$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e5baaaaf-135a-38c9-8958-eae2b4923a88.roa File: e5baaaaf-135a-38c9-8958-eae2b4923a88.roa (raw, json) Hash identifier: hrrna9Iut7FYB5O4XPoFWZgsR/b6lOxrqXVtPLO90BY= Subject key identifier: 86:D2:8D:50:2B:16:14:F3:CF:B9:C1:3F:66:AF:C1:A0:E6:B9:02:84 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC2B7843D17B1B5FA996040 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e5baaaaf-135a-38c9-8958-eae2b4923a88.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 98.206.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c2:b7:84:3d:17:b1:b5:fa:99:60:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=5a05a909-9ae2-4836-9b69-7b810783d7c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e4:62:24:7e:eb:b5:76:df:d6:95:ea:4c:87: 16:74:4a:25:80:54:b2:08:27:b4:48:24:a0:0e:27: 73:84:a2:ac:81:ab:51:70:d1:b6:62:04:d4:6c:51: 70:32:85:ce:fe:c1:0c:19:4a:b5:98:69:41:71:e4: f9:8e:22:42:2b:ee:90:dd:92:cb:11:fd:d6:cf:43: c5:a2:1d:ce:46:ee:a2:44:82:fd:f9:11:90:e4:1e: f0:f6:f3:14:a0:75:c1:d2:d7:01:56:d8:4d:ae:88: d0:04:01:89:4c:e8:0b:23:4b:70:84:7e:7f:25:e2: 5f:17:d7:b4:4a:97:f4:62:2e:29:92:6f:db:af:14: 30:03:85:31:b4:2d:0f:c7:af:cc:5a:e1:bf:52:5c: 11:d5:a3:40:68:57:13:f1:96:c7:32:c0:83:49:77: d5:04:6a:0e:cb:bf:29:aa:0c:6c:90:d1:8f:94:a1: 84:8d:98:79:cf:41:8f:a4:f9:55:1b:3f:24:bf:f5: cd:5b:eb:af:80:2e:bb:43:50:d3:64:7c:4f:98:a7: 32:53:c4:c6:59:ee:09:d0:f0:3e:cc:1c:10:d8:a0: ca:68:04:a2:9e:9d:50:b5:ee:58:e8:94:a2:8b:e5: 4b:90:21:cc:5a:ab:7f:36:a9:04:44:d8:c4:01:70: cc:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D2:8D:50:2B:16:14:F3:CF:B9:C1:3F:66:AF:C1:A0:E6:B9:02:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e5baaaaf-135a-38c9-8958-eae2b4923a88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.206.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:a9:0d:b9:8a:23:6a:9c:a8:3b:88:08:f6:d7:39:38:a0:92: ac:94:3c:4d:f9:a8:4f:a8:bd:7e:3c:30:e1:5b:a6:92:cb:8b: 12:00:b0:fb:16:17:4e:2b:87:a4:9e:b6:81:5c:ae:1a:15:4c: a5:0a:e0:b7:19:06:fb:42:3b:28:f9:7e:16:b8:c5:ca:48:fc: 45:2c:35:98:ea:ab:0e:e8:76:ba:80:6a:3e:d2:7f:ca:2d:d7: 38:5e:fe:53:28:0c:65:49:1d:04:dd:69:ff:82:6d:d3:9f:22: 7b:13:c0:e8:06:72:6d:fd:4f:cf:b9:71:ec:9f:e4:72:a5:b9: fd:6a:96:f3:56:07:6a:80:4c:90:91:d8:b3:00:0e:bf:ec:b8: 19:5a:cb:55:5e:7a:01:f9:84:bc:ad:67:27:de:76:f9:d8:d9: a3:49:b7:ae:ce:b8:88:9a:78:7e:18:01:cf:ae:df:6e:5a:43: 5c:d4:a1:78:d0:6a:b8:4d:39:71:73:1a:62:99:4c:36:97:15: de:13:2e:2e:5c:4a:c7:b1:27:f3:e0:b5:c3:97:c0:03:39:20: d0:5f:65:0e:16:5f:82:c7:3b:30:45:7f:a2:b6:27:1c:85:53: cd:86:fa:ca:b5:5c:cb:12:4d:cd:d6:09:ac:42:5a:a0:9c:85: 4f:e7:d6:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswreEPRextfqZYEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NWEwNWE5MDktOWFlMi00ODM2LTliNjktN2I4MTA3ODNkN2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnORiJH7rtXbf1pXqTIcWdEolgFSyCCe0SCSg DidzhKKsgatRcNG2YgTUbFFwMoXO/sEMGUq1mGlBceT5jiJCK+6Q3ZLLEf3Wz0PF oh3ORu6iRIL9+RGQ5B7w9vMUoHXB0tcBVthNrojQBAGJTOgLI0twhH5/JeJfF9e0 Spf0Yi4pkm/brxQwA4UxtC0Px6/MWuG/UlwR1aNAaFcT8ZbHMsCDSXfVBGoOy78p qgxskNGPlKGEjZh5z0GPpPlVGz8kv/XNW+uvgC67Q1DTZHxPmKcyU8TGWe4J0PA+ zBwQ2KDKaASinp1Qte5Y6JSii+VLkCHMWqt/NqkERNjEAXDMBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbSjVArFhTzz7nBP2avwaDmuQKEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTViYWFhYWYtMTM1YS0z OGM5LTg5NTgtZWFlMmI0OTIzYTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYs56MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2pDbmKI2qcqDuICPbXOTigkqyUPE35qE+ovX48MOFbppLLixIAsPsW F04rh6SetoFcrhoVTKUK4LcZBvtCOyj5fha4xcpI/EUsNZjqqw7odrqAaj7Sf8ot 1zhe/lMoDGVJHQTdaf+CbdOfInsTwOgGcm39T8+5ceyf5HKluf1qlvNWB2qATJCR 2LMADr/suBlay1VeegH5hLytZyfedvnY2aNJt67OuIiaeH4YAc+u325aQ1zUoXjQ arhNOXFzGmKZTDaXFd4TLi5cSsexJ/PgtcOXwAM5INBfZQ4WX4LHOzBFf6K2JxyF U82G+sq1XMsSTc3WCaxCWqCchU/n1tM= -----END CERTIFICATE-----Generated at Sun Aug 24 02:24:54 2025 by rpki-client