$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d71d4ac9-d2fe-32a5-b888-84a8fcaa5f88.roa File: d71d4ac9-d2fe-32a5-b888-84a8fcaa5f88.roa (raw, json) Hash identifier: FpN+eqG+rqO4q5Xmsi5/5zavMhNtUUWgEmcxscsyHa4= Subject key identifier: AC:28:42:71:DA:A0:87:4F:3A:12:09:D2:7F:BD:E8:9A:AD:3B:4C:B6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC4EC9283E0435A8B814C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d71d4ac9-d2fe-32a5-b888-84a8fcaa5f88.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 98.52.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:ec:92:83:e0:43:5a:8b:81:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=616532da-b838-4666-8fad-209e6d1df633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c2:d4:55:66:5b:a0:db:a4:c1:95:86:67:58: b5:e4:c3:bd:7f:31:3b:e1:06:60:ab:1e:ca:05:d2: 82:b5:b8:4f:58:e4:7e:c8:be:b2:d0:77:cf:68:be: cf:bd:78:f7:1d:81:17:65:78:55:36:06:e5:88:53: 34:77:05:24:3a:31:73:c0:32:08:f4:0c:0d:f0:6a: ca:7b:23:42:e4:e7:95:f3:28:71:9b:89:d3:a4:fa: 01:72:5d:af:c6:84:95:3f:cc:3f:56:28:86:2a:5b: 09:fa:9b:23:19:31:ba:17:da:bd:79:e9:c3:24:6c: 45:54:43:f7:d2:f0:52:99:21:01:52:a6:57:23:e1: 06:22:26:5e:0a:7e:c7:d3:cb:ca:a7:1e:45:ee:86: 2d:d6:e4:cd:f2:24:25:85:16:8a:31:d6:9c:de:f5: f3:b8:e7:43:8c:b1:ef:80:2b:ae:22:30:6e:09:7a: 07:94:d4:09:8f:35:cc:2b:00:7d:42:ee:6b:ef:c6: 4c:dc:43:06:18:a2:f7:9b:11:91:5c:64:1a:00:2e: 28:ed:25:5b:df:af:29:be:21:ea:b7:a0:b2:4a:b7: ba:5e:87:bb:01:89:cc:2e:9f:83:f3:7b:55:8f:37: fb:6f:29:43:31:38:63:83:ef:73:79:80:7c:39:95: 05:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:28:42:71:DA:A0:87:4F:3A:12:09:D2:7F:BD:E8:9A:AD:3B:4C:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d71d4ac9-d2fe-32a5-b888-84a8fcaa5f88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.52.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:6d:9f:3d:42:82:75:0b:06:83:55:cb:30:ce:10:70:9a:fc: 34:98:a8:3c:be:2b:40:7d:49:80:52:7c:bc:9e:6b:94:f0:d7: 0e:13:3d:14:58:7e:5f:27:61:a3:65:27:a8:16:e5:b4:99:4b: 8a:7a:a3:40:44:91:c1:b8:a1:f5:b4:74:f7:31:5a:f9:cc:0b: 69:d5:da:13:c7:bb:a9:60:45:09:97:cd:58:8d:69:eb:d3:66: b2:d6:c9:d7:8a:b9:92:3e:87:88:da:f7:14:4a:e8:fb:3f:d9: bc:6d:18:d6:0e:22:8e:d0:09:bb:ee:59:e7:f8:78:0d:8f:4b: df:be:88:8f:86:f9:5f:dd:b7:60:24:96:97:29:c9:6a:07:c2: a6:04:91:d0:25:b7:a7:33:41:f4:9c:1d:b8:42:6b:9d:6a:1c: 6a:6d:e7:26:1a:c9:ee:70:e1:36:c5:4a:94:c4:3f:dd:82:b2: 48:56:e3:37:a3:21:bc:31:3e:13:c4:f5:92:b0:65:0f:00:8a: 39:26:47:0c:4a:00:73:6d:37:e3:99:5e:73:8e:e6:12:66:a1: 5b:dd:e7:3f:58:f3:f3:46:df:35:de:35:d1:d2:49:bd:e2:41: 37:24:8e:2f:83:15:1d:49:35:77:94:50:5d:b9:e4:d6:9d:4c: a8:96:07:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxOySg+BDWouBTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NjE2NTMyZGEtYjgzOC00NjY2LThmYWQtMjA5ZTZkMWRmNjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMLUVWZboNukwZWGZ1i15MO9fzE74QZgqx7K BdKCtbhPWOR+yL6y0HfPaL7PvXj3HYEXZXhVNgbliFM0dwUkOjFzwDII9AwN8GrK eyNC5OeV8yhxm4nTpPoBcl2vxoSVP8w/ViiGKlsJ+psjGTG6F9q9eenDJGxFVEP3 0vBSmSEBUqZXI+EGIiZeCn7H08vKpx5F7oYt1uTN8iQlhRaKMdac3vXzuOdDjLHv gCuuIjBuCXoHlNQJjzXMKwB9Qu5r78ZM3EMGGKL3mxGRXGQaAC4o7SVb368pviHq t6CySre6Xoe7AYnMLp+D83tVjzf7bylDMThjg+9zeYB8OZUFdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwoQnHaoIdPOhIJ0n+96JqtO0y2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDcxZDRhYzktZDJmZS0z MmE1LWI4ODgtODRhOGZjYWE1Zjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYjSIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMRtnz1CgnULBoNVyzDOEHCa/DSYqDy+K0B9SYBSfLyea5Tw1w4TPRRY fl8nYaNlJ6gW5bSZS4p6o0BEkcG4ofW0dPcxWvnMC2nV2hPHu6lgRQmXzViNaevT ZrLWydeKuZI+h4ja9xRK6Ps/2bxtGNYOIo7QCbvuWef4eA2PS9++iI+G+V/dt2Ak lpcpyWoHwqYEkdAlt6czQfScHbhCa51qHGpt5yYaye5w4TbFSpTEP92CskhW4zej IbwxPhPE9ZKwZQ8AijkmRwxKAHNtN+OZXnOO5hJmoVvd5z9Y8/NG3zXeNdHSSb3i QTckji+DFR1JNXeUUF255NadTKiWBy8= -----END CERTIFICATE-----Generated at Sat Aug 23 23:13:02 2025 by rpki-client