$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e4382e15-c5b8-38ff-a4da-e38ddd85d149.roa File: e4382e15-c5b8-38ff-a4da-e38ddd85d149.roa (raw, json) Hash identifier: TxSrlU05kVnJiiCJmKOwU7pXPKPQe6XwO6NJLu6Lmeo= Subject key identifier: D5:9E:73:56:E7:FD:A5:10:74:2D:4F:6C:90:1D:A9:DF:21:B8:2A:5F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC3713488DF3D7E8830B930 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e4382e15-c5b8-38ff-a4da-e38ddd85d149.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33660 IP address blocks: 98.33.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c3:71:34:88:df:3d:7e:88:30:b9:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=2685efb1-3d3d-4367-b53c-382062c8c383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0b:ef:d3:4a:ce:f0:d1:7c:76:f5:5e:34:6a: 37:bb:00:fc:b7:fb:f3:f4:03:40:43:df:3d:21:ea: d9:13:2a:1f:43:7e:f3:a7:e6:d5:77:c3:91:3d:58: 75:c6:de:d1:ab:e3:b7:e2:3e:8a:b1:19:1e:67:5a: c6:9e:14:f8:3e:a6:36:39:70:27:45:87:00:17:62: 6c:02:6f:0c:5f:d6:93:90:68:57:14:6e:8b:0e:51: 0b:1b:b2:83:1e:05:27:fa:62:8a:cd:15:7f:ea:b2: 6c:c6:e0:dc:26:1f:3e:27:28:14:a4:f3:8e:8c:07: 47:a8:34:54:68:81:16:dd:3a:09:73:d8:56:fc:59: 97:a7:26:e2:53:c0:a9:93:57:12:39:9b:0b:8b:52: 51:94:4e:cf:88:3f:43:ce:8c:3f:60:4d:75:c0:d6: 08:4d:84:37:6c:f1:8a:f3:99:bb:9a:ab:7e:69:ca: 4e:49:05:49:8a:2b:08:2f:81:0a:ff:38:86:76:b6: b8:69:2a:fe:be:8e:62:f1:92:35:a3:44:af:83:10: c4:d1:fb:fa:f1:cf:cd:8a:1c:5b:6b:0c:c2:86:4b: 57:69:df:ab:e8:a2:1e:bd:f9:4e:7f:54:02:cf:7c: 99:cc:b0:4f:bb:7d:13:25:12:6e:ff:dc:c1:94:29: 79:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:9E:73:56:E7:FD:A5:10:74:2D:4F:6C:90:1D:A9:DF:21:B8:2A:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e4382e15-c5b8-38ff-a4da-e38ddd85d149.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.33.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d6:13:e1:93:b4:93:b1:92:c1:85:d7:b0:a3:f1:03:ca:2e:9f: 50:cc:d4:ea:6e:b0:d2:5b:3e:6e:b0:d9:f1:28:ca:05:60:ba: ae:b5:78:e3:ee:12:4b:6c:c4:d1:99:e7:c3:9a:0d:4d:b9:7a: db:86:2b:dd:c2:66:06:d1:28:0f:50:31:87:f5:d2:40:ea:53: b7:5e:08:50:2c:ad:6f:59:58:8d:f9:a2:0c:b5:64:a9:0d:ee: 51:34:55:35:77:bb:40:56:e5:46:a7:8e:bd:5f:eb:d7:8d:74: 6e:a0:f7:f4:85:21:02:eb:19:e0:1c:ab:4c:3f:e7:7f:4d:9a: 30:df:ab:01:70:30:11:c8:0b:e7:9f:9c:65:c0:47:29:a7:9b: cf:99:08:86:d1:ac:ce:ee:a4:2d:cf:7d:35:72:d6:e6:76:e1: d1:2c:9d:22:6e:3f:24:59:a5:90:45:38:ec:4b:4e:fe:0d:2b: af:4e:cc:d8:df:6a:0c:97:c4:70:32:c0:5a:d0:54:63:4b:8d: 9e:9a:96:49:45:98:b1:fb:d8:37:99:66:07:af:8a:23:78:62: ca:6a:4b:66:65:8a:6d:a9:16:4c:ff:84:40:f4:93:c1:9f:43: fe:8d:e4:87:39:f0:ec:2f:8e:25:77:d0:95:5e:73:51:17:ac: c8:33:1e:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsw3E0iN89fogwuTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MjY4NWVmYjEtM2QzZC00MzY3LWI1M2MtMzgyMDYyYzhjMzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAvv00rO8NF8dvVeNGo3uwD8t/vz9ANAQ989 IerZEyofQ37zp+bVd8ORPVh1xt7Rq+O34j6KsRkeZ1rGnhT4PqY2OXAnRYcAF2Js Am8MX9aTkGhXFG6LDlELG7KDHgUn+mKKzRV/6rJsxuDcJh8+JygUpPOOjAdHqDRU aIEW3ToJc9hW/FmXpybiU8Cpk1cSOZsLi1JRlE7PiD9Dzow/YE11wNYITYQ3bPGK 85m7mqt+acpOSQVJiisIL4EK/ziGdra4aSr+vo5i8ZI1o0SvgxDE0fv68c/Nihxb awzChktXad+r6KIevflOf1QCz3yZzLBPu30TJRJu/9zBlCl56wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWec1bn/aUQdC1PbJAdqd8huCpfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTQzODJlMTUtYzViOC0z OGZmLWE0ZGEtZTM4ZGRkODVkMTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYiHMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANYT4ZO0k7GSwYXXsKPxA8oun1DM1OpusNJbPm6w2fEoygVguq61eOPu EktsxNGZ58OaDU25etuGK93CZgbRKA9QMYf10kDqU7deCFAsrW9ZWI35ogy1ZKkN 7lE0VTV3u0BW5Uanjr1f69eNdG6g9/SFIQLrGeAcq0w/539NmjDfqwFwMBHIC+ef nGXARymnm8+ZCIbRrM7upC3PfTVy1uZ24dEsnSJuPyRZpZBFOOxLTv4NK69OzNjf agyXxHAywFrQVGNLjZ6alklFmLH72DeZZgeviiN4YspqS2Zlim2pFkz/hED0k8Gf Q/6N5Ic58OwvjiV30JVec1EXrMgzHts= -----END CERTIFICATE-----Generated at Sun Aug 24 01:17:17 2025 by rpki-client