$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e85b6d29-fc52-30e4-a712-4bd790d291a7.roa File: e85b6d29-fc52-30e4-a712-4bd790d291a7.roa (raw, json) Hash identifier: efHF9cTrOeCcHub1VAEenZhr5X3kU+Ty6n0LkG1tCVw= Subject key identifier: 07:98:00:FA:EC:B3:B6:FF:13:7C:94:8D:8A:9D:C9:E8:A8:CB:78:09 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC4F50F39D74BF36742E5E0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e85b6d29-fc52-30e4-a712-4bd790d291a7.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33491 IP address blocks: 98.63.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c4:f5:0f:39:d7:4b:f3:67:42:e5:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=0cd6dcf6-6361-4e55-a4f9-abb70e965b7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e6:95:14:7b:e7:fe:3f:fd:47:52:a9:43:72: 1e:7c:14:a5:c4:83:c0:47:56:fc:bf:55:85:e2:c2: 1d:24:ab:8c:26:cc:bb:03:6a:9d:33:4a:1b:a2:7d: 1e:7c:8b:05:a2:6b:d0:ed:50:64:ff:50:e0:0e:da: c9:33:80:4f:86:30:34:9d:57:aa:7b:cb:57:6e:76: 9b:56:8f:ae:03:04:5e:d3:6a:c4:82:37:1d:02:f7: b8:49:bc:3c:ea:24:39:8f:77:25:0b:99:9f:ea:9d: cd:61:d4:36:43:ce:95:92:a0:58:1f:84:88:1c:82: ec:de:c1:e2:1f:06:03:b8:43:4f:95:4b:b5:22:3a: 41:ac:01:e6:a6:e0:33:81:a3:2f:44:c4:45:cf:4a: 7d:c5:60:64:b7:ed:5d:e2:a0:a0:b9:a7:94:0a:04: 54:6c:ab:de:57:c1:48:7c:d7:7e:11:ea:27:ef:2f: 8e:8e:55:8c:f0:48:a2:45:32:aa:a7:49:2a:54:33: 16:c5:a4:10:1e:d3:88:77:f7:0a:19:c8:04:6b:cd: 5b:b6:18:5d:4a:2c:53:4d:bb:f3:ea:9e:92:03:5a: 3f:cb:af:56:b7:60:2f:16:49:e9:26:da:6d:0f:bf: ac:9f:af:0e:06:f6:c9:31:2f:31:39:be:25:a4:48: 29:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:98:00:FA:EC:B3:B6:FF:13:7C:94:8D:8A:9D:C9:E8:A8:CB:78:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e85b6d29-fc52-30e4-a712-4bd790d291a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.63.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:9f:74:9d:20:e3:02:c3:b6:a9:f5:7e:63:3f:84:d0:48:ad: 0d:28:51:e3:d2:94:f5:d4:c3:d6:9c:92:eb:e2:6e:e2:50:6b: e5:93:07:0f:c3:66:bf:99:2f:cf:e1:85:bb:72:e1:28:c1:7f: 51:f5:df:21:b8:8d:8c:55:7d:06:b6:74:7e:33:b2:f4:41:34: 23:4e:d1:52:95:9f:c2:84:21:40:1b:87:90:41:6b:00:84:9a: d8:b8:22:53:b5:b8:17:c6:21:b6:25:67:0a:ac:db:be:64:f2: d5:19:cf:82:2f:e9:d6:19:a9:62:96:8f:10:a9:14:4f:fe:60: 87:5c:dd:18:16:8c:53:2d:18:d2:d3:33:79:a5:55:35:f9:f1: c5:29:c3:a6:4d:62:aa:3e:d8:1d:01:4d:44:dc:e2:19:6f:71: 53:4b:13:8c:73:06:b9:60:f9:05:6b:5b:f1:59:ac:fe:f4:05: d2:07:8c:40:76:66:a7:df:f5:78:83:08:28:6b:31:26:4c:fc: 53:f8:2a:24:7d:52:73:e5:1d:83:2f:8e:de:0e:1e:a0:35:63: ba:f0:22:cb:b2:7e:f7:50:1d:bb:18:0e:ac:83:ec:2c:12:ff: 5b:18:0a:71:a7:83:e5:4a:e1:cf:e5:a1:92:ca:ed:3c:03:fd: 88:ff:23:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsxPUPOddL82dC5eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MGNkNmRjZjYtNjM2MS00ZTU1LWE0ZjktYWJiNzBlOTY1YjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheaVFHvn/j/9R1KpQ3IefBSlxIPAR1b8v1WF 4sIdJKuMJsy7A2qdM0obon0efIsFomvQ7VBk/1DgDtrJM4BPhjA0nVeqe8tXbnab Vo+uAwRe02rEgjcdAve4Sbw86iQ5j3clC5mf6p3NYdQ2Q86VkqBYH4SIHILs3sHi HwYDuENPlUu1IjpBrAHmpuAzgaMvRMRFz0p9xWBkt+1d4qCguaeUCgRUbKveV8FI fNd+Eeon7y+OjlWM8EiiRTKqp0kqVDMWxaQQHtOId/cKGcgEa81bthhdSixTTbvz 6p6SA1o/y69Wt2AvFknpJtptD7+sn68OBvbJMS8xOb4lpEgp6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAeYAPrss7b/E3yUjYqdyeioy3gJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTg1YjZkMjktZmM1Mi0z MGU0LWE3MTItNGJkNzkwZDI5MWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYj9YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+fdJ0g4wLDtqn1fmM/hNBIrQ0oUePSlPXUw9ackuvibuJQa+WTBw/D Zr+ZL8/hhbty4SjBf1H13yG4jYxVfQa2dH4zsvRBNCNO0VKVn8KEIUAbh5BBawCE mti4IlO1uBfGIbYlZwqs275k8tUZz4Iv6dYZqWKWjxCpFE/+YIdc3RgWjFMtGNLT M3mlVTX58cUpw6ZNYqo+2B0BTUTc4hlvcVNLE4xzBrlg+QVrW/FZrP70BdIHjEB2 Zqff9XiDCChrMSZM/FP4KiR9UnPlHYMvjt4OHqA1Y7rwIsuyfvdQHbsYDqyD7CwS /1sYCnGng+VK4c/loZLK7TwD/Yj/I+o= -----END CERTIFICATE-----Generated at Sat Aug 23 23:27:50 2025 by rpki-client