$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df15b386-d80e-3d23-9139-81a14db2e677.roa File: df15b386-d80e-3d23-9139-81a14db2e677.roa (raw, json) Hash identifier: bKvAnEVLL6Qc4pYpeOmKJ4U50IFz+8trr0eVW3CK3OY= Subject key identifier: DE:56:4A:55:71:97:3F:7A:6F:14:87:BC:AA:18:C6:3E:DF:CD:C0:D9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC56EC1CA9E3A17704FE6C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df15b386-d80e-3d23-9139-81a14db2e677.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33651 IP address blocks: 98.248.246.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c5:6e:c1:ca:9e:3a:17:70:4f:e6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=d4558499-5d79-486d-a667-142a06e257c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a6:93:0d:78:3c:09:a4:9a:ef:63:67:63:7b: 5d:e1:90:94:46:79:95:d3:23:37:5b:3e:dd:e9:99: 9f:13:31:60:4e:b3:81:a6:f2:74:b0:5f:4d:13:20: 83:6c:3f:0c:78:05:7f:e6:1b:4a:02:4e:8e:59:b2: 1e:0e:31:39:22:dc:b5:83:19:f3:fa:e7:ee:d5:d0: 1e:e6:41:42:4e:4e:6c:cd:45:81:f5:ba:bf:db:95: 55:93:51:20:10:80:11:7b:39:79:ac:80:5e:17:4e: 20:3c:b4:15:25:75:53:5c:6b:47:17:1a:a2:3a:15: 44:42:44:fb:66:68:ec:86:7f:fb:bd:c7:70:89:5d: 4f:61:1a:0a:67:3f:1e:51:e3:8d:de:2e:bf:b9:90: 5e:32:81:4f:52:de:56:42:bf:29:f1:f4:41:31:36: 1d:f5:43:14:e2:2a:50:19:a3:89:52:b1:c5:23:a8: ba:30:9b:1a:d3:12:a3:d6:ad:d2:b3:a3:8a:9d:9e: 75:88:4c:ee:b0:42:ac:9c:26:12:2d:70:25:c8:0d: 73:5a:0c:6d:35:6d:8b:f3:04:ee:e9:f6:78:78:cc: 6b:73:59:91:93:3d:b6:80:27:30:8f:6e:58:e1:42: 36:fa:23:e9:e8:ab:2e:8b:2a:6f:ef:38:23:b4:3e: 19:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:56:4A:55:71:97:3F:7A:6F:14:87:BC:AA:18:C6:3E:DF:CD:C0:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df15b386-d80e-3d23-9139-81a14db2e677.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.248.246.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:57:72:c8:4e:74:62:8d:c3:6c:f5:0e:00:e9:c7:ac:ad:b7: 1a:74:d3:fd:f5:aa:d3:77:61:62:ff:13:5a:2d:bc:5d:bc:f9: a4:5e:a0:d6:05:d6:b8:8b:94:95:99:26:23:ee:73:cf:54:37: d8:4c:9b:f7:dd:d8:62:62:46:5f:eb:14:76:7d:d9:29:cf:48: 79:31:0d:39:22:f0:d2:da:5e:66:96:69:7d:1f:f8:62:b7:f7: 35:91:ce:80:14:20:d3:3b:e6:b6:0a:2f:12:0b:dc:5d:f0:dd: da:cf:f9:8d:aa:28:05:ab:c6:68:b9:d4:bb:f4:89:2b:7a:17: 89:4c:ab:bc:eb:83:93:d6:90:83:28:a2:8e:80:65:c9:64:b6: b9:27:d5:5f:d1:d6:ce:cb:ca:10:38:89:43:4d:e1:93:c6:02: 52:05:c3:ca:0b:9d:4b:a0:5a:91:11:8a:3a:7d:ee:b3:18:7b: e5:d3:87:d8:8c:dd:89:42:bf:ac:8b:74:b0:4b:ac:45:8a:4d: 86:62:4e:b6:1a:3b:ef:b0:bf:5c:bf:11:a1:53:de:b3:15:3b: 37:ba:a6:3d:c5:9a:5c:3e:5c:60:2e:a4:4a:f2:3b:e9:df:6c: dd:d7:b3:7a:25:3d:14:65:b1:83:fa:50:b8:19:18:88:31:3e: 06:29:a1:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxW7Byp46F3BP5sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZDQ1NTg0OTktNWQ3OS00ODZkLWE2NjctMTQyYTA2ZTI1N2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaaTDXg8CaSa72NnY3td4ZCURnmV0yM3Wz7d 6ZmfEzFgTrOBpvJ0sF9NEyCDbD8MeAV/5htKAk6OWbIeDjE5Ity1gxnz+ufu1dAe 5kFCTk5szUWB9bq/25VVk1EgEIARezl5rIBeF04gPLQVJXVTXGtHFxqiOhVEQkT7 Zmjshn/7vcdwiV1PYRoKZz8eUeON3i6/uZBeMoFPUt5WQr8p8fRBMTYd9UMU4ipQ GaOJUrHFI6i6MJsa0xKj1q3Ss6OKnZ51iEzusEKsnCYSLXAlyA1zWgxtNW2L8wTu 6fZ4eMxrc1mRkz22gCcwj25Y4UI2+iPp6Ksuiypv7zgjtD4ZiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5WSlVxlz96bxSHvKoYxj7fzcDZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGYxNWIzODYtZDgwZS0z ZDIzLTkxMzktODFhMTRkYjJlNjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYvj2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBXcshOdGKNw2z1DgDpx6yttxp00/31qtN3YWL/E1otvF28+aReoNYF 1riLlJWZJiPuc89UN9hMm/fd2GJiRl/rFHZ92SnPSHkxDTki8NLaXmaWaX0f+GK3 9zWRzoAUINM75rYKLxIL3F3w3drP+Y2qKAWrxmi51Lv0iSt6F4lMq7zrg5PWkIMo oo6AZclktrkn1V/R1s7LyhA4iUNN4ZPGAlIFw8oLnUugWpERijp97rMYe+XTh9iM 3YlCv6yLdLBLrEWKTYZiTrYaO++wv1y/EaFT3rMVOze6pj3Fmlw+XGAupEryO+nf bN3Xs3olPRRlsYP6ULgZGIgxPgYpoaQ= -----END CERTIFICATE-----Generated at Sat Aug 23 23:11:26 2025 by rpki-client