:38: 15:be:15:bf:46:af:8c:59:f3:a1:6b:7c:7d:98:5e: a3:c5:80:43:9d:de:6c:35:cb:6a:75:ba:87:3a:a7: 2e:49:d1:38:07:51:aa:c9:a6:12:37:b0:ee:a1:92: f6:6d:3d:f3:3d:b8:26:01:4e:96:3d:b8:ec:de:0f: da:46:d2:a3:91:78:20:37:b8:95:72:74:f6:ed:fb: 93:2d:ca:27:3c:0f:58:31:af:e0:0a:7a:b8:c4:b6: 87:fc:34:08:e3:a2:5d:ea:e8:d3:5b:df:ab:f7:df: a1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C6:1D:B2:6B:70:28:88:B3:F1:DF:6C:AB:24:FC:4A:25:16:A4:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d6cc9dc3-ae4b-39bb-a32e-4a8666ca929b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.220.80.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:cd:d9:18:d2:59:25:c1:ff:2a:d7:37:f8:9b:09:70:b6:5a: 5a:8d:60:9d:03:19:20:43:bf:89:64:e2:a2:66:93:ec:8f:8e: a2:c9:46:e4:cd:e5:c7:45:41:fb:53:c8:e1:c7:b8:3d:2d:4a: 70:d4:dd:a4:26:cc:ac:0b:57:8e:6e:09:e9:0e:35:ef:39:e3: 09:35:ac:e2:f1:c3:b7:cd:1a:62:bf:a2:e6:ac:33:8d:43:d4: a8:ce:24:ad:5d:07:32:cf:ad:53:87:98:84:aa:83:97:28:28: 50:a1:50:ef:5a:e0:39:ce:ee:d0:51:08:11:f2:68:d3:44:01: c7:41:e5:db:80:db:58:c1:c8:95:6b:14:1b:da:ef:13:9a:e4: b7:3b:07:52:03:f6:3c:18:db:ec:60:c5:7c:28:d0:48:cb:c4: 0d:e0:e1:96:ed:7e:36:80:33:ca:07:ee:32:34:c9:59:3c:f1: da:ba:75:13:eb:c7:ee:6d:8a:ed:55:ce:9d:98:60:6f:c9:5c: 3e:4f:8b:bc:bd:50:f5:2a:3d:42:fc:46:ec:92:2d:59:10:79: 8d:57:4d:f0:6a:fb:8b:ae:5c:6e:36:ca:c3:ae:ca:e4:9f:2a: a2:a8:bc:5b:59:05:3b:8f:3a:c5:68:a1:28:14:37:a9:67:fb: 6a:3a:97:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswsDcBaYuDkToIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk OGMyOWViODAtZDFlNy00YjczLWE4NGItODhjNGFiOWJlNjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwSgdi3qXo3NdMkxwp0Y6DD9PGTB65PPhfDw qFKJr2LQCLcUqwvagX5S4AP9kMXkbvAWIbehkvrlF0eQ0H87NyINFzJXIaVuqCmA kseY+RxtETE83Q4xv+Q0zkRykGgbay/bwFUsmIznjALf93z91u2fiI0Zpp/6/SWs 86LxI+g6tbLFo6qubqk+u8LsSlTV1tCwlDgVvhW/Rq+MWfOha3x9mF6jxYBDnd5s NctqdbqHOqcuSdE4B1GqyaYSN7DuoZL2bT3zPbgmAU6WPbjs3g/aRtKjkXggN7iV cnT27fuTLconPA9YMa/gCnq4xLaH/DQI46Jd6ujTW9+r99+hfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJnGHbJrcCiIs/HfbKsk/EolFqTVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDZjYzlkYzMtYWU0Yi0z OWJiLWEzMmUtNGE4NjY2Y2E5MjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYtxQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjN2RjSWSXB/yrXN/ibCXC2WlqNYJ0DGSBDv4lk4qJmk+yPjqLJRuTN 5cdFQftTyOHHuD0tSnDU3aQmzKwLV45uCekONe854wk1rOLxw7fNGmK/ouasM41D 1KjOJK1dBzLPrVOHmISqg5coKFChUO9a4DnO7tBRCBHyaNNEAcdB5duA21jByJVr FBva7xOa5Lc7B1ID9jwY2+xgxXwo0EjLxA3g4ZbtfjaAM8oH7jI0yVk88dq6dRPr x+5tiu1Vzp2YYG/JXD5Pi7y9UPUqPUL8RuySLVkQeY1XTfBq+4uuXG42ysOuyuSf KqKovFtZBTuPOsVooSgUN6ln+2o6l1g= -----END CERTIFICATE-----Generated at Sat Aug 23 23:09:37 2025 by rpki-client